cascrow-cli 1.4.0 → 3.0.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 3.0.0 — unreleased (owner publishes)
+
+- **`cascrow join` says what the builder can do now**: a $0 verification contract is active at once; a contract with an amount waits for the payer's MilestoneEscrowV3 offer, accepted with your own key (`npx cascrow-signer@0.1.0 accept --milestone <id>`). The JSON carries the server's `status` and `activated`. The builder agent prints the same.
+- **`cascrow review --decision APPROVE`** says "approved and completed (a verification-only contract: no money moves)" and prints the contract status; the "escrow is being released" line and the "Release tx" it never received are gone.
+- **New outcome `NOT_COMPLETABLE_WITHOUT_ESCROW`** at `cascrow verify --proof` (stream), `cascrow verify --contract` (the one-shot submit: the server's 409, with its hint) and `cascrow status` (the new `notCompletableWithoutEscrow` field ends the wait): the panel approved a milestone that carries an amount without a MilestoneEscrowV3 escrow — nothing completed it, no money moved, contact support.
+- **Breaking: `releaseHoldUntil` / `release_hold_until` are gone** from `verify` and `status` output; a bare `VERIFIED` no longer promises a retried release. `passed` on the one-shot `verify --contract` is `verdict === "approved"`.
+- **Breaking: `cascrow fund` is removed** (cascrow Phase 6 — the v2 RLUSD escrow is gone). It now only prints why: a contract with `--amount 0` is active by itself once the builder has joined, and a milestone with an amount is a MilestoneEscrowV3 escrow in native XRP — `cascrow v3 offer`, the builder accepts (`cascrow v3 sign accept`), and the payer funds with one transaction from their own machine (`cascrow v3 sign fund`). Nothing is sent.
+- The `escrow-fund` refusal and the help text no longer point at `escrow-prepare` / `escrow/sync` (both removed); `--amount` is described as the switch to the MilestoneEscrowV3 offer flow.
+- A COMPLETED milestone no longer reads "funds released": the line says whether no money was held (verification only) or a MilestoneEscrowV3 escrow paid out on chain. `review` / `review-queue` describe a verdict that completes or hands back a verification-only milestone and moves no money.
+- The builder agent (`builder-agent.js`) waits for the milestone to be active rather than "funded", and its demo deliverable describes the product as it is now.
+
+## 2.1.0 — unreleased (owner publishes)
+
+- `cascrow v3 offer | acceptance | accept-submit | prepare | report-tx | attestation | claims` — the MilestoneEscrowV3 remote calls. `cascrow v3 sign <command…>` runs the PINNED local signer (`npx cascrow-signer@0.1.0`) with this terminal attached; the CLI itself stays dependency-free and never sees a key.
+- `cascrow fund` refuses a MilestoneEscrowV3 milestone with the way to fund it; every V3 refusal code prints what can be done about it; a V3 verification reads as a recommendation that moves no money.
+
+## 2.0.0 — unreleased (owner publishes)
+
+- **Breaking: `cascrow escrow-fund --private-key` is removed.** It sent your EVM private key to cascrow, which signed the deposit server-side; cascrow no longer accepts, stores or signs with anyone's key. Fund a v2 escrow by signing locally: `GET /api/agent/escrow-prepare` returns the two unsigned transactions, you sign and broadcast them with your own wallet, then `POST /api/escrow/sync`. Funding a MilestoneEscrowV3 contract from an API client is not available yet. **If you ever passed a private key to this command, treat that key as exposed and move its funds to a new wallet.**
+- `cascrow register` no longer receives a generated wallet: registration returns `wallet: null` and a note on how to link your own (`GET /api/user/wallet/challenge` → sign → `POST /api/user/wallet`).
+
 ## 1.4.0 — 2026-09-25
 
 - New `cascrow status --proof <id> [--wait]` — show, or wait for, a proof's verification result. `submit` now points to it: verification starts by itself after an upload.

package/README.md

@@ -1,8 +1,8 @@
 # cascrow-cli
 
-Command-line interface for [Cascrow](https://cascrow.com) — trust infrastructure for the agent economy (AI verification, on-chain reputation, milestone escrow) on the XRP Ledger, for shells, CI pipelines, and subprocesses.
+Command-line interface for [Cascrow](https://cascrow.com) — trust infrastructure for the agent economy (AI verification, on-chain reputation, and a non-custodial milestone escrow in native XRP), for shells, CI pipelines, and subprocesses.
 
-AI agents and their operators use Cascrow to create milestone-based contracts, submit proof of completion, and get verified by a **5-model AI majority vote** — with funds released automatically on-chain. No humans required.
+AI agents and their operators use Cascrow to create milestone-based contracts, submit proof of completion, and get verified by a **5-model AI majority vote**, anchored on the XRP Ledger. For paid work the AI verdict is a signed, non-binding recommendation: the money sits in a MilestoneEscrowV3 smart contract that only the parties (or an arbiter they chose) can move — cascrow holds no key and never signs.
 
 ## Install
 
@@ -51,8 +51,6 @@ is never anchored.
 | `register` | Create an agent account, get an API key instantly | No |
 | `verify` | Submit proof and get an AI verdict in one call (recommended) | Yes |
 | `create` | Create a milestone contract | Yes |
-| `fund` | Activate a milestone (simulation — no on-chain tx) | Yes |
-| `escrow-fund` | Fund a milestone with real on-chain RLUSD escrow | Yes |
 | `submit` | Upload proof text — verification starts by itself; returns `proofId` | Yes |
 | `status` | Show, or `--wait` for, the verification result of a proof | Yes |
 | `get` | Get contract status and milestones | Yes |
@@ -60,6 +58,9 @@ is never anchored.
 | `handoff` | Send a contract invite to a Builder agent by Agent ID | Yes |
 | `check-invites` | Check pending contract invites for this agent | Yes |
 | `review-queue` | As funder: list milestones still waiting for your verdict | Yes |
+| `v3-claims` | As payer: list MilestoneEscrowV3 claims you can still object to on chain | Yes |
+| `v3 offer \| acceptance \| accept-submit \| prepare \| report-tx \| attestation \| claims` | MilestoneEscrowV3, remote half — cascrow prepares and reads, you sign | Yes |
+| `v3 sign <command…>` | Runs the pinned local signer, `npx cascrow-signer@0.1.0 <command…>` — your key stays on your machine | Signer's own |
 | `review` | As funder: approve or reject a milestone under manual review | Yes |
 | `me` | Print this agent's ID | Yes |
 
@@ -85,7 +86,7 @@ Exactly one of `--pr`, `--code`, or `--image` is required alongside `--task`.
 --key-name <name>       optional label for the API key (default: cli)
 ```
 
-### `verify` [one-shot — recommended for escrow contracts]
+### `verify` [one-shot — recommended for text proof]
 
 ```
 --contract <id>         required  contract ID
@@ -100,7 +101,8 @@ Exactly one of `--pr`, `--code`, or `--image` is required alongside `--task`.
 ```
 --title <title>         required  short milestone title (printed on the certificate)
 --days <n>              optional  deadline days from now (default: 7)
---amount <usd>          optional  RLUSD to lock in escrow (default: 0 = verification-only)
+--amount <usd>          optional  default 0 = verification-only (active once the builder joins);
+                                  above 0 = a MilestoneEscrowV3 escrow in native XRP (see below)
 --criteria <text>       optional  what the AI panel checks the proof against (max 4000 chars)
 --criteria-file <path>  optional  the same, read from a file
 --checklist-file <path> optional  JSON array of { title, severity?, id? } (max 20), scored item by item on text proofs
@@ -110,21 +112,8 @@ Exactly one of `--pr`, `--code`, or `--image` is required alongside `--task`.
 Keep acceptance criteria out of `--title`: the title is printed on the public
 certificate, and the panel judges the proof against `--criteria`.
 
-### `fund`
-
-```
---contract <id>         required
---milestone <id>        optional  defaults to first available
-```
-
-### `escrow-fund` [real on-chain RLUSD — agent's own wallet]
-
-```
---contract <id>         required
---private-key <key>     required  EVM private key (funds come from this wallet)
---amount <usd>          IGNORED   the escrowed amount is the milestone's own amountUSD
---milestone <id>        optional
-```
+`cascrow fund` was removed in 3.0.0: a verification-only contract needs no funding,
+and a paid milestone is funded by the payer's own transaction (`cascrow v3 sign fund`).
 
 ### `submit` [or use `verify` for text proof in one call]
 
@@ -175,16 +164,16 @@ No options.
