Audit: Tiny Place end-to-end integration — World, Feed, Messages, Ledger, Bounties, Directory, Identities, Profiles

[Al629176]

Summary

Full end-to-end audit of every Tiny Place surface in OpenHuman. Each section below lists every user-facing feature with a pass/fail/untested checkbox. Goal: identify every broken, missing, or unintegrated path so they can be fixed in one coordinated push. Frontend + backend integration must be verified for each item — not just "UI renders" but "data round-trips correctly."

This audit supersedes and extends the existing epic #4190 (which covers known bugs in World/Feed/Identities/Trading/Wallet/Bounties). The sections added here — Messages, Ledger, Directory, Profiles — have had no prior systematic audit.

---

How to use this issue

For each item, mark:

• [x] — verified working end-to-end
• [~] — partially working / known gap
• [ ] — broken, missing, or untested

Leave a comment with findings per section. Open a sub-issue for each confirmed broken item that doesn't already have one.

Test environment: staging build, signed-in user with a registered handle, connected Solana wallet.

---

1. World

Feature	Status	Notes
World renderer loads without error		Known broken: #4193 / PR #4213 open
Room navigation (Poker, Court, Office, Home, World)
Avatars / other agents visible in world
Agent enters / exits room
World state syncs with tiny.place relay
Works on macOS, Windows, Linux

• World renderer loads on first visit (no "Could not start the world renderer") — bug: Tiny Place world page fails to load — "Could not start the world renderer" #4193
• All rooms navigable
• Other users/agents visible
• Real-time world state sync via relay
• No crash on resize or tab switch

---

2. Feed

Feature	Status	Notes
View feed posts (own + followed)
Compose and publish a post		Own posts fixed: #4072 merged
Delete post (in-app confirmation)		window.confirm bug: #4197 / PR #4214 open
Like / react to a post
Reply / thread
Feed sorting (recent, popular)		Fixed: #3829 merged
Display name resolution (handle → name)
Images / media in posts
Infinite scroll / pagination
Feed updates in real-time (push)

• Compose → publish → appears in feed
• Delete uses in-app confirmation modal — bug: Feed delete confirmation uses native browser dialog ("tauri.localhost says") instead of in-app modal #4197
• Own posts visible in feed — fix(tinyplace): show own posts in Tiny Place feed so composed posts appear (#4059) #4072
• Display names resolve correctly (not raw public keys)
• Feed sorts correctly
• Pagination / infinite scroll works

---

3. Messages (DMs)

Feature	Status	Notes
View inbox / conversation list
Open a DM thread
Send a message to another handle
Receive a message (real-time)		E2E test merged: #4624
Message status (sent / delivered / read)
E2E encryption (tiny.place Signal ratchet)
Unread count / badge
Search conversations
Send from agent / orchestrator		Orchestration ingest: #4425 merged
Block / report sender
Attachments / media
DM to an agent (orchestration ingest)		#4425 merged

• Send DM → recipient receives in real-time
• Inbox unread count updates
• E2E encryption round-trip verified
• Agent DMs route through orchestration ingest correctly — feat(orchestration): stage-3 tiny.place harness session DM ingest #4425
• 403 not_a_contact error handled gracefully (contact edge required) — PR fix(orchestration): don't abort first agent link on 404 contact status #4773

---

4. Ledger

Feature	Status	Notes
View transaction history
Incoming payments visible
Outgoing payments visible
Bounty payouts visible
Settlement RPC returns correct data		Settlement RPC: #3854 merged
Balance reflects ledger state		Wallet balance fix: #4218 merged
Filter by asset (USDC, SOL, etc.)
Export / copy transaction ID
Pagination of transaction history
Real-time updates on new tx

• Transaction list loads without error
• Incoming + outgoing txs both visible
• Balance on ledger matches wallet balance
• Bounty payouts appear in ledger
• Pagination works for accounts with many transactions

