From 430765c7789e04e4eaba81e256c2e436e180dc41 Mon Sep 17 00:00:00 2001 From: araharah-executor Date: Sat, 24 Oct 2026 02:36:06 +0800 Subject: [PATCH] =?UTF-8?q?docs(04-04):=20leg-5=20carrier=20note=20?= =?UTF-8?q?=E2=80=94=20browser=20hits=20the=20session=20wall=20by=20design?= =?UTF-8?q?;=20t.me=20startapp=20link=20is=20the=20on-device=20procedure?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../04-DEVICE-GATE.md | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/.planning/phases/04-destination-search-kl-gazetteer/04-DEVICE-GATE.md b/.planning/phases/04-destination-search-kl-gazetteer/04-DEVICE-GATE.md index 686276b..bfda76e 100644 --- a/.planning/phases/04-destination-search-kl-gazetteer/04-DEVICE-GATE.md +++ b/.planning/phases/04-destination-search-kl-gazetteer/04-DEVICE-GATE.md @@ -108,10 +108,17 @@ real client proves Telegram actually delivers the button's query string into the ### 5. The honest unknown-id state -- [ ] Open the Mini App with a deliberately wrong id — append `?dest=not-a-real-place` to the - deployed URL (browser or a crafted link): expected the "DESTINATION / Destination - unavailable / That place is not in this build. Search again from the bot." surface. -- [ ] FAIL SYMPTOMS: a blank map, a fabricated pin, a crash — none may occur. +- **Carrier note (orchestrator, 2026-10-24):** a plain browser CANNOT observe this leg — + with no initData the boot stops at the session wall (denied card) before the destination + reader runs. Verified live 2026-10-24: `?dest=not-a-real-place` in desktop Chrome → + the denied card (`leg5-browser-sessionwall.png`). That is correct off-Telegram behavior, + NOT this leg's verdict. +- **On-device procedure:** in ANY chat, send yourself the deep link + `https://t.me/arah2bot?startapp=not-a-real-place` and tap it — Telegram opens the Mini + App with `start_param=not-a-real-place` (the secondary carrier), the session validates, + and the reader must show the honest surface. +- [ ] Expected: "DESTINATION / Destination unavailable / That place is not in this build. + Search again from the bot." — never a blank map, never a fabricated pin, never a crash. Verdict: `UNVERIFIED` Observed / Symptom: ______________________________________