docs: reshape OneShot as resumable paid tools

[kapustazh]

Summary

Reshape OneShot as resumable paid tools for business agents: resume the job, not the payment.

• New R0–R5 roadmap: supplier feasibility, resumable jobs, landing/cabinet, Graph triage, live demo and release.
• Separate public landing from authenticated cabinet: overview, tools, jobs/results, recovery/activity, wallet permissions and developer access.
• Preserve stable identity, at-most-once settlement and supplier-dependent delivery; clearly mark features planned rather than shipped.
• Align sponsor priorities and live Studio requirements; distinguish offline rehearsal from fresh live recovery.

Scope and acceptance criteria

• Documentation-only, nine Markdown files; no runtime/UI implementation.
• Purpose, vision, safe resume, supplier limitations and implementation gates specified.
• User-friendly navigation, separate payment/delivery states and accessible UX specified.
• Graph/AI evidence boundaries and honest demonstration specified.
• No unrelated changes.

Product and security invariants

• Workspace authorization remains required; no UI-only access control.
• Privy authorization, auditability and settlement safety preserved.
• Unsupported daily/pooled budgets are not claimed.
• No credentials or private customer data included.
• Recipient control modification and cross-workspace access remain prohibited.

No live effects, deployments, mainnet operations or external policy changes performed.

Validation

PASS: format, lint, typecheck, build/test (66 files, 977 tests), all 143 Markdown files,
generated contracts, 16 contract/UI fixtures, seven existing invariant scenarios,
and staged diff whitespace check. Latest context update also passed Markdown lint.

Local Node v22.23.2 differs from pinned v24.19.0; engine warning recorded.
Browser/live-provider/DB integration not rerun locally for documentation-only work.
Remote CI remains applicable; no CI waiver requested.

Independent review evidence

Explicit user exception for this PR: user instructed opening the PR without FreePi after two fresh reviews hit HTTP 409 concurrent_session. Gate A and Gate B are WAIVED BY USER, NOT PASS for this head. Canonical policy remains unchanged for future work.

Gate A — candidate review

• Base: 86c8f86
• Current commit: 4e4531e
• Current tree: 616530293afc718f770ff6080ba561d888befe2a
• Reviewer tool: free-pi-cli
• Earlier model: deepseek-v4-flash (platform response model deepseek/deepseek-v4-flash-0731)
• Earlier candidate passed, but branch/context edits invalidated that tree; it is NOT approval of this head.
• Final-head status: WAIVED BY USER, not PASS.

Gate B — remote PR head

• Status: NOT RUN / WAIVED BY USER.
• Current head independently reviewed.
• All applicable CI checks pass (pending).
• Ready for human merge.

Risk and rollback

Supplier selection, exact order-to-transfer binding and implementation remain R0 work.
New-workflow sponsor qualification remains NOT VERIFIED.
Reverting this documentation commit restores the prior roadmap; no runtime rollback needed.

Human merge

Draft for human review. No agent merge; no automatic approval claimed.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	oneshot	4e4531e	Sep 10 2026, 09:41 PM

[kapustazh]

LGTMMM