---

5. Bounties

Feature	Status	Notes
List open bounties
Create a bounty		Timeout bug: #4201 / PR #4212 open
Claim a bounty
Bounty completion + payout		Success modal: #3824 merged
Autonomous bounty worker (opt-in)		#3925 merged
Bounty detail page
Cancel / expire a bounty
Filter bounties (by status, asset)
Bounty history (created / claimed)

• Create bounty completes without 30s RPC timeout — bug: Create Bounty fails with 30s RPC timeout — tinyplace_bounties_create never completes #4201
• Claim flow works end-to-end and triggers payout
• Autonomous bounty worker runs on schedule — feat(tinyplace): autonomous tiny.place agent — scheduled bounty runs (opt-in) #3925
• Bounty appears in ledger on payout
• Cancel/expire path works

---

6. Directory

Feature	Status	Notes
Browse agent/user directory
Search by handle / name
Filter by type (agent, human, org)
View profile from directory entry
Follow from directory
Send DM from directory
Directory data freshness / pagination
Own listing visible in directory

• Directory loads and paginates
• Search returns correct results
• Click through to profile works
• Follow / DM actions work from directory
• Own handle appears in directory after registration

---

7. Identities

Feature	Status	Notes
Register a new handle		x402 USDC fix: #4199 / PR #4211 open
Multi-identity: switch active handle		#4198 / PR #4216 open
Handle detail page
For-sale / listing status visible in list		Regression: tiny.place/#231
Auto-renewal		Not built: tiny.place/#211
Bulk handle actions		Not built: tiny.place/#211
Handle expiry visible in list		tiny.place/#211
Transfer handle
x402 asset support (USDC Solana)		#4199

• Register handle with USDC Solana mint — bug: handle registration fails with "unsupported x402 asset" (USDC Solana mint not whitelisted) #4199
• Switch active handle from multi-identity list — bug: users with multiple purchased identities cannot switch active handle — only first shown #4198
• For-sale status visible in handle overview — tiny.place/#231
• Handle expiry date visible
• Transfer works end-to-end

---

8. Profiles

Feature	Status	Notes
View own profile
Edit name / bio / avatar
View another user's profile
Follow / unfollow from profile
Profile shows posts, bounties, identities
Agent profile (via orchestration pairing)		PR #4400 merged
Profile visible after tinyplace init onboard
Profile URL / shareable link

• Own profile loads and is editable
• Name, bio, avatar save and display correctly
• Other user profiles viewable
• Follow state persists
• Agent profiles visible in Brain tab — [codex] Add tiny.place orchestration pairing flow #4400

---

9. Trading (Identities marketplace)

Feature	Status	Notes
Buy a handle		PR #4217 open
Sell / list a handle for sale
Make an offer
Accept / reject offer
Wallet balance shown in confirmation		#4218 merged
Identity marketplace accessible		Broken: tiny.place/#232
Floor price / listings / sales load		Backend failing: tiny.place/#232
Trading history in ledger

• Buy flow completes successfully — fix(agent-world): re-enable Buy after a purchase in Tiny Place trading #4217
• Sell / list flow works
• Wallet balance shown correctly in confirmation — fix(tinyplace): read trading balance from tiny.place settlement RPC #4218
• Identity marketplace accessible — tiny.place/#232
• Floor price and listings load from backend

---

10. Cross-cutting / infrastructure

• Tiny Place relay endpoint follows OPENHUMAN_APP_ENV — feat(tinyplace): default relay endpoint to follow OPENHUMAN_APP_ENV #4611 merged
• Rust SDK vendor up to date — [codex] vendor tiny.place Rust SDK #4560 merged
• Pricing displayed matches actual charges — bug: pricing tiers displayed do not match actual charges #3825 / PR fix(tinyplace): correct identity pricing tiers shown to users #4215 open
• All sections work on macOS, Windows, Linux desktop
• All sections work via web (tinyhumans.ai) — not just desktop app
• Auth token / JWT refresh doesn't break any Tiny Place session mid-use
• Offline / disconnected state handled gracefully in each section (not silent crash)
• Error states (network failure, 403, 404, 500) show user-friendly messages — bug: MCP official registry returns raw 404 JSON when server name not found — no user-friendly error or guidance #4708 pattern

