Live vs tested offline
Three levels of proof, never mixed up:
- Live on preprod ran on a public test network; the transaction is on Evidence.
- Tested offline covered by tests that need no network (mock chain, recorded provider responses, the real workers in workerd). Built, but a live run could still find a problem.
- Not built or Designed, not built: not in the code.
Cardano agent payments
Section titled “Cardano agent payments”| Capability | Status | Evidence or tests |
|---|---|---|
| Passkey-signed Cardano send (own CBOR, Turnkey raw Ed25519) | Live on preprod | 0818000832…ef1ace (block 5353436, fee 0.167349 ADA) |
AI client connects over OAuth, calls pay_x402 |
Live on preprod | ChatGPT: 83ecc5742f…9d787b (block 5353756, fee 0.167349 ADA) |
x402 exact payment, hand-off through the MCP worker, CONFIRMED |
Live on preprod | 83ecc5742f…9d787b (block 5353756, fee 0.167349 ADA) |
| Delivery receipt verified | Live on preprod | 83ecc5742f…9d787b (block 5353756, fee 0.167349 ADA); failures in x402-cardano.test.ts |
Facilitator compatibility (@x402/cardano 2.29.0) |
Live on preprod | The facilitator accepted both live payments; facilitator-compat.test.ts |
| Masumi escrow lock with seller-signed terms | Live on preprod | 630f20122b…43c653 (block 5353819, fee 0.187589 ADA) |
| Seller’s SubmitResult (Plutus V3 spend) | Live on preprod | ee7b142e73…865361 (block 5353820, fee 0.688128 ADA) |
Proof before release: verified |
Live on preprod | ee7b142e73…865361 (block 5353820, fee 0.688128 ADA) |
Proof mismatch / not_delivered (dishonest seller) |
Tested offline | apps/seller/test/escrow-app.test.ts, apps/api/test/integration/x402-masumi.test.ts |
| Refund: SetRefundRequested, WithdrawRefund (passkey, Plutus) | Tested offline | x402-masumi.test.ts, escrow-chain.test.ts; Awaiting live run |
| Seller withdrawal after unlock (cron sweeper, Withdraw) | Live on preprod | c59d85cf3b…b916d3 (block 5353887, fee 0.642366 ADA) |
| Registry discovery and identity check | Tested offline | Recorded preprod responses: masumi-registry.test.ts |
| Seller registered on the Masumi registry (own Payment Service) | Live on preprod | 11dcdf21c5…1486e9 (block 5354719, fee 0.289014 ADA) |
MIP-003 endpoint (masumi-agent.zyropay.online) |
Live on preprod | /availability and /start_job answer; no paid hire yet |
| Demo seller claims that identity in its x402 terms | Not built | The NFT is in the Payment Service wallet, not the x402 payTo key |
| Sokosumi paid task | Awaiting live run | Waits on an interactive Sokosumi login; Awaiting live run |
| Sub-hire receipt chain | Tested offline | apps/specialist/test/chain.test.ts; Awaiting live run |
| Autonomous Cardano payment (on-chain allowance) | Not built | Cardano is passkey-only |
The wallet and the platform
Section titled “The wallet and the platform”| Capability | Status | Notes |
|---|---|---|
| Passkey sign-up and login, root-quorum check | Live on preprod | Staging web app with a real Turnkey org |
| Sends on Solana devnet and Sepolia | Live on preprod | 2026-10-20, previous staging; hashes not in this evidence set |
| Autonomous mode, Turnkey envelope accepted, delegated SOL payment | Live on preprod | 2026-10-20, previous staging |
| Policy engine, reservations under concurrency | Tested offline | PGlite and real Postgres |
| MCP OAuth (PKCE, CIMD, DCR), revocation, sanitizing | Tested offline | workerd with the official MCP SDK client; ChatGPT live as above |
| Wallet import (ADR-003) | Tested offline | Not run against a real Turnkey org or on a device |
| x402 on EVM and Solana | Tested offline | Signed, not handed off (x402.status: unsupported) |
| Jupiter swaps | Tested offline | Solana mainnet only; checked against a recorded mainnet swap |
| Push notifications | Tested offline | Not configured on staging; the app polls |
| Native iOS and Android apps | Tested offline | Web app live; not run on a device |
| Production deployment, mainnet | Not built | Not deployed |
The engineering status table with every item and its owner is docs/IMPLEMENTATION_STATUS.md in the
repository.