diff --git a/FRONTEND_BUILD_SUMMARY.md b/FRONTEND_BUILD_SUMMARY.md
new file mode 100644
index 0000000..107a053
--- /dev/null
+++ b/FRONTEND_BUILD_SUMMARY.md
@@ -0,0 +1,126 @@
+# Frontend Build & Test Summary
+
+**Date:** November 9, 2025
+
+## Issues Fixed
+
+### 1. Import Path Errors
+
+**Problem:** Multiple files had incorrect import paths using `../../../lib/` instead of `../../lib/`
+
+**Files Fixed:**
+
+- `/frontend/src/app/new-user/page.tsx`
+- `/frontend/src/app/profile/page.tsx`
+
+**Changes:**
+
+```tsx
+// Before (incorrect - 3 levels up)
+import { isValidCubidId, requestCubidId } from '../../../lib/cubid';
+import { useRestrictToIncompleteOnboarding } from '../../../lib/onboarding';
+import { upsertMyProfile } from '../../../lib/profile';
+import { useUserStore } from '../../../lib/store';
+import { ensureWallet } from '../../../lib/wallet';
+
+// After (correct - 2 levels up from app/new-user/ to src/)
+import { isValidCubidId, requestCubidId } from '../../lib/cubid';
+import { useRestrictToIncompleteOnboarding } from '../../lib/onboarding';
+import { upsertMyProfile } from '../../lib/profile';
+import { useUserStore } from '../../lib/store';
+import { ensureWallet } from '../../lib/wallet';
+```
+
+### 2. Next.js Cache Issue
+
+**Problem:** TypeScript validator looking for pages in non-existent `(routes)` folder
+
+**Solution:** Cleaned `.next` build cache with `rm -rf .next`
+
+## Build Results
+
+### ✅ Build: SUCCESS
+
+```bash
+pnpm --filter frontend build
+```
+
+- Compiled successfully in 1895.1ms
+- Finished TypeScript in 1856.9ms
+- All 13 routes generated successfully
+
+### ✅ Tests: ALL PASSING (22/22)
+
+```bash
+pnpm --filter frontend test
+```
+
+**Test Suites:**
+
+- ✓ app-header.test.tsx (2 tests)
+- ✓ auth-provider.test.tsx (2 tests)
+- ✓ cubid.test.ts (2 tests)
+- ✓ home-page.test.tsx (2 tests)
+- ✓ indexer-page.test.tsx (1 test)
+- ✓ profile-page.test.tsx (2 tests)
+- ✓ profile.test.ts (4 tests)
+- ✓ results-page.test.tsx (2 tests)
+- ✓ scan-camera-page.test.tsx (2 tests)
+- ✓ scan-qr-page.test.tsx (2 tests)
+- ✓ scan-store.test.ts (1 test)
+
+**Duration:** 2.08s
+
+### ✅ Development Server: RUNNING
+
+```bash
+pnpm dev
+```
+
+- Started successfully in 558ms
+- Running at http://localhost:3000
+- Network accessible at http://192.168.2.36:3000
+
+## Application Routes
+
+All routes successfully generated:
+
+```
+Route (app)
+┌ ○ /                    - Home page
+├ ○ /_not-found          - 404 page
+├ ƒ /api/indexer/moonscan - API endpoint (dynamic)
+├ ○ /circle              - Circle management
+├ ○ /indexer             - Indexer dashboard
+├ ○ /new-user            - Onboarding for new users
+├ ○ /profile             - User profile page
+├ ○ /results             - Scan results
+├ ○ /scan                - Scan landing page
+├ ○ /scan/camera         - Camera QR scanner
+├ ○ /scan/my-qr          - Display user's QR code
+├ ○ /signin              - Authentication
+└ ○ /vouch               - Vouching functionality
+```
+
+Legend:
+
+- ○ (Static) - Prerendered as static content
+- ƒ (Dynamic) - Server-rendered on demand
+
+## Environment Configuration
+
+The frontend is configured with Moonbeam mainnet contracts:
+
+- **NEXT_PUBLIC_EAS_ADDR:** 0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+- **NEXT_PUBLIC_FEEGATE_ADDR:** 0x1b79e8a759f06720E5a45105D29a707E51c44918
+- **NEXT_PUBLIC_SCHEMA_UID:** 0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+- **NEXT_PUBLIC_CHAIN_ID:** 1284 (Moonbeam)
+
+## Summary
+
+✅ **All build errors fixed**
+✅ **All tests passing** (22/22)
+✅ **Development server running**
+✅ **Production build successful**
+
+The frontend is now fully functional and ready for development and testing!
