EVIDENCE BEFORE CLAIMS

Project audit

A clear boundary between code implemented in this workspace, the public site that could not be inspected internally, and an independent chain that does not yet exist.

External project source is not attached

The supplied URL did not expose the original source, internal wallet logic, user accounts, or deployment configuration to this workspace. This is a separate foundation, not an in-place modification or verified replacement of the live Novara site. Do not publish over the live site until its code is imported and regression-tested.

What can be said today

Existing external live application

Not audited

Only its public URL was available; no source repository, deployment settings, account records, or private wallet flow was provided. This workspace is new and cannot assert preservation of the external deployment.

Injected wallet connection

Implemented here

EIP-1193 eth_requestAccounts / eth_accounts, chain and account event listeners, wrong-network guard. Requires a user wallet to test in-browser.

Sepolia balance

Implemented here

eth_getBalance reads the connected wallet provider on chain 11155111. No balance is seeded or invented.

Sepolia transfer & receipts

Implemented here

eth_sendTransaction requests wallet signing; eth_getTransactionReceipt and eth_blockNumber read status and confirmations. No real transfer has been executed by this build.

Account system

Not migrated

Wallet address is the only session identity in this workspace. The external application’s account/auth implementation is unknown.

Independent Novara blockchain

Not built

Besu QBFT architecture and rollout requirements documented only. No validators, genesis, persistent node, RPC, or explorer are running.

NOVA and external wallets

Not verified

NOVA is not issued. No Novara network exists for an external wallet to add or test.

Current workspace architecture

Vite + React + TypeScript static UI; injected EIP-1193 browser provider for wallet actions; optional TypeScript server function for read-only Sepolia JSON-RPC; browser-local transaction hash shortcuts. No custodial wallet, chain node, or relational account database.

Security boundaries

No seed phrases or private keys are requested. The wallet approves signing. Browser history is not authoritative; chain responses are. Public RPC can be rate limited; a missing receipt is not proof of failure. Verify transaction details in the wallet and explorer.

Testing status

Project compilation can be checked here. A real Sepolia send, wallet-brand compatibility matrix, persistent Besu pilot, failover, and independent audit require actual wallets, test ETH, and external nodes. None is claimed completed.

Hosting boundary

Static app hosting and short-lived functions can connect to HTTP RPC; they do not provide persistent validator processes or WebSockets. Use a developer computer for a free local pilot. Public always-on validators require separate infrastructure.

Ethereum network guidance Besu QBFT guide

To continue the original app rather than this separate workspace, import its repository or .zip into GenMB using Import project under the prompt box, then compare wallet, account, and deployment flows against this audit.