Reframe product story and publish interactive demo

[dingyucanada]

What changed

• rewrote the repository homepage around the industry-wide problem of controlling one concrete Agent action, instead of centering the product on a fixed refund amount;
• replaced the static GitHub Pages presentation with an interactive action-decision lab covering approval, contract tampering, committed timeouts, compensation and fail-closed UNKNOWN outcomes;
• kept a separate frozen-evidence replay with browser-side SHA-256 verification;
• removed internal competition scoring, 95+ planning, defense scripts and submission copy from the public product repository;
• neutralized the external-evidence register so it describes product maturity rather than a contest score;
• added public repository metadata and refreshed the deterministic SBOM and release gates.

Why

The previous public surface read like a competition audit dossier and used one fixed refund example as the product thesis. The new version leads with the broader problem: RBAC can grant a role long-term access, but enterprises still need to constrain the exact tool, parameters, approval, retry behavior and evidence for one state-changing action.

Validation

• 164 passed in the full source tree;
• the release builder repeated the full suite and validation gates in a clean staging tree: 164 passed;
• public Demo tests: 6 passed;
• interactive browser checks covered WAITING_APPROVAL, tamper rejection, committed-timeout recovery and UNKNOWN_MANUAL;
• the built Pages bundle matched frozen Proof SHA-256 and produced no browser console errors;
• desktop and 390px responsive layouts were checked;
• release ZIP integrity passed and contains no runtime private keys, databases, caches or removed internal competition material.

Boundaries

The public Demo is a deterministic browser-side protocol simulation plus frozen execution evidence. It does not run a live backend, model, payment provider or customer workflow. Model-driven AgentTeams collaboration and external production integrations remain explicitly unverified.