 ### `review-queue`
 
 No options. Lists the contracts on which you, as funder, still owe a manual
-verdict — the pull behind the `manual_review.required` webhook. A webhook nobody
-received is a decision nobody makes, and cascrow auto-approves an undecided
-milestone after 48 hours (agent contracts) or 14 days (human) and releases the
-escrow, so poll this whenever you have funded work in flight.
+verdict on a verification-only contract — the pull behind the
+`manual_review.required` webhook. A webhook nobody received is a decision nobody
+makes; cascrow completes an undecided milestone when its review window closes —
+48 hours under review mode `MANUAL_AUTO` or `AUTO`, 14 days otherwise. A verdict completes or hands back the milestone and moves no money.
 
 ### `review`
 
 ```
 --contract <id>         required  from `cascrow review-queue`
---decision <APPROVE|REJECT>  required  APPROVE releases the escrow; REJECT returns
+--decision <APPROVE|REJECT>  required  APPROVE completes the milestone; REJECT returns
                                   the milestone to the builder, who can resubmit
 --milestone <id>        required once more than one milestone of the contract is
                                   pending review; `review-queue` names it
@@ -224,18 +213,25 @@ Five AI models vote in parallel on submitted proof:
 
 | Confidence | Outcome |
 |---|---|
-| > 85% + 3/5 YES | **VERIFIED** — funds released on-chain automatically (escrow contracts only) |
+| > 85% + 3/5 YES | **VERIFIED** — a verification-only milestone completes; for a MilestoneEscrowV3 milestone it is a recommendation, and the money moves only by the parties' own on-chain calls |
 | 60–85% | **PENDING_REVIEW** — manual review triggered |
 | < 60% | **REJECTED** — resubmit with stronger proof |
 
-## Example: Escrow Flow (RLUSD locked on-chain)
+## Example: Paid milestone (MilestoneEscrowV3, native XRP, testnet)
 
 ```bash
-cascrow create --title "Deploy API" --amount 100 --days 14
-cascrow escrow-fund --contract <contractId> --private-key 0x...
+cascrow create --title "Deploy API" --amount 100 --days 14          # as payer
+cascrow v3 offer --milestone <id> --review-period-sec 259200        # terms frozen at an XRP/USD rate
+cascrow v3 sign accept --milestone <id> --network testnet           # as builder: check + sign locally
+cascrow v3 sign fund --milestone <id> --network testnet             # as payer: ONE transaction from your machine
 cascrow verify --contract <contractId> --proof "API live at https://api.example.com, all endpoints responding"
+# The verdict is a recommendation. The builder claims on chain; the payer releases or objects.
 ```
 
+`cascrow v3 sign …` runs the pinned local signer (`npx cascrow-signer@0.1.0`), which keeps
+your key on your machine. This CLI never takes a private key (`escrow-fund`, which did, was
+removed in 2.0.0 — if you ever passed a key to it, treat that key as exposed and move its funds).
+
 ## Example: Agent-to-Agent Handoff
 
 ```bash
@@ -252,7 +248,7 @@ cascrow join --invite <code>
 
 | Chain | Purpose |
 |---|---|
-| XRPL EVM Sidechain (Chain ID 1449000) | RLUSD escrow smart contract |
+| XRPL EVM Sidechain (Chain ID 1449000, testnet) | MilestoneEscrowV3 — non-custodial escrow in native XRP, no platform role |
 | XRP Ledger Mainnet | NFT completion certificates + audit trail |
 
 ## Links

package/builder-agent.js

@@ -2,7 +2,7 @@
 /**
  * Cascrow Builder Agent
  * Polls for pending contract invites, then automatically:
- * joins → funds → submits proof → triggers AI verification
+ * joins → waits until the milestone is active → submits proof → triggers AI verification
  */
 
 const BASE_URL = process.env.CASCROW_BASE_URL ?? "https://cascrow.com";
@@ -107,8 +107,8 @@ async function streamVerify(proofId) {
     clearTimeout(timeout);
     // SEC-073. Now that the deadline is live it can actually fire, and a raw
     // `DOMException: This operation was aborted` names no remedy — worse, per
-    // the tail arithmetic in latency-budget.ts the abort can land AFTER
-    // releaseMilestone(), so "it failed" may be false about the money.
+    // the tail arithmetic in latency-budget.ts the abort can land AFTER the
+    // verdict was written, so "it failed" may be false.
     if (e && e.name === "AbortError") {
       throw new Error(
         "Verification is still running on the server — this client stopped waiting, it did not fail. " +
@@ -195,32 +195,40 @@ async function handleInvite(invite) {
   console.log("🔗 Joining contract...");
   const joined = await apiPost("/api/contracts/join", { inviteCode: invite.inviteCode });
   console.log(`   ✓ Joined. Contract ID: ${joined.contractId}`);
+  // The join's own activation result: a $0 contract is active now; a money contract
+  // waits for the payer's MilestoneEscrowV3 offer, which this agent must accept with
+  // its OWN key — cascrow never signs for it.
+  if (joined.activated === true) console.log("   ✓ Verification-only contract — active now.");
+  else if (joined.activated === false)
+    console.log("   ⏳ Paid contract — waiting for the payer's MilestoneEscrowV3 offer. Accept it with your own key: npx cascrow-signer@0.1.0 accept --milestone <milestoneId>.");
 
-  // 2. Wait for Requester to fund the milestone
-  console.log("⏳ Waiting for milestone to be funded...");
+  // 2. Wait until the milestone is active. A verification-only ($0) contract is active
+  // as soon as the builder has joined; a paid one once the payer has funded its
+  // MilestoneEscrowV3 escrow from their own wallet. Either way the status is FUNDED.
+  console.log("⏳ Waiting for the milestone to be active...");
   let fundedMilestoneId = null;
   for (let i = 0; i < 40; i++) {
     const contract = await apiGet(`/api/contracts/${joined.contractId}`);
     const funded = (contract.milestones ?? []).find((m) => m.status === "FUNDED");
     if (funded) {
       fundedMilestoneId = funded.id;
-      console.log(`   ✓ Milestone funded. ID: ${fundedMilestoneId}`);
+      console.log(`   ✓ Milestone active. ID: ${fundedMilestoneId}`);
       break;
     }
     await new Promise((r) => setTimeout(r, 3000));
   }
-  if (!fundedMilestoneId) throw new Error("Timed out waiting for milestone to be funded");
+  if (!fundedMilestoneId) throw new Error("Timed out waiting for the milestone to be active");
 
   // 3. Do the work — generate proof based on the task message
   console.log("🤖 Performing task...");
   const task = invite.message ?? "Complete the assigned milestone";
-  const bio = `Cascrow is the trust layer for the agent economy — an AI-powered escrow platform that locks RLUSD stablecoins on the XRPL EVM Sidechain and releases funds automatically when a five-model AI majority vote confirms a milestone has been completed.
+  const bio = `cascrow is trust infrastructure for the agent economy. It checks whether delivered work meets the bar that was agreed for it, and it keeps a verifiable record of the answer.
 
-Where traditional escrow relies on human arbitrators and slow dispute resolution, Cascrow replaces that entirely with a parallel consensus engine: Claude, GPT-4o, Gemini, Mistral, and Cerebras evaluate every proof submission simultaneously. Three out of five approvals triggers an on-chain release — no intermediaries, no delays.
+Every submission is judged in parallel by five AI models from different vendors — Claude, GPT-4o, Gemini, Mistral and Cerebras — and three approvals make a YES. Each verdict is anchored on the XRP Ledger, completed milestones earn an NFT certificate, and the results build a portable on-chain reputation for the builder.
 
-Built for a world where autonomous agents transact on behalf of humans and each other, Cascrow provides three agent-native interfaces: a REST API, an MCP server, and a CLI — so any agent can create contracts, fund milestones, submit proof, and receive payment entirely programmatically.
+For paid work, cascrow supports a non-custodial escrow in native XRP: the funds sit in a smart contract that only the two parties, or an arbiter they chose, can move. The AI verdict is a signed recommendation; cascrow never holds funds or keys.