---

Open PRs to merge before/during audit

PR	Section	Status
#4211	Identities — x402 USDC	Open
#4212	Bounties — RPC timeout	Open
#4213	World — renderer	Open
#4214	Feed — delete modal	Open
#4215	Billing — pricing display	Open
#4216	Identities — multi-identity switch	Open
#4217	Trading — buy button	Open

---

Definition of done

Every checkbox in every section above is marked [x]. Any item that cannot be fixed in the current sprint is documented in a linked sub-issue with an owner.

Related

• Tiny Place feature epic: Epic: Tiny Place — full feature completion (World, Feed, Identities, Trading, Wallet, Bounties) #4190
• World renderer bug: bug: Tiny Place world page fails to load — "Could not start the world renderer" #4193
• Feed delete modal: bug: Feed delete confirmation uses native browser dialog ("tauri.localhost says") instead of in-app modal #4197
• Identity x402 bug: bug: handle registration fails with "unsupported x402 asset" (USDC Solana mint not whitelisted) #4199
• Identity switch: bug: users with multiple purchased identities cannot switch active handle — only first shown #4198
• Buy button: bug: Buy button not working in Tiny Place identity trading #4196
• Wallet balance: bug: wallet balance shows "Unknown" in trading confirmation — balance fetch fails even with wallet connected #4202
• Bounty timeout: bug: Create Bounty fails with 30s RPC timeout — tinyplace_bounties_create never completes #4201
• Pricing display: bug: pricing tiers displayed do not match actual charges #3825
• Orchestration pairing (agent profiles): PR [codex] Add tiny.place orchestration pairing flow #4400
• Handle listing regression: tiny.place/#231
• Identity marketplace down: tiny.place/#232
• Backend orchestration migration (relay + ingest): #4729

[M3gA-Mind]

🤖 M3gA-Mind audit pass — Tiny Place end-to-end (CODE-LEVEL)

This is a static CODE-LEVEL audit (read + grep, no running app, no wallet, no relay). It judges wiring: frontend → RPC client → core handler → vendored tiny.place SDK / relay. Items that move funds or need a live relay/wallet are marked needs-runtime — the code path is verified but the data round-trip must still be confirmed on staging with an unlocked Solana wallet.

Method & headline findings

• RPC surface is complete and symmetric. The frontend calls 151 openhuman.tinyplace_* methods (app/src/lib/agentworld/invokeApiClient.ts); all 151 are registered (src/openhuman/tinyplace/schemas.rs, all_tinyplace_registered_controllers()) and each has a real handle_tinyplace_* impl (src/openhuman/tinyplace/manifest.rs). Zero frontend→core method mismatches, zero dead registrations.
• Handlers are real, not stubs. Spot-checked + agent-verified: they call client.<domain>.<method> on the vendored SDK (real reqwest/GraphQL against base_url) or http().post_agent_auth(...). The only "empty" returns are deliberate degrade-on-deserialize-error paths (e.g. manifest.rs:3537, 4068) that turn a null relay payload into []. Most write/read handlers gate on require_signer (unlocked wallet).
• The real gap is the frontend under-wiring the core. Repeatedly, the core + SDK expose a capability (pagination offset, asset filter, search q, block, profile-edit, read-receipts) that no UI control ever calls. So many "broken" items are frontend-only fixes, not backend work.
• All 8 surfaces are routed (app/src/agentworld/pages/AgentWorld.tsx:155-168).

Legend: [x] wired end-to-end in code · [~] partial / gap · [ ] broken / missing · (needs-runtime) code can't settle it.

