# Orb: funded two-wallet contract rehearsal

Completed October 2, 2026 at 21:33 São Paulo (October 3, 00:33 UTC).
Monad testnet, chain **10143**. These are founder-controlled standalone EOA demo
wallets, not real Privy embedded accounts or customer activity. No mainnet funds,
hosted profile, private chat or production database were changed.

## Actors and results

| Actor | Public address | Starting / remaining test MON |
| --- | --- | --- |
| A: organizer/sponsor | `0x678f8e11620dfC21634980468c0174d6d99f8F06` | 5 / 4.801296452 |
| B: participant | `0xAdd175731c9B96E87337c1A9A22FF10B90475a45` | 5 / 4.868939996 |

All **16 signed transactions** have successful public receipts. Total gas cost was
0.329763552 test MON; no claims about throughput or finality are inferred from
receipt polling. Runtime bytecode was checked against the configured artifacts.

- A registered a public community; only B could accept its wallet-bound invite.
  Unauthorized ownership/metadata changes and invite replay reverted.
- Both claimed 100 test ORB. Double faucet claims reverted.
- A funded mission **1** with exactly 10 ORB. B submitted the public registration
  receipt; A approved it. B withdrew **9.5 ORB**, with **0.5 ORB** retained as the
  existing 5% pilot fee. Token balance deltas and credits were checked onchain.
- Sponsor self-submission, duplicate submissions/reviews, participant self-approval,
  sponsor withdrawal of B's credit, participant fee withdrawal and repeated reward
  withdrawal all reverted in read-only contract calls.
- Each actor independently approved and swapped **1 oBASE** through shared card
  **2** in Orb's demo AMM. A received 0.996997014988952093 oQUOTE; B received
  0.996995023991880178 oQUOTE. Exact allowances were consumed. Over-card input and
  a second execution from the same wallet reverted.
- The application's independent mission reader verified the withdrawal and refused
  another wallet or a fabricated receipt. A signed public capsule was exported as
  JSON/CAR; altered content and a substituted author failed signature verification.

## Public receipts

| Action | Explorer receipt |
| --- | --- |
| Community registration | [Confirmed registration](https://testnet.monadscan.com/tx/0x62b0d64126e221d0024cecad775e43b3ab2e89092a59f95a0460c48e83160f0c) |
| Participant joins | [Confirmed invitation acceptance](https://testnet.monadscan.com/tx/0x6957c5914c50450d8d8b073a1a984f2db6184fdc93f97e44e8c27a5b67c62340) |
| Mission funding | [Confirmed 10 ORB budget](https://testnet.monadscan.com/tx/0x2f4f167fee41a1941b52f43503acfd952d6efb39944123ed91a774b123e69119) |
| Sponsor approval | [Confirmed approval](https://testnet.monadscan.com/tx/0x6461801ca95d5cf63c55161f7094a4fda73dd1f64a94de9be9de335d34f7ee55) |
| Participant withdrawal | [Confirmed 9.5 ORB withdrawal](https://testnet.monadscan.com/tx/0x4af746d9f930be3fac0ebdc0301dc845e80b760570206bd48ea6f2ff616118e4) |
| A's demo swap | [Confirmed independent swap A](https://testnet.monadscan.com/tx/0x5ec7f13a863882dca409a78b1f0e834549110812ad807912601419e9f88c07e6) |
| B's demo swap | [Confirmed independent swap B](https://testnet.monadscan.com/tx/0x5dfc369e414ccf43e160ccd26c2d3d02fd93d88dfb8d7775c8d3346c5d2162db) |

Registry: `0x0f40156299Fb43979DB0F602b5287bab41Df4B59`.
Community: `0xcf4992c24d59852731a40116ab080c426f1a93d2b143b5d1d68eb6638aa06582`.
Missions: `0x26859391CD7562c1e2221B75748C96815447FF90`.
ORB: `0x439D1DA1a1A1cf438EcDABbb29c1412E7250a9F0`.
Demo market: `0x5036F48c9dAECF205Ff4DAae57A43c3c7a0F2d08`.

## Acceptance boundaries

This validates public contract execution, configured readers and wallet separation.
It does **not** validate real Privy authentication, embedded signing, hosted account
binding, Perpl fills, Kuru swaps, microphone/live devices or independent security
audit. The AMM assets are demonstration tokens. Sponsor approval is subjective;
the contracts do not certify the quality of contributed work.

The capsule is saved locally and signed, but **not pinned or anchored**. Its CID
does not establish public IPFS availability. The two wallets are one founder's
demo actors; they are not evidence of retention, adoption or revenue.

The ignored local `work/demo-wallets/` directory retains the encrypted signing
material and resumable journal. Neither belongs in a public artifact or Git push.
The runner journals an original transaction before broadcasting and resumes that
same hash. It never creates an automatic replacement after an unknown result.
Its fee ceilings are 0.1 test MON per transaction and 0.5 per wallet.

Complete the [real-account rehearsal](orb-hackathon-rehearsal.md) separately.