Publish Calibration direct-read dashboard evidence

Author: snissn

README.md

@@ -37,7 +37,29 @@ workspace.
 
 See [`spec.md`](./spec.md).
 
-The design is not production-ready, but it now selects a v1 implementation path to validate: platform EOA/KMS payer, FOC session-key coordinator, hosted coordination, onchain request/object/usage/receipt state, and a Token Host Builder-first scaffold for the generated app, admin/read surfaces, upload adapters, manifests, and sponsored transaction wiring. The workspace includes a local registry artifact/read model, a dev-only upload spine test that exercises request, start, deterministic mocked receipt finalization, object reads, usage reads, and log projection, plus read-only admin/reconciliation projections for object, usage, dataset, provider, coordinator, and mismatch views. The next admin/dashboard buildout targets direct onchain registry pagination: list/count views enumerate objects, accounts, coordinators, relayers, and dataset keys, while detail views fetch the current contract state. Event projections remain audit/fixture/fallback inputs rather than the current-state dashboard source of truth. A partial Phase 0 Calibration run has deployed and verified the registry bytecode on chain `314159`; see [`docs/phase0-calibration-report.md`](./docs/phase0-calibration-report.md). The full FOC/Synapse/session-key compatibility matrix remains open, so future payment and coordinator modes remain compatibility-gated by Phase 0 evidence. The current security and operations boundary is captured in [`docs/production-hardening-runbook.md`](./docs/production-hardening-runbook.md).
+The design is not production-ready, but it now selects a v1 implementation path
+to validate: platform EOA/KMS payer, FOC session-key coordinator, hosted
+coordination, onchain request/object/usage/receipt state, and a Token Host
+Builder-first scaffold for the generated app, admin/read surfaces, upload
+adapters, manifests, and sponsored transaction wiring. The workspace includes a
+local registry artifact/read model, a dev-only upload spine test that exercises
+request, start, deterministic mocked receipt finalization, object reads, usage
+reads, and log projection, plus read-only admin/reconciliation projections for
+object, usage, dataset, provider, coordinator, and mismatch views. The current
+admin/dashboard buildout uses direct onchain registry pagination: list/count
+views enumerate objects, accounts, coordinators, relayers, and dataset keys,
+while detail views fetch the current contract state. Event projections remain
+audit/fixture/fallback inputs rather than the current-state dashboard source of
+truth. A historical Phase 0 Calibration run deployed and verified registry
+bytecode on chain `314159`; see
+[`docs/phase0-calibration-report.md`](./docs/phase0-calibration-report.md).
+The current Worker evidence additionally publishes a committed object and
+direct dashboard read proof; see
+[`docs/calibration-worker-demo.md`](./docs/calibration-worker-demo.md). The
+full FOC/Synapse/session-key compatibility matrix remains open, so future
+payment and coordinator modes remain compatibility-gated by Phase 0 evidence.
+The current security and operations boundary is captured in
+[`docs/production-hardening-runbook.md`](./docs/production-hardening-runbook.md).
 
 ## Related projects
 
@@ -89,13 +111,13 @@ the dashboard; `/api/admin/overview`, `/api/admin/files`,
 `/api/admin/reconciliation` expose JSON rows backed by direct registry
 count/list/detail reads. Overview uses bounded contract count reads; table
 routes expose page metadata with `cursor` or `offset`, and filters are
-page-scoped to keep Worker requests bounded. The committed demo config still points at live Calibration
-evidence for registry object `1`, provider/dataset/piece `4`/`12524`/`34`, and
-a committed registry finalization; issue #33 owns publishing updated public
-evidence for the direct pagination ABI. Until that registry/runtime evidence
-matches the current artifact hash, the dashboard defaults to skipped read-only
-API responses instead of live dashboard reads; use `?live=true` only against an
-upgraded pagination-capable registry. The deployed demo is available at
+page-scoped to keep Worker requests bounded. The committed demo config points
+at live Calibration evidence for registry object `1`,
+provider/dataset/piece `4`/`12524`/`34`, a committed registry finalization, and
+direct pagination-capable registry reads whose runtime hash matches the current
+artifact. Dashboard APIs now default to live direct reads; append `?live=false`
+for route smoke checks that should not call public RPC. The deployed demo is
+available at
 `https://foc-platform-calibration-demo.snissn.workers.dev`. Run
 `pnpm worker:dev` for a local Worker and `pnpm worker:dry-run` to validate the
 deploy bundle. The Worker must not receive private keys or session keys;

