docs: define Arc Circle qualification path

[SuPuHe]

Summary

Updates plan.md and plan_missing_parts.md for ETHOnline 2026 Arc requirements and a Circle-first qualification path.

• Records merged PR feat(graph): complete live Subgraph MCP recovery proof and qualify The Graph #48 and scopes The Graph qualification to the live Studio/MCP path while preserving the Explorer no-allocation status.
• Adds track-specific Arc evidence requirements, submission mechanics, deadline, and mainnet-readiness.
• Replaces the prior no-Circle decision with a bounded Circle Agent Stack / Circle CLI / Skills / capped Agent Wallet plan.
• Keeps Privy, OneShot/PostgreSQL, one-intent/one-settlement, UNKNOWN, and fail-closed recovery boundaries intact.
• Explicitly keeps Hedera HTS/x402 out of this submission window.

Scope and acceptance criteria

• Documentation-only change: plan and missing-parts audit plus context record.
• Circle Agent Stack remains NOT VERIFIED until live implementation and evidence exist.
• No source, configuration, credentials, secrets, or unrelated files changed.

Product and security invariants

The Circle lane is bounded behind the durable Business Intent/idempotency boundary. Each intent chooses either the canonical Privy rail or the explicitly scoped Circle service-payment rail, never both. Over-cap/denied actions must produce zero settlement; lost or ambiguous responses remain UNKNOWN with no blind retry.

Validation

• git diff --check: PASS
• git diff --cached --check: PASS
• markdownlint-cli2 0.18.1: PASS, 122 files, 0 errors
• Candidate tree: 7bb9d027e1cc521aa30a8096c7256135252a20bf

Independent review evidence

Gate A - exact candidate tree before push

• Base: 7cb629c
• Candidate tree: 7bb9d027e1cc521aa30a8096c7256135252a20bf
• Commit: 3c31393
• Reviewer: free-pi-cli
• Model: glm-5.3-flash
• Verdict: VERDICT: PASS
• Blocking findings: None

Gate B - exact remote PR head

Not run by instruction. Required before merge.

Risk and rollback

External Arc/Circle mechanics and sponsor evidence are time-sensitive. Circle qualification is deliberately not claimed until live code, testnet evidence, and sponsor review pass. Revert commit 3c31393 to roll back.

Human merge

• Human owner reviews and merges after Gate B.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	3c31393	Sep 09 2026, 01:47 AM