---

1. World

• [x] Renderer loads / bug: Tiny Place world page fails to load — "Could not start the world renderer" #4193 — fixed in code: GameWorld.ts:46 forces RENDERER_PREFERENCE='webgl' (dodges the CEF WebGPU-adapter hang), :301 runInitWithTimeout races a 10s cap, WorldSection.tsx:55-61 adds a 15s backstop, :88-95 catch→error, :133-142 Retry button. (needs-runtime: whether WebGL actually initializes inside CEF on first visit.)
• [x] All rooms navigable — ROOM_REGISTRY (poker/court/office/home/outside="World") rooms.ts:455 → WorldSection.tsx:167-178 → world.setRoom (GameWorld.ts:390).
• [ ] Other users/agents visible — local demo only. spawnAgents (GameWorld.ts:710) invents avatars from hardcoded AGENT_NAMES/AMBIENT_LINES (:114,:132). No data source, no real users.
• [ ] Real-time world state via relay — none. Zero socket/relay refs in WorldSection/iso/*. updateAgentState (GameWorld.ts:578) is the external-control entry point but is dead code — never called anywhere.
• [x] No crash on resize / tab switch — ResizeObserver (GameWorld.ts:1007) + unmount cleanup (WorldSection.tsx:97-104, destroy() at :363).

2. Feed

• [x] Compose → publish → appears — createPost (FeedSection.tsx:266) → onPostCreated=refetchFeed (:769); handler manifest.rs:4690 real.
• [x] Delete uses in-app modal (bug: Feed delete confirmation uses native browser dialog ("tauri.localhost says") instead of in-app modal #4197) — fixed. No window.confirm remains (only a comment at :740); ConfirmDialog drives post (:854) + comment (:582) delete.
• [x] Own posts visible (fix(tinyplace): show own posts in Tiny Place feed so composed posts appear (#4059) #4072) — homeFeed({includeSelf:true}) (FeedSection.tsx:668) → manifest.rs:3882,3889.
• [x] Display names resolve — renders author.displayName || author.handle (:431), not raw pubkeys.
• [~] Feed sorts (bug: group join does nothing; leave group shows for non-members (HTTP 400) #3829) — client-side newest-first only (sortedHomeFeedItems, :92-107); no recent/popular control, no sort param to RPC.
• [ ] Pagination / infinite scroll — hardcoded limit:50; offset/before supported by handler (manifest.rs:3881) but never sent; no load-more.
• [x] Like/react + reply/thread — optimistic like/unlike (:710-735) + InlineComments/CommentComposer → real handlers (manifest.rs:4811,4843,4728).
• [~] Images / media — text-only compose (:261); content_type plumbed in handler (:4665) but no media upload/render UI.
• [ ] Real-time push — mount-fetch + manual refetch only; streams.rs exists but Feed never subscribes.

3. Messages (DMs)

Structural finding: VISIBLE_TABS = ['dms'] (MessagingSection.tsx:1351) — Inbox / Channels / Groups / Broadcasts panels are fully wired but hidden; the surface renders DMs only, one peer at a time.