diff --git a/agent-context/DEPLOYMENT_STATUS.md b/agent-context/DEPLOYMENT_STATUS.md
new file mode 100644
index 0000000..94724df
--- /dev/null
+++ b/agent-context/DEPLOYMENT_STATUS.md
@@ -0,0 +1,190 @@
+# Production Deployment Status
+
+**Last Updated**: November 9, 2025
+
+## ✅ Completed Steps
+
+### 1. Smart Contracts Deployed to Moonbeam ✅
+
+All contracts successfully deployed and verified:
+
+| Contract          | Address                                                              | Status                            |
+| ----------------- | -------------------------------------------------------------------- | --------------------------------- |
+| SchemaRegistry    | `0xD680d4F3852A527BedbF12fB261F6922dfD98e28`                         | ✅ Deployed                       |
+| EAS               | `0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75`                         | ✅ Deployed                       |
+| FeeGate           | `0x1b79e8a759f06720E5a45105D29a707E51c44918`                         | ✅ Deployed & Verified (Sourcify) |
+| CubidTrust Schema | `0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55` | ✅ Registered                     |
+
+**Total Cost**: ~0.379 GLMR
+
+**Verification**:
+
+- FeeGate verified on Sourcify: ✅
+- View on Moonscan: https://moonscan.io/address/0x1b79e8a759f06720E5a45105D29a707E51c44918#code
+
+### 2. Frontend Configuration Updated ✅
+
+Updated `frontend/.env.local` with production addresses:
+
+```env
+NEXT_PUBLIC_SCHEMA_REGISTRY=0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+NEXT_PUBLIC_EAS_ADDR=0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+NEXT_PUBLIC_FEEGATE_ADDR=0x1b79e8a759f06720E5a45105D29a707E51c44918
+NEXT_PUBLIC_SCHEMA_UID=0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+NEXT_PUBLIC_CHAIN_ID=1284
+```
+
+**Build Status**: ✅ Successful  
+**Test Status**: ✅ 17/17 tests passing
+
+### 3. Indexer Configuration Updated ✅
+
+Created `indexer/.env` with production addresses:
+
+```env
+REGISTRY_ADDR=0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+EAS_ADDR=0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+SCHEMA_UID=0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+FEEGATE_ADDR=0x1b79e8a759f06720E5a45105D29a707E51c44918
+MOONBEAM_RPC=https://rpc.api.moonbeam.network
+```
+
+**Build Status**: ✅ Successful  
+**Test Status**: ✅ 21/21 tests passing
+
+### 4. Contract Verification ✅
+
+FeeGate contract verified on Sourcify (decentralized verification).
+
+## 📋 Next Steps (Remaining)
+
+### 5. Deploy Indexer to Production ⏳
+
+**Options**:
+
+- **Fly.io** (Recommended): Docker-based deployment with PostgreSQL
+- **Render**: Alternative cloud platform
+- **Railway**: Another option
+
+**Requirements**:
+
+- Docker image built from `indexer/Dockerfile`
+- Environment variables set in platform
+- PostgreSQL database provisioned
+- Health check endpoint: `/health`
+
+**Commands for Fly.io**:
+
+```bash
+cd indexer
+fly launch --no-deploy
+fly secrets set \
+  DATABASE_URL="postgres://..." \
+  REGISTRY_ADDR="0xD680d4F3852A527BedbF12fB261F6922dfD98e28" \
+  EAS_ADDR="0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75" \
+  SCHEMA_UID="0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55" \
+  FEEGATE_ADDR="0x1b79e8a759f06720E5a45105D29a707E51c44918" \
+  MOONBEAM_RPC="https://rpc.api.moonbeam.network" \
+  PRIVATE_KEY_RELAYER="0x..." \
+  SUPABASE_URL="https://bgppeedfgmybkjbulckr.supabase.co" \
+  SUPABASE_SERVICE_ROLE_KEY="..." \
+  SUPABASE_JWT_SECRET="..."
+fly deploy
+```
+
+### 6. Deploy Frontend to Vercel ⏳
+
+**Requirements**:
+
+- Vercel account connected to GitHub
+- Environment variables configured in Vercel dashboard
+- Production domain configured
+
+**Environment Variables for Vercel**:
+
+```
+NEXT_PUBLIC_SCHEMA_REGISTRY=0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+NEXT_PUBLIC_EAS_ADDR=0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+NEXT_PUBLIC_FEEGATE_ADDR=0x1b79e8a759f06720E5a45105D29a707E51c44918
+NEXT_PUBLIC_SCHEMA_UID=0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+NEXT_PUBLIC_CHAIN_ID=1284
+NEXT_PUBLIC_INDEXER_URL=https://your-indexer.fly.dev
+NEXT_PUBLIC_SUPABASE_URL=https://bgppeedfgmybkjbulckr.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGciOi...
