diff --git a/README.md b/README.md index 9feae68..27d9752 100644 --- a/README.md +++ b/README.md @@ -6,7 +6,7 @@ Free control-plane application for EDUT onboarding and entitlement-aware install 1. Local wallet create/import/recovery UX. 2. Device readiness checks. -3. Membership status and governance install controls. +3. EDUT ID status and governance install controls. 4. Signed package download and verification orchestrator. 5. Member app-channel inbox. @@ -30,10 +30,10 @@ Launcher never contains private kernel internals. It verifies and installs signe Top-level control surface: 1. `Connect wallet` -2. `Activate membership` +2. `Activate EDUT ID` 3. `Refresh status + feed` 4. `Governance status` -5. Wallet/session/membership/designation/last-sync overview cards +5. Wallet/session/EDUT ID/designation/last-sync overview cards 6. Pull-first updates feed + support ticket action 7. Identity assurance visibility (`none` / `crypto_direct_unattested` / `sponsored_unattested` / `onramp_attested`) 8. Explicit operator-visible mode toggles (`Human mode` / `Auto mode`) synced to governance `operation_mode` @@ -43,7 +43,7 @@ Advanced integration controls (collapsible): 1. API/chain connection settings 2. Wallet intent + verify primitives -3. Membership quote + confirm primitives +3. EDUT ID quote + confirm primitives 4. Marketplace offer list + checkout quote/send/confirm primitives 5. Member channel register/poll primitives 6. Governance install + lease primitives (with explicit `operation_mode`) @@ -56,17 +56,17 @@ Wallet automation helpers remain available in advanced controls: 1. `Connect wallet` fills address from `window.ethereum`. 2. `Sign intent (EIP-712)` signs the current intent payload and fills `walletSignature`. 3. `Sign payer proof` signs distinct-payer ownership proof and fills `payerProof`. -4. `Send membership tx` submits the quote transaction via `eth_sendTransaction` and fills `confirmTxHash`. -5. Membership confirm can optionally attach on-ramp attestation fields (`identity_assurance_level`, `identity_attested_by`, `identity_attestation_id`) for provider-integrated flows. +4. `Send EDUT ID tx` submits the quote transaction via `eth_sendTransaction` and fills `confirmTxHash`. +5. EDUT ID confirm can optionally attach on-ramp attestation fields (`identity_assurance_level`, `identity_attested_by`, `identity_attestation_id`) for provider-integrated flows. 6. Wallet verify returns a session token; launcher forwards it on marketplace/member/governance API calls via bearer + `X-Edut-Session`. 7. Launcher proactively refreshes wallet sessions before expiry and clears local session state on terminal session errors (`invalid`, `expired`, `revoked`, `mismatch`). Policy behavior in launcher shell: -1. Membership is required for all member-channel polling flows. +1. EDUT ID is required for all member-channel polling flows. 2. `onramp_attested` identity assurance is required for owner support-ticket and governance install-token actions. -3. Assurance state is displayed independently from membership state in the top summary cards. -4. Owner-only buttons are UI-disabled until both membership is active and assurance is `onramp_attested`. +3. Assurance state is displayed independently from EDUT ID state in the top summary cards. +4. Owner-only buttons are UI-disabled until both EDUT ID is active and assurance is `onramp_attested`. 5. Governance activation evidence must carry explicit signing authority class (`identity_human` or delegated). Run locally: diff --git a/docs/integration-contract.md b/docs/integration-contract.md index ac3d69b..3a4ff94 100644 --- a/docs/integration-contract.md +++ b/docs/integration-contract.md @@ -6,9 +6,9 @@ Launcher integrates with EDUT web/backend contracts as follows: 1. `POST /secret/wallet/intent` 2. `POST /secret/wallet/verify` -3. `POST /secret/membership/quote` -4. `POST /secret/membership/confirm` -5. `GET /secret/membership/status` +3. `POST /secret/id/quote` (alias of `/secret/membership/quote`) +4. `POST /secret/id/confirm` (alias of `/secret/membership/confirm`) +5. `GET /secret/id/status` (alias of `/secret/membership/status`) 6. `GET /marketplace/offers` 7. `POST /marketplace/checkout/quote` 8. `POST /marketplace/checkout/confirm` @@ -25,7 +25,7 @@ Launcher integrates with EDUT web/backend contracts as follows: - `Authorization: Bearer ` (preferred) - `X-Edut-Session: ` (compatibility) 3. Wallet change must clear cached session token before further calls. -4. Endpoints that require membership/admin authority can fail with: +4. Endpoints that require EDUT ID/admin authority can fail with: - `wallet_session_required` - `wallet_session_invalid` - `wallet_session_expired` @@ -40,8 +40,8 @@ Launcher integrates with EDUT web/backend contracts as follows: 1. No runtime activation without entitlement proof. 2. All install packages verified by hash and signature. -3. Membership and entitlement unknown state fails closed. +3. EDUT ID and entitlement unknown state fails closed. 4. Event inbox polling remains canonical even if push unavailable. -5. Identity assurance is evaluated independently from membership state. +5. Identity assurance is evaluated independently from EDUT ID state. 6. Owner/admin launcher actions must require `identity_assurance_level=onramp_attested`. 7. Governance activation evidence must include signing authority class (`identity_human` vs delegated).