# v26 — simple entry, tested action recovery

Live: https://curbi.io/ · deployment https://7776b4de.curbi-landing.pages.dev

Build: `python3 v17/build.py` or `python3 v26/build.py`.

Homepage and Action Lab now show a visible reply input, plain-language simulated refund decisions, evidence disclosures and a developer-only footer. Public reply-check API example makes no execution claim. Standalone Node 24 regression download bundles the actual checker and gate; it requires no private checkout or npm install. Existing Studio/auth and other product routes remain available. Published legal summaries are preserved at /legal/.

Validation: 89 website/security/export tests passed. Browser one-click demo reproduced all six steps. This is not an independent engineering review or real-provider qualification. Historical tests for shared homepage navigation and homepage trace-gallery placement were updated for the explicit new layout; attack tests were not changed.

Still outstanding: screenshot-style catch card, real test-mode provider connector, audio interception proof, cross-host execution, and approved paid developer pricing. Replay is a settings link, not an authenticated receipt. Do not market these outstanding items as delivered.

engineering next: review v26 standalone export and new UI against existing gate attacks; then implement independent contract tests for the first real test-mode refund adapter (timeout-after-success, crash/resume, tenant isolation, schema-version binding, revoked grants). See MESH-ARCHITECTURE.md. No new paid services, production refunds or permissions are authorized by a task assignment.