artifacts/calibration/demo-evidence.json

@@ -1,14 +1,14 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-07-01T14:29:04.326Z",
+  "generatedAt": "2026-07-02T02:30:32.494Z",
   "mode": "calibration_live_evidence",
   "network": "filecoin_calibration",
   "chainId": 314159,
   "registry": {
-    "address": "0x7771d916a9d742B1D60597a332C7ABBd5796609c",
-    "deployTxHash": "0xb6a4469ae4bff657326d25dd9989ebae54f03467c8ddee19001b1c114fe70552",
-    "deployBlock": "3852147",
-    "runtimeSha256": "0xed478a27e255a1b27989ffa4f2fcbf38f1a9ec61a84c8d3e20aceb4e26f72040",
+    "address": "0x8F6563Bb9E53aeDfE9d87d4C1E162f0371649c18",
+    "deployTxHash": "0xae42c13c50c1b268a1d38389e27d8fa776264b405e28a1cf11a974dd4b178eae",
+    "deployBlock": "3854411",
+    "runtimeSha256": "0x2c49443e7a9ebf3337453240e706df249d29f4f217ec948d6c10e9502a199d1f",
     "rootAddress": "0xF00DCE36817586672B47480FB48C94177A97278B"
   },
   "demo": {
@@ -23,11 +23,12 @@
     "uploadTxHash": null,
     "uploadEvidence": "FOC MCP upload call timed out locally, but dataset read shows piece metadata.",
     "registryTxHashes": {
-      "setCoordinator": "0xcf21feda99029624d18bcf17035f0f5d0f9c7bc67680ca0d32f210d6acf370ce",
-      "requestUpload": "0x552b1da9b049dc1301effcc34c497625a1e09934b25bec7e5a3fe607ba3382fd",
-      "startUpload": "0x1d1104fb0807ff05f4a4c9045dcfc888a54bd6d143edab25e19ec6d4bd6a8bb1",
-      "recordDataset": "0x3ec159924041a28531652a23ca4343f7aa8186da47f5c27cc6e8410bee5a3ea3",
-      "finalizeUpload": "0xebbf1d335df22f3607e9552753360d80d48fd28d199ef0afa19f052d5fd57608"
+      "setCoordinator": "0x22a29586247fa39e8d3277c754a42466f1936a3377f2d62ab50ddf1337035cd1",
+      "setRelayer": "0x93153de2f1653b1e632dff19f2dfd632f5f2a6390af20b39097a53607c162570",
+      "requestUpload": "0x35c561f8b6278b63deb1d272b8cc2b7663a45eb3cc564e75092bbeb5ebf12ccf",
+      "startUpload": "0x6c57ded5248162049d64d372c2d1bde7e37c788edeedafc454bbbd2e3f841f38",
+      "recordDataset": "0xb65836f00e8b7a24734e3d5e62d64ad305e3234fd879e2a435b1665d273b6669",
+      "finalizeUpload": "0xe046f47af71e7da40ed475aba0e3ba8ac94677ae2de7341e1b59e2f8e367a2a4"
     },
     "request": {
       "accountId": "0xfaa4a252e3d762275f3bb2baccba097024ed47a08845bee0de79a2ee58514e01",
@@ -79,9 +80,9 @@
         "actualCost": "0",
         "status": 3,
         "coordinator": "0xF00DCE36817586672B47480FB48C94177A97278B",
-        "requestExpiresAt": "1783002330",
-        "createdAt": "1782915930",
-        "updatedAt": "1782916110",
+        "requestExpiresAt": "1783045620",
+        "createdAt": "1782959220",
+        "updatedAt": "1782959400",
         "receiptHash": "0xce534bd735f5dea29729cd9a25ebcf5e1ff469b0979317d5e50dce75fccbb3c0"
       },
       "usage": {
@@ -113,23 +114,67 @@
         "datasetId": "12524",
         "storageClass": "0x0e6acc625c140754b256b76ddbbb54fdac3cbed1a8405e4b477401bd17f16282",
         "withCDN": false,
-        "createdAt": "1782916050",
-        "updatedAt": "1782916050"
+        "createdAt": "1782959340",
+        "updatedAt": "1782959340"
+      }
+    },
+    "dashboard": {
+      "sourceOfTruth": "FocPlatformRegistry direct contract count/list/detail/readBatch views",
+      "counts": {
+        "objectCount": "1",
+        "accountCount": "1",
+        "datasetRecordCount": "1",
+        "coordinatorCount": "1",
+        "relayerCount": "1"
+      },
+      "pages": {
+        "objectIds": [
+          "1"
+        ],
+        "accountIds": [
+          "0xfaa4a252e3d762275f3bb2baccba097024ed47a08845bee0de79a2ee58514e01"
+        ],
+        "accountObjectIds": [
+          "1"
+        ],
+        "datasetKeys": [
+          {
+            "accountId": "0xfaa4a252e3d762275f3bb2baccba097024ed47a08845bee0de79a2ee58514e01",
+            "providerId": "4",
+            "datasetId": "12524"
+          }
+        ],
+        "coordinatorAddresses": [
+          "0xF00DCE36817586672B47480FB48C94177A97278B"
+        ],
+        "relayerAddresses": [
+          "0xF00DCE36817586672B47480FB48C94177A97278B"
+        ]
+      },
+      "detailReads": {
+        "objectId": "1",
+        "coordinatorPolicy": {
+          "allowed": true,
+          "maxFinalizeDelay": "86400",
+          "sessionKeyExpiresAt": "0",
+          "permissionsHash": "0x0000000000000000000000000000000000000000000000000000000000000000"
+        },
+        "relayer": {
+          "address": "0xF00DCE36817586672B47480FB48C94177A97278B",
+          "allowed": true
+        }
+      },
+      "readBatch": {
+        "method": "readBatch",
+        "callCount": 5,
+        "resultCount": 5
       }
     }
   },
   "worker": {
     "mode": "read_only_public_evidence",
     "privilegedActions": false,
-    "servesPrivateKeys": false,
-    "url": "https://foc-platform-calibration-demo.snissn.workers.dev",
-    "versionId": "bee0fdaf-f4ac-4a6a-8556-46842d76c6cb",
-    "startupTimeMs": 14,
-    "validatedEndpoints": [
-      "/api/health",
-      "/api/demo/evidence",
-      "/api/demo/registry"
-    ]
+    "servesPrivateKeys": false
   },
   "tokenHost": {
     "mode": "hand_written_registry_wrapper",