 
-Launched at the XRPL Student Builder Residency, Spring 2026. Live at cascrow.com.`;
+Agents use a REST API, an MCP server and a CLI to create contracts, submit proof and read reputation programmatically. Live at cascrow.com.`;
 
   const proof = `PROOF OF COMPLETION
 ═══════════════════════════════════════
@@ -230,13 +238,13 @@ Contract ID: ${invite.contractId}
 Milestone ID: ${fundedMilestoneId}
 Completed at: ${new Date().toISOString()}
 
-DELIVERABLE (149 words):
+DELIVERABLE (${bio.split(/\s+/).filter(Boolean).length} words):
 ${bio}
 
 VERIFICATION CRITERIA MET:
 ✓ Professional third-person tone throughout
-✓ 149 words — within the 140–160 word range
-✓ Clearly explains what Cascrow does (AI-verified escrow)
+✓ ${bio.split(/\s+/).filter(Boolean).length} words — within the 120–160 word range
+✓ Clearly explains what cascrow does (AI verification, on-chain reputation, non-custodial escrow)
 ✓ Highlights AI verification mechanism (5-model majority vote, named models)
 ✓ Addresses agent economy angle (autonomous agents, programmatic interfaces)
 ✓ No placeholder text
@@ -331,7 +339,20 @@ VERIFICATION CRITERIA MET:
   const released = result.action === "COMPLETED";
   const passed = released;
   console.log(`\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━`);
-  if (result.milestoneClosed === true && result.action === "EXPIRED") {
+  if (result.action === "V3_RECOMMENDATION") {
+    // MilestoneEscrowV3: a recommendation that moves nothing — asked first, so no arm
+    // below can read it as a payout or a rejection. The claim is judged by the
+    // SUBMISSION's verdict, never by `decision` (the panel on this one file).
+    const verdict = result.submissionVerdict === "YES" || result.submissionVerdict === "NO" ? result.submissionVerdict : "PENDING";
+    console.log(
+      `🧭 AI RECOMMENDATION ${verdict} on a MilestoneEscrowV3 submission — this verdict moves NO money. ` +
+        (verdict === "YES"
+          ? `Claim on chain with proofHash ${result.manifestHash ?? "(the upload's manifestHash)"} from your own key (npx cascrow-signer submit-claim).`
+          : verdict === "NO"
+            ? `Not claim-ready: the payer can object to a claim made with this evidence.`
+            : `The submission's verdict is still pending; poll the proof status.`)
+    );
+  } else if (result.milestoneClosed === true && result.action === "EXPIRED") {
     // `GET /api/contracts/{id}` does not return the milestone's `terminalReason`, so this
     // cannot say whether the funder was refunded or the builder was paid on-chain, and
     // does not guess.
@@ -348,15 +369,17 @@ VERIFICATION CRITERIA MET:
   } else if (released) {
     console.log(
       result.alreadyReleased === true
-        ? `✅ COMPLETED — already released by another request. The funds are out; do not resubmit.`
-        : `✅ COMPLETED — ${result.confidence}% confidence, funds released.`
+        ? `✅ COMPLETED — another request completed this milestone first; no money was held (verification-only contract). Do not resubmit.`
+        : `✅ COMPLETED — ${result.confidence}% confidence; no money was held (verification-only contract).`
     );
   } else if (result.complianceBlocked === true) {
     console.log(`⏸️ VERIFIED — payout on hold pending compliance review. No funds moved.`);
-  } else if (result.releaseHoldUntil) {
-    console.log(`⏸️ VERIFIED — approved, payout scheduled for ${result.releaseHoldUntil}. NO FUNDS HAVE MOVED YET.`);
+  } else if (result.action === "NOT_COMPLETABLE_WITHOUT_ESCROW") {
+    // Approved, but the milestone carries an amount without a MilestoneEscrowV3 escrow,
+    // so nothing completed it. Do not resubmit: the next verdict meets the same row.
+    console.log(`⛔ NOT COMPLETED — ${result.remedy ?? "contact support@cascrow.com; do not resubmit."} ${result.error ?? ""}`.trim());
   } else if (result.action === "VERIFIED") {
-    console.log(`⚠️ VERIFIED — approved, but the automatic payout did NOT go through. No funds moved.`);
+    console.log(`⚠️ VERIFIED — approved, but the milestone was NOT completed. No money moved; if it stays VERIFIED, contact support@cascrow.com.`);
   } else if (result.timedOut === true) {
     console.log(`⏳ PENDING_REVIEW — the panel did not answer (too few models). NOT a rejection; a human decides.`);
   } else if (result.action === "PENDING_REVIEW") {

package/index.js

@@ -6,10 +6,91 @@
  */
 
 import { readFileSync } from "node:fs";
+import { spawn } from "node:child_process";
 
 const BASE_URL = process.env.CASCROW_BASE_URL ?? "https://cascrow.com";
 const API_KEY  = process.env.CASCROW_API_KEY ?? "";
 
+// What every cascrow client says about MilestoneEscrowV3 — a JSON copy of
+// V3_CLIENT_TEXT in src/lib/v3-client-text.ts (this package cannot import the
+// app). v3-client-text-parity.test.ts holds the copy equal to the owner.
+// BEGIN v3-client-text
+const V3_CLIENT_TEXT = {
+  "signerPin": "cascrow-signer@0.1.0",
+  "remoteTools": [
+    "cascrow_v3_offer",
+    "cascrow_v3_acceptance_get",
+    "cascrow_v3_acceptance_submit",
+    "cascrow_v3_prepare",
+    "cascrow_v3_report_tx",
+    "cascrow_v3_attestation",
+    "cascrow_v3_claims"
+  ],
+  "codeHints": {
+    "V3_DISABLED": "MilestoneEscrowV3 is switched off for NEW money right now (offers, acceptances, funding). An escrow that already exists is never locked: object, release, refund, claim and withdraw keep working (cascrow_v3_prepare, or npx cascrow-signer@0.1.0 without cascrow at all).",
+    "RATE_UNAVAILABLE": "cascrow could not get a consistent XRP/USD rate from its two sources, so no offer can be priced. Nothing was created; retry in a minute.",
+    "V3_NOT_OFFERED": "The payer has not offered MilestoneEscrowV3 terms for this milestone yet — only the payer can (cascrow_v3_offer). The payer has been notified.",
+    "OFFER_EXISTS": "An open offer already exists for this milestone and stays valid until it expires. Wait for the payee's acceptance or for the offer to lapse; sending the same inputs again returns the same offer.",
+    "V3_OFFER_OPEN": "An open MilestoneEscrowV3 offer, or a signed acceptance that is not funded yet, is bound to this milestone or wallet, so it cannot change now. Wait until the payer funds the escrow from their own machine (npx cascrow-signer@0.1.0 fund --milestone <milestoneId>) or the offer or acceptance lapses.",
+    "ATTESTATION_PENDING": "The AI panel has not finished on this claim. Its result is a non-binding recommendation — as payer you can object NOW, before the objection deadline, without waiting for it.",
+    "CLAIM_PROOF_UNKNOWN": "This claim's proofHash matches no evidence submitted to cascrow, so there is no AI recommendation for it. As payer, judge the delivery yourself and object before the objection deadline if it is not what was agreed.",
+    "V3_ESCROW": "This milestone is held in a MilestoneEscrowV3 escrow: only its payer, payee or arbiter moves that money, on chain, with their own key. Get the unsigned transaction with cascrow_v3_prepare, or sign locally with npx cascrow-signer@0.1.0.",
+    "V2_ESCROW_PRESENT": "This milestone or its contract still carries data of the retired v2 (RLUSD) escrow, so it cannot become a MilestoneEscrowV3 escrow. Nothing was changed; contact support.",
+    "INVALID_SIGNATURE": "The acceptance signature does not verify for your linked wallet over these exact terms (EIP-712, low-s, from an ordinary account). Sign the terms returned by cascrow_v3_acceptance_get again — npx cascrow-signer@0.1.0 accept does it and checks them first.",
+    "V3_INDEX_STALE": "cascrow's index of the chain is behind. Read the escrow from the chain directly (npx cascrow-signer@0.1.0 claims, or getEscrow / ClaimSubmitted); every deadline, above all an objection window, runs on chain regardless.",
+    "ACCEPTANCE_LAPSED": "The acceptance expired without funding, so the milestone is closed — this is not a failure of either party. A new attempt is a new milestone.",
+    "NOT_COMPLETABLE_WITHOUT_ESCROW": "The work was approved, but this milestone carries an amount without a MilestoneEscrowV3 escrow, and the previous escrow system has been removed — nothing can complete or pay it, so it was left as it was and NO money moved. cascrow has opened a case for it; contact support@cascrow.com with the contract ID. Do not resubmit: your evidence is recorded.",
+    "RELEASE_HOLD_REMOVED": "releaseHoldHours was removed with the previous escrow system; send the contract without it. A MilestoneEscrowV3 escrow's review period is agreed in the payer's offer (cascrow_v3_offer), and a $0 verification contract has no payout to delay.",
+    "AMOUNT_VIA_MILESTONES": "This draft has milestones, and their amounts are the contract's amount — it cannot be set on the contract. Nothing was changed. To change an amount, delete the draft and create the contract again; before joining, the invited builder can propose other amounts in a counter-proposal, which the requester can accept.",
+    "DEADLINE_VIA_MILESTONES": "This draft has milestones, and their deadlines are the ones enforced — a contract-level deadline changes nothing, so it is refused. Nothing was changed. To change a deadline, delete the draft and create the contract again; before joining, the invited builder can propose other deadlines in a counter-proposal, which the requester can accept.",
+    "MIXED_AMOUNTS": "A contract is either verification-only (every milestone $0) or escrowed (every milestone above $0), never both. Nothing was created or changed. Set every milestone to $0, or give every milestone an amount and fund each one through a MilestoneEscrowV3 offer (cascrow_v3_offer) once the builder has joined."
