Private production control
FetanAgent Owner
Operate the authenticated FetanAgent production control plane.
Owner sign in
After sign-in, this open tab securely renews the Owner access token for up to twelve hours. The rotating refresh token is retained only in this browser tab, survives page reloads, and is erased on sign-out or tab close.
Authenticated production Owner
Telegram beta invite
This link is shown once. Send it only to the intended tester.
Customer support
Choose the Telegram username customers can contact for help. Only this username is published; this setting does not change any payment or account permissions.
Non-claiming review
KemerBet Player ID requests
Record only whether the submitted ID was found. This does not prove ownership and never enables deposits. Use found or not-found only after an independent manual KemerBet lookup.
Explicit ownership confirmation
Player ID ownership associations
Confirm only after independently verifying that this Telegram customer controls the KemerBet account. This records the ownership association only. Deposit eligibility is a separate financial decision below.
Audited financial gate
Deposit eligibility decisions
Approve only an active, validated, Owner-associated Player ID after financial review. Revocation blocks future deposit intents. A decision does not open a deposit, verify a payment, credit KemerBet, or move money; all staging financial switches remain off.
One-use no-transfer bridge
KemerBet readiness cohort
Prepare the server-only one-use input for exactly five active, valid, currently eligible KemerBet Players. The browser sends no Player identifiers, amount, or digest; the server re-checks the current Owner eligibility records before preparing it.
This does not click Transfer, enable the executor, credit KemerBet, or move money. A different cohort cannot replace an already prepared one-use input.
Immutable Owner configuration
Receiving accounts
Add or change the active TeleBirr and CBE Birr receiving accounts here. A change creates a new revision and retires the previous one; it never rewrites receipt history. The complete account number is encrypted in server memory and is never displayed again.
TeleBirr receiver changes and later CBE Birr rotations require the financial switches to be off. The first CBE Birr receiver may be saved while TeleBirr runs, but CBE Birr verification must stay off. Stop any pilot for the provider before changing its receiver.
Required no-money lookup setup
KemerBet lookup profile
Prepare the opaque database profile required before FetanAgent can issue a signed exact-five lookup to the local Windows companion. This is not the companion's local Chrome profile. FetanAgent never asks for or stores a KemerBet password, OTP, cookie, session export, agent ID, or username here. Rotation retires the previous revision.
This setup does not sign in, run a lookup, click Transfer, enable the executor, or move money. It is accepted only while every financial/provider/pilot switch is disabled.
Local identity validation
KemerBet Windows companion
Use a separate Chrome window on this computer for KemerBet sign-in. This moves sign-in off the datacenter and remote preview. Complete any CAPTCHA normally in Chrome. The dedicated profile stays on your computer, and the companion keeps the guarded window open for up to twelve hours after the exact locally bound agent header is verified. KemerBet can end its own session earlier. Credentials, CAPTCHA values, cookies, and browser storage never pass through this Owner page.
This companion release verifies the exact agent-header identity locally and stores only a Windows-protected fingerprint. It has no payment execution capability. Provider financial requests are blocked even if KemerBet shows a Transfer button. The pairing package below grants public-key enrollment only. A separate signed command can authorize exactly five find-only Player-ID lookups.
Companion connection
Sign in to check the companion connection.
Connected means an authenticated companion check-in within the last minute. It does not confirm the current KemerBet sign-in or payment readiness. This check does not send commands or move money. Refreshes every 20 seconds while this page is visible.
If the companion is already connected, no download or re-pairing is needed. Keep the installed companion and its separate Chrome window open.
Download links open a new tab so this Owner page stays open. If a download says “Not Found” or is blocked, check the assets on the official FetanAgent GitHub releases page (new tab) for the companion ZIP and its matching SHA-256 checksum.
If the file is still unavailable, report the exact error text without passwords, pairing packages, or signed download URLs. Do not turn off browser or antivirus protection to force a download. A download error does not require a new pairing.
- Extract the ZIP once.
- Double-click Start FetanAgent Companion.vbs.
- On first use, enter the exact visible KemerBet agent-header identity locally.
- Sign in only in the separate Chrome window and leave it open.
