Verification checklist — CL8Y Bridge E2E UX (approved via cl8y-ecosystem-qa #11) #116

Closed
opened 2026-04-23 03:47:52 +00:00 by Brouie · 5 comments
Brouie commented 2026-04-23 03:47:52 +00:00 (Migrated from gitlab.com)

Mirror tracking issue for the approved Bridge E2E UX Verification Checklist v1.0.

Spec: committed to cl8y-ecosystem-qa at specs/Bridge-E2E-UX-Verification-Checklist.md (commit 88f5f46).

Source: https://gitlab.com/PlasticDigits/cl8y-ecosystem-qa/-/issues/11

Scope: 13 sections covering chain+token selection, approvals, transfer submission, progress tracking, history, verify, settings, error handling, responsive layout, and more.

Execution: @Brouie will run the checklist against https://bridge.cl8y.com/ (mainnet) + LocalTerra dev env, file individual issues per finding on this repo, and close this mirror when the checklist is fully executed.

Related longstanding: #5 (iPhone Keplr edge case) referenced in section D5 of the spec.

Sister specs: UST1-Window-Security-Checklist.md, YO-DOUB-Launch-UX-Flows.md, YO-TimeCurve-Verification-Spec.md, DEX-Visual-UX-Verification-Checklist.md.

cc @PlasticDigits

Mirror tracking issue for the approved Bridge E2E UX Verification Checklist v1.0. **Spec:** committed to cl8y-ecosystem-qa at `specs/Bridge-E2E-UX-Verification-Checklist.md` (commit `88f5f46`). **Source:** https://gitlab.com/PlasticDigits/cl8y-ecosystem-qa/-/issues/11 **Scope:** 13 sections covering chain+token selection, approvals, transfer submission, progress tracking, history, verify, settings, error handling, responsive layout, and more. **Execution:** @Brouie will run the checklist against `https://bridge.cl8y.com/` (mainnet) + LocalTerra dev env, file individual issues per finding on this repo, and close this mirror when the checklist is fully executed. **Related longstanding:** #5 (iPhone Keplr edge case) referenced in section D5 of the spec. **Sister specs:** UST1-Window-Security-Checklist.md, YO-DOUB-Launch-UX-Flows.md, YO-TimeCurve-Verification-Spec.md, DEX-Visual-UX-Verification-Checklist.md. cc @PlasticDigits
Brouie commented 2026-04-23 03:49:20 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-ecosystem-qa#11

mentioned in issue cl8y-ecosystem-qa#11
Brouie commented 2026-04-24 04:09:13 +00:00 (Migrated from gitlab.com)

mentioned in issue #117

mentioned in issue #117
Brouie commented 2026-04-24 05:06:09 +00:00 (Migrated from gitlab.com)

mentioned in issue #118

mentioned in issue #118
Brouie commented 2026-04-24 05:54:34 +00:00 (Migrated from gitlab.com)

mentioned in issue #119

mentioned in issue #119
Brouie commented 2026-04-24 06:06:17 +00:00 (Migrated from gitlab.com)

@PlasticDigits Bridge #116 full 13-section walkthrough complete against live mainnet https://bridge.cl8y.com/ (v0.1.82, 8efb987).

Coverage summary

Section Status
A Chain + token selection PASS
B Amount input + validation Findings in #119
C Recipient address Launch-blocker #117 filed
D Wallet connection per chain PASS (Keplr, Leap, Cosmostation, Station all work)
E Token approval (EVM) Launch-blocker #118 filed
F Transfer submission + progress stepper PASS (E2E completed bsc→terra, 1.0945 testa)
G Transfer history PASS
H Verify page + Hash Monitor PASS (minor no-match UX batched below)
I Settings PASS (CHAINS, TOKENS, BRIDGE CONFIG, FAUCET all working)
J Error/loading/empty states Covered in B/C/H
K Responsive layout PASS (minor SETTINGS overflow at 360px, light-mode contrast note)
L Accessibility basics PASS (focus rings visible, Tab order logical)
M Cross-browser Deferred (Chrome only tested)

Issues filed

  • #117 LAUNCH-BLOCKER: recipient address checksum validation missing (Terra bech32, EVM EIP-55 confirmed same bug)
  • #118 LAUNCH-BLOCKER: MetaMask Blockaid flags approve + transfer as deceptive request
  • #119 UX: Bridge button stays enabled and receive quote displays across invalid form states (non-blocking, grouped)

Additional observations (deferred to next session or dev discretion)

