> ## Documentation Index
> Fetch the complete documentation index at: https://gora.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Managed testnet launch gates

> Functional evidence, service activation and mobile distribution are separate milestones.

# Managed testnet launch gates

Working validator staking does not prove app callbacks, agent withdrawal or
App Store readiness. Required acceptance includes:

* Independent Base and Solana apps use public endpoints, structured AI and confirmed chain writes.
* Their UIs work on independent websites and through Explore, with native-wallet review.
* Owner/state/credit/signer isolation and the 1,000-identity boundary pass offline tests, without a paid load test.
* Signer approval/rejection, revoke/pause and recovery work; uncertain submissions retain exact bytes.
* AI is blocked at zero prepaid balance before provider I/O; finalized test GORA payment buys calls exactly once on each chain. No free AI starter balance.
* Explicit, informed AI-provider sharing consent is enforced before dispatch across native, browser, CLI and scheduled execution; payment and wallet permissions are separate.
* Bigman pairs work and marks stay fresh. Liquidation needs isolated on-chain acceptance, not just contract tests.
* Backups include state, keys and signed journals; restore does not reset transaction history.

AI-sharing consent remains **open and unimplemented**, not merely an Apple
submission task. The [consent-gap design](./ai-sharing-consent-gap-2026-09-21.md)
describes the required trusted approval, durable scope and backend enforcement.
Read-only browsing and non-AI execution are separate from this gate.

The September 21 post-update price monitor passed 20 minutes, but did not span
the later checkpoint: an eight-second service pause caused marks to reach an
observed age of 131 seconds before automatic original-request recovery.
At the final 11:32 UTC check, marks were fresh and advancing. A coordinated
settlement drain while its node API remains available is still unimplemented
and untested; the existing 30-second shutdown allowance is not a drain guarantee.
See the [recovery evidence](./invoice-recovery-validation-2026-09-21.md).

## Mobile distribution

Build/simulator success is not a signed archive or upload. Before distribution,
verify Apple organization/provisioning, build number, physical-device
wallet/recovery, iPad coverage, approved privacy-policy URL, privacy answers,
AI-sharing consent, encryption classification and reviewer instructions.
Review dependency advisories separately from functional tests. The September
21 production Node audit still reports moderate/high entries; no clean audit
or automatic compatibility-breaking dependency fix is implied.

The approved policy link is `https://gora.io/privacy`. It redirects to
`https://www.gora.io/privacy`, which returned HTTP 404 on 2026-09-21. Keep the
link configured, but publish and verify the approved policy before Apple review.

Explain testnet-only managed custody and hosted-app/native APIs accurately.
Resolve financial-services/mini-app rules for the actual offering; testnet
status does not guarantee Apple approval. No App Store acceptance/upload is implied.

Explore keeps Bigman, Northstar and Harbor. Unlisted apps/keepers remain
addressable/running as applicable, preserving histories and withdrawals.
Keeping an app listed does not reactivate revoked historical acceptance bots.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.