Public-key enrollment only
Pair this Windows companion
Create one twelve-hour package after the exact local KemerBet identity is verified. The companion generates its private P-256 key on this computer and protects it with Windows DPAPI. Only the public key is enrolled. Lookup, Amount, Notes, Transfer, settlement, and money movement are not granted by the pairing package.
Paste this only into the local FetanAgent companion launcher.
Signed read-only readiness check
Run exact-five KemerBet lookup
This sends the current five eligible Player IDs only to the paired local companion. It performs five sequential Find actions and returns only redacted counts. Amount, Notes, Transfer, settlement, execution, and money movement remain disabled.
Private KemerBet sign-in
Open a ten-minute isolated sign-in window, then click the preview and type directly into KemerBet. After successful sign-in, the locked authenticated browser is retained for up to twelve hours, including across Owner-page re-authentication. Passwords and OTPs are never sent to chat, Git, Supabase, or FetanAgent logs. Transfer is blocked, and all input locks as soon as sign-in is detected.
Read-only diagnosis
Deposit execution readiness
This status preview cannot activate the companion or move money. After separate live activation, use the one-deposit approval control below.
Persistent business policy
Routine TeleBirr processing
25–25,000 ETB per deposit, any active deposit-eligible Player, no daily or deposit-count quota. Process one at a time; uncertain results pause the queue. This policy has no expiry. Saving it does not turn payment switches live, but reauthorizing a paused policy can resume processing if those switches are already live. The pilot controls below are another mode.
Routine TeleBirr phone proof — no money
This is separate from the five-Player pilot. Create a twelve-hour challenge, paste it directly into the dedicated Android app, then paste its signed proof back to this same Owner tab promptly. Sign in before creating the challenge; its twelve-hour timer starts only when you create it. Enrollment only records phone key possession; it cannot poll assignments, verify payments, execute deposits, or move money.
Do not send the challenge or proof through Telegram, email, chat, screenshots, or issue comments. Keep the phone clock set automatically. If a submission is uncertain, retry the exact same proof before expiry.
One-use challenge package (twelve hours)
Existing phone: signed no-money receipt
Retrieve a receipt for the phone already enrolled above. This does not create a challenge, pair another phone, poll TeleBirr, or enable deposits. The receipt is available only after a separate signer is provisioned.
If receipt signing is unavailable, load the current Owner-linked phones directly. Select the exact enrollment before revoking it; loading does not contact TeleBirr or enable deposits.
One deposit at a time
Verified deposits awaiting approval
Approving one verified 25 ETB payment lets the paired Windows companion execute that deposit only. A second approval waits until the first finishes or is reconciled. This does not activate execution by itself.
Approved fixed private pilot
TeleBirr five-Player pilot
Fixed contract: TeleBirr only, exactly five currently eligible KemerBet Players, 25 ETB maximum per deposit and Player, 125 ETB total, five permanent reservations, and exactly twelve hours. Customer membership is derived from the selected Player owners inside PostgreSQL; no customer UUID or credential is entered here.
Prepare and arm configure a dormant dry run only. They do not enable payment verification, settlement, the executor, or a KemerBet final action.
Current pilot status
Database-free Android enrollment
TeleBirr verifier phone pairing
Create one twelve-hour package for the dedicated Android phone only after the pilot is armed in dry-run. The package can enroll one device; it cannot poll assignments, verify a deposit, settle, execute, or move money.
Copy this directly to the phone. Do not send it through Telegram, chat, email, screenshots, issue comments, or logs. A lost response is reconciled with the same request ID and cannot create a second package.
One-use package (sensitive until it expires)
Read-only financial review
TeleBirr receiver-change cases
Submissions fenced because a receiving wallet changed during a displayed one-hour instruction. A case is not proof of payment. Inspect official provider evidence separately before any audited resolution; this page cannot credit, refund, or retry.
Read-only dry run
Dry-run deposit intake
These are customer-entered CBE Birr intents and protected references only. Nothing here is verified, credited, sent to KemerBet, or eligible for execution. Redacted fixture assessments below are advisory simulations, never provider evidence.