· https://epds-wallet-mvp.vercel.app
· reports/epds-wallet-mvp/tee-wallet-e2e/
· 
Next.js client on Vercel → email-OTP OAuth against the TDX confidential-VM ePDS → enclave-derived EVM/Solana addresses → browser-key enrollment → TEE-produced wallet signature, with the forged-envelope failure path rejected 403. One Next.js fetch bug found and fixed mid-run; PLC + signer-journal out-of-band proofs attached.