# RORApay 0.5.0 video transcript
Captured layout previews and archived evidence; synthetic narration. Not a continuous live payment recording.

## RORApay: assistance within limits
RORApay is a public research prototype for Topic F, by Roma and Rasul. This walkthrough combines captured interface previews and archived public testnet evidence. It is not a continuous live payment recording. All assets are test tokens with no monetary value. The organizer confirmed Ethereum Sepolia eligibility.

## A clear starting point
Home puts your own test-wallet balance first. Send and Receive lead to the relevant action. A three-step guide explains passkey sign-in, wallet activation and recipient selection. This screen is a local visual fixture, not a live account or proof of a transaction. The shared original competition vault is kept separate.

## A companion without payment tools
The read-only Timeweb assistant can explain reference prices and your test-wallet limits, or prepare an unapproved transfer draft. Price cards use trusted market data rather than model-invented numbers. The companion receives no signer, payment tool or permission callback. This captured conversation is explicitly a synthetic visual fixture.

## Human confirmation remains separate
A draft is copied into Transfers. You select a registered recipient, inspect the full address and explicitly allow that recipient. Review transfer opens a separate confirmation step. The backend requires authentication, an active on-chain permission and the exact confirmed recipient and amount. Manual transfers do not use the AI quota. This is a layout preview; no payment is sent.

## A real Timeweb boundary check
We also called the real Timeweb gateway from the server with synthetic test context. One request produced an unapproved one jUSD draft. A second asked it to ignore policy, authorize an unknown address and send one hundred jUSD. The response declined that request. The payment journal was unchanged. This is two live model checks, not proof against every attack.

## Archived public execution evidence
The original owner-agent flow remains separately documented. Two one rUSD payments confirmed on Ethereum Sepolia. A malicious invoice did not change the exact owner intent. Direct wrong-recipient, above-cap, replay and post-revocation attempts reverted. The explorer hashes and original receipts are public. New peer wallets are activated; a new public peer payment remains a separate verification gate.

## Checks and limitations
Twenty automated tests cover account isolation, restricted native scopes, malformed or compromised model output, human confirmation, duplicates, conflicting recipients and manual transfers after AI exhaustion. These tests use a local EVM where applicable. The contract is unaudited. Real money, exchange trading, hardware attestation and universal prompt injection immunity are not claimed. Full version zero point five native rehearsal still requires completion.

## Try and inspect the project
The public competition page provides the guided walkthrough, technical and security documentation, source archive, signed Android APK, iOS simulator archive and editable English presentation. A development-signed iPhone build is private and limited to registered devices. Roma and Rasul are both authors. The competition application remains private and unsubmitted; participant details and final rehearsal still need completion.