Input normalization (clean) — input is never blocked; it is normalized and then judged:

• lowercase → strip .ctc suffix → remove chars outside [a-z0-9-] → trim leading/trailing hyphens → truncate to 63 chars
• placeholder Type a name · fixed .ctc suffix display · maxlength 63 · Enter = CTA click
• size classes by input length: >10 chars compact · >24 chars long

On-chain availability check: available(label) eth_call after a 220ms debounce. Sequence token prevents races (stale results are discarded when input changes). Runs only for 4+ chars + non-reserved + not owned + contract address present.

FE reserved list (first-pass filter; the contract is the final judge) — 90+ labels: brand/chain (gluwa, creditcoin, ctc, wctc, cns…), tokens & stablecoins (space, usdg, wlfi, usd1…), products (penguin, penguinbase, spacerouter…), key people (impersonation), and generic/phishing terms (airdrop, faucet, official, api, bridge…). Operators can reserve more on-chain via setReserved.

Content moderation — offensive-word filter: a built-in dictionary (leetspeak-normalized, e.g. sh1t → shit) blocks abusive/offensive labels in-app — verdict Not allowed, CTA disabled, and the registration confirm flow re-checks so it can’t be bypassed. Anything beyond the dictionary is reserved on-chain via setReserved.

Testnet CTC funding: registration needs 50 CTC (5-char base) + gas — request testnet CTC from the internal team faucet/operator. See the onboarding doc for the exact faucet URL.

First match from the top applies. Status text, tone, CTA, and helper copy follow this table:

DOM structure (top → bottom):

• Intro headline Your CTC Chain name
• Card: title (varies by state) · status line · input (+ fixed .ctc suffix) · helper copy · CTA
• Price display: when the verdict is Available, shows annual price × years (thousands separators, en-US)

Shared header: logo (CNS) | My names button (connected only) | network badge (Testnet) | wallet button — see S06.

Reads call the public RPC directly (eth_call); writes go through the wallet provider — global rule §1.6.

Single-column card layout is kept. Long-name display shrink rules (>16/>26/>42 chars) apply (QA §12-9). Input compact/long classes adjust font size. CTA full-width.

• TC-S01-01 · P0 Given each of the 9 states in §2 When the matching input is entered Then the exact status text, tone, CTA, and helper copy are shown.
• TC-S01-02 · P0 Given rapid consecutive input When an earlier eth_call response arrives late Then it is discarded via the sequence token — only the verdict for the latest input is shown (no race).
• TC-S01-03 · P0 Given entry via ?name=MyName.CTC When loaded Then normalized to myname, input filled, verdict performed.
• TC-S01-04 · P1 Given an RPC error When the availability check fails Then Check failed + Try again in a moment. — no full-screen block.
• TC-S01-05 · P1 Given a 43-char name When displayed Then the long class applies · no layout break.
• TC-S01-06 · P1 Given a name I own is entered When Open My names is clicked Then navigates to /names + highlights the row for 2.6s + scrolls to it.

Header/footer/toast/modal-common behavior: see the S00 §7 global interaction table.

Confirm button states:

• Badge Registered (Renewed for renewals) · title Your name is live (renewal: Name renewed)
• Name + Expires pill (YYYY-MM-DD)
• Buttons ① View transaction (when a tx hash exists — otherwise View on explorer: token instance / token / base URL fallback order) ② View all names → goes to names + row highlight + toast Opened name list
• Close: from register, clears the input and goes to /; from renew, goes to /names

Modal becomes a full-width sheet. The 4 duration presets form a 2×2 grid. Close-blocking while in progress is unchanged.

• TC-S02-01 · P0 Given the happy path When Confirm registration Then the 9 steps run in order · success modal · optimistic list update.
• TC-S02-02 · P0 Given wallet signature rejection (4001) When at step 6 or 7 Then Transaction rejected-family copy · modal stays open · retry possible.
• TC-S02-03 · P0 Given prepare 429 When at step 6 Then Metadata preparation is rate limited. Try again in {N}s. · no tx is sent.
• TC-S02-04 · P0 Given another wallet front-runs When step 4 re-checks Then This name was just registered by another wallet.
• TC-S02-05 · P0 Given insufficient balance When at step 7 Then Not enough CTC. Need {N} CTC plus gas. · no tx is sent.
• TC-S02-06 · P1 Given Confirm while disconnected When the wallet connects Then registration confirm auto-resumes via the resume flag.
• TC-S02-07 · P1 Given receipt polling exceeds 30 tries When it times out Then Transaction submitted. Check your wallet activity. — never assert failure.

• Sorting: clicking the same column toggles asc↔desc. The primary name is always pinned to the top regardless of sort. Ties break by creation date (desc) → name.
• Name cell: avatar (or placeholder) + name + record-edit icon (pencil) + Created YYYY-MM-DD (when present).
• Expiry cell: YYYY-MM-DD + renew button (+). Urgent styling when expiry is within 3 months (accent color).
• Primary cell: Primary success pill if primary, otherwise a Make primary button (loading dots + disabled during the transaction).
• Avatar: ipfs:// → https://ipfs.io/ipfs/ gateway conversion · https only · failed sources are not retried within the session.

Interaction map — everything clickable on this screen:

• Page title + table (Name / Expiry / Primary)
• Row actions: pencil (records modal M-5) · + (renewal modal M-4) · Make primary
• Arriving from Register/Search via Open My names highlights the row for 2.6s + scrolls to it

Finally, primaryOf(address) syncs the primary. Results are stored in the localStorage cache.

