diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 31582ac4f..8a9f2aebd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -103,3 +103,6 @@ jobs:
 
       - name: 🧪 Frontend tests (coverage-gated)
         run: cd apps/frontend && bun run test:coverage
+
+      - name: 🧪 Gold tests
+        run: bun run test:gold
diff --git a/apps/frontend/netlify.toml b/apps/frontend/netlify.toml
index fd989cce8..0a4fd7319 100644
--- a/apps/frontend/netlify.toml
+++ b/apps/frontend/netlify.toml
@@ -25,3 +25,15 @@
   # apps/gold or the shared/sdk packages would be skipped as "no content change". Build when
   # any input of this site changed (paths are relative to the base directory).
   ignore = "git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- . ../gold ../../packages/shared ../../packages/sdk"
+
+# Gold signs Ethereum transactions and collects PIX keys and KYC data, so it must not be framed
+# by other sites (clickjacking) and keeps the baseline headers of its standalone release
+# (gold.satoshipay.io). Scoped to Gold so the rest of the site, e.g. the widget, is unchanged.
+[[headers]]
+  for = "/pt-br/gold/*"
+  [headers.values]
+    Content-Security-Policy = "frame-ancestors 'none'"
+    X-Frame-Options = "DENY"
+    X-Content-Type-Options = "nosniff"
+    Referrer-Policy = "strict-origin-when-cross-origin"
+    Permissions-Policy = "camera=(self), microphone=(), geolocation=()"
diff --git a/apps/frontend/src/tests/netlify-headers.test.ts b/apps/frontend/src/tests/netlify-headers.test.ts
new file mode 100644
index 000000000..99400d536
--- /dev/null
+++ b/apps/frontend/src/tests/netlify-headers.test.ts
@@ -0,0 +1,29 @@
+import { readFileSync } from "node:fs";
+import { describe, expect, it } from "vitest";
+
+// Reads the [[headers]] blocks of netlify.toml: a `for = "<path>"` line followed by `Name = "value"` lines.
+const headerRules = readFileSync(new URL("../../netlify.toml", import.meta.url), "utf8")
+  .split("[[headers]]")
+  .slice(1)
+  .map(block => ({
+    path: block.match(/^\s*for\s*=\s*"([^"]+)"/m)?.[1],
+    values: Object.fromEntries(
+      [...block.matchAll(/^\s*([A-Za-z-]+)\s*=\s*"([^"]*)"\s*$/gm)]
+        .filter(([, name]) => name !== "for")
+        .map(([, name, value]) => [name, value])
+    )
+  }));
+
+describe("Netlify headers", () => {
+  it("keeps the gold app out of third-party frames", () => {
+    expect(headerRules.find(rule => rule.path === "/pt-br/gold/*")?.values).toMatchObject({
+      "Content-Security-Policy": "frame-ancestors 'none'",
+      "X-Content-Type-Options": "nosniff",
+      "X-Frame-Options": "DENY"
+    });
+  });
+
+  it("does not apply the anti-framing headers beyond gold", () => {
+    expect(headerRules.filter(rule => rule.values["X-Frame-Options"]).map(rule => rule.path)).toEqual(["/pt-br/gold/*"]);
+  });
+});
diff --git a/apps/gold/public/assets/gold-bar-cutout.png b/apps/gold/public/assets/gold-bar-cutout.png
deleted file mode 100644
index bf18eefeb..000000000
Binary files a/apps/gold/public/assets/gold-bar-cutout.png and /dev/null differ
diff --git a/apps/gold/public/assets/gold-bar-cutout.webp b/apps/gold/public/assets/gold-bar-cutout.webp
new file mode 100644
index 000000000..01ac87d03
Binary files /dev/null and b/apps/gold/public/assets/gold-bar-cutout.webp differ
diff --git a/apps/gold/public/brand/ouro-wordmark.png b/apps/gold/public/brand/ouro-wordmark.png
index cee7b209f..0024a35f7 100644
Binary files a/apps/gold/public/brand/ouro-wordmark.png and b/apps/gold/public/brand/ouro-wordmark.png differ
diff --git a/apps/gold/src/App.jsx b/apps/gold/src/App.jsx
index ea1a65f17..1d79f2607 100644
--- a/apps/gold/src/App.jsx
+++ b/apps/gold/src/App.jsx
@@ -1,12 +1,12 @@
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { ArrowLeft, ArrowRight, Bank, CaretDown, Check, CheckCircle, Clock, Copy, EnvelopeSimple, Eye, EyeSlash, Fingerprint, Info, LockKey, SealCheck, ShieldCheck, SignOut, TrendUp, Wallet, WarningCircle, X } from "@phosphor-icons/react";
+import { ArrowLeft, ArrowRight, Bank, CaretDown, Check, CheckCircle, Clock, Copy, EnvelopeSimple, Eye, EyeSlash, Fingerprint, Info, LockKey, SealCheck, ShieldCheck, SignOut, TrendDown, TrendUp, Wallet, WarningCircle, X } from "@phosphor-icons/react";
 import { SellFlow } from "./SellFlow.jsx";
 import { MIN_BUY, QUICK_BUY_VALUES, DEFAULT_BUY, validBuyAmount, buyFeePercent } from "./lib/purchase-options.js";
 import { QRCodeSVG } from "qrcode.react";
 import { Area, AreaChart, CartesianGrid, ResponsiveContainer, Tooltip, XAxis } from "recharts";
-import { fetchPaxgMarket, getDemoMarket } from "./lib/market.js";
+import { CHART_PERIODS, chartWindow, fetchPaxgMarket, getDemoMarket } from "./lib/market.js";
 import { readPaxgBalance } from "./lib/paxg.js";
-import { addRampHistory, clearActiveRamp, getActiveRamp, getRampHistory, saveActiveRamp } from "./lib/pilot-store.js";
+import { addRampHistory, clearActiveRamp, failActiveRamp, getActiveRamp, getRampHistory, saveActiveRamp } from "./lib/pilot-store.js";
 import {
   classifyRamp,
   clearVortexSession,
@@ -16,10 +16,13 @@ import {
   getBrazilBuyReadiness,
   getPaxgAvailability,
   getBrazilKycUploads,
+  hasVortexSession,
   pollBrazilKyc,
   pollRamp,
+  rampStartDeadline,
   registerPaxgBuy,
   requestVortexOtp,
+  secondsUntilExpiry,
   startRampSafely,
   submitBrazilKyc,
   uploadKycDocument,
@@ -55,16 +58,16 @@ function Modal({ title, description, onClose, children, wide = false, closeDisab
 }
 
 function Landing({ onStart, onLearn }) {
-  return <main className="landing-shell"><header className="landing-topbar"><a href="#inicio" aria-label="ouro. início"><Logo /></a><button className="text-button" type="button" onClick={onStart}>Entrar</button></header><section className="landing-hero" id="inicio"><div className="landing-copy"><p className="eyebrow">COMPRE OURO COM PIX</p><h1>Comprar ouro<br />ficou simples<span className="gold-period">.</span></h1><p className="landing-lede">Escolha um valor. Pague com PIX.<br />{" "}Receba ouro com lastro físico, direto na sua carteira.</p><div className="landing-actions"><button className="button button--gold" type="button" onClick={onStart}>Comprar agora <ArrowRight size={19} weight="bold" /></button><button className="quiet-link" type="button" onClick={onLearn}>Por que é seguro?</button></div></div><div className="hero-product" aria-label="Barra de ouro físico"><img src={`${import.meta.env.BASE_URL}assets/gold-bar-cutout.png`} alt="Barra de ouro fino de um quilograma" /><div className="hero-balance-card"><strong>12,6 g</strong><div className="hairline" /><p>seu saldo em ouro</p></div></div></section><section className="trust-strip" aria-label="Informações essenciais"><span><Wallet size={31} /> <b>A partir de {formatBRL(MIN_BUY, 0)}</b></span><i aria-hidden="true" /><span><ShieldCheck size={34} /> <b>Ouro em custódia profissional</b></span><i aria-hidden="true" /><span><SealCheck size={34} /> <b>Emitido pela Paxos</b></span></section></main>;
+  return <main className="landing-shell"><header className="landing-topbar"><a href="#inicio" aria-label="ouro. início"><Logo /></a><button className="text-button" type="button" onClick={onStart}>Entrar</button></header><section className="landing-hero" id="inicio"><div className="landing-copy"><p className="eyebrow">COMPRE OURO COM PIX</p><h1>Comprar ouro<br />ficou simples<span className="gold-period">.</span></h1><p className="landing-lede">Escolha um valor. Pague com PIX.<br />{" "}Receba ouro com lastro físico, direto na sua carteira.</p><div className="landing-actions"><button className="button button--gold" type="button" onClick={onStart}>Comprar agora <ArrowRight size={19} weight="bold" /></button><button className="quiet-link" type="button" onClick={onLearn}>Por que é seguro?</button></div></div><div className="hero-product" aria-label="Barra de ouro físico"><img src={`${import.meta.env.BASE_URL}assets/gold-bar-cutout.webp`} alt="Barra de ouro fino de um quilograma" /><div className="hero-balance-card"><strong>12,6 g</strong><div className="hairline" /><p>seu saldo em ouro</p></div></div></section><section className="trust-strip" aria-label="Informações essenciais"><span><Wallet size={31} /> <b>A partir de {formatBRL(MIN_BUY, 0)}</b></span><i aria-hidden="true" /><span><ShieldCheck size={34} /> <b>Ouro em custódia profissional</b></span><i aria-hidden="true" /><span><SealCheck size={34} /> <b>Emitido pela Paxos</b></span></section></main>;
 }
 
 function Login({ onClose, onLogin, loading }) {
   const [showOtherMethods, setShowOtherMethods] = useState(false);
-  return <Modal title="Seu ouro começa aqui." description="Entre sem senha com uma conta que você já usa. Uma carteira segura será criada automaticamente para você." onClose={onClose}><div className="login-trust"><span><Fingerprint size={21} /> Você confirma cada movimentação</span><span><LockKey size={21} /> Seu ouro fica na sua carteira</span></div><div className="login-methods"><button className="button button--google" type="button" onClick={() => onLogin("google")} disabled={Boolean(loading)}><span className="google-mark" aria-hidden="true">G</span>{loading === "google" ? "Entrando…" : "Continuar com Google"}</button><button className="login-other-trigger" type="button" onClick={() => setShowOtherMethods((current) => !current)} aria-expanded={showOtherMethods}><span>Outras formas de entrar</span><CaretDown size={16} className={showOtherMethods ? "open" : ""} /></button>{showOtherMethods && <button className="button button--email" type="button" onClick={() => onLogin("email")} disabled={Boolean(loading)}><EnvelopeSimple size={22} />{loading === "email" ? "Entrando…" : "Continuar com e-mail"}</button>}</div><p className="legal-note">Ao continuar, você aceita os Termos de Uso e a Política de Privacidade.</p></Modal>;
+  return <Modal title="Seu ouro começa aqui." description="Entre sem senha com uma conta que você já usa. Uma carteira segura será criada automaticamente para você." onClose={onClose}><div className="login-trust"><span><Fingerprint size={21} /> Você confirma cada movimentação</span><span><LockKey size={21} /> Seu ouro fica na sua carteira</span></div><div className="login-methods"><button className="button button--google" type="button" onClick={() => onLogin("google")} disabled={Boolean(loading)}><span className="google-mark" aria-hidden="true">G</span>{loading === "google" ? "Entrando…" : "Continuar com Google"}</button><button className="login-other-trigger" type="button" onClick={() => setShowOtherMethods((current) => !current)} aria-expanded={showOtherMethods}><span>Outras formas de entrar</span><CaretDown size={16} className={showOtherMethods ? "open" : ""} /></button>{showOtherMethods && <button className="button button--email" type="button" onClick={() => onLogin("email")} disabled={Boolean(loading)}><EnvelopeSimple size={22} />{loading === "email" ? "Entrando…" : "Continuar com e-mail"}</button>}</div><p className="legal-note">Ao continuar, você aceita os <a href="/pt-br/terms-and-conditions/" target="_blank" rel="noreferrer">Termos de Uso</a> e a <a href="/pt-br/privacy-policy/" target="_blank" rel="noreferrer">Política de Privacidade</a>.</p></Modal>;
 }
 
