Polish live external proof & x402 paid-action demo messaging

[GsCommand]

Motivation

• Surface that CommandLayer now demonstrates live external proof flows (Coinbase webhook → signed observe receipt → verified, and x402 paid actions → signed action receipt → verified) so visitors immediately see working examples.
• Clarify trust boundaries so server-side Coinbase HMAC remains private and public portability begins after CommandLayer runtime signing, and avoid overclaiming x402 settlement or Coinbase HMAC as public proof.
• Preserve existing visual language and protocol semantics while adding concise cross-links to demo flows, verifier, and integration docs.

Description

• Added a compact "Live external proof examples" block to the homepage with CTAs linking to /proof-flow-composer.html, /integrations.html, and /verify.html and the core framing sentence about external systems → signed CLAS receipt → VerifyAgent.
• Rewrote and strengthened the Integrations landing copy and cards to feature: Coinbase Payments Webhook (server-side HMAC → normalized CLAS observe receipt → signed by runtime.commandlayer.eth and verified via /api/verify), x402 Paid Action (accepted envelope → deterministic action → signed CLAS action receipt → /api/verify), and Proof Flow Composer demo with endpoint links.
• Polished Proof Flow Composer copy (title/subtitle), added a "What this proves" box, kept Coinbase labeled as simulated adapter event and x402/verifier steps as live signed endpoints, and preserved existing controls/flow logic.
• Added a verifier note on /verify.html, a short SDK mention on /sdk-records.html, an "Integration receipts" section on /canonical-receipts.html, and Docs landing cards for Integrations and Proof Flow Composer.
• Appended safe, redacted "Verified working flow" examples to docs/integrations/coinbase-cdp-webhook-receipts.md and docs/integrations/x402-commandlayer-receipts.md showing expected verification fields (status, signer, verb, hash/signature checks, kid) and explicit guardrail language about secrets and settlement claims.
• Minor presentational tweaks to support live/badge labels and added endpoint reference links to /api/examples/coinbase-webhook and /api/examples/x402-paid-action without exposing secrets or private keys.

Testing

• Ran the project's test suite with npm test, which completed successfully (95 tests passing).
• Ran a repository grep for the ERC-8211 merkle string (grep -RIn "erc8211.merkle.v1" ...), which returned no matches.
• No repository-native link-checker script was present to exercise link existence checks automatically, so links were added conservatively and reference existing API example paths and docs.

---

Codex Task

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
commandlayer-commandlayer-org	Ready	Preview, Comment	May 23, 2026 10:46pm
commandlayer-org	Ready	Preview, Comment	May 23, 2026 10:46pm
commandlayer-org111	Ready	Preview, Comment	May 23, 2026 10:46pm