Table reflows into a card list (name/expiry/primary stacked vertically). Long-name truncation rules unchanged. Row actions become a button row at the card bottom.

• TC-S03-01 · P0 Given ① API fails When loading Then falls back to ② Blockscout, and to ③ log scan if ② fails — user sees a single loading state.
• TC-S03-02 · P0 Given a primary name is owned When any sort is applied Then the primary row stays pinned to the top.
• TC-S03-03 · P0 Given a name 80 days from expiry When rendered Then Expiry shows the urgent accent.
• TC-S03-04 · P1 Given a cache exists + revisit When connecting Then cache renders immediately, then background refresh — no flicker.
• TC-S03-05 · P1 Given all loads fail When a cache exists Then keep the current display + toast Could not load names.
• TC-S03-06 · P2 Given every date When displayed Then fixed YYYY-MM-DD (never expose ISO timestamps).

Fields + validation rules (empty values are always allowed — except Address):

• Basic area: Address · Avatar · Profile URL · Bio
• Advanced collapsible: Contenthash · X · GitHub · Discord · Telegram · Email
• Status line: role="status" + aria-live="polite" (modal common §11)

Modal becomes a full-screen sheet. Fields stack in 1 column. Advanced collapsible behavior unchanged. The Bio textarea is fixed at 3 rows.

• TC-S04-01 · P0 Given invalid input in each of the 10 fields When typing Then invalid marker shows immediately + save disabled (§12-5).
• TC-S04-02 · P0 Given Address cleared When save is attempted Then blocked — Address may not be empty (when connected).
• TC-S04-03 · P0 Given a RecordsLocked name When saving Then revert detected in preflight → shown as the generic Records transaction failed/Transaction failed (no dedicated copy — adding it is a 1.1.0 candidate), no gas wasted on the tx.
• TC-S04-04 · P1 Given only some fields edited When saving Then all 10 fields are overwritten — verify untouched field values are preserved.
• TC-S04-05 · P1 Given a Bio containing <script> When displayed Then escapeHtml applied — no XSS (§12-10).

2-step confirm button: disconnected Connect wallet → Review renewal (1st click) → Confirm renewal (2nd click actually proceeds) → in progress Renewing.... Changing the years resets the confirm step.

Owner only: only the name (NFT) owner can renew — for any other wallet the contract reverts with NotNameOwner.

• Name header · Current expiry → After renewal comparison block
• 4 year-preset buttons + number input (clamped 1~100)
• Summary: Due now {N} CTC + gas (annual price × years, comma-formatted)
• Reuses success modal M-3 (badge Renewed · title Name renewed · close → /names)

Modal becomes a full-screen sheet. Presets 2×2. Date comparison block stacks vertically.

• TC-S05-01 · P0 Given after the 1st Review renewal click When the years change Then the confirm step resets — nothing is sent immediately (§12-4).
• TC-S05-02 · P0 Given an expired name When renewal is attempted Then This name has expired. · no tx sent.
• TC-S05-03 · P0 Given a normal renewal When it succeeds Then After renewal = current expiry + years · success modal Renewed · list expiry updated.
• TC-S05-04 · P1 Given prepare fails When renewing Then NFT metadata renewal is not available. · no tx sent.
• TC-S05-05 · P2 Given 101 entered When typing manually Then clamped to 100 · the DurationOutOfRange copy is Choose between 1 and 100 years.

Connection error copy: not installed MetaMask is not installed. · no account No account selected. · rejected (4001) Connection rejected. · other Wallet connection failed.

Network switch (ensureCreditcoinNetwork): check eth_chainId → if different wallet_switchEthereumChain → on 4902 (chain missing) wallet_addEthereumChain then retry. Status: Checking {chainName}... → Switch to {chainName} in your wallet. → (if needed) Add {chainName} in your wallet. → success {chainName} ready. Failure: rejected (4001) Network request rejected. / unsupported (4200, -32601) This wallet cannot add or switch networks automatically. / other Could not switch to {chainName}. {message}

Global behavior: auto-restore (eth_accounts — skipped if the manual disconnect record CNS_WALLET_MANUAL_DISCONNECT_{chainId} exists). accountsChanged with an empty array → disconnect + toast Wallet disconnected. chainChanged to another chain → toast Switching to {label} then auto-switch attempt.

Wallet button text states:

• Modal M-1: title · note · 2 wallet option buttons · status line (role="status")
• Header wallet button + dropdown (Copy address / Explorer / Disconnect)
• My names Primary cell: Primary pill or Make primary button

Test hooks (localhost only): ?mockWallet=1 · ?mockNetworkReject=1 · ?wcProjectId=.

On mobile, WalletConnect is the main path (deep link instead of QR). The dropdown menu becomes a bottom sheet. Button-text truncation rules unchanged.

• TC-S06-01 · P0 Given a wallet without the Creditcoin chain When connecting Then proceeds automatically add chain → switch (§12-7).
• TC-S06-02 · P0 Given a refresh after manual Disconnect When loading Then no auto-reconnect — the record is cleared on successful reconnect (§12-8).
• TC-S06-03 · P0 Given forward address ≠ my address When Make primary Then toast Update the address record first · no tx sent (§12-6).
• TC-S06-04 · P1 Given accountsChanged with an empty array When it fires Then disconnect handling + toast Wallet disconnected.
• TC-S06-05 · P1 Given network switch rejected (4001) When connecting Then Network request rejected. · stays not-connected.
• TC-S06-06 · P2 Given a 19-char primary name When shown on the wallet button Then middle ... ellipsis.