 function Welcome({ firstName, onContinue }) {
-  return <Modal title={`Bem-vindo, ${firstName}.`} onClose={onContinue} wide><div className="welcome-grid"><div><p className="welcome-lede">Seu espaço para comprar e acompanhar ouro está pronto.</p><div className="welcome-points"><span><CheckCircle size={22} weight="fill" /><b>Conta criada</b><small>Sem senha e sem frase secreta.</small></span><span><Wallet size={22} weight="fill" /><b>Carteira protegida</b><small>As confirmações ficam nas suas mãos.</small></span><span><ShieldCheck size={22} weight="fill" /><b>Ouro lastreado</b><small>PAX Gold é lastreado em barras físicas.</small></span></div></div><div className="welcome-visual"><img src={`${import.meta.env.BASE_URL}assets/gold-bar-cutout.png`} alt="Barra de ouro" /><p><ShieldCheck size={18} weight="fill" /> Carteira criada com Privy</p></div></div><button className="button button--dark button--full" type="button" onClick={onContinue}>Ver meu painel <ArrowRight size={18} /></button></Modal>;
+  return <Modal title={`Bem-vindo, ${firstName}.`} onClose={onContinue} wide><div className="welcome-grid"><div><p className="welcome-lede">Seu espaço para comprar e acompanhar ouro está pronto.</p><div className="welcome-points"><span><CheckCircle size={22} weight="fill" /><b>Conta criada</b><small>Sem senha e sem frase secreta.</small></span><span><Wallet size={22} weight="fill" /><b>Carteira protegida</b><small>As confirmações ficam nas suas mãos.</small></span><span><ShieldCheck size={22} weight="fill" /><b>Ouro lastreado</b><small>PAX Gold é lastreado em barras físicas.</small></span></div></div><div className="welcome-visual"><img src={`${import.meta.env.BASE_URL}assets/gold-bar-cutout.webp`} alt="Barra de ouro" /><p><ShieldCheck size={18} weight="fill" /> Carteira criada com Privy</p></div></div><button className="button button--dark button--full" type="button" onClick={onContinue}>Ver meu painel <ArrowRight size={18} /></button></Modal>;
 }
 
 function AppHeader({ user, address, onLogout }) {
@@ -82,16 +85,15 @@ function GoldTooltip({ active, payload }) {
 
 function PriceChart({ market }) {
   const [period, setPeriod] = useState("30D");
-  const periods = ["7D", "30D", "1A", "Tudo"];
-  const shown = period === "7D" ? market.points.slice(-7) : period === "30D" ? market.points.slice(-30) : market.points;
+  const { points: shown, change } = chartWindow(market.points, period);
   if (market.source === "unavailable") return <section className="panel chart-panel"><span className="section-kicker">PREÇO DO OURO</span><h2>Preço indisponível</h2><p>A cotação atual será apresentada antes de confirmar sua operação.</p><a href="https://www.coingecko.com/en/coins/pax-gold" target="_blank" rel="noreferrer">Comparar no CoinGecko</a></section>;
-  return <section className="panel chart-panel" aria-labelledby="price-title"><div className="panel-heading"><div><span className="section-kicker">PREÇO DO OURO</span><h2 id="price-title">{formatBRL(market.brlPerGram)} <small>por grama</small></h2></div><span className={`market-change ${market.change >= 0 ? "positive" : "negative"}`}><TrendUp size={16} /> {market.change >= 0 ? "+" : ""}{market.change.toFixed(2)}%</span></div><div className="period-tabs" role="tablist" aria-label="Período do gráfico">{periods.map((item) => <button key={item} type="button" role="tab" aria-selected={period === item} className={period === item ? "active" : ""} onClick={() => setPeriod(item)}>{item}</button>)}</div><div className="chart-wrap" aria-label="Evolução do preço do PAXG em reais por grama"><ResponsiveContainer width="100%" height="100%"><AreaChart data={shown} margin={{ top: 8, right: 4, left: 4, bottom: 0 }}><defs><linearGradient id="goldArea" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="#c3a04c" stopOpacity={0.25} /><stop offset="100%" stopColor="#c3a04c" stopOpacity={0} /></linearGradient></defs><CartesianGrid vertical={false} stroke="#e8e1d5" strokeDasharray="2 5" /><XAxis dataKey="label" axisLine={false} tickLine={false} interval="preserveStartEnd" tick={{ fill: "#777169", fontSize: 11 }} /><Tooltip content={<GoldTooltip />} cursor={{ stroke: "#b69546", strokeDasharray: "3 3" }} /><Area type="monotone" dataKey="value" stroke="#a77f24" strokeWidth={2.2} fill="url(#goldArea)" activeDot={{ r: 4, fill: "#1f513f" }} /></AreaChart></ResponsiveContainer></div><div className="chart-footer"><span>1 PAXG = 1 onça troy de ouro fino</span><a href="https://www.coingecko.com/en/coins/pax-gold" target="_blank" rel="noreferrer">Comparar no CoinGecko <ArrowRight size={14} /></a></div></section>;
+  return <section className="panel chart-panel" aria-labelledby="price-title"><div className="panel-heading"><div><span className="section-kicker">PREÇO DO OURO</span><h2 id="price-title">{formatBRL(market.brlPerGram)} <small>por grama</small></h2></div><span className={`market-change ${change >= 0 ? "positive" : "negative"}`}>{change >= 0 ? <TrendUp size={16} /> : <TrendDown size={16} />} {change >= 0 ? "+" : ""}{formatNumber(change, 2)}%</span></div><div className="period-tabs" role="tablist" aria-label="Período do gráfico">{CHART_PERIODS.map((item) => <button key={item} type="button" role="tab" aria-selected={period === item} className={period === item ? "active" : ""} onClick={() => setPeriod(item)}>{item}</button>)}</div><div className="chart-wrap" aria-label="Evolução do preço do PAXG em reais por grama"><ResponsiveContainer width="100%" height="100%"><AreaChart data={shown} margin={{ top: 8, right: 4, left: 4, bottom: 0 }}><defs><linearGradient id="goldArea" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="#c3a04c" stopOpacity={0.25} /><stop offset="100%" stopColor="#c3a04c" stopOpacity={0} /></linearGradient></defs><CartesianGrid vertical={false} stroke="#e8e1d5" strokeDasharray="2 5" /><XAxis dataKey="label" axisLine={false} tickLine={false} interval="preserveStartEnd" tick={{ fill: "#777169", fontSize: 11 }} /><Tooltip content={<GoldTooltip />} cursor={{ stroke: "#b69546", strokeDasharray: "3 3" }} /><Area type="monotone" dataKey="value" stroke="#a77f24" strokeWidth={2.2} fill="url(#goldArea)" activeDot={{ r: 4, fill: "#1f513f" }} /></AreaChart></ResponsiveContainer></div><div className="chart-footer"><span>1 PAXG = 1 onça troy de ouro fino</span><a href="https://www.coingecko.com/en/coins/pax-gold" target="_blank" rel="noreferrer">Comparar no CoinGecko <ArrowRight size={14} /></a></div></section>;
 }
 
 function Dashboard({ user, address, grams, balanceLoading, balanceError, market, onBuy, onSell, availability, onLogout, onLearn, history, demo, pending, onResume }) {
   const [balanceVisible, setBalanceVisible] = useState(true);
   const value = market.brlPerGram == null ? null : grams * market.brlPerGram;
-  return <div className="app-shell" id="painel"><AppHeader user={user} address={address} onLogout={onLogout} />{demo && <div className="demo-banner"><span>Ambiente de teste</span> Nenhuma transação real será enviada.</div>}<main className="dashboard">{pending && <button className="resume-banner" type="button" onClick={onResume}><Clock size={20} /><span><b>Você tem uma operação em andamento</b><small>Toque para acompanhar sua operação.</small></span><ArrowRight size={18} /></button>}<section className="dashboard-intro"><div><p className="eyebrow">SEU OURO</p><p className="greeting">Olá, {user?.firstName || "Olá"}.</p></div><p>{balanceLoading ? "Atualizando…" : "Atualizado agora"}</p></section><section className="portfolio-grid"><article className="gold-balance panel"><div className="balance-head"><span>Saldo estimado</span><IconButton label={balanceVisible ? "Ocultar saldo" : "Mostrar saldo"} onClick={() => setBalanceVisible((value) => !value)}>{balanceVisible ? <Eye size={20} /> : <EyeSlash size={20} />}</IconButton></div><strong>{balanceLoading || value == null ? "—" : balanceVisible ? formatBRL(value) : "R$ •••••"}</strong><div className="gram-line"><span>{balanceVisible ? `${formatNumber(grams)} g de ouro` : "•••• g de ouro"}</span><small>PAXG · Ethereum</small></div>{balanceError && <p className="balance-warning"><WarningCircle size={15} /> Saldo indisponível agora. Tente novamente em instantes.</p>}<div className="balance-actions"><button className="button button--gold" type="button" onClick={onBuy} disabled={!address || !availability.buy}>Comprar ouro</button><button className="button button--outline" type="button" onClick={onSell} disabled={!address || balanceLoading || balanceError || grams <= 0 || !availability.sell}>Vender ouro</button></div><div className="ownership-note"><ShieldCheck size={18} weight="fill" /><span><b>Sob seu controle</b>O ouro fica na sua carteira, não conosco.</span></div></article><PriceChart market={market} /></section><section className="dashboard-lower"><article className="panel trust-card"><span className="section-kicker">POR TRÁS DO SEU OURO</span><h2>Ouro físico. Custódia profissional.</h2><p>Cada token PAXG representa ouro fino guardado em cofres profissionais e auditado pela Paxos.</p><button className="inline-button" type="button" onClick={onLearn}>Entenda como funciona <ArrowRight size={16} /></button></article><article className="panel activity-card"><div className="panel-heading"><div><span className="section-kicker">ATIVIDADE</span><h2>Movimentações</h2></div></div>{history.length === 0 ? <div className="empty-state"><Clock size={25} /><p>Nenhuma compra concluída ainda.</p><button type="button" onClick={onBuy}>Fazer primeira compra</button></div> : history.slice(0, 3).map((item) => <div className="activity-row" key={item.rampId}><span className="activity-icon"><Check size={16} /></span><span><b>{item.rampType === "SELL" ? "Venda de ouro" : "Compra de ouro"}</b><small>{new Date(item.completedAt).toLocaleDateString("pt-BR")}</small></span><span><b>{item.rampType === "SELL" ? "−" : "+"}{formatNumber(Number(item.rampType === "SELL" ? item.inputAmount : item.outputAmount) * 31.1034768)} g</b><small>{formatBRL(item.rampType === "SELL" ? item.outputAmount : item.inputAmount)}</small></span></div>)}</article></section><footer className="app-footer"><span>PAXG é emitido pela Paxos Trust Company.</span><div><button type="button" onClick={onLearn}>Segurança</button><a href="https://paxos.com/paxgold/" target="_blank" rel="noreferrer">Paxos</a><button type="button" onClick={onLearn}>Riscos</button></div></footer></main></div>;
+  return <div className="app-shell" id="painel"><AppHeader user={user} address={address} onLogout={onLogout} />{demo && <div className="demo-banner"><span>Ambiente de teste</span> Nenhuma transação real será enviada.</div>}<main className="dashboard">{pending && <button className="resume-banner" type="button" onClick={onResume}><Clock size={20} /><span><b>Você tem uma operação em andamento</b><small>Toque para acompanhar sua operação.</small></span><ArrowRight size={18} /></button>}<section className="dashboard-intro"><div><p className="eyebrow">SEU OURO</p><p className="greeting">Olá, {user?.firstName || "Olá"}.</p></div><p>{balanceLoading ? "Atualizando…" : "Atualizado agora"}</p></section><section className="portfolio-grid"><article className="gold-balance panel"><div className="balance-head"><span>Saldo estimado</span><IconButton label={balanceVisible ? "Ocultar saldo" : "Mostrar saldo"} onClick={() => setBalanceVisible((value) => !value)}>{balanceVisible ? <Eye size={20} /> : <EyeSlash size={20} />}</IconButton></div><strong>{balanceLoading || value == null ? "—" : balanceVisible ? formatBRL(value) : "R$ •••••"}</strong><div className="gram-line"><span>{balanceVisible ? `${formatNumber(grams)} g de ouro` : "•••• g de ouro"}</span><small>PAXG · Ethereum</small></div>{balanceError && <p className="balance-warning"><WarningCircle size={15} /> Saldo indisponível agora. Tente novamente em instantes.</p>}<div className="balance-actions"><button className="button button--gold" type="button" onClick={onBuy} disabled={!address || !availability.buy}>Comprar ouro</button><button className="button button--outline" type="button" onClick={onSell} disabled={!address || balanceLoading || balanceError || grams <= 0 || !availability.sell}>Vender ouro</button></div><div className="ownership-note"><ShieldCheck size={18} weight="fill" /><span><b>Sob seu controle</b>O ouro fica na sua carteira, não conosco.</span></div></article><PriceChart market={market} /></section><section className="dashboard-lower"><article className="panel trust-card"><span className="section-kicker">POR TRÁS DO SEU OURO</span><h2>Ouro físico. Custódia profissional.</h2><p>Cada token PAXG representa ouro fino guardado em cofres profissionais e auditado pela Paxos.</p><button className="inline-button" type="button" onClick={onLearn}>Entenda como funciona <ArrowRight size={16} /></button></article><article className="panel activity-card"><div className="panel-heading"><div><span className="section-kicker">ATIVIDADE</span><h2>Movimentações</h2></div></div>{history.length === 0 ? <div className="empty-state"><Clock size={25} /><p>Nenhuma compra concluída ainda.</p><button type="button" onClick={onBuy}>Fazer primeira compra</button></div> : history.slice(0, 3).map((item) => item.status === "failed" ? <div className="activity-row" key={item.rampId}><span className="activity-icon activity-icon--issue"><WarningCircle size={16} /></span><span><b>{item.rampType === "SELL" ? "Venda não concluída" : "Compra não concluída"}</b><small>{new Date(item.completedAt).toLocaleDateString("pt-BR")}</small><small className="activity-code">Código {item.rampId}</small></span><span><small>{formatBRL(item.rampType === "SELL" ? item.outputAmount : item.inputAmount)}</small></span></div> : <div className="activity-row" key={item.rampId}><span className="activity-icon"><Check size={16} /></span><span><b>{item.rampType === "SELL" ? "Venda de ouro" : "Compra de ouro"}</b><small>{new Date(item.completedAt).toLocaleDateString("pt-BR")}</small></span><span><b>{item.rampType === "SELL" ? "−" : "+"}{formatNumber(Number(item.rampType === "SELL" ? item.inputAmount : item.outputAmount) * 31.1034768)} g</b><small>{formatBRL(item.rampType === "SELL" ? item.outputAmount : item.inputAmount)}</small></span></div>)}</article></section><footer className="app-footer"><span>PAXG é emitido pela Paxos Trust Company.</span><div><button type="button" onClick={onLearn}>Segurança</button><a href="https://paxos.com/paxgold/" target="_blank" rel="noreferrer">Paxos</a><button type="button" onClick={onLearn}>Riscos</button></div></footer></main></div>;
 }
 
