docs: README in the same form as the other hackathon builds, working notes out of the repository

.gitignore

@@ -46,4 +46,6 @@ lcov.info
 *.tgz
 .turbo/
 
-devA.md
+# Local tooling
+.claude/
+.yarn/

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sofiane Ben Taleb, Noé Wales and Armand Séchon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

markdown/BOUNTY_COMPLIANCE.md → docs/BOUNTY_COMPLIANCE.md

@@ -1,12 +1,12 @@
-# Outward — Bounty Compliance
+# Metaphor — Bounty Compliance
 
 ## ADI Foundation
 
 > MVP on ADI chain with real economic utility, white-label ready, RBAC/multisig.
 
 | Requirement | Status | Evidence |
 |---|---|---|
-| MVP deployed on ADI chain | Done | Chain 99999 — 5 contracts deployed ([addresses](./DEPLOYED_CONTRACTS.md)) |
+| MVP deployed on ADI chain | Done | Chain 99999 — 5 contracts deployed ([addresses](../README.md#deployed-contracts)) |
 | Also deployed on Sepolia | Done | Chain 11155111 — same 5 contracts |
 | Real economic utility | Done | Tokenization + vault management + fractional ownership + coupon lifecycle |
 | White-label ready | Done | `InstitutionRegistry` — multi-tenant, each institution gets isolated contracts |

markdown/DEMO_GUIDE.md → docs/DEMO_GUIDE.md

@@ -403,5 +403,5 @@ cd packages/contracts-canton && daml test
 | AI analysis slow | Set `ZG_USE_MOCK=true` in backend `.env` and restart |
 | Canton demo shows mock data | That's fine — the demo data shows the same privacy model. Canton sandbox is optional |
 | "Restricted Access" on a page | Wrong role — use dev-login for all roles |
-| Hedera tx reverts | Admin address must be ECDSA alias, not long-zero format (see CLAUDE.md) |
+| Hedera tx reverts | Admin address must be ECDSA alias, not long-zero format (see [SPEC.md §8](./SPEC.md#8-edge-cases-and-constraints)) |
 | Backend crashes on start | Check `pnpm install` was run, check `.env` exists |

markdown/SPEC.md → docs/SPEC.md

@@ -143,7 +143,7 @@ A unified platform where institutions can:
                     BACKEND (Express :3001)
                     /      |       |       \
               ADI Chain   Hedera   Canton   0G Labs
-             (Testnet)   (Testnet) (Devnet)  (Compute)
+             (Testnet)   (Testnet) (sandbox) (Compute)
 ```
 
 ### Monorepo Structure
@@ -185,7 +185,7 @@ packages/
 | Layer | Technology | Language |
 |-------|-----------|----------|
 | ADI contracts | Foundry + OpenZeppelin v5.5 | Solidity 0.8.24 |
-| Canton contracts | Daml SDK 2.10.3 | Daml |
+| Canton contracts | Daml SDK 3.4.11 (DPM) | Daml |
 | Hedera contracts | Hedera Smart Contract Service + SDK | Solidity 0.8.24 + TypeScript |
 | AI engine | 0G Compute + OpenAI SDK | TypeScript |
 | Frontend | Next.js 16.1 + TailwindCSS 4 + RainbowKit | TypeScript (React 19) |
@@ -369,10 +369,10 @@ packages/
 | contracts-adi | Forge | 111 | All passing |
 | contracts-hedera | Forge | 74 | All passing |
 | contracts-canton | Daml sandbox | 28 | All passing |
-| ai-engine | Vitest | ~20 | All passing |
+| ai-engine | Vitest | 21 | All passing |
 | backend | — | 0 | No tests |
 | frontend | — | 0 | No tests |
-| **Total** | | **213+** | |
+| **Total** | | **234** | |
 
 ---
 
@@ -402,15 +402,14 @@ packages/
 - **Fonts**: Space Grotesk (display), Geist Sans (body), Geist Mono (code)
 - **SSR-safe wallet**: RainbowKit configured for server-side rendering compatibility
 
-### Known Open Items
+### Limits at Submission
 
-- Canton contracts not yet deployed to Devnet L1 (code ready, sandbox tested)
-- 0G Compute endpoint not configured (running in mock mode)
-- Frontend pages built with demo/mock data integration — real API calls partially wired
+- Canton contracts run on a local sandbox; the Devnet L1 deployment was not done (code ready, 28 tests)
+- 0G Compute runs in mock mode unless a provider is configured (`ZG_USE_MOCK=true` by default)
+- Frontend pages fall back to demo data when a service is unreachable; real API calls are partially wired
 - No CI/CD pipeline
 - No backend or frontend tests
-- No live demo URL (Vercel deployment pending)
-- No demo video recorded
+- No hosted deployment: the demo is the [video](https://youtu.be/Dr8bLcU3o6A)
 
 ---
 
@@ -423,29 +422,3 @@ packages/
 - 9 dependency vulnerabilities (all transitive, from 0G SDK and Hedera SDK)
 - Open CORS policy (demo-only concern)
 - AI never has signing authority — human-in-the-loop enforced at API level
-
----
-
-## 10. Audit Summary
-
-### Health Score: 58/100 (FAIR)
-
-| Category | Score | Weight | Notes |
-|----------|-------|--------|-------|
-| Security | 7/10 | x4 | No secrets in code, proper env handling; open CORS, 9 transitive vulns |
-| Code Quality | 5/10 | x3 | 213+ contract tests, but no backend/frontend tests; 111 console.log calls; no linting |
-| Architecture | 8/10 | x2 | Clean monorepo, clear separation, proper fallbacks, good documentation |
-| Dependencies | 6/10 | x2 | Single lockfile, 9 vulns (all transitive), reasonably current |
-| Git & DevOps | 4/10 | x2 | No CI/CD, no git hooks, inconsistent commit messages |
-| Claude Config | 6/10 | x3 | Good CLAUDE.md, but no hooks/agents/rules, no settings.json |
-
-### Key Gaps
-
-1. No CI/CD pipeline (GitHub Actions)
-2. No backend or frontend tests
-3. No ESLint configuration at root level
-4. Open CORS policy
-5. 111 console.log statements in source
-6. Canton deployment pending
-7. 0G Compute not configured (mock only)
-8. Missing root README.md (being created)