The buyer journey from quote to budget ledger to execution timeline to result, receipt, and evidence, rendered entirely from deterministic no-network fixtures under the #497 route state contract. Nothing on this page signs, spends, settles, publishes, or mutates trust.
Copy modes follow the #497 copy boundary matrix and the Discover / Decide / Prove boundaries doc; the fail-closed reading wins.
No-spend fixture
fixture_zero_spend
Deterministic fixture data. No network, no spend, nothing paid, settled, executed live, custody-backed, published, or trusted.
Dry run (planned only)
planned_dry_run
Planned quote, policy, ledger, and proof refs. No wallet signed, no provider called, no RPC verified, no funds moved.
Simulated preview
simulated
Simulated result or preview state only. Not a production result and not a verified live service response.
Recorded devnet metadata
devnet_proof_metadata
Recorded devnet proof metadata; an optional fresh-devnet gate exists. No mainnet settlement, production activation, or default USDC auto-pay.
Live-gated (approval required)
live_gated
A fresh paid run needs an explicit operator approval record, cap, endpoint, payer, payee, command, evidence path, rollback owner, and expiry. No approval is granted here and no route can spend.
Production disabled
production_live_disabled
Production live payment is disabled by default. No Pay.sh production activation, no production AUDD rail, no hosted registry write.
2.00 downstream + 0.50 attestor + 0.75 markup + 5 bps rail fee.
quote_ready
4 downstream profiles; downstream calls executed: 0.
budget_ledger_ready
4 downstream specialist profiles planned; downstream calls executed: 0. Row-level allocation, remaining, and refund states are in the budget ledger below.
Every row is traced to a fixture/read-model ref or explicitly marked unavailable/blocked. Planned allocations reconcile exactly to the buyer budget; spent stays an authoritative zero.
budget_ledger_ready
Upfront activity fee
end-user -> agentic-workflow-system
Buyer budget equals the deterministic quote total. Planned fixture funding only; nothing is signed, paid, or settled.
Reserved copy specialist budget
agentic-workflow-system -> content-creation-agent
Reserved specialist budget from the fixture ledger; zero downstream calls executed.
Reserved code specialist budget
agentic-workflow-system -> code-generation-agent
Reserved specialist budget from the fixture ledger; zero downstream calls executed.
Reserved attestation budget
agentic-workflow-system -> verification-validation-agent
Reserved attestor/proof budget; the attestation itself stays a draft preview with no submission.
Orchestrator retained markup
agentic-workflow-system -> agentic-workflow-system
Orchestrator fee/margin retained in the plan; collected nowhere because nothing executes.
Reddi Agent Protocol rail fee (0.05%)
agentic-workflow-system -> reddi-protocol-treasury
Planned 5 bps protocol rail fee; zero fees collected (real metering).
SOL route swap/slippage allowance
Jupiter -> agentic-workflow-system
SOL-route swap/slippage allowance inside the quote; no swap route is executed.
Spent to date
Authoritative zero from the recorded rehearsal's real metering: no paid requests, no settled USDC.
Remaining (unspent)
The full buyer budget remains: nothing was spent, so remaining equals the quoted total.
Refund state
No refund exists because no charge exists. Failure policy: no_charge_on_failure; refund policy: manual_review_fixture_only.
Real settlement cost
Unavailable: no real settlement occurred and the production-style devnet receipt verifier is a later phase, so no settlement cost can be reported honestly.
Blocked cases spend
6 fail-closed proof-chain cases hold spending and mutation at zero/false.
Milestones come from the nissan/reddi-agent-protocol#564 recorded dry-run rehearsal and the fixture pack; nothing here executed live. Recorded-devnet metadata labels reference docs/DEVNET-REFERENCE-RUN-564.md.
execution_timeline_ready
Resolve orchestrator and downstream specialists from the deployed 30-profile catalog without network calls.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Assemble the deterministic USDC quote including downstream fees, attestor fees, markup, and protocol rail fee.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Evaluate the fixture-only policy decision and AUDD payment-plan preflight; both stay allowed_fixture_only.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Bind the dry-run x402 payment plan to the sandbox single-charge payment proof ref; no payment is generated or submitted. Real execution stays at zero: 0 downstream calls executed.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Receipts are controlled demo receipts, not production USDC settlement verification.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Reference the redacted rail-neutral receipt (refs, hashes, and support states only).
