Verify Filecoin EVM funding on mainnet

[snissn]

Parent: #28

Depends on: #30

Goal

Own the funded mainnet evidence required before upstream draft filecoin-project/filecoin-pin#637 becomes ready for maintainer review or claims production readiness.

This gate applies only to the new interactive payments fund Squid acquisition path. payments setup --auto is unchanged and is not part of this issue.

Required Evidence

• Record starting source and Filecoin balances without exposing credentials.
• Execute one low-value supported external ERC-20 route under explicit source-token and total-native-fee caps.
• Exercise a second materially distinct path only if the first route does not cover a different fee, token, or same-chain risk that remains material.
• Verify FIL and USDFC arrival on Filecoin.
• Verify the requested USDFC deposit into Filecoin Pay.
• Rerun payments fund and prove there is no duplicate acquisition.
• Exercise payments fund --days against active mainnet spend.
• Record sanitized transaction and provider identifiers in the issue or PR, not generated repository files.
• Confirm upstream maintainers accept the v0.1.0 Git dependency form before changing feat(payments): add interactive Squid funding to payments fund filecoin-project/filecoin-pin#637 to ready.

Non-Goals

• A funded transfer for every chain or token.
• payments setup --auto acquisition or readiness changes.
• Repository-local evidence artifacts.
• Reopening or making PR feat(payments): support selected EVM funding sources filecoin-project/filecoin-pin#630 ready.
• Upstream merge.

Test-First And Performance Classification

This is an environment evidence gate, not a code implementation PR unless a real defect is found. A funded run follows the deterministic tests and already-enforced caps. Any defect found during execution requires a focused regression test before its fix.

Not performance-relevant as an optimization. Route duration, provider calls, and polling attempts are operational observations.

Exit Gate

• Representative funded payments fund checks pass under approved budgets.
• FIL and USDFC arrival and the Filecoin Pay deposit are verified.
• No duplicate acquisition occurs on rerun.
• Evidence is sanitized and current to the exact feat(payments): add interactive Squid funding to payments fund filecoin-project/filecoin-pin#637 and library revisions.
• Upstream maintainers accept the versioned dependency form.
• Only then may feat(payments): add interactive Squid funding to payments fund filecoin-project/filecoin-pin#637 be considered ready for maintainer review.

[snissn]

Reduced funded-evidence gate

This comment supersedes the automatic-setup and checkpoint-resume requirements in the issue body. The reduced feature is deliberately available only from interactive payments fund and has no automatic replay.

The remaining mainnet evidence is:

• record sanitized starting source and Filecoin balances;
• execute one low-value supported ERC-20 or native-token route under the selected source-amount and native-fee caps;
• verify the required FIL and/or USDFC reaches the Filecoin wallet;
• verify the planned USDFC deposit into Filecoin Pay;
• verify the coarse pending marker is removed only after destination verification succeeds;
• rerun the now-satisfied payments fund target and verify it performs no additional Squid acquisition;
• keep transaction/provider identifiers in this issue or the PR, not repository files;
• confirm the dependency form/version is acceptable before the upstream draft is marked ready.

An interruption is no longer auto-resumed. The supported behavior is to leave the pending marker in place, refuse later acquisitions, and require the operator to verify chain state before manually removing it. That failure path is covered deterministically rather than by intentionally killing a funded mainnet transaction.

[snissn]

Current funded-test target

The deterministic work is complete. Run this gate only against:

• Filecoin Pin draft head a9343da17605cd28c13cf9bae8d0cb03f399c87a (upstream draft #637);
• squid-evm-funding commit ad4c7f007637d9ae2ba2f2bdb48cf9f7beea01b6.

Before execution, provision an approved low-value mainnet budget, a disposable owner wallet funded with the selected source token and source-chain gas, and working source/Filecoin RPC endpoints. Keep the PR draft. After the route, record sanitized starting/ending balances and transaction/status identifiers, verify Filecoin arrival and the Filecoin Pay deposit, then rerun the satisfied target and confirm no second Squid acquisition occurs.

The separate dependency-release decision also remains open: the reviewed Git commit installs correctly, but upstream should receive a versioned package or explicitly accept the immutable Git dependency before the PR is marked ready.