 function Progress({ current }) {
@@ -103,9 +105,9 @@ function QuoteBreakdown({ quote, amount }) {
   return <div className="quote-breakdown"><div><span>Valor da compra</span><b>{formatBRL(amount)}</b></div><div><span>Conversão e serviço</span><b>{formatBRL(quote.serviceFee)}</b></div><div><span>Rede Ethereum</span><b>{formatBRL(quote.networkFee)}</b></div><div className="quote-total"><span>Você recebe</span><b>{formatNumber(quote.grams)} g</b></div><small>Cotação temporária · todas as taxas já estão incluídas · sem margem adicional da ouro.</small></div>;
 }
 
-function AmountStep({ amount, setAmount, market, onNext }) {
+function AmountStep({ amount, setAmount, market, onNext, loading, error }) {
   const valid = validBuyAmount(amount);
-  return <div className="flow-step"><div className="flow-title"><span className="flow-icon"><Bank size={24} /></span><div><h3>Quanto deseja comprar?</h3><p>Você pagará este valor com PIX.</p></div></div><label className="amount-field"><span>Valor em reais</span><div><small>R$</small><input inputMode="numeric" autoFocus value={amount} onChange={(event) => setAmount(event.target.value.replace(/\D/g, ""))} aria-label="Valor da compra em reais" /></div></label><div className="quick-values">{QUICK_BUY_VALUES.map((value) => <button key={value} type="button" onClick={() => setAmount(String(value))}>{formatBRL(value, 0)}</button>)}</div><p className="conversion-hint">{valid && market.brlPerGram != null ? `Estimativa de mercado: ≈ ${formatNumber(Number(amount) / market.brlPerGram)} g antes das taxas` : `Compra mínima de ${formatBRL(MIN_BUY, 0)}`}</p>{valid && Number(amount) < 250 && <p className="legal-note">Comece com pouco para conhecer o serviço. As taxas pesam mais em compras pequenas. A venda também tem custos e exige ETH na carteira.</p>}<button className="button button--dark button--full" type="button" disabled={!valid} onClick={onNext}>Continuar <ArrowRight size={18} /></button></div>;
+  return <div className="flow-step"><div className="flow-title"><span className="flow-icon"><Bank size={24} /></span><div><h3>Quanto deseja comprar?</h3><p>Você pagará este valor com PIX.</p></div></div><label className="amount-field"><span>Valor em reais</span><div><small>R$</small><input inputMode="numeric" autoFocus value={amount} disabled={loading} onChange={(event) => setAmount(event.target.value.replace(/\D/g, ""))} aria-label="Valor da compra em reais" /></div></label><div className="quick-values">{QUICK_BUY_VALUES.map((value) => <button key={value} type="button" disabled={loading} onClick={() => setAmount(String(value))}>{formatBRL(value, 0)}</button>)}</div><p className="conversion-hint">{valid && market.brlPerGram != null ? `Estimativa de mercado: ≈ ${formatNumber(Number(amount) / market.brlPerGram)} g antes das taxas` : `Compra mínima de ${formatBRL(MIN_BUY, 0)}`}</p>{valid && Number(amount) < 250 && <p className="legal-note">Comece com pouco para conhecer o serviço. As taxas pesam mais em compras pequenas. A venda também tem custos e exige ETH na carteira.</p>}{error && <p className="field-error flow-error">{error}</p>}<button className="button button--dark button--full" type="button" disabled={!valid || loading} onClick={onNext}>{loading ? "Cotando…" : "Continuar"} <ArrowRight size={18} /></button></div>;
 }
 
 function OtpStep({ email, setEmail, otp, setOtp, sent, onSend, onVerify, loading, error, demo }) {
@@ -137,7 +139,7 @@ function KycStep({ quote, email, initialName, onApproved }) {
       }
       const url = uploads.selfieUpload.livenessUrl;
       setLivenessUrl(url);
-      setPrepared({ subAccountId: account.subAccountId, fullName: form.fullName.trim(), dateOfBirth: form.dateOfBirth, countryOfTaxId: "BR", taxIdNumber: taxId, email, country: "BR", state: form.state.toUpperCase(), city: form.city.trim(), zipCode: form.zipCode.replace(/\D/g, ""), streetAddress: form.streetAddress.trim(), uploadedSelfieId: uploads.selfieUpload.id, uploadedDocumentId: uploads.idUpload.id });
+      setPrepared({ subAccountId: account.subAccountId, fullName: form.fullName.trim(), dateOfBirth: form.dateOfBirth, countryOfTaxId: "BRA", taxIdNumber: taxId, email, country: "BRA", state: form.state.toUpperCase(), city: form.city.trim(), zipCode: form.zipCode.replace(/\D/g, ""), streetAddress: form.streetAddress.trim(), uploadedSelfieId: uploads.selfieUpload.id, uploadedDocumentId: uploads.idUpload.id });
       setPhase("liveness");
       if (livenessWindow) livenessWindow.location.replace(url);
     } catch (nextError) {
@@ -170,8 +172,10 @@ function ConfirmStep({ amount, quote, market, onNext, loading, error }) {
 }
 
 function PixStep({ ramp, quote, copied, onCopy, onPaid, loading, error }) {
-  const [seconds, setSeconds] = useState(() => Math.max(0, Math.floor((new Date(ramp.expiresAt || Date.now() + 600_000).getTime() - Date.now()) / 1000)));
-  useEffect(() => { const timer = setInterval(() => setSeconds((value) => Math.max(0, value - 1)), 1000); return () => clearInterval(timer); }, []);
+  const [expiresAt] = useState(() => rampStartDeadline(ramp) ?? Date.now() + 600_000);
+  const [seconds, setSeconds] = useState(() => secondsUntilExpiry(expiresAt));
+  // Read the clock on every tick: timers pause while the user pays in the banking app.
+  useEffect(() => { const timer = setInterval(() => setSeconds(secondsUntilExpiry(expiresAt)), 1000); return () => clearInterval(timer); }, [expiresAt]);
   const pixCode = ramp.depositQrCode || "";
   const minutes = String(Math.floor(seconds / 60)).padStart(2, "0");
   const remaining = String(seconds % 60).padStart(2, "0");
@@ -213,7 +217,7 @@ function TransactionFlow({ email, name, market, walletAddress, getEthereumProvid
     const result = await createPaxgQuote(Number(amount), walletAddress);
     clientRef.current = result.client;
     setQuote(result.quote);
-    const readiness = await getBrazilBuyReadiness(result.client);
+    const readiness = await getBrazilBuyReadiness();
     const required = String(readiness.kycStatus).toLowerCase() !== "approved";
     if (!required && !readiness.canBuy) throw new Error("Sua conta ainda não está liberada para comprar via PIX. Consulte a Vortex.");
     setKycRequired(required);
@@ -231,7 +235,7 @@ function TransactionFlow({ email, name, market, walletAddress, getEthereumProvid
       setQuote((value) => ({ ...(value || {}), grams: Number(current.outputAmount || resumeRamp.outputAmount || 0) * 31.1034768 }));
       const classification = classifyRamp(current);
       if (classification === "success") { if (!completedRef.current) { completedRef.current = true; clearActiveRamp(current.id); onComplete(current); } setStep("success"); }
-      else if (classification === "failure") { clearActiveRamp(current.id); throw new Error("Esta compra expirou ou não pôde ser concluída. Nenhum novo PIX foi gerado."); }
+      else if (classification === "failure") { failActiveRamp(current.id); throw new Error("Esta compra expirou ou não pôde ser concluída. Nenhum novo PIX foi gerado."); }
       else if (current.currentPhase === "initial" && current.depositQrCode && resumeRamp.stage !== "registering") setStep("pix");
       else if (current.currentPhase === "initial") throw new Error("O registro precisa ser conferido pela Vortex. Consulte o suporte com o código da operação; não faça um novo PIX.");
       else setStep("processing");
@@ -257,7 +261,7 @@ function TransactionFlow({ email, name, market, walletAddress, getEthereumProvid
         onComplete(finalRamp);
         setStep("success");
       } else if (classifyRamp(finalRamp) === "failure") {
-        clearActiveRamp(finalRamp.id);
+        failActiveRamp(finalRamp.id);
         setError("A compra expirou ou não pôde ser concluída. Se houve débito, consulte o suporte com o código da operação.");
         setStep("issue");
       }
@@ -267,6 +271,13 @@ function TransactionFlow({ email, name, market, walletAddress, getEthereumProvid
     return () => controller.abort();
   }, [ramp?.id, step]);
 
+  const continueFromAmount = async () => {
+    if (!hasVortexSession(vortexEmail)) { setStep("otp"); return; }
+    setLoading(true); setError("");
+    try { await prepareQuote(); }
+    catch (nextError) { if (nextError?.status === 401 || nextError?.code === "AUTH_REQUIRED") setStep("otp"); else setError(nextError.message || "Não foi possível preparar a cotação."); }
+    finally { setLoading(false); }
+  };
   const sendOtp = async () => { setLoading(true); setError(""); try { if (demo) await new Promise((resolve) => setTimeout(resolve, 350)); else await requestVortexOtp(vortexEmail); setOtpSent(true); } catch (nextError) { setError(nextError.message); } finally { setLoading(false); } };
   const verifyOtp = async () => {
     setLoading(true); setError("");
@@ -337,7 +348,7 @@ function TransactionFlow({ email, name, market, walletAddress, getEthereumProvid
   };
   const progress = step === "amount" ? 0 : ["otp", "kyc", "confirm", "resuming"].includes(step) ? 1 : 2;
   const closeDisabled = loading && ["confirm", "resuming"].includes(step);
-  return <Modal title="Comprar ouro" onClose={onClose} wide closeDisabled={closeDisabled}>{!["processing", "success", "issue"].includes(step) && <Progress current={progress} />}{step === "amount" && <AmountStep amount={amount} setAmount={setAmount} market={market} onNext={() => setStep("otp")} />}{step === "otp" && <OtpStep email={vortexEmail} setEmail={setVortexEmail} otp={otp} setOtp={setOtp} sent={otpSent} onSend={sendOtp} onVerify={verifyOtp} loading={loading} error={error} demo={demo} />}{step === "kyc" && <KycStep quote={quote} email={vortexEmail} initialName={name} onApproved={() => setStep("confirm")} />}{step === "confirm" && <ConfirmStep key={quote?.id} amount={amount} quote={quote} market={market} onNext={generatePix} loading={loading} error={error} />}{step === "resuming" && <div className="processing-step"><span className="processing-orb"><span /></span><h3>Retomando sua compra</h3><p>Estamos buscando o status mais recente com a Vortex.</p></div>}{step === "pix" && ramp && <PixStep ramp={ramp} quote={quote} copied={copied} onCopy={async () => { await navigator.clipboard?.writeText(ramp.depositQrCode); setCopied(true); }} onPaid={markPaid} loading={loading} error={error} />}{step === "processing" && <ProcessingStep ramp={ramp} onClose={onClose} />}{step === "success" && ramp && <SuccessStep ramp={ramp} onClose={onClose} />}{step === "issue" && <FlowIssue message={error} onRetry={resumeRamp ? loadExisting : () => { if (getActiveRamp(walletAddress)) { setError("Consulte o suporte com o código desta operação antes de tentar novamente."); return; } setError(""); setStep("amount"); }} onClose={onClose} />}{ramp?.id && <p className="operation-reference">Código da operação: <code>{ramp.id}</code></p>}{["otp", "kyc", "confirm"].includes(step) && !loading && <button className="back-button" type="button" onClick={() => setStep(step === "otp" ? "amount" : step === "kyc" ? "otp" : kycRequired ? "kyc" : "otp")}><ArrowLeft size={16} /> Voltar</button>}</Modal>;
+  return <Modal title="Comprar ouro" onClose={onClose} wide closeDisabled={closeDisabled}>{!["processing", "success", "issue"].includes(step) && <Progress current={progress} />}{step === "amount" && <AmountStep amount={amount} setAmount={setAmount} market={market} onNext={continueFromAmount} loading={loading} error={error} />}{step === "otp" && <OtpStep email={vortexEmail} setEmail={setVortexEmail} otp={otp} setOtp={setOtp} sent={otpSent} onSend={sendOtp} onVerify={verifyOtp} loading={loading} error={error} demo={demo} />}{step === "kyc" && <KycStep quote={quote} email={vortexEmail} initialName={name} onApproved={() => setStep("confirm")} />}{step === "confirm" && <ConfirmStep key={quote?.id} amount={amount} quote={quote} market={market} onNext={generatePix} loading={loading} error={error} />}{step === "resuming" && <div className="processing-step"><span className="processing-orb"><span /></span><h3>Retomando sua compra</h3><p>Estamos buscando o status mais recente com a Vortex.</p></div>}{step === "pix" && ramp && <PixStep ramp={ramp} quote={quote} copied={copied} onCopy={async () => { await navigator.clipboard?.writeText(ramp.depositQrCode); setCopied(true); }} onPaid={markPaid} loading={loading} error={error} />}{step === "processing" && <ProcessingStep ramp={ramp} onClose={onClose} />}{step === "success" && ramp && <SuccessStep ramp={ramp} onClose={onClose} />}{step === "issue" && <FlowIssue message={error} onRetry={resumeRamp ? loadExisting : () => { if (getActiveRamp(walletAddress)) { setError("Consulte o suporte com o código desta operação antes de tentar novamente."); return; } setError(""); setStep("amount"); }} onClose={onClose} />}{ramp?.id && <p className="operation-reference">Código da operação: <code>{ramp.id}</code></p>}{["otp", "kyc", "confirm"].includes(step) && !loading && <button className="back-button" type="button" onClick={() => { setError(""); setStep(step === "confirm" && kycRequired ? "kyc" : "amount"); }}><ArrowLeft size={16} /> Voltar</button>}</Modal>;
 }
 
