Arc Suite

The first genuinely paid endpoint: instead of a simulated provider signature, there's now a live Circle Gateway Nanopayments seller that accepts a real HTTP 402 and only charges after Gateway verification.

• New GET /api/marketplace/:apiId/call — a live x402 endpoint: the client gets a real 402 call, signs a gas-free Gateway authorization, and access opens only after payment verification.
• Replaces the simulated provider signature (ed25519-provider-sim) with a real payment path for one marketplace listing (api_01, Realtime Price Feed).
• Verified in production on arcsuite-app.vercel.app with a real Circle-managed agent wallet on Arc Testnet — a live request returns a correct 402 with an amount of 0.003 USDC and the Gateway Wallet address.
• Off by default (503) until KESTREL_GATEWAY_SELLER_ENABLED and a seller address are set; 6 new behavior tests were added for the enablement logic.

A security review of the money path following a full project review: stronger checks at execution time, idempotency, and recovery after failures.

• /api/money/execute now re-checks the amount, recipient allowlist, limit, and fee recipient against the current policy right at execution time, not only at the preflight stage.
• Fail-closed replay guard: execution refuses (503) if the Supabase idempotency store is unavailable, instead of an unsafe fallback.
• Deterministic idempotency for escrow and Arc settlement — retries and parallel duplicates no longer move funds twice.
• Settlement recovery: a settlement interrupted between the audit write and the transfer can be safely resumed.
• ArcEscrow.sol: added a reentrancy guard, safe transfer/transferFrom, and an amount > 0 check — takes effect on the next contract deployment.

The first provider-side pilot: integrating AIsa's paid API through Circle Gateway x402 with a controlled per-operation limit.

• Integration of AIsa's paid API through Circle Gateway x402.
• Readiness check with a real HTTP 402 and a 0.01 USDC per-operation limit.
• A guarded sequential runner for a controlled 25-operation pilot.
• Hashed payment and delivery proofs are stored to track proof completeness.
• Added the Agentic Workflow UI: provider readiness, batch management, metrics, proof details.

A significant pivot in this release: Arc is now positioned as infrastructure, with a separate production-ready money control plane under the Kestrel brand built on top of it.

• New surfaces added: Control Center, Money Movement, Proof Center, Pilots, and Grant Evidence.
• Three end-to-end pilot scenarios appeared: x402 API purchase, treasury routing, and controlled B2B payout.
• Server-side execution boundary: Circle Wallets adapter, HMAC-signed short-lived execution grants, server-enforced policy/compliance/amount/recipient controls.
• Verified production evidence: 10 confirmed Arc Testnet settlements, 12 indexed proofs, 6 active agents, 2,655.4 USDC under managed policy, 0.03 USDC verified testnet volume.
• Verification: 11 unit tests passed, 13 API checks passed, 26 production smoke checks passed, production builds passed, API reports Circle Wallets adapter enabled.

The final grant release locks in Arc Suite's reviewer-ready state: one production domain, a complete agentic USDC workflow, and a connected proof trail for checking the result independently of the interface.

• Landing, Treasury, Reputation, and Marketplace are brought together on one canonical production domain.
• The release locks in the reviewer surfaces: `grant`, `submission`, `judge`, `agentic-workflow`, `proof`, `ops`.
• Security baseline: CSP with frame-ancestors 'none', HSTS, clickjacking/MIME/referrer protections.
• Verification: `npm audit` → 0 vulnerabilities, 4 unit tests passed, 19 production smoke checks passed, 31 production monitor checks passed, 0 failures.

A small but important release: fixed a lint issue in the landing product switcher that was blocking Arc Suite CI.

• Deep links like ?product=provider are preserved without synchronous React state updates inside effects.
• Removed an unused product-card formatter.
• Verification: `npm run lint:all`, `npm run build`, GitHub Actions CI success, and Production Monitor success.

This release refines the proof logic: policy approval no longer looks like job finalization until there's a receipt and validation artifacts.

• Added reviewer-facing artifact-gated proof callouts on /proof and /agentic-workflow.
• Settlement and reputation updates stay review-held if execution evidence is missing.
• Verification: `npm run build`, production deploy updated, `/proof` and `/agentic-workflow` return 200.

Arc Suite got a new product module for private credit and RWA lifecycle workflows, tied to the Arc x Tradable direction.

• Arc Credit was added to the navigation and product grid.
• A grant-safe narrative appeared around KYB/KYT gates, escrow schedules, transaction memos, proof trails, and repayment reconciliation.
• Production surfaces: /credit and the main / are updated to the latest deployment.

This release adapts Arc Suite to fresh Arc/Circle builder signals: Gateway execution paths, transaction memos, and cleaner production monitoring.

• Added a Gateway execution adapter to Wallet OS with Balance → Spend → Forward → Trace logic.
• Proof gained reconciliation export rows: job id, workflow id, provider, API id, amount, memo state, settlement reference, and tx hash.
• Production monitor brought up to 31/31 checks OK, 0 warnings.

