design: #170 v4 — grounded audit → request-origin IA (DESIGN.md v4 + golden ref + build plan) - #172
Merged
Conversation
Ran the app on a funded `just demo` (Sepolia fork, verified-reads off) on macOS and drove every flow live — onboarding, unlock, home, send/swap/shield/receive, clear-signing, agent propose->approve, activity->STOP, settings — screenshotting each as-built and grading against the north star + the versioned golden references. Verdict: the bones are strong and on-brand; the overhaul is a consistency/trust pass, not a redesign. Four load-bearing (P1) gaps: (1) unnamed wallet reads as 'Personal/Wallet' everywhere; (2) two different clear-signing treatments (Send hero vs a boxed agent-approval card) break the one-shared-review contract; (3) the agent surface is a read-only policy dump (no per-row edit, dimmed controls, no 'what Atlas did' feed); (4) the agent advertises a 0.1 ETH per-move cap it doesn't enforce on shields (a 0.15 ETH shield auto-broadcast). Plus P2 (money loses USD/verified context) and P3 consistency items. Fork-conditioned observations and synthetic-driving artifacts are separated out explicitly. Evidence: docs/screenshots/audit-170/ (17 curated shots).
…170) The design-consultation output on top of the flow audit (#170). One wallet, one shared Review, N request origins (you / dapp / agent). Adds designs/deckard-v4.html (five views: wallet home, shared Review, Activity, Transaction, rail-focus) built on the exact v3 system, and docs/research/12-design-direction-v4.md (competitive research + two outside voices + the locked v4 decisions). Kept the visual system; changed IA/flows: three-pane always-on rail, request-origin model with auto-handles, dropped the projects layer, one simplified clear-signing Review, a Transaction detail view, identity masthead (no literal 'Wallet'), holdings with a mono $ column + decimal alignment, honest cap ledger. Refs #170 #174.
…cted state design-review: the rail-focus view shows a selected request (.preq.sel) with a populated detail rail, but the Needs-you head still read 'Nothing selected.' — a contradictory empty-state string. Removed it from this view.
Codify the /design-consultation outcome. Visual system unchanged; structure reworked: three-pane always-on rail; the request-origin model (you/dapp/agent, one shared clear-signing Review, origin as identity + state-color trust badge, never a third signal); dropped the Projects layer; auto-assigned renamable agent handles (retired 'Atlas'); a Transaction detail view; identity masthead + the no-'Wallet'-label rule; holdings $ column + decimal alignment + hero USD/verified meta; honest cap ledger; a platform-aware key_cap widget (⌘ mac / Ctrl Linux); 'This can't be undone.' danger copy. Updated IA, clear-signing, golden refs, the visual DoD, and the decisions log. Golden ref: designs/deckard-v4.html. Refs #170 #174.
The agent-proof implementation plan for the v4 IA: an epic + 8 children (E0 driving recipe, E1 widgets, E2 identity, E3 three-pane rail, E4 money-context, E5 trust-critical shared-review + enforced cap [merged], E6 activity/waiting, E7 transaction view, E8 palette coverage). Adds a shared Implementer Contract (reuse-widgets convention, never-regress invariants, two-tier DoD) and per-view fidelity checklists derived from designs/deckard-v4.html. Refs #170 #174.
hellno
changed the title
Owner
Author
|
Scope grew beyond the audit — this PR now carries the whole design pass for #170 (docs-only, no code/deps):
Still docs-only. The |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Delivers the first step of #170 — a grounded audit of the running product on a funded
just demo.What
Ran the app live on macOS against a funded
just demo(anvil fork of Sepolia @ block 10822990, verified-reads off) and drove every flow, screenshotting each as-built and grading it against the north star (DESIGN.md) + the versioned golden references (designs/deckard-editorial-v3.html,designs/deckard-agent-v4.html).docs/research/11-ia-flows-audit.mddocs/screenshots/audit-170/(17 curated shots: unlock, home, palette, send compose + clear-signing, shield, swap, receive, agent surface, activity empty/needs-you/approval, settings, onboarding welcome + secure)Verdict
The bones are strong and on-brand — the overhaul is a consistency/trust pass, not a redesign. Fonts are bundled, the mono hero + hairline cockpit rows + amber-human/cyan-agent axis +
⌘↵transaction-as-hero confirm + the see-and-stop Activity loop all render as designed. The Activity feed + agent-approval beat is the best-realized part of the product.Four load-bearing (P1) gaps, where the "autopilot you can trust and stop" promise currently leaks:
Plus P2 (money loses its USD/verified context below the hero) and P3 consistency items — full list in the report. Fork-conditioned observations (no price feed) and synthetic-driving artifacts (GPUI eats synthetic keys) are separated out explicitly so they aren't mistaken for product defects.
Docs-only
No code, deps, or lockfile changes.
.context/(the throwaway driving harness + full 40-shot set) is gitignored.Refs #170.