 function LearnModal({ onClose }) {
@@ -356,7 +367,7 @@ export function App({ auth, demo = true }) {
   const [balanceError, setBalanceError] = useState(false);
   const [history, setHistory] = useState([]);
   const [pending, setPending] = useState(null);
-  const [market, setMarket] = useState(() => demo ? getDemoMarket() : { brlPerGram: null, points: [], change: 0, source: "unavailable" });
+  const [market, setMarket] = useState(() => demo ? getDemoMarket() : { brlPerGram: null, points: [], source: "unavailable" });
   const [authLoading, setAuthLoading] = useState("");
   const signedIn = auth?.authenticated || false;
 
@@ -381,7 +392,7 @@ export function App({ auth, demo = true }) {
     if (demo) setGrams((value) => Math.max(0, value + (ramp.type === "SELL" ? -Number(ramp.inputAmount) : Number(ramp.outputAmount)) * 31.1034768));
     window.setTimeout(loadBalance, 2_000);
   };
-  const closeFlow = () => { setFlowOpen(false); setPending(getActiveRamp(auth.address)); loadBalance(); };
+  const closeFlow = () => { setFlowOpen(false); setPending(getActiveRamp(auth.address)); setHistory(getRampHistory(auth.address)); loadBalance(); };
 
   if (!signedIn) return <><Landing onStart={() => setLoginOpen(true)} onLearn={() => setLearnOpen(true)} />{loginOpen && <Login onClose={() => setLoginOpen(false)} onLogin={startLogin} loading={authLoading} />}{learnOpen && <LearnModal onClose={() => setLearnOpen(false)} />}</>;
   return <><Dashboard user={auth.user} address={auth.address} grams={grams} balanceLoading={balanceLoading} balanceError={balanceError} market={market} onBuy={() => { setFlowType(pending?.rampType || "BUY"); setFlowOpen(true); }} onSell={() => { setFlowType(pending?.rampType || "SELL"); setFlowOpen(true); }} availability={availability} onLogout={logout} onLearn={() => setLearnOpen(true)} history={history} demo={demo} pending={pending} onResume={() => { setFlowType(pending?.rampType || "BUY"); setFlowOpen(true); }} />{welcomeOpen && <Welcome firstName={auth.user?.firstName || "Olá"} onContinue={() => setWelcomeOpen(false)} />}{flowOpen && flowType === "SELL" && <SellFlow ui={{ Modal, OtpStep, KycStep }} email={auth.user?.email || (demo ? DEMO_EMAIL : "")} name={auth.user?.name} walletAddress={auth.address} getEthereumProvider={auth.getEthereumProvider} demo={demo} availableGrams={grams} resumeRamp={pending} onClose={closeFlow} onComplete={completeTransaction} />}{flowOpen && flowType !== "SELL" && <TransactionFlow email={auth.user?.email || (demo ? DEMO_EMAIL : "")} name={auth.user?.name} market={market} walletAddress={auth.address} getEthereumProvider={auth.getEthereumProvider || (async () => null)} onClose={closeFlow} onComplete={completeTransaction} demo={demo} resumeRamp={pending} />}{learnOpen && <LearnModal onClose={() => setLearnOpen(false)} />}</>;
diff --git a/apps/gold/src/SellFlow.jsx b/apps/gold/src/SellFlow.jsx
index 52597616b..64b5ad926 100644
--- a/apps/gold/src/SellFlow.jsx
+++ b/apps/gold/src/SellFlow.jsx
@@ -2,8 +2,8 @@ import { useEffect, useRef, useState } from "react";
 import { Bank, CheckCircle, Copy, WarningCircle } from "@phosphor-icons/react";
 import { formatUnits } from "viem";
 import { gramsToPaxg, readPaxgBalance } from "./lib/paxg.js";
-import { clearActiveRamp, getActiveRamp, saveActiveRamp } from "./lib/pilot-store.js";
-import { classifyRamp, createPaxgSellQuote, createVortexClient, getBrazilBuyReadiness, getPaxgAvailability, pollRamp, registerPaxgSell, requestVortexOtp, startRampSafely, submitWalletTransactions, verifyVortexOtp } from "./lib/vortex.js";
+import { clearActiveRamp, failActiveRamp, getActiveRamp, saveActiveRamp } from "./lib/pilot-store.js";
+import { classifyRamp, createPaxgSellQuote, createVortexClient, getBrazilBuyReadiness, getPaxgAvailability, getRampWithUnsignedTxs, hasVortexSession, pollRamp, registerPaxgSell, requestVortexOtp, startRampSafely, submitWalletTransactions, verifyVortexOtp } from "./lib/vortex.js";
 
 const brl = (amount) => new Intl.NumberFormat("pt-BR", { style: "currency", currency: "BRL" }).format(Number(amount));
 const gramsLabel = (amount) => new Intl.NumberFormat("pt-BR", { maximumFractionDigits: 6 }).format(Number(amount));
@@ -37,6 +37,7 @@ export function SellFlow({ ui: { Modal, OtpStep, KycStep }, email, name, walletA
     catch (e) {
       setError(e.code === 4001 ? "Confirmação cancelada. Você pode continuar esta mesma operação." : e.message || "Não foi possível continuar.");
       if (e.status === 401 || e.code === "AUTH_REQUIRED") { setSent(false); setOtp(""); setStep("otp"); }
+      if (e.code === "START_WINDOW_CLOSED") setStep("issue");
     } finally { actionLock.current = false; setBusy(false); }
   };
 
@@ -52,7 +53,7 @@ export function SellFlow({ ui: { Modal, OtpStep, KycStep }, email, name, walletA
     const current = await client.current.getRampStatus(id);
     setRamp(current);
     if (classifyRamp(current) === "success") { complete(current); return; }
-    if (classifyRamp(current) === "failure") { setStep("issue"); throw new Error("Esta venda não foi concluída. Consulte o suporte com o código abaixo antes de tentar outra operação."); }
+    if (classifyRamp(current) === "failure") { failActiveRamp(current.id); setStep("issue"); throw new Error("Esta venda não foi concluída. Consulte o suporte com o código abaixo antes de tentar outra operação."); }
     setStep(current.currentPhase === "initial" ? "sign" : "processing");
   };
   useEffect(() => { if (initialResume.current) run(recover); }, []);
@@ -62,7 +63,7 @@ export function SellFlow({ ui: { Modal, OtpStep, KycStep }, email, name, walletA
     const controller = new AbortController();
     pollRamp(client.current, ramp.id, { signal: controller.signal, onUpdate: setRamp }).then((current) => {
       if (classifyRamp(current) === "success") complete(current);
-      else { setStep("issue"); setError("A venda não foi concluída. Consulte o suporte com o código da operação."); }
+      else { failActiveRamp(current.id); setStep("issue"); setError("A venda não foi concluída. Consulte o suporte com o código da operação."); }
     }).catch((e) => { if (e.name !== "AbortError") { setStep("recover"); setError(e.message); } });
     return () => controller.abort();
   }, [step, ramp?.id]);
@@ -80,12 +81,15 @@ export function SellFlow({ ui: { Modal, OtpStep, KycStep }, email, name, walletA
     setHasGas(balance > 0n);
     const result = await createPaxgSellQuote(maxAmount || gramsToPaxg(amount), walletAddress);
     client.current = result.client; setQuote(result.quote);
-    const readiness = await getBrazilBuyReadiness(result.client);
+    const readiness = await getBrazilBuyReadiness();
     if (readiness.kycStatus !== "approved") setStep("kyc");
     else if (!readiness.canSell) throw new Error("Sua conta ainda não está liberada para receber PIX. Verifique sua situação com a Vortex.");
     else setStep("review");
   };
 
+  // As in the buy flow: reuse a session verified in this tab for this e-mail, else ask for the code.
+  const continueFromAmount = () => hasVortexSession(otpEmail) ? run(prepareQuote) : setStep("otp");
+
   const chooseAll = () => run(async () => {
     if (demo) { setAmount(String(Math.floor(availableGrams * 1e6) / 1e6)); return; }
     const balance = await readPaxgBalance(await getEthereumProvider(), walletAddress);
@@ -110,22 +114,22 @@ export function SellFlow({ ui: { Modal, OtpStep, KycStep }, email, name, walletA
 
   const continueSigning = () => run(async () => {
     if (!client.current) client.current = await createVortexClient();
-    const current = await client.current.getRampStatus(active.id);
+    const current = await getRampWithUnsignedTxs(active.id);
     setRamp(current);
     if (classifyRamp(current) === "success") { complete(current); return; }
-    if (classifyRamp(current) === "failure") { setStep("issue"); throw new Error("Esta operação não pode ser retomada. Consulte o suporte."); }
+    if (classifyRamp(current) === "failure") { failActiveRamp(current.id); setStep("issue"); throw new Error("Esta operação não pode ser retomada. Consulte o suporte."); }
     if (current.currentPhase !== "initial") { setStep("processing"); return; }
     const saved = getActiveRamp(walletAddress);
     if (saved?.stage === "registering") throw new Error("O registro precisa ser conferido pela Vortex. Envie o código abaixo ao suporte; não faça uma nova venda.");
     const transactions = (current.unsignedTxs || []).filter((tx) => tx.signer?.toLowerCase() === walletAddress.toLowerCase());
     if (saved?.stage !== "ready" && !transactions.length) throw new Error("Não foi possível recuperar as confirmações. Consulte o suporte com o código abaixo.");
-    if (saved?.stage !== "ready") await submitWalletTransactions(client.current, current.id, transactions, walletAddress, await getEthereumProvider());
+    if (saved?.stage !== "ready") await submitWalletTransactions(client.current, current, transactions, walletAddress, await getEthereumProvider(), saved?.inputAmount);
     saveActiveRamp({ rampId: current.id, walletAddress, inputAmount: current.inputAmount, outputAmount: current.outputAmount, rampType: "SELL", stage: "ready" });
     setRamp(await startRampSafely(client.current, current.id)); setStep("processing");
   });
 