+  },
+  "joined": {
+    "active": "Joined as Builder. This is a $0 verification contract, so it is active now — submit proof for a milestone (cascrow_submit_proof). No money is held or moved.",
+    "awaitingOffer": "Joined as Builder. The milestones carry an amount, so nothing is funded yet: wait for the payer's MilestoneEscrowV3 offer, then accept it with your own wallet key — npx cascrow-signer@0.1.0 accept --milestone <milestoneId>, or on the contract page. cascrow never signs for you. Submit proof once the payer has funded the milestone.",
+    "unknown": "Joined as Builder. The server did not say whether the contract is active — check it with cascrow_get_contract before submitting proof."
+  },
+  "payeeHints": {
+    "CLAIM_PROOF_UNKNOWN": "This manifest is not a sealed submission of this milestone, so cascrow will not confirm it and nothing was signed. As payee, claim with the manifestHash the evidence door returned (the upload's answer, or cascrow_get_proof_status): npx cascrow-signer@0.1.0 submit-claim --milestone <milestoneId> --proof-hash <manifestHash>."
+  },
+  "fundRemoved": "cascrow_fund_milestone was removed (and with it fundMilestone in cascrow-sdk and `cascrow fund`). A $0 verification contract is active by itself once the builder has joined — there is nothing to fund. A milestone with an amount is a MilestoneEscrowV3 escrow in native XRP: the payer offers terms (cascrow_v3_offer), the builder accepts with their own key, and the payer funds it with one transaction from their own machine — npx cascrow-signer@0.1.0 fund --milestone <milestoneId>. cascrow never signs or sends for you.",
+  "recommendation": "🧭 AI RECOMMENDATION {verdict} for this MilestoneEscrowV3 submission ({confidence}% confidence on this file) — this verdict moves NO money. The submission is YES only when every file in it has a definite AI yes; only then is it claim-ready. As payee: claim on chain with the submission's manifestHash (npx cascrow-signer@0.1.0 submit-claim --milestone <milestoneId> --proof-hash <manifestHash>). As payer: release, or object before the objection deadline.",
+  "reportTxOnlyHash": "cascrow_v3_report_tx takes a transaction HASH (0x + 64 hex characters) and nothing else. cascrow never accepts a signed transaction — broadcast it yourself to the chain's public RPC."
+};
+// END v3-client-text
+const TX_HASH_RE = /^0x[0-9a-fA-F]{64}$/;
+function v3HintFor(code, body) {
+  if (!code) return null;
+  // Role-aware (post-review H9): CLAIM_PROOF_UNKNOWN without objectionDeadline comes from
+  // prepare?action=submitClaim and reaches the PAYEE; with it, a live claim — the payer's.
+  const b = body && typeof body === "object" ? body : null;
+  const liveClaim = !!b && typeof b.objectionDeadline === "string";
+  if (b && !liveClaim && V3_CLIENT_TEXT.payeeHints[code]) return V3_CLIENT_TEXT.payeeHints[code];
+  return V3_CLIENT_TEXT.codeHints[code] || null;
+}
+
+/** The fields of a V3 refusal body its recipient acts on, as one line (post-review G5) — the owner's rule. */
+function v3RefusalDetail(body) {
+  if (!body || typeof body !== "object") return "";
+  const out = [];
+  if (typeof body.remedy === "string" && body.remedy) out.push(body.remedy);
+  if (Array.isArray(body.allowed)) out.push(`Allowed now: ${body.allowed.length ? body.allowed.map(String).join(", ") : "nothing"}.`);
+  if (typeof body.objectionDeadline === "string" && body.objectionDeadline) out.push(`Objection deadline: ${body.objectionDeadline}.`);
+  if (typeof body.offerExpiresAt === "string" && body.offerExpiresAt) out.push(`Open offer expires: ${body.offerExpiresAt}.`);
+  return out.join(" ");
+}
+
+/**
+ * The line for a `POST /api/contracts/join` answer — same rule as `joinedLine` in
+ * src/lib/v3-client-text.ts (v3-client-text-parity.test.ts runs this copy against it).
+ */
+function joinedLine(body) {
+  const activated = body && typeof body === "object" ? body.activated : undefined;
+  if (activated === true) return V3_CLIENT_TEXT.joined.active;
+  if (activated === false) return V3_CLIENT_TEXT.joined.awaitingOffer;
+  return V3_CLIENT_TEXT.joined.unknown;
+}
+
 // ─── HTTP helpers ─────────────────────────────────────────────────────────────
 // Authorization header is omitted entirely when key is empty, rather than
 // sending a garbage "Bearer " token — matters for `verify-work`, the one
@@ -81,13 +162,18 @@ async function fetchJson(method, path, { json, form, key = API_KEY, deadlineMs =
     const retryAfterSeconds = retryAfterOf(res, data);
     const base = typeof data.error === "string" && data.error ? data.error : `HTTP ${res.status}`;
     // A platform error page on a POST (typically the 504 when a route hits its own
-    // maxDuration — escrow-fund's is 120 s) does not mean the call failed: the function
-    // may have moved money before it was killed. Say so, and how to check.
+    // maxDuration — contracts/review settles on chain inside its own) does not mean the
+    // call failed: the function may have moved money before it was killed. Say so, and
+    // how to check.
     const mayHaveCompleted = method !== "GET" && res.status >= 500 && data.code === "UPSTREAM_NON_JSON";
     throw Object.assign(
       new Error(
         `${base}${retryAfterSeconds !== null && (res.status === 429 || res.status === 503) ? ` — retry after ${retryAfterSeconds} s` : ""}${code ? ` [${code}]` : ""}` +
-          (mayHaveCompleted ? ". The request may still have completed on the server — check the contract (cascrow get --contract <id>) before repeating it." : "")
+          (mayHaveCompleted ? ". The request may still have completed on the server — check the contract (cascrow get --contract <id>) before repeating it." : "") +
+          // A MilestoneEscrowV3 refusal says who can act and how (F-72): the body's actionable
+          // fields (G5), then the owner's words, role-aware on the body (H9).
+          (v3RefusalDetail(data) ? ` — ${v3RefusalDetail(data)}` : "") +
+          (v3HintFor(code, data) ? `\n\n${v3HintFor(code, data)}` : "")
       ),
       { status: res.status, code, retryAfterSeconds }
     );
@@ -273,15 +359,17 @@ async function waitForProof(proofId, maxMs = 100_000, key = API_KEY, pollMs = 5_
       }
       continue;
     }
-    if (!last.pending || last.milestoneClosed === true) return { ...last, proofId };
+    // `notCompletableWithoutEscrow`: no verdict can complete this milestone — final.
+    if (!last.pending || last.milestoneClosed === true || last.notCompletableWithoutEscrow === true) return { ...last, proofId };
     // Parked for a human: no poll will change it (same rule as both MCP servers).
-    if (last.running !== true && last.milestoneStatus === "PENDING_REVIEW") return { ...last, proofId, awaitingHumanReview: true };
+    // Never a MilestoneEscrowV3 proof (post-review L2): no human review decides one.
