feat: package Gate P6 release candidate

[kapustazh]

Summary

Package Gate P6 as a repeatable offline demo and written judge walkthrough. Update active sponsor scope to Arc/Privy/The Graph; Circle Agent Stack and video are explicitly not claimed.

Scope and acceptance criteria

• Change is limited to Gate P6 release packaging.
• pnpm demo:e2e verifies recorded 1.00 USDC settlement, zero-effect Privy denials, and lost-response recovery with zero replacement submissions.
• Written 2–4 minute walkthrough included; no video artifact claimed.
• No unrelated cleanup included.

Product and security invariants

• Tenant isolation remains fail-closed.
• Privy authorization/caps remain enforced; denials record zero broadcasts and settlements.
• The Graph and LLM receive no settlement authority.
• No secret, token, production identifier, or personal data committed.

Invariant notes: offline/read-only demo re-verifies sanitized testnet evidence. UNKNOWN recovery proves one total settlement and zero replacement submissions.

Validation

pnpm demo:e2e: PASS
pnpm typecheck: PASS
pnpm lint: PASS
pnpm format:check: PASS
pnpm --filter @oneshot/testkit-settlement evidence:b06: PASS
Exact-head CI (5 checks): PASS

Independent review evidence

Gate A — exact candidate tree before push

• Base: 7ae55c8d473ca1bc6ca146de0dfd375571fb517a
• Tree: 2748b7796fc0be0100a81e80fe8a96142b1e4242
• Commit: 23f3a692d1b53f36c60f89e9846ab1c1ca47e430
• Reviewer: free-pi-cli; model: not exposed by platform
• Verdict: VERDICT: PASS; blockers: none.
• Reviewed tree equals committed tree.

Gate B — exact remote PR head

• PR: feat: package Gate P6 release candidate #54
• Head: 23f3a692d1b53f36c60f89e9846ab1c1ca47e430
• Tree: 2748b7796fc0be0100a81e80fe8a96142b1e4242
• Reviewer: free-pi-cli; model: not exposed by platform
• Verdict: VERDICT: PASS; blockers: none.
• Residual risk: offline demo re-verifies recorded evidence; live UI/MCP walkthrough requires the deployed stack.
• Gate B reviewed current remote head and matches Gate A tree.
• Repository policy and all applicable CI checks pass.

Risk and rollback

• Residual risks: live walkthrough requires deployed stack; Graph freshness should be confirmed before submission.
• Rollback: revert commit 23f3a692d1b53f36c60f89e9846ab1c1ca47e430.

Human merge

• A human owner has reviewed the evidence and will perform the merge.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	23f3a69	Sep 09 2026, 08:16 PM