Skip to content

PayPal sandbox only. No real money moves.

ProveProof

Proof

What has been proven, against what, and what has not.

Page last changed 7 Nov 2026 (from the git history)

Evidence comes in four grades. Each claim on this site says which one it rests on.

GradeExample
Real sandbox, evidence file committedGates G1, G2, G4 and the nightly sandbox reports (docs/evidence/)
Real sandbox, run log onlyGate G0, and the raw nightly job logs (they expire with Actions retention)
Fake PayPalWhole-auction settlement and crash recovery
SimulatedThe 30 day run, on a model of PayPal with a fake clock
GateQuestionResultRun
G0sandbox app and buyer accountsPASS2026-11-04 by harshbhx (workflow gate-g0, run 41815593520, branch gate/g0)
G1partial capture and remainder releasePASS2026-11-04 by harshbhx (wallet); 2026-11-05 by harshbhx (card, run G1-20261105T123116Z)
G2card and guest AUTHORIZEPASS2026-11-05 by harshbhx (owner laptop, run G2-20261105T115228Z)
G3honor period versus validity and reauthorizeIN PROGRESSReal probe. Day 0 was 7 Nov 2026 03:06 UTC. Final reading about 12 Nov 06:17 UTC.
G4real webhook signature verificationPASS2026-11-05 by harshbhx (workflow gate-g4, run 41947655945)
G5STT accuracy on noisy bidsPARTIAL2026-11-07, cached eval over recorded provider outputs (PR #1940, issue #1864; second clip set PR VOI-01; error analysis, parser fixes and option trials PR VOI-02)
PageContent
GatesEach gate, with its caveats
The 30 day simulationEight scenarios, labelled SIMULATED
LatencyMeasured sandbox numbers, and the targets they do not meet
Quality checksWhat CI runs on every change
AccessibilityAutomated checks, and the manual pass nobody has done yet
Edit on GitHub

Last updated on