• [~] Inbox / conversation list — inbox_list real (manifest.rs:1539) but panel hidden; DMs have no thread list, just a handle/address input (:1314).
• [x] Open a DM thread — useDirectMessages (:1035) → messages.list, filter by peer, decrypt; handle→base58 via directory.resolve (:1294).
• [x] Send to a handle (real Signal ratchet) — signal_send_message (manifest.rs:3298) does X3DH-or-session → signal_session.encrypt → client.messages.send; plaintext never sent on encrypt failure (:3374).
• [~] Receive real-time — DMs poll-on-action only (refresh on mount/after-send, :1107,:1097). A real WS stream exists (useTinyplaceStream('inbox'), core Socket.IO bridge src/core/socketio.rs) but only feeds the hidden Inbox tab.
• [ ] Message status (sent/delivered/read) — MessageEnvelope has no status field; messages_acknowledge handler exists (manifest.rs:3545) but is never called by the UI.
• [x] E2E encryption (Signal double-ratchet) — real Double Ratchet + X3DH in the vendored Rust SDK (vendor/tinyplace/.../signal/ratchet.rs:31,42,96, x3dh.rs:69, MAX_SKIP=1000). signal_store.rs is encrypted-at-rest persistence (ChaCha20). (needs-runtime: full encrypt→relay→decrypt round-trip.)
• [~] Unread count / badge — inbox_counts real + badge rendered (:913-917) but inside the hidden Inbox panel; DMs tab has none.
• [ ] Search conversations — none (0 grep hits).
• [ ] Block / report sender — contacts_block handler exists (manifest.rs:3600) but MessagingSection makes zero contacts.* calls.
• [ ] Attachments / media — none; single text input (:1200).
• [ ] 403 not_a_contact handled (PR fix(orchestration): don't abort first agent link on 404 contact status #4773) — NOT in this branch. 0 grep hits across app/src + core. Send path maps only 404 (missing key bundle) to a friendly message (manifest.rs:3329, :1021-1033). PR fix(orchestration): don't abort first agent link on 404 contact status #4773 appears un-merged.
• (needs-runtime) Agent/orchestrator DM ingest (feat(orchestration): stage-3 tiny.place harness session DM ingest #4425) — not on this UI surface; ingest lives in orchestration/ingest.rs.

4. Ledger

• [x] Transaction list loads — graphql_ledger_transactions (manifest.rs:4028) builds a real LEDGER_TRANSACTIONS_QUERY (graphql.rs:344); UI fetches {limit:50} on mount (LedgerSection.tsx:320).
• [~] Incoming + outgoing visible — all txs render as from → to rows (:185-198); no direction filter, no "my wallet" in/out classification.
• [ ] Balance matches wallet (fix(tinyplace): read trading balance from tiny.place settlement RPC #4218) — LedgerSection shows no balance at all; wallet_usdc_balance (manifest.rs:701) exists only inside the x402 confirm card. (needs-runtime for parity.)
• [~] Bounty payouts appear — TypeBadge only styles REGISTRATION/SALE/FEE (:109-117); other types fall through to a neutral badge. (needs-runtime: whether the backend emits bounty payouts as ledger txs.)
• [ ] Pagination — hardcoded limit:50, explicit TODO(phase-2-follow-up): implement pagination (:319); SDK supports offset/after/before (ledger.rs:65) — unused.
• [ ] Filter by asset — LedgerListParams.asset plumbed to GraphQL (ledger.rs:83) but no UI control.
• [ ] Export / copy tx ID — tx ID is plain text (:242); only a "View on chain" explorer link (:212), no copy button.
• [ ] Real-time on new tx — single useEffect([]) fetch, no poll/stream.

5. Bounties

• [x] Create w/o 30s timeout (bug: Create Bounty fails with 30s RPC timeout — tinyplace_bounties_create never completes #4201) — fixed. X402_SPEND_TIMEOUT_MS = 120_000 (invokeApiClient.ts:64) applied per-call on bounties.create (:2065); core clamps to [1s,10min]. Escrow path is real: fulfill_payment (payment.rs:380) → prepare_transfer/execute_prepared(confirmed:true) → x402 build_payment_map → settle_retry.
• [~] Claim end-to-end + payout — submit real (manifest.rs:5088); payout driven by approve/run_council (real, :5244/:5222) but the Approve button is hidden ("admin-only" TODO, BountiesSection.tsx:422) — a non-admin claimant can't drive payout from the UI. (needs-runtime for on-chain escrow release.)
• [x] Autonomous worker (feat(tinyplace): autonomous tiny.place agent — scheduled bounty runs (opt-in) #3925) — real seeded cron tinyplace_autopilot, hourly Schedule::Every, created disabled/opt-in (cron/seed.rs:225-258); toggle in AgentAccessPanel.tsx:107-115; boot-backfill core/runtime/services.rs:118.
• (needs-runtime) Bounty appears in ledger on payout — UI surfaces payoutTxSig/escrowAddress (:364-391) but the ledger write is backend behavior.
• [x] Cancel / expire — bounties.cancel real, signer-gated (manifest.rs:5068); wired for creator on draft/open (:417).
• [~] List / detail / filter / history — list + inline detail real (:850,:163-174); no status/asset filter and no history view — graphql_bounties supports status/creator/limit/offset (manifest.rs:4180), UI passes none.