  • Verify page no-match result state reuses initial placeholder (unclear 'not found' state)
  • Stale BALANCE in FROM card after wallet disconnect
  • MAX: 4.994K 00:00:00 label unclear (what does countdown mean)
  • SETTINGS tab slight horizontal clip at mobile 360px
  • Light-mode orange/yellow headers may have borderline WCAG AA contrast
  • History page is globally visible (not per-wallet-scoped) — intentional vs privacy decision needed
  • tdec decimal varies across chains (6/12/18/6) — scaling already handled per 18/18 matrix but worth security-checklist row
  • Backpack + MetaMask window.ethereum conflict produces console noise (known, documented in QA §14)
  • eth.merkle.io CORS errors in console (functional impact unclear, worth dev eyes)

Positive observations

  • Transfer Status 4-step stepper works cleanly with auto-progression
  • Cancel window security feature (300-330s) correctly surfaced to user
  • Verify tool with field-level parity table is strong audit surface
  • System Settings page gives operator-level transparency (RPC counts, chain health ms)
  • Faucet tab ties in nicely for test-token distribution

E2E proof the bridge works: xchainhashid 0x0c3b0023af4fd3398963be922e2365e77ea0cfb9466bfd1d9d6e8704d4ed3d4e, bsc→terra, 1.0945 testa, fully completed including cancel window.

Closing #116 once launch-blockers #117 + #118 are resolved. For now leaving #116 open to track the full verification-and-fix cycle.

@PlasticDigits Bridge #116 full 13-section walkthrough complete against live mainnet https://bridge.cl8y.com/ (v0.1.82, 8efb987). ## Coverage summary | Section | Status | |---|---| | A Chain + token selection | PASS | | B Amount input + validation | Findings in #119 | | C Recipient address | Launch-blocker #117 filed | | D Wallet connection per chain | PASS (Keplr, Leap, Cosmostation, Station all work) | | E Token approval (EVM) | Launch-blocker #118 filed | | F Transfer submission + progress stepper | PASS (E2E completed bsc→terra, 1.0945 testa) | | G Transfer history | PASS | | H Verify page + Hash Monitor | PASS (minor no-match UX batched below) | | I Settings | PASS (CHAINS, TOKENS, BRIDGE CONFIG, FAUCET all working) | | J Error/loading/empty states | Covered in B/C/H | | K Responsive layout | PASS (minor SETTINGS overflow at 360px, light-mode contrast note) | | L Accessibility basics | PASS (focus rings visible, Tab order logical) | | M Cross-browser | Deferred (Chrome only tested) | ## Issues filed - **#117** LAUNCH-BLOCKER: recipient address checksum validation missing (Terra bech32, EVM EIP-55 confirmed same bug) - **#118** LAUNCH-BLOCKER: MetaMask Blockaid flags approve + transfer as deceptive request - **#119** UX: Bridge button stays enabled and receive quote displays across invalid form states (non-blocking, grouped) ## Additional observations (deferred to next session or dev discretion) - Verify page no-match result state reuses initial placeholder (unclear 'not found' state) - Stale BALANCE in FROM card after wallet disconnect - MAX: 4.994K 00:00:00 label unclear (what does countdown mean) - SETTINGS tab slight horizontal clip at mobile 360px - Light-mode orange/yellow headers may have borderline WCAG AA contrast - History page is globally visible (not per-wallet-scoped) — intentional vs privacy decision needed - tdec decimal varies across chains (6/12/18/6) — scaling already handled per 18/18 matrix but worth security-checklist row - Backpack + MetaMask window.ethereum conflict produces console noise (known, documented in QA §14) - eth.merkle.io CORS errors in console (functional impact unclear, worth dev eyes) ## Positive observations - Transfer Status 4-step stepper works cleanly with auto-progression - Cancel window security feature (300-330s) correctly surfaced to user - Verify tool with field-level parity table is strong audit surface - System Settings page gives operator-level transparency (RPC counts, chain health ms) - Faucet tab ties in nicely for test-token distribution E2E proof the bridge works: xchainhashid 0x0c3b0023af4fd3398963be922e2365e77ea0cfb9466bfd1d9d6e8704d4ed3d4e, bsc→terra, 1.0945 testa, fully completed including cancel window. Closing #116 once launch-blockers #117 + #118 are resolved. For now leaving #116 open to track the full verification-and-fix cycle.
PlasticDigits (Migrated from gitlab.com) closed this issue 2026-05-01 03:11:15 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
code/cl8y-bridge-monorepo#116
No description provided.