   return <Modal title="Vender ouro" onClose={onClose} wide closeDisabled={busy}>
-    {step === "amount" && <div className="flow-step"><div className="flow-title"><Bank size={28} /><div><h3>Ouro de volta em reais</h3><p>Receba na sua conta pelo PIX.</p></div></div><label className="amount-field"><span>Quantidade em gramas</span><div><input aria-label="Gramas para vender" inputMode="decimal" value={amount} onChange={(e) => { setMaxAmount(null); setAmount(e.target.value.replace(/[^\d,.]/g, "")); }} /><small>g</small></div></label><p className="conversion-hint">Disponível: {gramsLabel(availableGrams)} g <button className="inline-button" type="button" onClick={chooseAll} disabled={busy}>Usar tudo</button></p><label className="vortex-email-field"><span>Sua chave PIX</span><input value={pix} aria-label="Chave PIX" onChange={(e) => setPix(e.target.value)} placeholder="CPF, e-mail, celular ou chave aleatória" /></label><p className="legal-note">Use uma chave PIX da sua própria conta. Você revisará o valor líquido antes de confirmar.</p><button className="button button--dark button--full" disabled={!valid || busy} onClick={() => setStep("otp")}>Continuar</button></div>}
+    {step === "amount" && <div className="flow-step"><div className="flow-title"><Bank size={28} /><div><h3>Ouro de volta em reais</h3><p>Receba na sua conta pelo PIX.</p></div></div><label className="amount-field"><span>Quantidade em gramas</span><div><input aria-label="Gramas para vender" inputMode="decimal" value={amount} onChange={(e) => { setMaxAmount(null); setAmount(e.target.value.replace(/[^\d,.]/g, "")); }} /><small>g</small></div></label><p className="conversion-hint">Disponível: {gramsLabel(availableGrams)} g <button className="inline-button" type="button" onClick={chooseAll} disabled={busy}>Usar tudo</button></p><label className="vortex-email-field"><span>Sua chave PIX</span><input value={pix} aria-label="Chave PIX" onChange={(e) => setPix(e.target.value)} placeholder="CPF, e-mail, celular ou chave aleatória" /></label><p className="legal-note">Use uma chave PIX da sua própria conta. Você revisará o valor líquido antes de confirmar.</p><button className="button button--dark button--full" disabled={!valid || busy} onClick={continueFromAmount}>{busy ? "Cotando…" : "Continuar"}</button></div>}
     {step === "otp" && <OtpStep email={otpEmail} setEmail={setOtpEmail} otp={otp} setOtp={setOtp} sent={sent} loading={busy} error="" demo={demo} onSend={() => run(async () => { if (!demo) await requestVortexOtp(otpEmail); setSent(true); })} onVerify={() => run(async () => { if (demo) { if (otp !== "123456") throw new Error("Use 123456 no teste."); } else await verifyVortexOtp(otpEmail, otp); if (active) await recover(); else await prepareQuote(); })} />}
     {step === "kyc" && <KycStep quote={quote} email={otpEmail} initialName={name} onApproved={() => run(prepareQuote)} />}
     {step === "review" && quote && <div className="flow-step"><h3>Revise sua venda</h3><div className="quote-breakdown"><div><span>Ouro a vender</span><b>{gramsLabel(quote.grams)} g</b></div><div><span>Conversão e serviço</span><b>{brl(quote.serviceFee)}</b></div><div><span>Taxas na cotação</span><b>{brl(quote.networkFee)}</b></div><div className="quote-total"><span>Você recebe no PIX</span><b>{brl(quote.outputAmount)}</b></div><small>Taxas acima já descontadas do valor em reais.</small></div><p className="pix-recipient">Chave PIX: <strong>{pix}</strong></p><div className={hasGas === false ? "warning-card" : "info-card"}><WarningCircle size={22} /><span><b>Taxa da sua carteira Ethereum</b>As confirmações de rede são pagas em ETH e exibidas na carteira antes da aprovação. Essa taxa é adicional ao valor da cotação.{hasGas === false && " Sua carteira ainda não tem ETH. Adicione ETH na rede Ethereum ao endereço abaixo para continuar."}</span></div>{hasGas === false && <WalletAddress address={walletAddress} copied={copied} setCopied={setCopied} />}<label className="confirm-check"><input type="checkbox" checked={accepted} onChange={(e) => setAccepted(e.target.checked)} /><span>Conferi minha chave PIX, o valor a receber e as taxas de rede.</span></label><button className="button button--dark button--full" disabled={!accepted || busy || hasGas === false} onClick={execute}>{busy ? "Preparando a venda…" : "Confirmar venda"}</button><button className="link-button centered" disabled={busy} onClick={() => run(prepareQuote)}>Atualizar cotação e saldo de ETH</button></div>}
diff --git a/apps/gold/src/lib/market.js b/apps/gold/src/lib/market.js
index fa37088ad..bf25de470 100644
--- a/apps/gold/src/lib/market.js
+++ b/apps/gold/src/lib/market.js
@@ -1,10 +1,14 @@
-const PRICE_KEY = "satoshi:paxg-market:v1";
+const PRICE_KEY = "satoshi:paxg-market:v2";
 const MAX_AGE = 10 * 60 * 1000;
+const HISTORY_DAYS = 365;
+// Daily points per chart period: one more point than days, so the change spans the whole period.
+const PERIOD_POINTS = { "7D": 8, "30D": 31, "1A": HISTORY_DAYS + 1 };
+export const CHART_PERIODS = Object.keys(PERIOD_POINTS);
 
 function buildDemoPoints() {
-  const labels = Array.from({ length: 42 }, (_, index) => {
+  const labels = Array.from({ length: HISTORY_DAYS + 1 }, (_, index) => {
     const date = new Date();
-    date.setDate(date.getDate() - (41 - index));
+    date.setDate(date.getDate() - (HISTORY_DAYS - index));
     return new Intl.DateTimeFormat("pt-BR", { day: "2-digit", month: "short" }).format(date);
   });
   return labels.map((label, index) => ({ label, value: Number((559 + index * 0.47 + Math.sin(index / 2.8) * 4.2 + Math.cos(index / 5) * 2.1).toFixed(2)) }));
@@ -12,19 +16,26 @@ function buildDemoPoints() {
 
 export function getDemoMarket() {
   const points = buildDemoPoints();
-  return { brlPerGram: points.at(-1).value, brlPerOunce: points.at(-1).value * 31.1034768, change: 2.34, points, source: "demo" };
+  return { brlPerGram: points.at(-1).value, brlPerOunce: points.at(-1).value * 31.1034768, points, source: "demo" };
+}
+
+export function chartWindow(points, period) {
+  const shown = points.slice(-PERIOD_POINTS[period]);
+  const first = shown[0]?.value;
+  const last = shown.at(-1)?.value;
+  return { points: shown, change: first && last ? ((last - first) / first) * 100 : 0 };
 }
 
 export async function fetchPaxgMarket() {
   const cached = JSON.parse(localStorage.getItem(PRICE_KEY) || "null");
   if (cached && Date.now() - cached.savedAt < MAX_AGE) return cached.data;
-  const response = await fetch("https://api.coingecko.com/api/v3/coins/pax-gold/market_chart?vs_currency=brl&days=42&interval=daily", { headers: { accept: "application/json" } });
+  const response = await fetch(`https://api.coingecko.com/api/v3/coins/pax-gold/market_chart?vs_currency=brl&days=${HISTORY_DAYS}&interval=daily`, { headers: { accept: "application/json" } });
   if (!response.ok) throw new Error("Não foi possível atualizar o preço do ouro.");
   const json = await response.json();
   const points = json.prices.map(([timestamp, ouncePrice]) => ({ label: new Intl.DateTimeFormat("pt-BR", { day: "2-digit", month: "short" }).format(new Date(timestamp)), value: Number((ouncePrice / 31.1034768).toFixed(2)) }));
-  const first = points[0]?.value || 1;
-  const last = points.at(-1)?.value || first;
-  const data = { brlPerGram: last, brlPerOunce: last * 31.1034768, change: ((last - first) / first) * 100, points, source: "coingecko" };
+  if (!points.length) throw new Error("Não foi possível atualizar o preço do ouro.");
+  const last = points.at(-1).value;
+  const data = { brlPerGram: last, brlPerOunce: last * 31.1034768, points, source: "coingecko" };
   localStorage.setItem(PRICE_KEY, JSON.stringify({ savedAt: Date.now(), data }));
   return data;
 }
diff --git a/apps/gold/src/lib/paxg.js b/apps/gold/src/lib/paxg.js
index bd130ed61..1cc14390c 100644
--- a/apps/gold/src/lib/paxg.js
+++ b/apps/gold/src/lib/paxg.js
@@ -1,9 +1,12 @@
-import { createPublicClient, custom, formatUnits, getAddress, parseAbi, parseUnits, toHex } from "viem";
+import { createPublicClient, custom, decodeFunctionData, formatUnits, getAddress, parseAbi, parseUnits, toHex } from "viem";
 import { mainnet } from "viem/chains";
 
 export const PAXG_ADDRESS = getAddress("0x45804880De22913dAFE09f4980848ECE6EcbAf78");
+// Squid's router on Ethereum: the API builds a PAXG sell as an approve to it and a swap through it.
+export const SQUID_ROUTER = getAddress("0xce16F69375520ab01377ce7B88f5BA8C48F8D666");
 export const TROY_OUNCE_GRAMS = 31.1034768;
 const PAXG_ABI = parseAbi(["function balanceOf(address owner) view returns (uint256)"]);
+const APPROVE_ABI = parseAbi(["function approve(address spender, uint256 amount) returns (bool)"]);
 
 export async function readPaxgBalance(ethereumProvider, walletAddress) {
   if (!ethereumProvider || !walletAddress) return { paxg: 0, grams: 0 };
@@ -25,6 +28,24 @@ export async function assertSellBalance(provider, address, amount) {
   if (parseUnits(String(amount), 18) <= 0n || balance.raw < parseUnits(String(amount), 18)) throw new Error("Saldo de ouro insuficiente. Atualize o saldo ou escolha um valor menor.");
 }
 
+// The wallet only signs a PAXG sell as the API builds it: approve at most the sold amount to the Squid
+// router, then the router swap. The swap calldata is opaque, so the approval bounds what can be lost.
+export function assertPaxgSellTransactions(transactions, { walletAddress, inputAmount }) {
+  let valid = false;
+  try {
+    const [approve, swap] = transactions;
+    const { functionName, args: [spender, amount] } = decodeFunctionData({ abi: APPROVE_ABI, data: approve.txData.data });
+    valid = transactions.length === 2 && approve.phase === "squidRouterApprove" && swap.phase === "squidRouterSwap"
+      && transactions.every((tx) => tx.network === "ethereum" && getAddress(tx.signer) === getAddress(walletAddress))
+      && getAddress(approve.txData.to) === PAXG_ADDRESS && BigInt(approve.txData.value || 0) === 0n
+      // decodeFunctionData ignores trailing bytes; approve(address,uint256) calldata is exactly 4 + 2 * 32 bytes.
+      && approve.txData.data.length === 138 && functionName === "approve"
+      && getAddress(spender) === SQUID_ROUTER && amount <= parseUnits(String(inputAmount), 18)
+      && getAddress(swap.txData.to) === SQUID_ROUTER;
+  } catch { valid = false; }
+  if (!valid) throw new Error("As confirmações recebidas não correspondem a esta venda. Não confirme nada e consulte o suporte com o código da operação.");
+}
+
 export function ethereumTransaction(transaction, address) {
   if (transaction.chainId != null && BigInt(transaction.chainId) !== 1n) throw new Error("A transação não pertence à rede Ethereum.");
   const tx = { from: getAddress(address), to: getAddress(transaction.to), data: transaction.data || "0x" };
diff --git a/apps/gold/src/lib/pilot-store.js b/apps/gold/src/lib/pilot-store.js
index b642fa1cb..eede9ff33 100644
--- a/apps/gold/src/lib/pilot-store.js
+++ b/apps/gold/src/lib/pilot-store.js
@@ -29,6 +29,15 @@ export function clearActiveRamp(rampId) {
   if (!rampId || active?.rampId === rampId) localStorage.removeItem(ACTIVE_KEY);
 }
 