docs/calibration-worker-demo.md

@@ -4,8 +4,9 @@ Issue #15 exposes the Calibration demo through a Cloudflare Worker. Issue #32
 turns the Worker first screen into a read-only admin dashboard for the
 configured `FocPlatformRegistry`: it serves public evidence, reads dashboard
 rows through direct registry list/detail views, and links to generated Token
-Host wrapper metadata. It must not upload files, pay FOC, withdraw funds, or
-submit registry transactions.
+Host wrapper metadata. Issue #33 publishes the current Calibration evidence for
+the direct count/list/detail/readBatch dashboard path. The Worker must not
+upload files, pay FOC, withdraw funds, or submit registry transactions.
 
 ## Worker Commands
 
@@ -55,15 +56,10 @@ before changing or redeploying it. The security and recovery boundary is
 documented in
 [`docs/production-hardening-runbook.md`](./production-hardening-runbook.md).
 
-The current deployed Worker and registry evidence predate the direct pagination
-ABI. The Worker code now has direct-onchain dashboard routes, but the deployed
-public evidence still points at the earlier registry. For that configuration,
-the dashboard defaults to skipped read-only API responses instead of attempting
-live dashboard reads against missing count/list methods. `?live=true` should be
-used only with a registry whose runtime hash matches the current pagination ABI.
-Issue #33 must publish updated evidence from a registry build that includes the
-pagination ABI before the dashboard stack can claim end-to-end public
-Calibration direct-read proof.
+The committed Worker config points at a Calibration registry whose runtime hash
+matches the current pagination ABI. Dashboard APIs therefore default to live
+direct reads. Append `?live=false` when you need a route-level smoke check
+without public RPC calls.
 