A grant-review release where Arc Suite aligns itself to current Arc docs and the reviewer narrative, not just its own README.

• Added Arc docs alignment to the grant reviewer console.
• Mapped: Transaction Memos, Gateway / Unified Balance, Stablecoin Kits, CCIP / Chainlink, and Network Resilience to shipped surfaces.
• Defined the next implementation order: Memo Proof v2, Unified Balance Console, Interop Route Runner, real Circle Wallet execution, and risk/artifact gating.

This release updates Arc Suite around transaction memos, the Gateway → Unified Balance Kit migration, Stablecoin Kits routing, and Arc app-layer settlement narratives.

• Added transaction memo context to Proof: invoice/customer/batch reference, memo schema, and success-gated event state.
• Added Unified Balance Kit readiness to Wallet OS: Gateway deposit mapping, unified balance lookup, a useForwarder-ready spend path, and tx hash trace.
• Added Swap Kit / route readiness to Arc Flow for USDC → EURC and the provider currency route.

A reviewer-facing release for Circle Wallet execution readiness: still read-only, but already with clear guardrails and production verification.

• Added the /api/wallets/execution-readiness endpoint.
• Wallet OS got a readiness panel: Circle path status, source wallet, USDC balance lookup, token lookup, transfer guardrails, and last check.
• Production monitor now covers the new wallet readiness auth guard; result — 31 checks, 0 failures, 0 warnings.

This release refines Wallet OS: money movement in Arc is now assembled into one account layer instead of a set of raw chain integrations.

• Added balances, payments, card-like spend controls, hidden CCTP status, and gas abstraction state to Wallet OS.
• The grant reviewer page got an account-layer narrative and a separate Wallet OS / account layer entry in the Circle + Arc fit matrix.
• The roadmap now includes a Multicurrency Wallet OS / account layer milestone.
• Verification: `npm run lint`, `npm run build`, `npm run monitor:prod` → 30 checks, 0 failures.

This release extends Wallet OS: USDC stays the base account, while EURC, Gateway, and StableFX are shown as ready directions until live adapters are connected.

• Added a Wallet OS block for a one-balance, multiple-currency agent account.
• Shows `USDC base`, an `EURC invoice rail`, fiat/Gateway-ready funding, and StableFX-ready routes.
• Verification: `npm run lint`, `npm run build`, `npm run monitor:prod` → 30 checks, 0 failures.

Arc Suite now shows network congestion as an execution state, not as “something broke.” For a payments product, that matters more than a plain loading screen.

• Added `network_congested`, `retry_scheduled`, `deferred_settlement`, `settlement_recorded`.
• Interop v2 checks CCIP status, feed freshness, deviation, RPC latency, explorer readiness, and route history.
• Provider onboarding now follows the path `API listing -> price -> x402 offer -> agent purchase -> proof receipt`.

This release ties Chainlink/CCIP evidence to the payment route: policy, oracle, CCIP, receipt, and validation are all gathered into one readable route envelope.

• Added an Arc Testnet → Ethereum Sepolia route with a CCIP router and chain selector.
• `oracleRiskHash` is now exposed in the agentic proof/job envelope.
• On `receipt_missing` or `validation_missing`, the route goes to review instead of being masked as settled.

Shield is no longer a one-off address check — it's continuous monitoring: an address can pass screening and later move to review or freeze if its risk profile changes.

• Added watched addresses, frozen policies, and manual review alerts.
• Cards show `active`, `review`, `frozen`, agent, chain, previous risk, and current risk.
• Production monitor now checks the continuous monitoring section.

In this release, the project grew from three connected demos into an operating layer for autonomous USDC commerce.

• Added Shield, Flow, Billing, Escrow, Gas, and Wallet OS on top of Treasury, Reputation, and Marketplace.
• Supabase got new schemas for gas, wallet lifecycle, escrow, billing, and the execution worker.
• Checks: `lint:all`, `build:all`, `test:smoke` → 11/11 passed.

In this release, the simulation became a real policy-gated settlement path on Arc Testnet via Circle Wallets.

• Before any transfer, agent/API access policy, a recipient allowlist, and a server-side amount cap all apply.
• Settlement is stored in Supabase, updates Treasury and Reputation, and retries are protected by idempotency keys.
• The release records `0.003 USDC`, chain ID `5042002`, and an Arcscan transaction link.

After a review, the project was cleaned up across data, interface, forms, and infrastructure. Not a flashy release, but it shows a real attitude toward quality.

• STATS are now computed from mock data; fixed total settled, marketplace counts, and score breakdown.
• Fixed invalid `<Link><button>`, CopyButton, validation forms, event sorting, and env URLs.
• Removed about 2,500 lines of unused shadcn/ui components and extra dependencies.