+```
+
+**Deployment Commands**:
+
+```bash
+# Using Vercel CLI
+cd frontend
+vercel --prod
+
+# Or connect repository in Vercel dashboard
+# https://vercel.com/new
+```
+
+### 7. End-to-End Testing ⏳
+
+Once indexer and frontend are deployed:
+
+**Test Flow**:
+
+1. Visit production frontend URL
+2. Sign in with email (Supabase auth)
+3. Complete new user onboarding (Cubid verification)
+4. Create attestation by vouching for someone
+5. Scan QR code to verify attestation
+6. Check results page shows trust levels
+
+**Verification**:
+
+- Check Moonscan for attestation transactions
+- Verify indexer logs show event processing
+- Confirm Supabase database has attestation records
+- Test wallet connection on Moonbeam network
+
+## 🔒 Security Notes
+
+**Private Keys in Use**:
+
+- ✅ Deployer: `0x50fDb6B1aF56DfE55cB484030C7b3b8787ff5f68` (FeeGate admin)
+- ✅ Relayer: `0xA006F855B7c44c2ad8456BFF8398B3f8619E8D39` (Meta-transactions)
+
+**Admin Functions Available**:
+
+- `setLifetimeFee(uint256)` - Change attestation fee (deployer only)
+- `withdraw()` - Withdraw accumulated fees (deployer only)
+
+**Current Fee**: 100 GLMR (charged on 3rd attestation per issuer)
+
+## 📊 Test Summary
+
+| Component | Tests     | Status         |
+| --------- | --------- | -------------- |
+| Contracts | 15/15     | ✅ All passing |
+| Frontend  | 17/17     | ✅ All passing |
+| Indexer   | 21/21     | ✅ All passing |
+| **Total** | **53/53** | ✅ **100%**    |
+
+## 📚 Documentation
+
+- Contract deployment details: `contracts/MOONBEAM_DEPLOYMENT.md`
+- Wallet troubleshooting: `docs/WALLET_TROUBLESHOOTING.md`
+- Project README: `README.md`
+
+## 🎯 Production Readiness Checklist
+
+- [x] Smart contracts deployed to Moonbeam
+- [x] Contracts verified (Sourcify)
+- [x] Frontend configured with production addresses
+- [x] Indexer configured with production addresses
+- [x] All tests passing (53/53)
+- [x] Environment variables documented
+- [ ] Indexer deployed to cloud platform
+- [ ] Frontend deployed to Vercel
+- [ ] End-to-end testing completed
+- [ ] Production monitoring setup
+- [ ] Documentation finalized
+
+**Status**: Ready for cloud deployment (Steps 5-7)
diff --git a/docs/MOONBEAM_DEPLOYMENT.md b/docs/MOONBEAM_DEPLOYMENT.md
new file mode 100644
index 0000000..1feb4f8
--- /dev/null
+++ b/docs/MOONBEAM_DEPLOYMENT.md
@@ -0,0 +1,154 @@
+# Moonbeam Mainnet Deployment Summary
+
+**Date**: November 9, 2025  
+**Network**: Moonbeam (Chain ID: 1284)  
+**Deployer**: `0x50fDb6B1aF56DfE55cB484030C7b3b8787ff5f68`
+
+## Deployed Contracts
+
+### SchemaRegistry
+
+- **Address**: `0xD680d4F3852A527BedbF12fB261F6922dfD98e28`
+- **Transaction**: `0xba854d4412513de0cbf908b4140a5fc8e75fa5ce73163ec921955330f3add9bb`
+- **Explorer**: https://moonscan.io/address/0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+- **Transaction URL**: https://moonscan.io/tx/0xba854d4412513de0cbf908b4140a5fc8e75fa5ce73163ec921955330f3add9bb
+
+### EAS (Ethereum Attestation Service)
+
+- **Address**: `0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75`
+- **Transaction**: `0x8f8be3546790e75bb36e3f15ea2ec4af6fb47c70728f131f17577da2e261ad1e`
+- **Explorer**: https://moonscan.io/address/0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+- **Transaction URL**: https://moonscan.io/tx/0x8f8be3546790e75bb36e3f15ea2ec4af6fb47c70728f131f17577da2e261ad1e
+
+### CubidTrust Schema
+