+    if (last.escrowVersion !== 3 && last.running !== true && last.milestoneStatus === "PENDING_REVIEW") return { ...last, proofId, awaitingHumanReview: true };
     if (last.claimPhase === "orphaned") return { ...last, proofId, stoppedBecause: "interrupted" };
   }
   return { ...(last ?? {}), pending: true, proofId, timedOut: true };
 }
 
-/** One line for a proof-status result, saying whether funds moved (they did only at COMPLETED). */
+/** One line for a proof-status result, saying whether funds moved. */
 function statusSummary(s) {
   if (s.stoppedBecause === 404) return `⛔ Proof ${s.proofId} no longer exists (deleted or erased). Nothing will verify it.`;
   if (s.stoppedBecause === 401 || s.stoppedBecause === 403) return `⛔ Stopped: ${s.error}. Waiting does not change this — check CASCROW_API_KEY and that this account is a party to the contract.`;
@@ -293,20 +381,35 @@ function statusSummary(s) {
   if (s.awaitingHumanReview) return "⏳ PENDING_REVIEW — the panel reached no verdict; a human decides. Waiting will not change it.";
   if (s.timedOut) return `⏳ Still verifying. Check again: cascrow status --proof ${s.proofId} --wait`;
   const conf = typeof s.confidence === "number" ? ` (${s.confidence}% confidence)` : "";
+  // MilestoneEscrowV3 (post-review G4): the verdict is a RECOMMENDATION and moves no money.
+  // Asked before every v2 arm — the claim-relevant answer is the SUBMISSION's verdict
+  // (`submissionVerdict`, `claimReady`), never this proof's `decision`, and a closed or
+  // COMPLETED V3 milestone was settled on chain by the parties.
+  if (s.escrowVersion === 3 && !(s.milestoneStatus === "COMPLETED" || s.milestoneClosed === true)) {
+    const line = V3_CLIENT_TEXT.recommendation.replace("{verdict}", s.submissionVerdict ?? "PENDING").replace("{confidence}", String(s.confidence ?? 0));
+    return s.manifestHash ? `${line} manifestHash: ${s.manifestHash}` : line;
+  }
+  if (s.escrowVersion === 3) {
+    return s.milestoneStatus === "COMPLETED"
+      ? "✅ COMPLETED — the MilestoneEscrowV3 escrow paid out on chain."
+      : `⛔ CLOSED — the milestone is ${s.terminalStatus ?? "closed"}; the MilestoneEscrowV3 escrow settled on chain. Do not resubmit to it.`;
+  }
   // COMPLETED first: proof-status reports a paid milestone as `milestoneClosed` too
   // (terminalStatus COMPLETED), and the CLOSED arm below would read a release as
   // "moves no funds" — SEC-059's inversion (same order as proofOutcomeLine in both
   // MCP servers). Whether it was THIS proof's YES is `decision`.
   if (s.milestoneStatus === "COMPLETED" || s.terminalStatus === "COMPLETED") {
-    return s.decision === "YES" ? `✅ COMPLETED${conf} — funds released.` : "✅ COMPLETED — funds released, but not on this proof's verdict (another proof or the funder's review approved it).";
+    return s.decision === "YES" ? `✅ COMPLETED${conf} — no money was held (verification-only contract).` : `✅ COMPLETED — no money was held (verification-only contract), but not on this proof's verdict (another proof or the funder's review approved it).`;
   }
   if (s.milestoneClosed === true) {
     return s.terminalReason === "RELEASED_ON_CHAIN"
       ? "⛔ CLOSED (EXPIRED) — the chain shows the builder WAS paid, just not by this verification."
       : `⛔ CLOSED — the milestone is ${s.terminalStatus ?? "closed"}; this verification moved no funds. Do not resubmit to it.`;
   }
-  if (s.milestoneStatus === "VERIFIED" && s.releaseHoldUntil) return `⏸️ VERIFIED${conf} — payout scheduled for ${s.releaseHoldUntil}. NO FUNDS HAVE MOVED YET.`;
-  if (s.milestoneStatus === "VERIFIED") return `⚠️ VERIFIED${conf} — approved, no funds moved yet.`;
+  // An approval cannot complete this milestone (an amount without a MilestoneEscrowV3
+  // escrow); the verdict doors answered 409 NOT_COMPLETABLE_WITHOUT_ESCROW.
+  if (s.notCompletableWithoutEscrow === true) return `⛔ NOT COMPLETABLE — ${V3_CLIENT_TEXT.codeHints.NOT_COMPLETABLE_WITHOUT_ESCROW}`;
+  if (s.milestoneStatus === "VERIFIED") return `⚠️ VERIFIED${conf} — approved, not completed yet.`;
   if (s.milestoneStatus === "PENDING_REVIEW") return `⏳ PENDING_REVIEW${conf} — manual review required.`;
   if (s.decision === "NO") return `❌ REJECTED${conf}.`;
   return `ℹ️ Decision: ${s.decision ?? "none"}${conf}, milestone ${s.milestoneStatus ?? "unknown"}.`;
@@ -322,6 +425,12 @@ function statusSummary(s) {
  */
 function outcomeLine(r) {
   const c = r.confidence ?? 0;
+  // MilestoneEscrowV3: a recommendation that moves nothing — asked first, so no arm
+  // below can read it as a payout or a rejection.
+  if (r.action === "V3_RECOMMENDATION") {
+    // The SUBMISSION's verdict, never the panel's `decision` on one file.
+    return V3_CLIENT_TEXT.recommendation.replace("{verdict}", r.submissionVerdict ?? "PENDING").replace("{confidence}", String(c));
+  }
   if (r.action === "SUPERSEDED") {
     // `settledAs`: the milestone was closed (e.g. EXPIRED) before this verification could
     // settle it, not beaten by a proof.
@@ -331,17 +440,19 @@ function outcomeLine(r) {
   }
   if (r.action === "COMPLETED") {
     return r.alreadyReleased === true
-      ? "✅ COMPLETED — this milestone was already released by another request. The funds are out; do not resubmit."
-      : `✅ COMPLETED (${c}% confidence) — funds released${r.txHash ? `, tx ${r.txHash}` : ""}.`;
+      ? `✅ COMPLETED — another request completed this milestone first; no money was held (verification-only contract). Do not resubmit.`
+      : `✅ COMPLETED (${c}% confidence) — no money was held (verification-only contract)${r.txHash ? `, tx ${r.txHash}` : ""}.`;
   }
   if (r.complianceBlocked === true) {
     return `⏸️ VERIFIED (${c}%) — payout on hold pending compliance review. No funds moved.`;
   }
-  if (r.releaseHoldUntil) {
-    return `⏸️ VERIFIED (${c}% confidence) — approved, payout scheduled for ${r.releaseHoldUntil}. NO FUNDS HAVE MOVED YET: the funder can contest until then, and the date can move.`;
+  if (r.action === "NOT_COMPLETABLE_WITHOUT_ESCROW") {
+    return `⛔ NOT COMPLETED (${c}% confidence) — ${V3_CLIENT_TEXT.codeHints.NOT_COMPLETABLE_WITHOUT_ESCROW}`;
   }
   if (r.action === "VERIFIED") {
-    return `⚠️ VERIFIED (${c}% confidence) — the work was approved, but the automatic payout did NOT go through. No funds have moved; the release can be retried.`;
+    // Approved, but no completion followed; the producer does not reach this since
+    // Phase 6. No retry is promised — there is nothing to retry.
+    return `⚠️ VERIFIED (${c}% confidence) — the work was approved, but the milestone was NOT completed. No money moved. Check it with \`cascrow status\`; if it stays VERIFIED, contact support@cascrow.com.`;
   }
   if (r.timedOut === true) {
     return "⏳ PENDING_REVIEW — the verification panel did not answer (too few models responded). This is NOT a rejection and NOT a judgement of the work; a human decides.";
@@ -423,7 +534,7 @@ function err(msg) {
 
 function usage() {
   console.log(`
-Cascrow CLI — agentic escrow and verification
+cascrow CLI — AI verification, on-chain reputation and non-custodial escrow for agents
 
 Usage:
   cascrow <command> [options]
@@ -433,8 +544,6 @@ Commands:
   verify-work   Verify AI-generated work — no contract, no escrow, no account needed
   verify        Submit proof and get AI verdict in one call (recommended)
   create        Create a milestone contract
-  fund          Activate a milestone (simulation — no on-chain tx)
-  escrow-fund   Fund a milestone with real on-chain RLUSD escrow
   submit        Upload proof text — verification starts by itself (then: status --proof <id> --wait)
   status        Show (or --wait for) the verification result of a proof
   get           Get contract status and milestones
@@ -443,6 +552,10 @@ Commands:
   check-invites Check pending contract invites for this agent
   review-queue  As funder: list milestones still waiting for your verdict
   review        As funder: approve or reject a milestone under manual review
+  v3-claims     As payer: list MilestoneEscrowV3 claims you can still object to on chain
+  v3 <sub>      MilestoneEscrowV3, remote half: offer | acceptance | accept-submit | prepare | report-tx | attestation | claims
+                and "v3 sign <cascrow-signer command…>" — runs the pinned local signer (npx cascrow-signer@0.1.0),
+                which holds your key on YOUR machine. cascrow never signs, sends or relays for you.
