Limits, stated plainly

Nothing here is hidden elsewhere. Each item points to the page with the detail.

• Hosted demo is sandbox only and temporary. The web app is at https://gavel-web.creharsh.workers.dev and the API at https://gavel-auction-aufz.onrender.com, with temporary storage until a disk is added; no end-to-end walk of it is recorded. The path that is verified is a local run on the fake PayPal. (demo guide)
• Whole-auction settlement and crash recovery are mostly fake-PayPal results. On the real sandbox only the nightly specs R7, R8 and R10 ran (one lot of three holds, one in-process crash). No auction driven through a server and no real process kill has run. (crash recovery)
• The 30 day run is simulated. It shows the code is consistent with a model of PayPal, not that PayPal behaves like the model. (simulation)
• G3 is not finished. The honor period and validity window are unknown until the probe ends. A hold older than 2 hours is flagged stale; it is still captured.
• The remainder release is inferred. No buyer balance was read; guest card capture was not run. (gates)
• Voice is behind a confirm prompt. G5 is only PARTIAL (synthetic audio, fixes chosen on the same clips); there is no real-room test and no live speech run. The web console has no audio sender yet. (voice)
• Hammer to CAPTURED is over its target. End-to-end p95 is 3010.04 ms against 2.5 s (n=20, sandbox). The 6 s SETTLED target is met at p95 5591.30 ms. (latency)
• Rejected bids are not in the ledger. They are kept in the room log only, so the ledger cannot prove them. (engine and ledger)
• Security review is unsigned. All 18 items are open. (security review)
• Accessibility manual pass not done. (accessibility)
• Card and guest checkout in a live room. G2 proves the SDK authorize flow only; no live-room checkout run is recorded.