GCA Access API Contract

Live Cloudflare Workers + D1 email registration intake for the GCA user list. It requires an email and safety acknowledgements only; it does not request a wallet, signature, private key, seed phrase, payment, or exchange API secret.

Token-protected admin read for operator review. Public visitors cannot read the registration ledger.

Live public email do-not-contact request using gca_contact_suppression_v1. It records only an email, reason, source, and safety acknowledgements; no wallet, signature, transaction, private key, seed phrase, payment, or exchange API secret is requested.

Token-protected admin read for local suppression sync. Operators use tools/sync_cloudflare_contact_suppressions.py and the local ops pipeline before contact CSV export.

Live public access configuration for GCA thresholds, chain ID, contract address, ledger boundaries, and safety rules.

Live account intake for gca_member_access_v1. It stores email/account fields, verifies the Base wallet, and writes eligible credit/member ledger records.

Live read-only GCA balance checks using Base Mainnet eth_call and ERC-20 balanceOf.

Token-protected admin read for account-level 100 GCA AI Quant Access credits records.

Prepared token-protected operator queue for requested GCA AI Quant Access service scope before delivery. Local backend support is implemented, the D1 migration is prepared, and wrangler deploy --dry-run passes. The 2026-06-18 readiness check also passed D1 visibility, but the Cloudflare Worker route remains non-live because cloudflare-auth-session and Worker deploy permission failed with error 10000. Post-deploy validation must run with --include-pending-routes. It records service ID, optional credit ledger ID, requested credit hold, and review status; it does not deduct credits, connect wallets, request signatures, send tokens, or create trading permission.

Prepared token-protected operator ledger for reviewed service-level credit usage. Local backend support is implemented, the D1 migration is applied, and wrangler deploy --dry-run passes. The 2026-06-18 readiness check also passed D1 visibility, but the Cloudflare Worker route remains non-live because cloudflare-auth-session and Worker deploy permission failed with error 10000. Post-deploy validation must run with --include-pending-routes. It records service ID, credits used, before/after balance, and status; it never connects wallets, requests signatures, sends tokens, or creates trading permission.

Token-protected admin read for GCA Member ledger state, holding-period review, 10,000 GCA member benefit status, next refresh due date, and status.

Creates or updates support review records for manual review workflows.

Reads review status for the authenticated account after the controlled account UI exists.

Local-only operator path to append a manual support review status update. It writes to the local JSONL ledger only and never sends replies, writes production data, calls wallets, requests signatures, or transfers GCA.

Local-only record path for manually completed reserve-wallet transfers. It verifies the public transaction hash with read-only Base receipt data, records matching GCA Transfer evidence, and never sends tokens.

Local-only console summary for email registration, pre-registration, wallet verification, credit ledger, member ledger, member benefit transfer, and support review counts. The localhost backend writes local JSONL ledger records for testing only.

Local-only redacted daily digest view created by tools/run_gca_daily_ops.py --build-digest. It returns public health, BaseScan preflight status, member ops counts, support queue counts, holding evidence counts, and next actions without user records, emails, admin tokens, signatures, or automatic transfers.

Local-only manual checklist derived from local ledger counts and the redacted operator digest. It ranks next actions and shows a redacted support preview; it never sends replies, writes production data, connects wallets, or transfers GCA.

Local-only reviewer evidence export for support and platform follow-up. It includes local ledger totals, latest records, recordManifest, packageDigestSha256, public reference links, and safety boundaries. Use ?redact=public before external sharing, tools/export_gca_review_package.py to export from local JSONL data without running the server, and tools/verify_gca_review_package.py to verify the digest.