[KCL1104]

The workspace now pauses after an agent service survey so an operator can compare candidates, choose one service, and explicitly submit procurement before payment begins. New requests capture invoice and Mello Registry certification requirements, filter the survey accordingly, and display each service’s invoice/certification availability. The login page shows the requested demo access code.

Selection is persisted and dispatched atomically; duplicate submissions do not create duplicate payment jobs. A changed price or certification returns the task to selection. Existing automated API clients retain their previous behavior when they omit survey requirements.

Validation: 394 API unit tests, 9 frontend tests, and 31 focused database integration tests passed locally, along with API type checking, lint, and the Next.js build. Browser checks covered all four requirement combinations, selection gating, a budget edge case, reload persistence, and desktop/mobile layouts. CI now includes the survey, controls, and queue integration suites.

Deployment: apply 20260906000000_procurement_survey_selection before starting the new API, then deploy Web. The migration adds WAITING_SELECTION and two nullable JSONB columns; it does not rewrite existing purchases. This branch also preserves the seller-wallet rotation guard and historical-payee fix already deployed in production, plus their committed release evidence.

[KCL1104]

Deployed merged commit f762c4606ce7f39b8ed05f2b7df858a0f2b95854 to Railway production.

• API deployment 2d647bf4-b132-4a1a-ba34-24ca09adfe37: SUCCESS; API and database health checks passed.
• Migration 20260906000000_procurement_survey_selection: applied successfully by the API pre-deploy command.
• Web deployment c7149b5a-2f97-4a02-a56b-043680ce2010: SUCCESS; workspace and health check passed.
• PR CI and merged-main CI passed, including survey/controls/queue database integration coverage.
• Production browser verification passed for the access-code hint, required filters, unrestricted service comparison with invoice/certification labels, human selection gating, reload persistence, and desktop/mobile layouts. Both verification tasks remain WAITING_SELECTION; purchases stayed at 10 and the settled amount stayed unchanged.

The current production catalog has two services marked UNREVIEWED, so requiring Mello Registry certification correctly produces an empty result. Clearing that requirement displays the services with their certification status.