6. Directory

DirectorySection.tsx (362 lines) is largely non-interactive — browse + follow only.

• [x] Browse — graphql.agents() (:88) → real query (manifest.rs:4331).
• [ ] Search by handle/name — no search box; directory_resolve (real, manifest.rs:146) never called; q param unused.
• [ ] Filter by type (agent/human/org) — no filter control.
• [ ] View profile from entry — inert: card onClick only toggles a local selected highlight (:241-247); no route navigation (no useNavigate/Link in file).
• [x] Follow from directory — follows.follow/unfollow on the card (:211-216).
• [ ] Send DM from directory — absent; no messaging link/prefill.
• [ ] Data freshness / pagination — agents() called with no args; handler supports params (manifest.rs:4337), UI sends none.
• [ ] Own listing after registration — nothing surfaced.

7. Identities

• [x] Register w/ USDC Solana mint (bug: handle registration fails with "unsupported x402 asset" (USDC Solana mint not whitelisted) #4199) — fixed. asset_is_usdc() accepts mainnet+devnet USDC mint addresses (payment.rs:104-108), routes mint→SPL USDC (:123-132); register handler manifest.rs:622-631 → real on-chain fulfill_payment. (needs-runtime for actual settlement.)
• [x] Switch active handle (bug: users with multiple purchased identities cannot switch active handle — only first shown #4198) — fixed, lives in Profiles: "Make active" button (ProfilesSection.tsx:364-372) → registry.assignPrimary → real client.registry.assign_primary (manifest.rs:2490).
• [x] For-sale / listing status (tiny.place/#231) — Status column (IdentitiesSection.tsx:640-649) from real directory.list_identities (manifest.rs:236).
• [ ] Handle expiry visible (tiny.place/[Feature] E2E: Memory persistence across app restart #211) — not rendered anywhere (RegistryTab shows "Updated" only). (upstream not-built.)
• [ ] Transfer handle — missing. registry_export (manifest.rs:2465) only dumps identity JSON to a <pre> (backup, not transfer); no transfer RPC, no "list my handle for sale" UI.
• [ ] Auto-renewal / bulk actions (tiny.place/[Feature] E2E: Memory persistence across app restart #211) — absent (upstream not-built, expected).
• [x] x402 USDC Solana support (bug: handle registration fails with "unsupported x402 asset" (USDC Solana mint not whitelisted) #4199) — same evidence as register; SOL native also routed (payment.rs:123).

8. Profiles

• [x] View own profile — via graphql.user(cryptoId) (real, manifest.rs:4570), fallback directory.reverse (:207). (Note: profiles_get/users_get are real handlers with zero UI callers.)
• [ ] Edit name / bio / avatar — missing. users_update_profile (real, manifest.rs:410) has 0 UI callers app-wide; no form, no avatar upload.
• [ ] View another user's profile — own-wallet-only (fetchWalletStatus→own cryptoId); no route/param for an arbitrary user.
• [~] Follow / unfollow from profile — follows_* real but wired only in Directory/Feed; ProfilesSection reads follows.stats only (:262), no follow button.
• [~] Shows posts / bounties / identities — renders identities/skills/attestations/followStats, but NOT posts/bounties; profiles_activity (real, manifest.rs:319) never called.
• [~] Agent profile via orchestration pairing ([codex] Add tiny.place orchestration pairing flow #4400) — Human/Agent badge rendered (:295-304) but agent_card handlers unwired here. (needs-runtime for the pairing path.)
• [x] Profile visible after tinyplace init — no onboarding gate; states wallet_locked / no_handle / ok (:456-491).
• [ ] Profile URL / shareable link — none.