+// A failed or abandoned operation stops blocking new ones but stays listed with its code for support.
+export function failActiveRamp(rampId) {
+  const active = read(ACTIVE_KEY, null);
+  if (!rampId || active?.rampId !== rampId) return;
+  const { walletAddress, inputAmount, outputAmount, rampType } = active;
+  addRampHistory({ rampId, walletAddress, inputAmount, outputAmount, rampType, status: "failed" });
+  localStorage.removeItem(ACTIVE_KEY);
+}
+
 export function addRampHistory(item) {
   const history = read(HISTORY_KEY, []);
   const next = [{ ...item, completedAt: Date.now() }, ...history.filter((entry) => entry.rampId !== item.rampId)].slice(0, 12);
diff --git a/apps/gold/src/lib/vortex.js b/apps/gold/src/lib/vortex.js
index 8d34cf3c4..c8371bbf2 100644
--- a/apps/gold/src/lib/vortex.js
+++ b/apps/gold/src/lib/vortex.js
@@ -1,6 +1,6 @@
 import { storeEphemeralRampKeys } from "./ephemeral-store.js";
-import { PAXG_ADDRESS, assertSellBalance, sendEthereumTransaction } from "./paxg.js";
-import { saveActiveRamp, getActiveRamp, saveTransactionCheckpoint } from "./pilot-store.js";
+import { PAXG_ADDRESS, assertPaxgSellTransactions, assertSellBalance, sendEthereumTransaction } from "./paxg.js";
+import { failActiveRamp, saveActiveRamp, getActiveRamp, saveTransactionCheckpoint } from "./pilot-store.js";
 
 const ENV = import.meta.env || {};
 // Same-origin by default: the Vortex Netlify site proxies /api/<env>/* to the API, so a
@@ -85,12 +85,20 @@ export function setVortexSession(value) {
 export function clearVortexSession() { storage()?.removeItem(ACCESS_KEY); }
 
 export async function requestVortexOtp(email) {
-  return api("/v1/auth/request-otp", { method: "POST", body: JSON.stringify({ email: String(email).trim().toLowerCase() }) });
+  // Without a locale the API sends the English e-mail and resets the user's stored locale to en-US.
+  return api("/v1/auth/request-otp", { method: "POST", body: JSON.stringify({ email: String(email).trim().toLowerCase(), locale: "pt-BR" }) });
 }
 
 export async function verifyVortexOtp(email, token) {
-  const session = await api("/v1/auth/verify-otp", { method: "POST", body: JSON.stringify({ email: String(email).trim().toLowerCase(), token: String(token).replace(/\D/g, "") }) });
-  return setVortexSession(session);
+  const verifiedEmail = String(email).trim().toLowerCase();
+  const session = await api("/v1/auth/verify-otp", { method: "POST", body: JSON.stringify({ email: verifiedEmail, token: String(token).replace(/\D/g, "") }) });
+  // Kept with the session, like the widget's stored user e-mail, so it is only reused for that address.
+  return setVortexSession({ ...session, email: verifiedEmail });
+}
+
+// A session verified in this tab for the same e-mail skips the code step; a rejected one falls back to it.
+export function hasVortexSession(email) {
+  return getVortexSession()?.email === String(email || "").trim().toLowerCase();
 }
 
 export async function refreshVortexSession() {
@@ -100,8 +108,10 @@ export async function refreshVortexSession() {
     clearVortexSession();
     throw new VortexError("Sua sessão de segurança expirou. Solicite um novo código.", { status: 401, code: "SESSION_EXPIRED" });
   }
+  // Only a 401 means the refresh token is invalid (security spec, Supabase OTP rule 9); a network
+  // error or a 503 must keep the session so the user is not logged out mid-operation.
   refreshPromise = api("/v1/auth/refresh", { method: "POST", body: JSON.stringify({ refresh_token: session.refresh_token }) })
-    .then(setVortexSession).catch((error) => { clearVortexSession(); throw error; }).finally(() => { refreshPromise = null; });
+    .then((next) => setVortexSession({ ...next, email: session.email })).catch((error) => { if (error.status === 401) clearVortexSession(); throw error; }).finally(() => { refreshPromise = null; });
   return refreshPromise;
 }
 
@@ -174,32 +184,48 @@ export async function createPaxgSellQuote(amount, walletAddress) {
   return { client, quote: normalizeQuote(quote) };
 }
 
-export async function getBrazilBuyReadiness(client) {
-  const info = await client.getRampInfo();
-  const entries = Object.entries(info?.corridors || {});
-  const match = entries.find(([key]) => /^(BR|BRL|PIX|Brazil)$/i.test(key));
-  return match ? { corridor: match[0], ...match[1] } : { corridor: null, kycStatus: "not_started", canBuy: false, canSell: false };
+// Reads the signed-in user's own Avenia account with the OTP session, as the widget does before it
+// skips KYC. /v1/ramp-info cannot be used: it only reports on the owner of an API credential.
+export async function getBrazilBuyReadiness() {
+  try {
+    const { identityStatus } = await authenticatedApi("/v1/brl/getUser", { method: "GET" });
+    const approved = identityStatus === "CONFIRMED";
+    return { kycStatus: approved ? "approved" : "pending", canBuy: approved, canSell: approved };
+  } catch (error) {
+    // 400/404: the user has no approved, provisioned Avenia account yet.
+    if (error.status === 400 || error.status === 404) return { kycStatus: "not_started", canBuy: false, canSell: false };
+    throw error;
+  }
 }
 
-export async function submitWalletTransactions(client, rampId, unsignedTransactions, walletAddress, ethereumProvider) {
+// The API refuses to record or start a ramp after its start deadline, so a transaction broadcast later
+// would strand the gold. The margin covers the swap receipt wait (up to 3 minutes), the update and the start.
+const SIGNING_MARGIN_MS = 4 * 60_000;
+
+// inputAmount is the PAXG amount this device quoted, never the API's, and bounds the approval.
+export async function submitWalletTransactions(client, ramp, unsignedTransactions, walletAddress, ethereumProvider, inputAmount) {
   if (!unsignedTransactions?.length) return;
+  assertPaxgSellTransactions(unsignedTransactions, { walletAddress, inputAmount });
   if (!ethereumProvider) throw new VortexError("A carteira Privy ainda não está pronta para confirmar a operação.", { code: "WALLET_NOT_READY" });
+  const deadline = rampStartDeadline(ramp);
   await ethereumProvider.request({ method: "wallet_switchEthereumChain", params: [{ chainId: "0x1" }] });
-  await client.submitUserTransactions(rampId, unsignedTransactions, { includeDomainType: true, signTypedData: async (payload) => {
-    if (payload.domain?.chainId && BigInt(payload.domain.chainId) !== 1n) throw new Error("A confirmação não pertence à rede Ethereum.");
-    return ethereumProvider.request({ method: "eth_signTypedData_v4", params: [walletAddress, JSON.stringify(payload)] });
-  }, sendTransaction: async (transaction, context) => {
+  await client.submitUserTransactions(ramp.id, unsignedTransactions, { sendTransaction: async (transaction, context) => {
     const phase = context.unsignedTransaction.phase;
     const saved = getActiveRamp(walletAddress);
-    const previousHash = saved?.rampId === rampId ? saved.transactions?.[phase] : null;
-    return sendEthereumTransaction(ethereumProvider, walletAddress, transaction, { previousHash, onBroadcast: (hash) => saveTransactionCheckpoint(rampId, phase, hash) });
+    const previousHash = saved?.rampId === ramp.id ? saved.transactions?.[phase] : null;
+    if (!previousHash && !(deadline - Date.now() > SIGNING_MARGIN_MS)) {
+      // Nothing has left the wallet yet, so the dead ramp must stop blocking a new sale.
+      failActiveRamp(ramp.id);
+      throw new VortexError("O prazo desta venda terminou antes do envio do seu ouro. Seu ouro continua na carteira; faça uma nova venda.", { code: "START_WINDOW_CLOSED" });
+    }
+    return sendEthereumTransaction(ethereumProvider, walletAddress, transaction, { previousHash, onBroadcast: (hash) => saveTransactionCheckpoint(ramp.id, phase, hash) });
   } });
 }
 
 export async function registerPaxgBuy({ client, quote, walletAddress, ethereumProvider }) {
   if (!walletAddress) throw new VortexError("Sua carteira Privy ainda está sendo preparada. Aguarde alguns segundos.", { code: "WALLET_NOT_READY" });
   const { rampProcess, unsignedTransactions } = await client.registerRamp(quote.rawQuote || quote, { destinationAddress: walletAddress });
-  await submitWalletTransactions(client, rampProcess.id, unsignedTransactions, walletAddress, ethereumProvider);
+  await submitWalletTransactions(client, rampProcess, unsignedTransactions, walletAddress, ethereumProvider);
   return rampProcess;
 }
 
@@ -208,10 +234,15 @@ export async function registerPaxgSell({ client, quote, walletAddress, ethereumP
   const result = await client.registerRamp(quote.rawQuote || quote, { walletAddress, pixDestination: pixDestination.trim() });
   saveActiveRamp({ rampId: result.rampProcess.id, walletAddress, inputAmount: quote.inputAmount, outputAmount: quote.outputAmount, rampType: "SELL", stage: "signing" });
   onRegistered?.(result.rampProcess);
-  await submitWalletTransactions(client, result.rampProcess.id, result.unsignedTransactions, walletAddress, ethereumProvider);
+  await submitWalletTransactions(client, result.rampProcess, result.unsignedTransactions, walletAddress, ethereumProvider, quote.inputAmount);
   return result.rampProcess;
 }
 
+// The SDK's status call omits unsignedTxs; resuming a sell needs them to ask the wallet again.
+export async function getRampWithUnsignedTxs(rampId) {
+  return authenticatedApi(`/v1/ramp/${encodeURIComponent(rampId)}?showUnsignedTxs=true`, { method: "GET" });
+}
+
 export async function startRampSafely(client, rampId) {
   try { return await client.startRamp(rampId); }
   catch (error) {
@@ -226,24 +257,49 @@ export async function startRampSafely(client, rampId) {
 export const SUCCESS_STATUSES = ["completed", "complete", "success"];
 export const FAILURE_STATUSES = ["failed", "cancelled", "expired", "timedout", "timed_out"];
 
-export function classifyRamp(ramp) {
+// The API refuses to start a ramp 15 minutes after registration and only ever starts a paid PIX ramp
+// later through its unhandled-payment worker (every 15 minutes). A ramp still initial an hour after
+// registration is abandoned and must stop blocking new operations on this device.
+const ABANDONED_AFTER_MS = 60 * 60_000;
+
+export function classifyRamp(ramp, now = Date.now()) {
   const status = String(ramp?.status || "").toLowerCase();
   const phase = String(ramp?.currentPhase || "").toLowerCase();
   if (FAILURE_STATUSES.includes(status) || ["failed", "timedout"].includes(phase)) return "failure";
   if (SUCCESS_STATUSES.includes(status) || phase === "complete") return "success";
+  if (phase === "initial" && Date.parse(ramp?.createdAt) + ABANDONED_AFTER_MS < now) return "failure";
   if (ramp?.depositQrCode && phase === "initial") return "awaiting_payment";
   return "processing";
 }
 