   me            Print this agent's ID
 
 Options for each command:
@@ -469,22 +582,14 @@ Options for each command:
   create
     --title <title>         required  short milestone title (printed on the certificate)
     --days <n>              optional  deadline days from now (default: 7)
-    --amount <usd>          optional  RLUSD to lock in escrow (default: 0 = verification-only)
+    --amount <usd>          optional  default 0 = verification-only (active once the builder joins). Above 0 the
+                                      milestone is a MilestoneEscrowV3 escrow in native XRP: offer it with
+                                      "cascrow v3 offer", the builder accepts, you fund with "cascrow v3 sign fund"
     --criteria <text>       optional  what the AI panel checks the proof against (max 4000 chars)
     --criteria-file <path>  optional  the same, read from a file
     --checklist-file <path> optional  JSON array of { title, severity?, id? } (max 20) scored item by item on text proofs
     --review-mode <mode>    optional  AUTO | MANUAL | MANUAL_AUTO — what happens when the panel is unsure (60–85%)
 
-  fund
-    --contract <id>         required
-    --milestone <id>        optional  defaults to first available
-
-  escrow-fund  [REAL on-chain RLUSD — agent's own wallet]
-    --contract <id>         required
-    --private-key <key>     required  EVM private key (funds come from this wallet)
-    --amount <usd>          IGNORED   the escrowed amount is the milestone's own amountUSD
-    --milestone <id>        optional
-
   submit  [or use verify for text proof in one call]
     --milestone <id>        required
     --proof <text>          required
@@ -522,15 +627,13 @@ Examples:
   # Register a new agent account (no human in the loop)
   cascrow register --email bot@example.com --password secret123
 
-  # One-shot: create contract, fund it, then verify a code fix
+  # One-shot: create a verification-only contract (active once the builder joins), then verify a code fix
   cascrow create --title "Fix auth bug" --criteria "All tests pass; JWT expiry honoured; no new lint errors" --days 7
-  cascrow fund --contract <contractId>
   cascrow verify --contract <contractId> --proof "Fixed JWT expiry bug in auth.ts, 42 tests green, PR #51 merged" --commit abc1234 --links https://github.com/you/repo/pull/51
 
-  # Real escrow flow (RLUSD locked on-chain)
-  cascrow create --title "Deploy API" --amount 100 --days 14
-  cascrow escrow-fund --contract <contractId> --private-key 0x...
-  cascrow verify --contract <contractId> --proof "API live at https://api.example.com, all endpoints responding"
+  # Paid work is a MilestoneEscrowV3 escrow (native XRP, testnet): create with --amount,
+  # offer it (cascrow v3 offer), the builder accepts, and you fund with one transaction
+  # from your own machine (cascrow v3 sign fund). This CLI never takes a key.
 
   # Agent-to-agent handoff
   cascrow me                                    # → get your Agent ID
@@ -542,10 +645,25 @@ Examples:
 
   # As the funder: decide what the AI panel could not (confidence 60-85)
   # Poll this — a manual_review.required webhook you missed is a decision nobody
-  # makes, and cascrow auto-approves an undecided milestone after 48h.
+  # makes; an undecided milestone completes automatically after 48h under review mode
+  # MANUAL_AUTO or AUTO, 14 days otherwise.
+  # Verification-only contracts: a verdict completes or hands back, and moves no money.
   cascrow review-queue
   cascrow review --contract <contractId> --decision APPROVE
   cascrow review --contract <contractId> --decision REJECT --milestone <milestoneId>
+
+  # As the payer of a MilestoneEscrowV3 escrow: claims release unless YOUR wallet
+  # calls object(escrowId) before the deadline — cascrow cannot object for you.
+  cascrow v3-claims
+
+  # MilestoneEscrowV3 (native XRP). cascrow prepares and reads; you sign locally.
+  cascrow v3 offer --milestone <id> --review-period-sec 259200 [--watcher] [--arbiter 0x… --arbitration-period-sec N]
+  cascrow v3 acceptance --milestone <id>                 # as builder: the frozen terms to check
+  cascrow v3 sign accept --milestone <id> --network testnet   # check + sign locally (pinned cascrow-signer)
+  cascrow v3 sign fund --milestone <id> --network testnet     # as payer: one transaction, value = amount
+  cascrow v3 prepare --milestone <id> --action object --reason-hash 0x…   # UNSIGNED — verify before signing
+  cascrow v3 report-tx --milestone <id> --tx 0x<64 hex>  # a HASH only, never a signed transaction
+  cascrow v3 attestation --escrow 0x… --claim-index 1    # non-binding AI recommendation
 `);
   process.exit(0);
 }
@@ -747,7 +865,8 @@ async function cmdVerifyWork(args) {
 }
 
 // One-shot verify: submit text proof + get verdict in a single call via /api/mcp/submit.
-// Auto-releases funds and mints NFT on approval — no separate `verify --proof <id>` needed.
+// A verification-only milestone completes (NFT minted) on approval; a MilestoneEscrowV3
+// verdict is a recommendation that moves no money. No separate `verify --proof <id>` needed.
 async function cmdVerify(args) {
   if (!API_KEY) err("CASCROW_API_KEY is not set");
   if (!args.proof) err("--proof is required");
@@ -792,9 +911,12 @@ async function cmdVerify(args) {
       // nothing moved, do not resubmit" from "another proof won" (round-3 pass 2).
       settledAs: typeof result.settledAs === "string" ? result.settledAs : null,
       complianceBlocked: result.complianceBlocked === true,
-      releaseHoldUntil: result.releaseHoldUntil ?? null,
+      notCompletableWithoutEscrow: result.action === "NOT_COMPLETABLE_WITHOUT_ESCROW",
       panelUnavailable: result.timedOut === true,
       txHash: result.txHash ?? null,
+      // MilestoneEscrowV3 (post-review G4): the recommendation's own fields, so a machine
+      // caller reads the SUBMISSION's verdict and the hash to claim with.
+      ...(result.action === "V3_RECOMMENDATION" || result.escrowVersion === 3 ? v3Fields(result) : {}),
       reasoning: result.reasoning,
       modelVotes: (result.votes ?? []).map(v => ({ model: v.model, decision: v.decision, confidence: v.confidence })),
     });
@@ -825,14 +947,17 @@ async function cmdVerify(args) {
   // `verdict` key, so `data.verdict ?? "unknown"` fell to the final arm below and told
   // the builder "❌ REJECTED — resubmit with stronger proof" for a milestone that may
   // well have been approved and paid (SEC-055). Classified before the verdict is read.
-  const verdict = data.decided === "elsewhere"
+  const isV3 = data.action === "V3_RECOMMENDATION";
+  const verdict = isV3
+    ? "v3_recommendation"
+    : data.decided === "elsewhere"
     ? "decided_elsewhere"
     : data.panelUnavailable
       ? "panel_unavailable"
       : (data.verdict ?? "unknown");
   const confidence = data.confidence ?? 0;
-  // Approved, payout SCHEDULED, funds still in escrow so the funder can contest.
-  const releaseHoldUntil = data.release_hold_until ?? null;
+  // An approved milestone that cannot complete is not a 200: the route answers 409
+  // NOT_COMPLETABLE_WITHOUT_ESCROW, which `apiPost` turns into an error with its hint.
 
   // Print model votes if available
   const votes = Array.isArray(data.model_votes) ? data.model_votes : [];
@@ -848,7 +973,12 @@ async function cmdVerify(args) {
   const settledAs = verdict === "decided_elsewhere" && typeof data.settledAs === "string" ? data.settledAs : null;
 
   let statusLine;
-  if (settledAs) {
+  if (isV3) {
+    // A MilestoneEscrowV3 submission: sealed, recommended on, nothing moved (G4).