---

Confirmed broken / missing — candidate sub-issues (no existing issue; for manager review)

World

1. World shows fake/local demo agents only — no real users; updateAgentState (GameWorld.ts:578) is dead code, never called. No relay/real-time sync path exists for the world surface.

Feed
2. Feed has no pagination / infinite scroll (hardcoded limit:50; offset/before supported by core, never sent).
3. Feed has no real-time push (streams.rs unused by Feed).
4. Feed posts have no media/images (composer text-only; content_type plumbed but no UI).

Messages
5. DMs-only surface: Inbox list, unread badge, and the real inbox WS stream are implemented but hidden (VISIBLE_TABS=['dms'], MessagingSection.tsx:1351). No DM conversation list — one peer at a time.
6. No message status / read receipts (messages_acknowledge never called from UI).
7. No block/report (contacts_* handlers exist; UI makes zero contacts.* calls).
8. No attachments/media in DMs.
9. No conversation search.
10. 403 not_a_contact not handled gracefully — PR #4773 not merged into this branch (only 404 missing-bundle is mapped).

Ledger
11. No wallet balance shown on the ledger surface (balance lives only in the x402 confirm card).
12. No pagination (explicit TODO), no asset filter, no direction/in-out filter, no copy/export of tx ID, no real-time updates — all supported by the SDK, none wired.

Bounties
13. Approve/award (payout trigger) is hidden as "admin-only" (BountiesSection.tsx:422) — a claimant can't drive payout from the UI. No status/asset filter or history view.

Directory
14. DirectorySection is largely inert: no search box, no type filter, card click doesn't navigate to a profile, no "Send DM", no pagination.

Identities
15. No transfer-handle path and no "list my handle for sale" UI (export is JSON backup only).

Profiles
16. Edit profile (name/bio/avatar) not wired — users_update_profile has zero UI callers; no avatar upload.
17. Cannot view another user's profile (own-wallet-only); no follow button on the profile; posts/bounties not shown (profiles_activity never called); no shareable profile link.

Cross-cutting
18. Dead-but-implemented core relays (registered + real impl, but no UI caller): profiles_get/activity/groups/broadcasts/attestations/agent_card, users_get/update_profile, users_*_email_verification, graphql_agent_card, directory_resolve, plus the hidden inbox_* family. Either surface them or mark them internal.

Needs runtime verification (staging + unlocked Solana wallet)

• World — whether WebGL actually initializes inside CEF/Chromium on a real first visit (bug: Tiny Place world page fails to load — "Could not start the world renderer" #4193 code paths are correct; adapter behavior is runtime).
• Feed / all — live relay GraphQL shapes match the SDK types; mutations (post/like/comment/includeSelf) persist server-side.
• Messages — full Signal encrypt→relay→decrypt round-trip; inbox WS stream delivery; agent/orchestrator DM ingest (feat(orchestration): stage-3 tiny.place harness session DM ingest #4425).
• Ledger — bounty payouts materialize as ledger tx types; ledger balance ↔ wallet balance parity (fix(tinyplace): read trading balance from tiny.place settlement RPC #4218).
• Bounties — full submit→approve/council→on-chain escrow release→ledger emission (only the client legs are statically verifiable; they are real).
• Identities — actual on-chain USDC settlement for register/buy (bug: handle registration fails with "unsupported x402 asset" (USDC Solana mint not whitelisted) #4199); marketplace availability (tiny.place/#232).
• Profiles — [codex] Add tiny.place orchestration pairing flow #4400 agent-card orchestration-pairing end-to-end.

---

Static code audit by M3gA-Mind (W2). Runtime e2e on staging with a wallet is still required for every needs-runtime item above. Sub-issues listed but not opened — flagged for manager review.