-export async function pollRamp(client, rampId, { onUpdate, intervalMs = 4_000, timeoutMs = 20 * 60_000, signal } = {}) {
+// Status responses carry createdAt but no expiresAt; start is refused 15 minutes after registration.
+export function rampStartDeadline(ramp) {
+  if (ramp?.expiresAt) return new Date(ramp.expiresAt).getTime();
+  return ramp?.createdAt ? Date.parse(ramp.createdAt) + 15 * 60_000 : null;
+}
+
+export function secondsUntilExpiry(expiresAt, now = Date.now()) {
+  return Math.max(0, Math.floor((new Date(expiresAt).getTime() - now) / 1000));
+}
+
+// No response, a timeout, rate limiting or a server error; auth and validation errors are final.
+function isTransientError(error) {
+  const status = Number(error?.status || 0);
+  return [0, 408, 425, 429].includes(status) || status >= 500;
+}
+
+export async function pollRamp(client, rampId, { onUpdate, intervalMs = 4_000, timeoutMs = 20 * 60_000, maxConsecutiveErrors = 5, signal } = {}) {
   const startedAt = Date.now();
+  let failures = 0;
   while (Date.now() - startedAt < timeoutMs) {
     if (signal?.aborted) throw new DOMException("Aborted", "AbortError");
-    const ramp = await client.getRampStatus(rampId);
-    onUpdate?.(ramp);
-    const classification = classifyRamp(ramp);
-    if (["success", "failure"].includes(classification)) {
-      return ramp;
+    let ramp = null;
+    // A mobile network blip must not end the tracking of a ramp that keeps running server-side.
+    try { ramp = await client.getRampStatus(rampId); failures = 0; }
+    catch (error) { if (!isTransientError(error) || ++failures >= maxConsecutiveErrors) throw error; }
+    if (ramp) {
+      onUpdate?.(ramp);
+      if (["success", "failure"].includes(classifyRamp(ramp))) return ramp;
     }
     await new Promise((resolve, reject) => {
       const abort = () => { clearTimeout(timer); reject(new DOMException("Aborted", "AbortError")); };
diff --git a/apps/gold/src/styles.css b/apps/gold/src/styles.css
index 12e4f12be..60c3c0cac 100644
--- a/apps/gold/src/styles.css
+++ b/apps/gold/src/styles.css
@@ -91,7 +91,7 @@ h1 { margin-bottom: 0; font-size: clamp(82px,7.3vw,119px); line-height: .83; }
 .login-other-trigger { min-height: 42px; display: flex; align-items: center; justify-content: center; gap: 7px; border: 0; background: transparent; color: #5f5a52; cursor: pointer; font-size: 13px; text-decoration: underline; text-underline-offset: 4px; }
 .login-other-trigger svg { transition: transform 160ms ease; }
 .login-other-trigger svg.open { transform: rotate(180deg); }
-.legal-note { margin: 16px 8px 0; color: #837d74; font-size: 11px; line-height: 1.5; text-align: center; }
+.legal-note { margin: 16px 8px 0; color: #6b665f; font-size: 12px; line-height: 1.5; text-align: center; }
 .welcome-grid { display: grid; grid-template-columns: 1.08fr .92fr; gap: 24px; margin: 26px 0; }
 .welcome-lede { color: var(--muted); font-size: 18px; line-height: 1.5; }
 .welcome-points { display: grid; gap: 16px; }
@@ -172,6 +172,8 @@ h1 { margin-bottom: 0; font-size: clamp(82px,7.3vw,119px); line-height: .83; }
 .activity-row > span:last-child { text-align: right; }
 .activity-row b { font-size: 13px; }
 .activity-row small { margin-top: 2px; color: var(--muted); font-size: 11px; }
+.activity-icon--issue { background: rgba(168,73,53,.1); color: var(--red); }
+.activity-code { overflow-wrap: anywhere; user-select: all; }
 .app-footer { display: flex; align-items: center; justify-content: space-between; padding: 28px 4px 0; color: var(--muted); font-size: 11px; }
 .app-footer div { display: flex; gap: 20px; }
 .app-footer button, .app-footer a { padding: 0; border: 0; background: transparent; color: inherit; cursor: pointer; text-decoration: none; }
diff --git a/apps/gold/tests/market.test.mjs b/apps/gold/tests/market.test.mjs
new file mode 100644
index 000000000..7c8359ddf
--- /dev/null
+++ b/apps/gold/tests/market.test.mjs
@@ -0,0 +1,44 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { CHART_PERIODS, chartWindow, fetchPaxgMarket } from "../src/lib/market.js";
+
+const memory = new Map();
+globalThis.localStorage = { getItem: (key) => memory.get(key) ?? null, setItem: (key, value) => memory.set(key, value), removeItem: (key) => memory.delete(key) };
+
+const dailySeries = (length) => Array.from({ length }, (_, index) => ({ label: String(index), value: 100 + index }));
+
+test("each chart period spans its full length and reports its own change", () => {
+  assert.deepEqual(CHART_PERIODS, ["7D", "30D", "1A"]);
+  const year = dailySeries(366);
+  const week = chartWindow(year, "7D");
+  assert.equal(week.points.length, 8);
+  assert.equal(week.change, ((465 - 458) / 458) * 100);
+  assert.equal(chartWindow(year, "30D").points.length, 31);
+  const all = chartWindow(year, "1A");
+  assert.equal(all.points.length, 366);
+  assert.equal(all.change, 365);
+  assert.equal(chartWindow([], "7D").change, 0);
+});
+
+test("the one-year chart is backed by a year of daily prices", async () => {
+  const old = globalThis.fetch;
+  let requested = "";
+  try {
+    globalThis.fetch = async (url) => {
+      requested = url;
+      return new Response(JSON.stringify({ prices: [[Date.UTC(2025, 8, 26), 600 * 31.1034768], [Date.UTC(2026, 8, 25), 700 * 31.1034768]] }));
+    };
+    const market = await fetchPaxgMarket();
+    assert.match(requested, /days=365&interval=daily/);
+    assert.equal(market.brlPerGram, 700);
+    assert.equal(market.points.length, 2);
+  } finally { globalThis.fetch = old; memory.clear(); }
+});
+
+test("an empty price series leaves the price unavailable instead of inventing one", async () => {
+  const old = globalThis.fetch;
+  try {
+    globalThis.fetch = async () => new Response(JSON.stringify({ prices: [] }));
+    await assert.rejects(fetchPaxgMarket());
+  } finally { globalThis.fetch = old; memory.clear(); }
+});
diff --git a/apps/gold/tests/pilot-safety.test.mjs b/apps/gold/tests/pilot-safety.test.mjs
index 11c99e5be..f4634b803 100644
--- a/apps/gold/tests/pilot-safety.test.mjs
+++ b/apps/gold/tests/pilot-safety.test.mjs
@@ -1,8 +1,9 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { buildPaxgSellRequest, validatePaxgQuote, normalizeQuote, classifyRamp, getBrazilBuyReadiness, getPaxgAvailability, setVortexSession, getFreshAccessToken, clearVortexSession, submitWalletTransactions } from '../src/lib/vortex.js';
-import { gramsToPaxg, ethereumTransaction, sendEthereumTransaction, PAXG_ADDRESS } from '../src/lib/paxg.js';
-import { saveActiveRamp, getActiveRamp, saveTransactionCheckpoint, clearActiveRamp } from '../src/lib/pilot-store.js';
+import { buildPaxgSellRequest, validatePaxgQuote, normalizeQuote, classifyRamp, getBrazilBuyReadiness, getPaxgAvailability, getRampWithUnsignedTxs, hasVortexSession, requestVortexOtp, setVortexSession, getFreshAccessToken, getVortexSession, clearVortexSession, submitWalletTransactions, verifyVortexOtp } from '../src/lib/vortex.js';
+import { gramsToPaxg, ethereumTransaction, sendEthereumTransaction, assertPaxgSellTransactions, PAXG_ADDRESS, SQUID_ROUTER } from '../src/lib/paxg.js';
+import { encodeFunctionData, parseAbi, parseUnits } from 'viem';
+import { saveActiveRamp, getActiveRamp, saveTransactionCheckpoint, clearActiveRamp, failActiveRamp, getRampHistory } from '../src/lib/pilot-store.js';
 
 const address = '0x0000000000000000000000000000000000000001';
 const quote = () => ({ id:'test', rampType:'SELL', from:'ethereum', to:'pix', inputCurrency:'PAXG', outputCurrency:'BRL', network:'ethereum', inputAmount:'0.02', outputAmount:'440', expiresAt:new Date(Date.now()+60000).toISOString(), networkFeeFiat:'1', processingFeeFiat:'2', partnerFeeFiat:'0', totalFeeFiat:'3', feeCurrency:'BRL' });
@@ -26,10 +27,26 @@ test('grams conversion floors precisely, without floating point oversell',()=>{
   assert.equal(gramsToPaxg('31.1034768'),'1');
   assert.equal(gramsToPaxg('0,31103476'),'0.009999999742794027');
 });
-test('failure overrides conflicting completion and no other country enables Brazil',async()=>{
+test('failure overrides conflicting completion',()=>{
   assert.equal(classifyRamp({status:'failed',currentPhase:'complete'}),'failure');
-  assert.equal((await getBrazilBuyReadiness({getRampInfo:async()=>({corridors:{EU:{kycStatus:'approved',canBuy:true}}})})).canBuy,false);
-  assert.equal((await getBrazilBuyReadiness({getRampInfo:async()=>({corridors:{BR:{kycStatus:'approved',canBuy:true,canSell:true}}})})).canSell,true);
+});
+test('Brazil readiness reads the signed-in user\'s own Avenia account with the OTP session',async()=>{
+  const old=globalThis.fetch;const seen=[];let reply;
+  const jwt=exp=>'e30.'+Buffer.from(JSON.stringify({exp})).toString('base64url')+'.x';
+  try {
+    setVortexSession({access_token:jwt(Math.floor(Date.now()/1000)+3600),refresh_token:'fake-test-only'});
+    globalThis.fetch=async(url,init)=>{seen.push({url,init});return new Response(JSON.stringify(reply.body),{status:reply.status});};
+    reply={status:200,body:{identityStatus:'CONFIRMED',kycLevel:1,subAccountId:'s1',evmAddress:address}};
+    assert.deepEqual(await getBrazilBuyReadiness(),{kycStatus:'approved',canBuy:true,canSell:true});
+    assert.match(seen[0].url,/\/v1\/brl\/getUser$/);
+    assert.match(seen[0].init.headers.Authorization,/^Bearer /);
+    reply={status:200,body:{identityStatus:'PENDING',subAccountId:'s1'}};
+    assert.equal((await getBrazilBuyReadiness()).canBuy,false);
+    reply={status:400,body:{error:'No completed provider profile found for this API key user.'}};
+    assert.deepEqual(await getBrazilBuyReadiness(),{kycStatus:'not_started',canBuy:false,canSell:false});
+    reply={status:500,body:{error:'unavailable'}};
+    await assert.rejects(getBrazilBuyReadiness());
+  } finally {clearVortexSession();globalThis.fetch=old;}
 });
 test('token discovery requires canonical address and direction',async()=>{
   const old=globalThis.fetch;
@@ -49,6 +66,14 @@ test('transaction checkpoint survives stage changes and is wallet scoped',()=>{
   assert.throws(()=>saveTransactionCheckpoint('r2','approve','0xabc'));
   clearActiveRamp('r2'); assert.ok(getActiveRamp(address)); clearActiveRamp('r1');
 });
+test('a failed operation unblocks the wallet but stays in its history with the code',()=>{
+  saveActiveRamp({rampId:'r3',walletAddress:address,inputAmount:'0.02',outputAmount:'440',rampType:'SELL'});
+  failActiveRamp('other'); assert.equal(getActiveRamp(address).rampId,'r3');
+  failActiveRamp('r3');
+  assert.equal(getActiveRamp(address),null);
+  assert.deepEqual(getRampHistory(address).map(({completedAt,...item})=>item),[{rampId:'r3',walletAddress:address,inputAmount:'0.02',outputAmount:'440',rampType:'SELL',status:'failed'}]);
+  memory.clear();
+});
 test('Ethereum RPC transaction whitelist rejects other chains',()=>{
   assert.deepEqual(ethereumTransaction({to:PAXG_ADDRESS,value:'10',gas:21000,chainId:1,unexpected:'omit'},address),{from:address,to:PAXG_ADDRESS,data:'0x',value:'0xa',gas:'0x5208'});
   assert.throws(()=>ethereumTransaction({to:PAXG_ADDRESS,chainId:137},address));
@@ -59,9 +84,49 @@ test('insufficient ETH is blocked before transaction broadcast',async()=>{
   await assert.rejects(sendEthereumTransaction(provider,address,{to:PAXG_ADDRESS}),/ETH/);
   assert.ok(!calls.includes('eth_sendTransaction'));
 });
-test('typed signatures cannot switch away from Ethereum',async()=>{
-  const client={submitUserTransactions:async(id,tx,callbacks)=>callbacks.signTypedData({domain:{chainId:137}})};
-  await assert.rejects(submitWalletTransactions(client,'r', [{}],address,{request:async()=>null}),/Ethereum/);
+const approveData=(spender,amount)=>encodeFunctionData({abi:parseAbi(['function approve(address,uint256) returns (bool)']),functionName:'approve',args:[spender,amount]});
+const sellTxs=({approve={},swap={},...tx}={})=>[
+  {phase:'squidRouterApprove',network:'ethereum',signer:address,...tx,txData:{to:PAXG_ADDRESS,value:'0',data:approveData(SQUID_ROUTER,parseUnits('0.02',18)),...approve}},
+  {phase:'squidRouterSwap',network:'ethereum',signer:address,...tx,txData:{to:SQUID_ROUTER,value:'1000',data:'0xabcdef',...swap}}];
+const sell={walletAddress:address,inputAmount:'0.02'};
+test('the wallet only signs the approve and swap of the quoted sell',()=>{
+  assert.doesNotThrow(()=>assertPaxgSellTransactions(sellTxs(),sell));
+  assert.doesNotThrow(()=>assertPaxgSellTransactions(sellTxs({approve:{data:approveData(SQUID_ROUTER,1n)}}),sell));
+  const [approve,swap]=sellTxs();
+  const tampered=[
+    sellTxs({approve:{to:SQUID_ROUTER}}),
+    sellTxs({approve:{data:approveData(address,parseUnits('0.02',18))}}),
+    sellTxs({approve:{data:approveData(SQUID_ROUTER,parseUnits('0.02',18)+1n)}}),
+    sellTxs({approve:{data:approveData(SQUID_ROUTER,1n)+'00'}}),
+    sellTxs({approve:{value:'1'}}),
+    sellTxs({swap:{to:PAXG_ADDRESS}}),
+    sellTxs({signer:'0x0000000000000000000000000000000000000002'}),
+    sellTxs({network:'polygon'}),
+    [approve],[swap,approve],[approve,swap,swap],
+    [approve,{...swap,phase:'squidRouterPermitExecute',txData:{domain:{chainId:1}}}],
+  ];
+  for(const txs of tampered) assert.throws(()=>assertPaxgSellTransactions(txs,sell),/não correspondem/);
+  assert.throws(()=>assertPaxgSellTransactions(sellTxs(),{walletAddress:address}),/não correspondem/);
+});
+test('a tampered sell never reaches the wallet or the SDK',async()=>{
+  const calls=[];
+  const client={submitUserTransactions:async()=>calls.push('sdk')};
+  const provider={request:async({method})=>calls.push(method)};
+  await assert.rejects(submitWalletTransactions(client,{id:'r',createdAt:new Date().toISOString()},sellTxs({swap:{to:address}}),address,provider,'0.02'),/não correspondem/);
+  assert.deepEqual(calls,[]);
+});
+test('a sell past its start window broadcasts nothing and stops blocking the wallet',async()=>{
+  const sent=[];
+  const provider={request:async({method})=>{sent.push(method);return {'eth_getBalance':'0x0','eth_gasPrice':'0x1','eth_estimateGas':'0x5208'}[method];}};
+  const client={submitUserTransactions:async(id,txs,{sendTransaction})=>{for(const tx of txs) await sendTransaction(tx.txData,{unsignedTransaction:tx});}};
+  const ramp=(minutesAgo)=>({id:'r5',createdAt:new Date(Date.now()-minutesAgo*60_000).toISOString()});
+  saveActiveRamp({rampId:'r5',walletAddress:address,inputAmount:'0.02',rampType:'SELL',stage:'signing'});
+  await assert.rejects(submitWalletTransactions(client,ramp(1),sellTxs(),address,provider,'0.02'),/ETH/);
+  assert.equal(getActiveRamp(address).rampId,'r5');
+  await assert.rejects(submitWalletTransactions(client,ramp(12),sellTxs(),address,provider,'0.02'),/prazo/);
+  assert.ok(!sent.includes('eth_sendTransaction'));
+  assert.equal(getActiveRamp(address),null);
+  memory.clear();
 });
 test('concurrent expired sessions rotate once and retain refreshed session',async()=>{
   const old=globalThis.fetch;let calls=0;
@@ -74,3 +139,48 @@ test('concurrent expired sessions rotate once and retain refreshed session',asyn
     assert.equal(calls,1);
   } finally {clearVortexSession();globalThis.fetch=old;}
 });
+test('resuming a sell asks the API for the ramp\'s unsigned wallet transactions',async()=>{
+  const old=globalThis.fetch;const seen=[];
+  const jwt=exp=>'e30.'+Buffer.from(JSON.stringify({exp})).toString('base64url')+'.x';
+  try {
+    setVortexSession({access_token:jwt(Math.floor(Date.now()/1000)+3600),refresh_token:'fake-test-only'});
+    globalThis.fetch=async(url,init)=>{seen.push({url,init});return new Response(JSON.stringify({id:'r1',currentPhase:'initial',unsignedTxs:[{phase:'squidRouterApprove',signer:address}]}));};
+    assert.equal((await getRampWithUnsignedTxs('r1')).unsignedTxs.length,1);
+    assert.match(seen[0].url,/\/v1\/ramp\/r1\?showUnsignedTxs=true$/);
+    assert.match(seen[0].init.headers.Authorization,/^Bearer /);
+  } finally {clearVortexSession();globalThis.fetch=old;}
+});
+test('the e-mail code is requested in Brazilian Portuguese',async()=>{
+  const old=globalThis.fetch;let body;
+  try {
+    globalThis.fetch=async(url,init)=>{assert.match(url,/\/v1\/auth\/request-otp$/);body=JSON.parse(init.body);return new Response(JSON.stringify({success:true}));};
+    await requestVortexOtp(' Ana@Example.com ');
+    assert.deepEqual(body,{email:'ana@example.com',locale:'pt-BR'});
+  } finally {globalThis.fetch=old;}
+});
+test('only a rejected refresh token ends the Vortex session',async()=>{
+  const old=globalThis.fetch;let status;
+  const jwt=exp=>'e30.'+Buffer.from(JSON.stringify({exp})).toString('base64url')+'.x';
+  try {
+    setVortexSession({access_token:jwt(1),refresh_token:'fake-test-only'});
+    globalThis.fetch=async()=>new Response(JSON.stringify({error:'unavailable'}),{status});
+    status=503; await assert.rejects(getFreshAccessToken());
+    assert.equal(getVortexSession()?.refresh_token,'fake-test-only');
+    status=401; await assert.rejects(getFreshAccessToken());
+    assert.equal(getVortexSession(),null);
+  } finally {clearVortexSession();globalThis.fetch=old;}
+});
+test('a verified Vortex session is reused only for its own e-mail, across refreshes',async()=>{
+  const old=globalThis.fetch;
+  const jwt=exp=>'e30.'+Buffer.from(JSON.stringify({exp})).toString('base64url')+'.x';
+  try {
+    globalThis.fetch=async(url)=>new Response(JSON.stringify(/verify-otp$/.test(url)?{access_token:jwt(1),refresh_token:'fake-test-only'}:{access_token:jwt(Math.floor(Date.now()/1000)+3600),refresh_token:'rotated-test-only'}));
+    assert.equal(hasVortexSession('ana@example.com'),false);
+    await verifyVortexOtp(' Ana@Example.com ','123456');
+    assert.equal(hasVortexSession('ana@example.com'),true);
+    assert.equal(hasVortexSession('bia@example.com'),false);
+    await getFreshAccessToken();
+    assert.equal(getVortexSession().refresh_token,'rotated-test-only');
+    assert.equal(hasVortexSession(' ANA@example.com'),true);
+  } finally {clearVortexSession();globalThis.fetch=old;}
+});
diff --git a/apps/gold/tests/vortex.test.mjs b/apps/gold/tests/vortex.test.mjs
index 6c020c095..76ab7b1c5 100644
--- a/apps/gold/tests/vortex.test.mjs
+++ b/apps/gold/tests/vortex.test.mjs
@@ -1,6 +1,6 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { buildPaxgBuyRequest, classifyRamp, normalizeQuote, resolveApiBase } from "../src/lib/vortex.js";
+import { buildPaxgBuyRequest, classifyRamp, normalizeQuote, pollRamp, rampStartDeadline, resolveApiBase, secondsUntilExpiry } from "../src/lib/vortex.js";
 