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
Reference the EvidenceArchive record binding source, request hash, response hash, and evidence ref.
devnet_proof_metadata: runbook:docs/DEVNET-REFERENCE-RUN-564.md
verification-validation-agent has not submitted an attestation.
agentic-workflow-system reputation mutation is disabled for this fixture pack.
No public ref: preview-only milestone.
Receipts are controlled demo receipts, not production USDC settlement verification.
result_ready
receipt_binding_candidate; USDC on solana-devnet.
receipt_binding_ready
Payment proof is rendered as refs and hashes only (refs_hashes_only); no settlement finality or custody is implied.
EvidenceArchive refs are available without raw prompt, output, credential, provider, wallet, or RPC material.
evidence_refs_ready
verification-validation-agent has not submitted an attestation.
attestation_preview_only
agentic-workflow-system reputation mutation is disabled for this fixture pack.
reputation_preview_only
No public ref for this preview state.
Every state below fails closed. Blocked proof-chain cases come from the rail-neutral fixture pack; none of them can mint a reddi.receipt.v1 binding.
Empty contract (rendered by feeding the builder an empty case list)
Empty fixture contract fails closed
empty_fixture_pack
The paid-workflow fixture pack contains no proof-chain cases; the buyer route renders no quote, ledger, result, receipt, or evidence.
Fail-closed states claim nothing: no custody, no settlement finality, no mainnet settlement, no hosted publication, no trust or reputation mutation, no wallet signing, no RPC or provider calls, no paid requests or Pay.sh activation.
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
No Reddi receipt v1 settlement proof, custody, trust upgrade, reputation mutation, marketplace publication, provider execution, wallet signing, RPC, spend, sandbox execution, or live payment is claimed.
spent 0 USDC | refunds 0 | spending and mutation stay false
Real second-rail data: webhook-derived card-rail receipts cap at probe-only, and any live settlement claim on this rail fails closed.
Airwallex hosted checkout (Payment Links / hosted payment page)
Synthetic (static, PII-free) Airwallex webhook fixtures may normalize into rail-neutral receipt candidates capped at probe_only: card-rail receipts are REVOCABLE (a succeeded intent can later be refunded or disputed — receipt v1 has no representation for a later-revoked/contested receipt, a tracked #338 receipt-semantics gap), the receipt v1 network table is Solana-only, and HMAC is verifiable only with a merchant secret RAP must never hold. Normalization itself is a separate follow-up issue.
Airwallex hosted checkout (Payment Links / hosted payment page)
Any live Airwallex settlement claim fails closed: account signup, sandbox/demo credentials, API calls, webhook registration, live HMAC verification, payouts, connected-account/embedded-finance platform mode (pushes RAP toward MoR/money transmission and KYB obligations — rejected for OSS core), Airi, and any stablecoin-via-Airwallex claim (no GA product exists). A live lane requires an explicitly operator-approved boundary re-scope under the #338 gates.
The nissan/reddi-agent-protocol#564 reference rehearsal is a no-live dry run (no_live_dry_run_rehearsal). Real metering stays at authoritative zeros: 0 devnet transactions, 0 paid requests, 0 USDC settled.
Operator runbook: docs/DEVNET-REFERENCE-RUN-564.md
Optional fresh-devnet run exists only as policy. It requires an explicit operator approval record and the documented arm/confirm gates; this page exposes no run button and no auto-pay path.
Operator approval ref: none recorded
live_gated_only
Production live payment and settlement stay disabled. No Pay.sh production activation, no production AUDD rail, no hosted registry write, no default USDC auto-pay.
production_disabled
All live flags false
The full #497 16-flag grid: twelve fixture-pack flags plus the four contract-only flags (production AUDD rail, default USDC auto-pay, mainnet settlement, Pay.sh production activation).
No custody, no settlement finality, no mainnet settlement, no hosted publication, no trust or reputation mutation, no wallet signing, no RPC or provider calls, no paid requests or Pay.sh activation. This shell renders refs, hashes, support states, and fail-closed reasons only.