 ## Public Endpoints
 
@@ -130,6 +126,10 @@ After the local evidence run, update only public values:
 ```jsonc
 {
   "FOC_PLATFORM_DEMO_MODE": "calibration_live_evidence",
+  "FOC_PLATFORM_REGISTRY_ADDRESS": "<registry address>",
+  "FOC_PLATFORM_REGISTRY_DEPLOY_TX": "<registry deploy tx hash>",
+  "FOC_PLATFORM_REGISTRY_DEPLOY_BLOCK": "<registry deploy block>",
+  "FOC_PLATFORM_REGISTRY_RUNTIME_SHA256": "<deployed runtime SHA-256>",
   "FOC_PLATFORM_DEMO_STATUS": "Committed",
   "FOC_PLATFORM_DEMO_OBJECT_ID": "<registry object id>",
   "FOC_PLATFORM_DEMO_ACCOUNT_ID": "<bytes32 account id>",
@@ -158,13 +158,16 @@ if [[ "$PRIVATE_KEY" != 0x* ]]; then
 fi
 
 export FILECOIN_CALIBRATION_RPC_URL="https://api.calibration.node.glif.io/rpc/v1"
-export FOC_PLATFORM_REGISTRY_ADDRESS="0x7771d916a9d742B1D60597a332C7ABBd5796609c"
+export FOC_PLATFORM_REGISTRY_ADDRESS="0x8F6563Bb9E53aeDfE9d87d4C1E162f0371649c18"
+export FOC_PLATFORM_REGISTRY_DEPLOY_TX="0xae42c13c50c1b268a1d38389e27d8fa776264b405e28a1cf11a974dd4b178eae"
+export FOC_PLATFORM_REGISTRY_DEPLOY_BLOCK="3854411"
+export FOC_PLATFORM_REGISTRY_RUNTIME_SHA256="0x2c49443e7a9ebf3337453240e706df249d29f4f217ec948d6c10e9502a199d1f"
 export FOC_PLATFORM_DEMO_PAYLOAD_PATH="/tmp/foc-platform-calibration-demo.bin"
 export FOC_PLATFORM_DEMO_PROVIDER_ID="4"
 export FOC_PLATFORM_DEMO_DATASET_ID="12524"
-export FOC_PLATFORM_DEMO_PIECE_ID="<piece id>"
-export FOC_PLATFORM_DEMO_PIECE_CID="<piece CID>"
-export FOC_PLATFORM_DEMO_RETRIEVAL_URL="<provider retrieval URL>"
+export FOC_PLATFORM_DEMO_PIECE_ID="34"
+export FOC_PLATFORM_DEMO_PIECE_CID="bafkzcibeqcad6egqwuynxmfu6jof2lzkfdp65aelknasuautd4mmjgpvujkaq2ytey"
+export FOC_PLATFORM_DEMO_RETRIEVAL_URL="https://caliberation-pdp.infrafolio.com/piece/bafkzcibeqcad6egqwuynxmfu6jof2lzkfdp65aelknasuautd4mmjgpvujkaq2ytey"
 
 node scripts/run-calibration-registry-demo.mjs --write
 ```
@@ -180,31 +183,37 @@ The committed demo evidence now points at a live Calibration object:
 
 | Field | Value |
 | --- | --- |
+| Generated at | `2026-07-02T02:30:32.494Z` |
+| Registry | `0x8F6563Bb9E53aeDfE9d87d4C1E162f0371649c18` |
+| Registry deploy tx | `0xae42c13c50c1b268a1d38389e27d8fa776264b405e28a1cf11a974dd4b178eae` |
+| Registry deploy block | `3854411` |
+| Registry runtime SHA-256 | `0x2c49443e7a9ebf3337453240e706df249d29f4f217ec948d6c10e9502a199d1f` |
 | Registry object | `1` |
 | Status | `Committed` |
 | Account id | `0xfaa4a252e3d762275f3bb2baccba097024ed47a08845bee0de79a2ee58514e01` |
 | Provider/dataset/piece | `4` / `12524` / `34` |
 | Piece CID | `bafkzcibeqcad6egqwuynxmfu6jof2lzkfdp65aelknasuautd4mmjgpvujkaq2ytey` |
 | Retrieval URL | `https://caliberation-pdp.infrafolio.com/piece/bafkzcibeqcad6egqwuynxmfu6jof2lzkfdp65aelknasuautd4mmjgpvujkaq2ytey` |
 | Worker URL | `https://foc-platform-calibration-demo.snissn.workers.dev` |
-| Worker version | `bee0fdaf-f4ac-4a6a-8556-46842d76c6cb` |
+| Worker version | `c83bd91f-164e-4a48-9d0a-06518cd51212` |
+| Dashboard direct-read proof | `objectCount=1`, `accountCount=1`, `datasetRecordCount=1`, `coordinatorCount=1`, `relayerCount=1`, `readBatch.resultCount=5` |
 
 Public registry transaction hashes:
 
