Default contract interactions to read-only

.gitignore

@@ -49,16 +49,3 @@ temp/
 *.test
 *.out
 go.work
-
-# Compiled Go binaries (built artifacts, not source)
-backend/bin/
-backend/api/rest/cmd/api-server
-backend/cmd
-
-# Tooling / scratch directories
-out/
-cache/
-test-results/
-playwright-report/
-.playwright/
-coverage/

cache/solidity-files-cache.json

@@ -0,0 +1 @@
+{"_format":"","paths":{"artifacts":"out","build_infos":"out/build-info","sources":"src","tests":"test","scripts":"script","libraries":["lib"]},"files":{"src/MockLinkToken.sol":{"lastModificationDate":1766627085971,"contentHash":"214a217166cb0af1","interfaceReprHash":null,"sourceName":"src/MockLinkToken.sol","imports":[],"versionRequirement":"^0.8.19","artifacts":{"MockLinkToken":{"0.8.24":{"default":{"path":"MockLinkToken.sol/MockLinkToken.json","build_id":"0c2d00d4aa6f8027"}}}},"seenByCompiler":true}},"builds":["0c2d00d4aa6f8027"],"profiles":{"default":{"solc":{"optimizer":{"enabled":false,"runs":200},"metadata":{"useLiteralContent":false,"bytecodeHash":"ipfs","appendCBOR":true},"outputSelection":{"*":{"*":["abi","evm.bytecode.object","evm.bytecode.sourceMap","evm.bytecode.linkReferences","evm.deployedBytecode.object","evm.deployedBytecode.sourceMap","evm.deployedBytecode.linkReferences","evm.deployedBytecode.immutableReferences","evm.methodIdentifiers","metadata"]}},"evmVersion":"prague","viaIR":false,"libraries":{}},"vyper":{"evmVersion":"prague","outputSelection":{"*":{"*":["abi","evm.bytecode","evm.deployedBytecode"]}}}}},"preprocessed":false,"mocks":[]}

frontend/src/pages/addresses/[address].tsx

@@ -36,11 +36,17 @@ function isValidAddress(value: string) {
   return /^0x[a-fA-F0-9]{40}$/.test(value)
 }
 
+function isContractWriteExecutionEnabled() {
+  const value = (process.env.NEXT_PUBLIC_ENABLE_CONTRACT_WRITES || '').trim().toLowerCase()
+  return value === '1' || value === 'true' || value === 'yes'
+}
+
 export default function AddressDetailPage() {
   const router = useRouter()
   const address = typeof router.query.address === 'string' ? router.query.address : ''
   const isValidAddressParam = address !== '' && isValidAddress(address)
   const chainId = parseInt(process.env.NEXT_PUBLIC_CHAIN_ID || '138')
+  const contractWriteExecutionEnabled = isContractWriteExecutionEnabled()
 
   const [addressInfo, setAddressInfo] = useState<AddressInfo | null>(null)
   const [transactions, setTransactions] = useState<TransactionSummary[]>([])
@@ -537,7 +543,24 @@ export default function AddressDetailPage() {
                 <DetailRow label="Interaction Surface">
                   <div className="flex flex-wrap gap-2">
                     {contractProfile?.has_custom_methods_read ? <EntityBadge label="read methods" tone="success" /> : <EntityBadge label="read unknown" /> }
-                    {contractProfile?.has_custom_methods_write ? <EntityBadge label="write methods" tone="warning" /> : <EntityBadge label="write unknown" /> }
+                    {contractProfile?.has_custom_methods_write ? (
+                      <EntityBadge
+                        label={contractWriteExecutionEnabled ? 'write methods enabled' : 'write methods hidden'}
+                        tone="warning"
+                      />
+                    ) : <EntityBadge label="write unknown" /> }
+                  </div>
+                </DetailRow>
+                <DetailRow label="Execution Policy">
+                  <div className="space-y-2">
+                    <div className="flex flex-wrap gap-2">
+                      <EntityBadge label={contractWriteExecutionEnabled ? 'advanced execution enabled' : 'read-only explorer mode'} tone={contractWriteExecutionEnabled ? 'warning' : 'success'} />
+                    </div>
+                    <div className="text-sm text-gray-600 dark:text-gray-400">
+                      {contractWriteExecutionEnabled
+                        ? 'This session allows direct contract write prompts from the explorer. Use only in controlled operator environments.'
+                        : 'State-changing contract execution is disabled in the default explorer experience so investigation stays read-only and easier to govern.'}
+                    </div>
                   </div>
                 </DetailRow>
                 <DetailRow label="Proxy Type">
@@ -681,7 +704,7 @@ export default function AddressDetailPage() {
                     </div>
                   </DetailRow>
                 )}
-                {contractProfile?.write_methods && contractProfile.write_methods.length > 0 && (
+                {contractProfile?.write_methods && contractProfile.write_methods.length > 0 && contractWriteExecutionEnabled && (
                   <DetailRow label="Write Methods">
                     <div className="space-y-2">
                       {contractProfile.write_methods.slice(0, 6).map((method) => (
@@ -742,6 +765,13 @@ export default function AddressDetailPage() {
                     </div>
                   </DetailRow>
                 )}
+                {contractProfile?.write_methods && contractProfile.write_methods.length > 0 && !contractWriteExecutionEnabled && (
+                  <DetailRow label="Write Methods">
+                    <div className="rounded-xl border border-amber-200 bg-amber-50 p-4 text-sm text-amber-900 dark:border-amber-900/50 dark:bg-amber-950/30 dark:text-amber-100">
+                      Direct write execution is disabled in this explorer environment. Review the ABI and method signatures here, then use a separate operator-approved contract console if execution is required.
+                    </div>
+                  </DetailRow>
+                )}
                 {contractProfile?.creation_bytecode && (
                   <DetailRow label="Creation Bytecode">
                     <code className="block break-all rounded bg-gray-50 p-2 text-xs dark:bg-gray-950">

out/build-info/0c2d00d4aa6f8027.json

@@ -0,0 +1 @@
+{"id":"0c2d00d4aa6f8027","source_id_to_path":{"0":"src/MockLinkToken.sol"},"language":"Solidity"}

test-results/.last-run.json

@@ -0,0 +1,4 @@
+{
+  "status": "passed",
+  "failedTests": []
+}