+    statusLine = V3_CLIENT_TEXT.recommendation.replace("{verdict}", data.submissionVerdict ?? "PENDING").replace("{confidence}", String(confidence));
+    if (data.manifestHash) statusLine += `\n   manifestHash: ${data.manifestHash}`;
+    if (typeof data.next === "string") statusLine += `\n   ${data.next}`;
+  } else if (settledAs) {
     statusLine =
       `ℹ️ This milestone was closed (${settledAs}) before this submission could settle it, so this submission ` +
       "changed nothing and moved no funds itself. Your evidence was recorded. Do not resubmit to this milestone";
@@ -862,10 +992,6 @@ async function cmdVerify(args) {
       "⏳ PENDING_REVIEW — the verification panel could not reach a verdict (too few models " +
       "answered). This is NOT a rejection and NOT a judgement of your work; a human decides, " +
       "and resubmitting the same evidence will not help while the panel is down";
-  } else if (verdict === "approved" && releaseHoldUntil) {
-    statusLine =
-      `⏸️ APPROVED (${confidence}% confidence) — payout scheduled for ${releaseHoldUntil}. ` +
-      "NO FUNDS HAVE MOVED YET: the funder can contest until then, and the date can move";
   } else if (verdict === "approved") {
     statusLine = `✅ VERIFIED (${confidence}% confidence)`;
     if (data.on_chain_url) statusLine += `\n   Proof: ${data.on_chain_url}`;
@@ -886,18 +1012,28 @@ async function cmdVerify(args) {
   print({
     verdict,
     confidence,
-    // MONEY MOVED — not "the verdict was approved". A scheduled payout has not happened.
-    passed: verdict === "approved" && !releaseHoldUntil,
-    release_hold_until: releaseHoldUntil,
+    passed: verdict === "approved",
     ...(settledAs ? { settled_as: settledAs } : {}),
     reasoning: data.reasoning ?? "",
     on_chain_url: data.on_chain_url ?? null,
     proof_id: data.proof_id ?? null,
     signed_at: data.signed_at ?? null,
+    ...(isV3 ? v3Fields(data) : {}),
     model_votes: votes,
   });
 }
 
+/** The MilestoneEscrowV3 fields of an answer, for JSON output (post-review G4). Never derived: forwarded. */
+function v3Fields(r) {
+  return {
+    escrowVersion: 3,
+    submissionId: r.submissionId ?? null,
+    manifestHash: r.manifestHash ?? null,
+    submissionVerdict: r.submissionVerdict ?? "PENDING",
+    claimReady: r.claimReady === true,
+  };
+}
+
 async function cmdCreate(args) {
   if (!API_KEY) err("CASCROW_API_KEY is not set");
   if (!args.title) err("--title is required");
@@ -948,42 +1084,28 @@ async function cmdCreate(args) {
   process.stderr.write(`\nContract created: ${contractUrl}\n\n`);
 }
 
-async function cmdFund(args) {
-  if (!API_KEY) err("CASCROW_API_KEY is not set");
-  if (!args.contract) err("--contract is required");
-
-  const body = args.milestone
-    ? { contractId: args.contract, milestoneId: args.milestone }
-    : { contractId: args.contract };
-
-  const data = await apiPost("/api/agent/fund-milestone", body);
-  print(data);
-  process.stderr.write(`\nMilestone funded (simulation). ID: ${data.milestoneId}\n\n`);
+// Removed in 3.0.0 (cascrow Phase 6, owner decision 16): `fund` activated a v2
+// milestone. A $0 verification contract is active by itself once the builder has
+// joined, and a milestone with an amount is a MilestoneEscrowV3 escrow its payer
+// funds from their own machine. Kept as a command only to say so; it sends nothing.
+function cmdFundRemoved() {
+  err(`${V3_CLIENT_TEXT.fundRemoved} [TOOL_REMOVED]`);
 }
 
-async function cmdEscrowFund(args) {
-  if (!API_KEY) err("CASCROW_API_KEY is not set");
-  if (!args.contract) err("--contract is required");
-  if (!args["private-key"]) err("--private-key is required (EVM private key, funds come from this wallet)");
-
-  const body = {
-    contractId: args.contract,
-    agentPrivateKey: args["private-key"],
-  };
-  if (args.milestone) body.milestoneId = args.milestone;
-  if (args.amount) {
-    // NOT forwarded. `agent/escrow-fund` funds `milestone.amountUSD` and ignores
-    // a body field, so `--amount` never overrode anything — it only told the
-    // user it had. Say so rather than sending a number the server drops.
-    process.stderr.write(
-      "\n⚠️  --amount is ignored for escrow funding: the escrowed amount is the milestone's own amountUSD.\n"
-    );
-  }
-
-  process.stderr.write("\nFunding milestone on-chain (approve + fundMilestone)...\n");
-  const data = await apiPost("/api/agent/escrow-fund", body);
-  print(data);
-  process.stderr.write(`\n✅ ${data.amountUSD} RLUSD locked on-chain. TX: ${data.txHash}\n\n`);
+// Removed in 2.0.0 (cascrow Phase 5): `escrow-fund --private-key` sent the key
+// to cascrow, which signed the deposit server-side. Kept as a command only to say
+// so: it sends NOTHING — no request, no argument — so a key typed on the command
+// line goes nowhere. It cannot un-type it, which is why the message tells the user
+// what a key that reached a shell history (or an older version of this CLI) is now.
+function cmdEscrowFundRemoved() {
+  err(
+    "escrow-fund was removed in cascrow-cli 2.0.0: cascrow never accepts, creates, stores or signs with private keys. " +
+      "A $0 verification contract needs no funding — it is active once the builder has joined. A milestone with an amount " +
+      "is a MilestoneEscrowV3 escrow in native XRP, funded by the payer with one transaction from their own machine: first link " +
+      "the wallet you will fund from (GET /api/user/wallet/challenge, sign the message, POST /api/user/wallet), then run " +
+      "npx cascrow-signer@0.1.0 fund --milestone <milestoneId>. If you ever passed a private key to this command (it is also in your shell history), " +
+      "treat that key as exposed and move its funds to a new wallet. [CUSTODY_PATH_REMOVED]"
+  );
 }
 
 // Legacy two-step: upload proof → returns proofId → user runs `cascrow verify --proof <id>`
@@ -1031,7 +1153,8 @@ async function cmdJoin(args) {
   if (!args.invite) err("--invite is required");
   const data = await apiPost("/api/contracts/join", { inviteCode: args.invite });
   print(data);
-  process.stderr.write(`\nJoined contract: ${data.contractId}\n\n`);
+  // `activated`: a $0 contract is active now; a money contract waits for its V3 offer.
+  process.stderr.write(`\nJoined contract: ${data.contractId}\n${joinedLine(data)}\n\n`);
 }
 
 async function cmdHandoff(args) {
@@ -1071,9 +1194,9 @@ async function cmdCheckInvites() {
  * verdict on cannot come apart (F-22).
  *
  * `review-queue` is the pull behind the `manual_review.required` webhook: a
- * webhook nobody received is a decision nobody makes, and cascrow auto-approves
- * an undecided milestone after 48 h (agent contracts) or 14 days (human) and
- * releases the escrow. `review` ships with it rather than later, because a list
+ * webhook nobody received is a decision nobody makes, and cascrow completes an
+ * undecided milestone after 48 h (agent contracts in MANUAL_AUTO/AUTO) or 14 days
+ * (every other contract). Verification-only contracts: no money moves. `review` ships with it rather than later, because a list
  * its reader cannot act on names a remedy they are unable to perform (F-72).
  */
 async function cmdReviewQueue() {
@@ -1081,8 +1204,16 @@ async function cmdReviewQueue() {
   const data = await apiGet("/api/agent/review-queue");
   const contracts = data.contracts ?? [];
   print(data);
+  // Said in both branches: an empty v2 queue is exactly when a reader stops
+  // looking, and a V3 claim window keeps running.
+  const v3 =
+    data.v3ClaimsPending === null
+      ? "Open MilestoneEscrowV3 claims could not be counted — run: cascrow v3-claims\n\n"
+      : data.v3ClaimsPending > 0
+        ? `${data.v3ClaimsPending} MilestoneEscrowV3 claim(s) can still be objected to — run: cascrow v3-claims\n\n`
+        : "";
   if (contracts.length === 0) {
-    process.stderr.write("\nNo milestones are waiting for your verdict.\n\n");
+    process.stderr.write(`\nNo milestones are waiting for your verdict.\n\n${v3}`);
     return;
   }
   const lines = contracts.map((c) => {
@@ -1093,15 +1224,100 @@ async function cmdReviewQueue() {
         : pending.length > 1
           ? `${pending.length} milestones pending — pass --milestone <id>`
           : "contract-level review — omit --milestone";
-    return `  ${c.contractId}  ${c.amountUSD} RLUSD  (${ms})`;
+    return `  ${c.contractId}  (${ms})`;
   }).join("\n");
   const more = data.truncated ? `\n(${data.total} in total — this list is capped.)` : "";
   process.stderr.write(
     `\n${data.total} contract(s) waiting for your verdict:\n${lines}${more}\n\n` +
-      "Decide with: cascrow review --contract <id> --decision APPROVE|REJECT [--milestone <id>]\n\n"
+      "Decide with: cascrow review --contract <id> --decision APPROVE|REJECT [--milestone <id>]\n\n" +
+      v3
   );
 }
 
+/**
+ * The payer's open MilestoneEscrowV3 claims — `GET /api/agent/v3-claims`, the
+ * pull behind the `claim.submitted` webhook. Print only: the action is the
+ * payer's own `object(escrowId)` on chain, which cascrow never performs.
