Demo Audit — 2026-03-19

Cluster target: K3s at 10.8.30.40:30080 Auditor: Claude Code (s15-t1) Reseed: reseed-federation-demo.sh — seeded 4, skipped 9, failed 0 Timestamp: 2026-03-19, sprint 15 phase B

Summary

Flow 1 — Harbor Homes Governance

Script: demo/scripts/flow-1-governance.sh Classification: PROVEN

Command

cd /home/ubuntu/projects/icn && bash demo/scripts/flow-1-governance.sh

Result

Exit code: 0. All 10 steps succeeded.

Evidence

GovernanceReceipt evidence:

{
  "decision_hash": "...",
  "signature": { "algorithm": "Ed25519", "value": "..." },
  "timestamp": "...",
  "proposal_id": "..."
}

The GovernanceReceipt with Ed25519 signature is working live on K3s. PR #1327 appears merged and deployed.

Flow 2 — BrightWorks Patronage

Script: demo/scripts/flow-2-patronage.sh Classification: FRAGILE

Command

cd /home/ubuntu/projects/icn && bash demo/scripts/flow-2-patronage.sh

Result

Script exits with non-zero. Governance portion proven; ledger and receipt chain broken.

Evidence

Bug #1334 error (step 11):

HTTP 400 — Query deserialize error: missing field `decision_hash`

Root cause: ByDecisionQuery.decision_hash is String (required). Actix-web rejects the request when the query param is absent. Field should be Option<String> — querying all allocations is a valid operation.

Ledger 404 root cause: Routes /payment and /balance/{did} appear renamed in the deployed binary. The demo_api_preflight() function reports UNKNOWN binary SHA (health endpoint git_sha not populated), so API surface detection cannot confirm the rename. Routes /history and /position/{did} appear correct. These 404s are a separate issue from #1334/#1335 and not in scope for Sprint 15 Phase B.

Flow 3 — River City ↔ BrightWorks Federation

Script: demo/scripts/flow-3-federation.sh Classification: FRAGILE

Command

cd /home/ubuntu/projects/icn && bash demo/scripts/flow-3-federation.sh

Result

Script exits with non-zero. Governance PROVEN; all federation API calls broken due to schema mismatch between demo script and deployed gateway API.

Evidence

Bug #1335 schema mismatches:

Step 5 — coop registration:

// Demo sends (wrong):
{"coop_id":"...","name":"...","did":"<DID>"}

// Gateway expects (RegisterCoopRequest):
{"coop_id":"...","name":"...","public_did":"<DID>","gateway_endpoints":[],"capabilities":[]}

Fix: rename did → public_did. gateway_endpoints and capabilities have #[serde(default)] and can be omitted.

Step 6 — vouch:

// Demo sends (wrong):
{"attested_by":"<DID>","attestation":"<text>"}

// Gateway expects (VouchRequest):
{"target_coop_id":"<coop_id>","trust_score":0.85,"expires_in_days":365}

Note: the handler uses the URL path {coop_id} for the actual target, but target_coop_id is still a required field in the body struct.

Step 7 — clearing creation:

// Demo sends (wrong):
{"name":"...","parties":[...],"facilitator":"...","unit":"...","settlement_period_days":90}

// Gateway expects (CreateAgreementRequest):
{"agreement_id":"<client-id>","partner_coop_id":"<coop_id>","partner_did":"<DID>","max_imbalance":1000,"settlement":"monthly"}

The gateway API is bilateral (one partner, not a parties list). Fix: generate a client-side agreement_id, provide one partner_coop_id/partner_did, and use settlement enum string.

Flow 4 — Finger Lakes CDN Reporting

Script: demo/scripts/flow-4-reporting.sh Classification: FRAGILE

Command

cd /home/ubuntu/projects/icn && bash demo/scripts/flow-4-reporting.sh

Result

Script completes with warnings. Governance reporting PROVEN; receipt chain and federation broken.

Evidence

Bug Index

What Remains Before All 4 Flows Are PROVEN

1. Fix Bug #1334 (s15-t2) — decision_hash optional in allocations/chain endpoints
2. Fix Bug #1335 (s15-t3) — flow-3 federation schema corrections
3. Investigate ledger 404s — /payment and /balance/{did} routes missing (separate issue, not blocking Phase B)
4. Re-run Flow 2 and Flow 3 after fixes to confirm PROVEN status

Post-Fix Re-Audit (to be filled after s15-t2 and s15-t3 complete)