-- `setCoordinator`: `0xcf21feda99029624d18bcf17035f0f5d0f9c7bc67680ca0d32f210d6acf370ce`
-- `requestUpload`: `0x552b1da9b049dc1301effcc34c497625a1e09934b25bec7e5a3fe607ba3382fd`
-- `startUpload`: `0x1d1104fb0807ff05f4a4c9045dcfc888a54bd6d143edab25e19ec6d4bd6a8bb1`
-- `recordDataset`: `0x3ec159924041a28531652a23ca4343f7aa8186da47f5c27cc6e8410bee5a3ea3`
-- `finalizeUpload`: `0xebbf1d335df22f3607e9552753360d80d48fd28d199ef0afa19f052d5fd57608`
+- `setCoordinator`: `0x22a29586247fa39e8d3277c754a42466f1936a3377f2d62ab50ddf1337035cd1`
+- `setRelayer`: `0x93153de2f1653b1e632dff19f2dfd632f5f2a6390af20b39097a53607c162570`
+- `requestUpload`: `0x35c561f8b6278b63deb1d272b8cc2b7663a45eb3cc564e75092bbeb5ebf12ccf`
+- `startUpload`: `0x6c57ded5248162049d64d372c2d1bde7e37c788edeedafc454bbbd2e3f841f38`
+- `recordDataset`: `0xb65836f00e8b7a24734e3d5e62d64ad305e3234fd879e2a435b1665d273b6669`
+- `finalizeUpload`: `0xe046f47af71e7da40ed475aba0e3ba8ac94677ae2de7341e1b59e2f8e367a2a4`
 
 The FOC MCP upload call timed out before returning an add-piece transaction hash
 or cost field, but a read of dataset `12524` showed piece `34` with matching
 metadata and retrieval URL. The registry receipt therefore records zero
 `actualCost` and a zero `addPieceTxHash`, with that limitation preserved in
 `artifacts/calibration/demo-evidence.json`.
 
-This run still does not prove a real session-key coordinator or expiry/revoke
-path. The local dev root address was allowlisted as coordinator to complete the
-public end-to-end Worker demo. It also does not prove the later direct
-pagination/list-read ABI; use it as historical Worker evidence until issue #33
-publishes updated list/detail/dashboard proof.
+This run proves the direct pagination/list/detail/readBatch ABI used by the
+Worker dashboard. It still does not prove a real session-key coordinator or
+expiry/revoke path. The local dev root address was allowlisted as coordinator
+and relayer to complete the public end-to-end Worker demo.

docs/deployment.md

@@ -93,6 +93,13 @@ Calibration registry deployment and runtime bytecode verification only. It does
 not prove FOC funding/approval, Synapse upload, session-key authorization,
 dataset attribution, receipt finalization, or expiry/revocation behavior.
 
+The current direct-onchain Worker demo evidence is recorded in
+[`artifacts/calibration/demo-evidence.json`](../artifacts/calibration/demo-evidence.json)
+and [`docs/calibration-worker-demo.md`](./calibration-worker-demo.md). That
+evidence points at the pagination-capable Calibration registry used by the
+public dashboard and proves bounded count/list/detail/readBatch reads for the
+configured object.
+
 ## Read Model
 
 `src/registry/read-model.mjs` exposes:

docs/platform-api.md

@@ -112,10 +112,9 @@ GET /admin/storage/reconciliation
 ```
 
 Admin responses are built by `src/admin/reconciliation.mjs` from registry
-contract views or reconstructed event state today. The target direct-onchain
-dashboard path must enumerate current rows from `FocPlatformRegistry`
-list/count views and then fetch detail state from point reads or bounded
-`readBatch` calls:
+contract views or reconstructed event state. Current direct-onchain dashboard
+reads enumerate rows from `FocPlatformRegistry` list/count views and then fetch
+detail state from point reads or bounded `readBatch` calls:
 
 - objects: `listStorageObjectIds` / `listAccountObjectIds` plus
   `getStorageObject`;
@@ -126,8 +125,8 @@ list/count views and then fetch detail state from point reads or bounded
 - receipts: `getCopyReceipts` and `receiptPayer`.
 
 Event reconstruction may supplement audit/history screens and local fixtures,
-but it must not replace direct contract reads for current admin rows once the
-pagination ABI is available. Optional FOC evidence can be supplied by a
-wrapper; without it, stored-object reconciliation reports
+but it must not replace direct contract reads for current admin rows. Optional
+FOC evidence can be supplied by a wrapper; without it, stored-object
+reconciliation reports
 `foc_evidence_not_checked` rather than claiming live FOC verification. See
 [`docs/admin-reconciliation.md`](./admin-reconciliation.md).