+ */
+async function cmdV3Claims() {
+  if (!API_KEY) err("CASCROW_API_KEY is not set");
+  const data = await apiGet("/api/agent/v3-claims");
+  const claims = data.claims ?? [];
+  print(data);
+  if (claims.length === 0) {
+    process.stderr.write("\nNo MilestoneEscrowV3 claim is waiting on you.\n\n");
+    return;
+  }
+  const lines = claims.map((c) =>
+    `  ${c.escrowId} on ${c.chainId}/${c.escrowContract}  claim ${c.claimIndex}` +
+      `${c.secondFunding ? "  SECOND funding" : ""}${c.held ? "  (held — verify on chain)" : ""}  ` +
+      (c.objectable === null ? "claim state unknown here — read getEscrow on chain" : c.objectable ? `object() before ${c.objectionDeadline}` : `window closed at ${c.objectionDeadline}`)
+  ).join("\n");
+  const more = data.truncated ? "\n(This list is capped; more claims exist.)" : "";
+  process.stderr.write(`\n${claims.length} claim(s):\n${lines}${more}\n\ncascrow cannot object for you — your own wallet calls object(escrowId) on the escrow contract.\n\n`);
+}
+
+// ─── MilestoneEscrowV3, remote half (design Rev. 10) ──────────────────────────
+// cascrow prepares and reads; the party signs and sends with its own key. This CLI
+// holds no key and has no dependency: `v3 sign …` runs the PINNED local signer
+// (V3_CLIENT_TEXT.signerPin) in a child process, with this terminal attached, so
+// its prompts and its checks are the signer's own.
+async function cmdV3(sub, args, rawArgs) {
+  if (sub === "sign") {
+    const child = spawn("npx", ["--yes", V3_CLIENT_TEXT.signerPin, ...rawArgs], { stdio: "inherit", shell: process.platform === "win32" });
+    const code = await new Promise((resolve) => child.on("close", resolve));
+    process.exit(typeof code === "number" ? code : 1);
+  }
+  if (!API_KEY) err("CASCROW_API_KEY is not set");
+  switch (sub) {
+    case "offer": {
+      if (!args.milestone || !args["review-period-sec"]) err("--milestone and --review-period-sec are required");
+      const body = {
+        milestoneId: args.milestone,
+        reviewPeriodSec: Number(args["review-period-sec"]),
+        watcherDeclared: args.watcher === true || args.watcher === "true",
+        ...(args.arbiter ? { arbiter: args.arbiter } : {}),
+        ...(args["arbitration-period-sec"] ? { arbitrationPeriodSec: Number(args["arbitration-period-sec"]) } : {}),
+      };
+      print(await apiPost("/api/escrow/v3/offer", body));
+      process.stderr.write(`\nOffer sent. After the builder accepts, fund it from your machine: cascrow v3 sign fund --milestone ${args.milestone}\n\n`);
+      return;
+    }
+    case "acceptance":
+      if (!args.milestone) err("--milestone is required");
+      print(await apiGet(`/api/escrow/v3/acceptance?milestoneId=${encodeURIComponent(args.milestone)}`));
+      process.stderr.write("\nCheck every term — your signature binds you until acceptBy. To check and sign locally: cascrow v3 sign accept --milestone " + args.milestone + "\n\n");
+      return;
+    case "accept-submit":
+      if (!args.offer || !args.signature) err("--offer and --signature are required");
+      print(await apiPost("/api/escrow/v3/acceptance", { offerId: args.offer, signature: args.signature }));
+      return;
+    case "prepare": {
+      if (!args.milestone || !args.action) err("--milestone and --action are required");
+      const q = new URLSearchParams({ milestoneId: args.milestone, action: args.action });
+      if (args["proof-hash"]) q.set("proofHash", args["proof-hash"]);
+      if (args["reason-hash"]) q.set("reasonHash", args["reason-hash"]);
+      if (args["new-deadline"]) q.set("newDeadline", String(args["new-deadline"]));
+      print(await apiGet(`/api/escrow/v3/prepare?${q.toString()}`));
+      process.stderr.write("\nUNSIGNED — cascrow does not sign, send or relay it. Rebuild data from the ABI and check to/chainId against your own configuration before signing (cascrow v3 sign … does).\n\n");
+      return;
+    }
+    case "report-tx":
+      if (!args.milestone || typeof args.tx !== "string" || !TX_HASH_RE.test(args.tx)) err(V3_CLIENT_TEXT.reportTxOnlyHash);
+      print(await apiPost("/api/escrow/v3/sync", { milestoneId: args.milestone, txHash: args.tx }));
+      return;
+    case "attestation":
+      if (!args.escrow || !args["claim-index"]) err("--escrow and --claim-index are required");
+      print(await apiGet(`/api/escrow/v3/attestation?${new URLSearchParams({ escrowId: args.escrow, claimIndex: String(args["claim-index"]) }).toString()}`));
+      return;
+    case "claims":
+      await cmdV3Claims();
+      return;
+    default:
+      err(`unknown v3 command ${sub ?? "(none)"} — offer | acceptance | accept-submit | prepare | report-tx | attestation | claims | sign`);
+  }
+}
+
 async function cmdReview(args) {
   if (!API_KEY) err("CASCROW_API_KEY is not set");
   const contractId = args.contract;
@@ -1111,11 +1327,14 @@ async function cmdReview(args) {
   const body = args.milestone ? { contractId, decision, milestoneId: args.milestone } : { contractId, decision };
   const data = await apiPost("/api/contracts/review", body);
   print(data);
+  // The route answers `{ status }` and nothing else: a review only decides
+  // verification-only ($0) milestones, and nothing moves money (a MilestoneEscrowV3
+  // milestone is refused — its payer releases or objects on chain).
   const what =
     decision === "APPROVE"
-      ? "approved — the escrow is being released to the builder"
+      ? "approved and completed (a verification-only contract: no money moves)"
       : "rejected — the milestone is back with the builder, who can resubmit";
-  process.stderr.write(`\nMilestone ${what}.${data.txHash ? `\nRelease tx: ${data.txHash}` : ""}\n\n`);
+  process.stderr.write(`\nMilestone ${what}.${data.status ? ` Contract status: ${data.status}.` : ""}\n\n`);
 }
 
 async function cmdMe() {
@@ -1140,8 +1359,8 @@ try {
     case "verify-work":   await cmdVerifyWork(args);    break;
     case "verify":        await cmdVerify(args);        break;
     case "create":        await cmdCreate(args);        break;
-    case "fund":          await cmdFund(args);          break;
-    case "escrow-fund":   await cmdEscrowFund(args);    break;
+    case "fund":          cmdFundRemoved();             break;
+    case "escrow-fund":   cmdEscrowFundRemoved();       break;
     case "submit":        await cmdSubmit(args);        break;
     case "status":        await cmdStatus(args);        break;
     case "get":           await cmdGet(args);           break;
@@ -1150,6 +1369,8 @@ try {
     case "check-invites": await cmdCheckInvites();      break;
     case "review-queue":  await cmdReviewQueue();       break;
     case "review":        await cmdReview(args);        break;
+    case "v3-claims":     await cmdV3Claims();          break;
+    case "v3":            await cmdV3(rest[0], parseArgs(rest.slice(1)), rest.slice(1)); break;
     case "me":            await cmdMe();                break;
     default:
       console.error(`Unknown command: ${command}\n`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cascrow-cli",
-  "version": "1.4.0",
-  "description": "CLI for Cascrow — trust infrastructure for the agent economy: AI verification, on-chain reputation, and milestone escrow on the XRP Ledger",
+  "version": "3.0.0",
+  "description": "CLI for Cascrow — trust infrastructure for the agent economy: AI verification, on-chain reputation, and non-custodial milestone escrow (MilestoneEscrowV3, native XRP)",
   "type": "module",
   "main": "index.js",
   "bin": {