 test("builds the locked BRL PIX to Ethereum PAXG corridor", () => {
   assert.deepEqual(buildPaxgBuyRequest(500), {
@@ -33,8 +33,53 @@ test("classifies provider ramp outcomes conservatively", () => {
   assert.equal(classifyRamp({ status: "pending", currentPhase: "hydrationSwap" }), "processing");
 });
 
+test("an unstarted ramp an hour after registration stops blocking new operations", () => {
+  const createdAt = "2030-01-01T00:00:00.000Z";
+  const at = (minutes) => Date.parse(createdAt) + minutes * 60_000;
+  const pix = { status: "PENDING", currentPhase: "initial", depositQrCode: "pix", createdAt };
+  assert.equal(classifyRamp(pix, at(30)), "awaiting_payment");
+  assert.equal(classifyRamp(pix, at(61)), "failure");
+  assert.equal(classifyRamp({ status: "PENDING", currentPhase: "brlaOnrampMint", createdAt }, at(61)), "processing");
+});
+
+test("a resumed PIX counts down to the real start deadline", () => {
+  assert.equal(rampStartDeadline({ expiresAt: "2030-01-01T00:15:00.000Z" }), Date.parse("2030-01-01T00:15:00.000Z"));
+  assert.equal(rampStartDeadline({ createdAt: "2030-01-01T00:00:00.000Z" }), Date.parse("2030-01-01T00:15:00.000Z"));
+  assert.equal(rampStartDeadline({}), null);
+});
+
 test("resolves the API base against the page origin unless an absolute URL is configured", () => {
   assert.equal(resolveApiBase(undefined, "https://www.vortexfinance.co"), "https://www.vortexfinance.co/api/production");
   assert.equal(resolveApiBase("/api/staging/", "https://deploy-preview-1--vortexfi.netlify.app"), "https://deploy-preview-1--vortexfi.netlify.app/api/staging");
   assert.equal(resolveApiBase("https://api.vortexfinance.co", "https://www.vortexfinance.co"), "https://api.vortexfinance.co");
 });
+
+test("counts the PIX deadline from the clock, so a paused tab cannot show stale time", () => {
+  const expiresAt = "2030-01-01T00:10:00.000Z";
+  assert.equal(secondsUntilExpiry(expiresAt, Date.parse("2030-01-01T00:00:00.000Z")), 600);
+  assert.equal(secondsUntilExpiry(expiresAt, Date.parse("2030-01-01T00:09:30.000Z")), 30);
+  assert.equal(secondsUntilExpiry(expiresAt, Date.parse("2030-01-01T00:11:00.000Z")), 0);
+});
+
+test("ramp polling rides out network blips and server errors", async () => {
+  let calls = 0;
+  const client = { getRampStatus: async () => {
+    calls += 1;
+    if (calls <= 2) throw new TypeError("Failed to fetch");
+    if (calls === 3) throw Object.assign(new Error("Bad gateway"), { status: 502 });
+    return { status: "COMPLETE", currentPhase: "complete" };
+  } };
+  assert.equal(classifyRamp(await pollRamp(client, "r1", { intervalMs: 1 })), "success");
+  assert.equal(calls, 4);
+});
+
+test("ramp polling surfaces persistent outages and final errors", async () => {
+  let calls = 0;
+  const offline = { getRampStatus: async () => { calls += 1; throw new TypeError("Failed to fetch"); } };
+  await assert.rejects(pollRamp(offline, "r1", { intervalMs: 1, maxConsecutiveErrors: 3 }), /Failed to fetch/);
+  assert.equal(calls, 3);
+  calls = 0;
+  const signedOut = { getRampStatus: async () => { calls += 1; throw Object.assign(new Error("Unauthorized"), { status: 401 }); } };
+  await assert.rejects(pollRamp(signedOut, "r1", { intervalMs: 1 }), /Unauthorized/);
+  assert.equal(calls, 1);
+});
diff --git a/docs/operations-testing.md b/docs/operations-testing.md
index 08df62311..104d726b7 100644
--- a/docs/operations-testing.md
+++ b/docs/operations-testing.md
@@ -17,7 +17,7 @@ together with the shared test harness (`apps/api/src/test-utils`) — see "How t
 
 | Layer | What | Where | Runner |
 |---|---|---|---|
-| 1. Unit | Pure logic: helpers, token configs, SDK handlers | each package, next to source | `bun test` (Vitest for frontend) |
+| 1. Unit | Pure logic: helpers, token configs, SDK handlers | each package, next to source | `bun test` (Vitest for frontend, `node --test` for `apps/gold/tests/`) |
 | 2. API integration | Real Express + real Postgres + fake external world, driven over HTTP; incl. the quote pricing goldens (`quote-pricing.golden.test.ts`) and the HTTP surface tests (auth OTP flow, webhooks, ramp history, public routes; `http-surface.invariants.test.ts`) | `apps/api/src/tests/` | `bun test` |
 | 3. Corridor scenarios | Phase processor end-to-end per corridor against the fake world: BRL, Alfredpay, and Monerium EUR corridors plus persisted Mykobo on/offramp recovery scenarios. | `apps/api/src/tests/corridors/` and block tests | `bun test` |
 | 4. SDK contract | Real SDK against the real API in-process: BRL onramp lifecycle (`sdk-contract.test.ts`), the SELL/user-transaction surface — offramp lifecycle via submitUserTransactions, updateRamp, getQuote, listAlfredpayFiatAccounts (`sdk-contract.offramp.test.ts`) — and full per-currency lifecycles for all four Alfredpay currencies in both directions: SELL offramp lifecycles for USD/ach, MXN/spei, COP/ach and ARS/cbu (`sdk-contract.alfredpay-offramp.test.ts`) and BUY onramp lifecycles for MXN/spei, USD/ach, COP/ach and ARS/cbu (`sdk-contract.alfredpay-onramp.test.ts`) | `apps/api/src/tests/sdk-contract*.test.ts` | `bun test` |
diff --git a/package.json b/package.json
index 502cfea05..af1b056a7 100644
--- a/package.json
+++ b/package.json
@@ -130,7 +130,7 @@
     "prepare": "husky",
     "serve:backend": "bun run --cwd apps/api serve",
     "serve:frontend": "bun run --cwd apps/frontend preview",
-    "test": "bun run test:shared && bun run test:kyc && bun run test:sdk && bun run test:rebalancer && bun run test:api && bun run test:demo && bun run test:frontend",
+    "test": "bun run test:shared && bun run test:kyc && bun run test:sdk && bun run test:rebalancer && bun run test:api && bun run test:demo && bun run test:frontend && bun run test:gold",
     "test:api": "cd apps/api && bun test",
     "test:contracts:monerium-forwarder": "bun run --cwd contracts/monerium-forwarder test",
     "test:contracts:relayer": "bun run --cwd contracts/relayer test",
@@ -142,6 +142,7 @@
     "test:e2e": "cd apps/frontend && bun run test:e2e",
     "test:e2e:dashboard": "cd apps/dashboard && bun run test:e2e",
     "test:frontend": "cd apps/frontend && bunx vitest run",
+    "test:gold": "bun run --cwd apps/gold test",
     "test:kyc": "bun run --cwd packages/kyc test",
     "test:rebalancer": "cd apps/rebalancer && bun test",
     "test:sdk": "bun run --cwd packages/sdk test",