+- **Schema UID**: `0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55`
+- **Registration Transaction**: `0x87a90abfa3495f1f518371eba2829058f470f4be0c4b6ff984597eed43623b18`
+- **Transaction URL**: https://moonscan.io/tx/0x87a90abfa3495f1f518371eba2829058f470f4be0c4b6ff984597eed43623b18
+- **Resolver**: `0x1b79e8a759f06720E5a45105D29a707E51c44918` (FeeGate)
+- **Revocable**: `true`
+- **Schema Definition**:
+  ```
+  string cubidId,uint8 trustLevel,bool human,bytes32 circle,uint64 issuedAt,uint64 expiry,uint256 nonce
+  ```
+- **Note**: Initial schema without resolver (0xa519fee...) was registered first, then re-registered with FeeGate resolver
+
+### FeeGate Resolver
+
+- **Address**: `0x1b79e8a759f06720E5a45105D29a707E51c44918`
+- **Transaction**: `0x383272228de69d00e380ad60dd143b93e75e0461ba5001d2bbdf82518ac90d51`
+- **Explorer**: https://moonscan.io/address/0x1b79e8a759f06720E5a45105D29a707E51c44918
+- **Transaction URL**: https://moonscan.io/tx/0x383272228de69d00e380ad60dd143b93e75e0461ba5001d2bbdf82518ac90d51
+- **Initial Lifetime Fee**: `100 GLMR`
+- **Fee Threshold**: `3rd attestation`
+- **Deployer (Admin)**: `0x50fDb6B1aF56DfE55cB484030C7b3b8787ff5f68`
+
+## Gas Costs
+
+| Contract             | Estimated Gas  | Cost (@ 31.25 gwei) |
+| -------------------- | -------------- | ------------------- |
+| SchemaRegistry + EAS | 8,209,388      | 0.256543375 GLMR    |
+| RegisterSchema       | 416,338        | 0.0130105625 GLMR   |
+| DeployFeeGate        | 3,223,452      | 0.100732875 GLMR    |
+| **Total**            | **11,849,178** | **~0.370 GLMR**     |
+
+## Contract Verification
+
+To verify contracts on Moonscan:
+
+```bash
+# SchemaRegistry (from EAS library)
+forge verify-contract 0xD680d4F3852A527BedbF12fB261F6922dfD98e28 \
+  SchemaRegistry \
+  --chain moonbeam \
+  --watch
+
+# EAS (from EAS library)
+forge verify-contract 0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75 \
+  EAS \
+  --constructor-args $(cast abi-encode "constructor(address)" 0xD680d4F3852A527BedbF12fB261F6922dfD98e28) \
+  --chain moonbeam \
+  --watch
+
+# FeeGate
+forge verify-contract 0x1b79e8a759f06720E5a45105D29a707E51c44918 \
+  src/FeeGate.sol:FeeGate \
+  --constructor-args $(cast abi-encode "constructor(address,bytes32)" 0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75 0xa519fee19287dff6c364f3eae0eb865bddcc4dba2070a3dd3c1c19395af10510) \
+  --chain moonbeam \
+  --watch
+```
+
+## FeeGate Admin Functions
+
+The deployer address (`0x50fDb6B1aF56DfE55cB484030C7b3b8787ff5f68`) has exclusive access to:
+
+1. **`setLifetimeFee(uint256 newFee)`** - Update the lifetime fee amount
+2. **`withdraw()`** - Withdraw accumulated fees
+
+Example usage:
+
+```bash
+# Check current fee
+cast call 0x1b79e8a759f06720E5a45105D29a707E51c44918 "lifetimeFee()(uint256)" --rpc-url https://rpc.api.moonbeam.network
+
+# Update fee (requires deployer key)
+cast send 0x1b79e8a759f06720E5a45105D29a707E51c44918 \
+  "setLifetimeFee(uint256)" 50000000000000000000 \
+  --private-key $PRIVATE_KEY_DEPLOYER \
+  --rpc-url https://rpc.api.moonbeam.network \
+  --legacy
+
+# Withdraw fees (requires deployer key)
+cast send 0x1b79e8a759f06720E5a45105D29a707E51c44918 \
+  "withdraw()" \
+  --private-key $PRIVATE_KEY_DEPLOYER \
+  --rpc-url https://rpc.api.moonbeam.network \
+  --legacy
+```
+
+## Integration URLs
+
+### Frontend Environment Variables
+
+Update `frontend/.env.local`:
+
+```env
+NEXT_PUBLIC_CHAIN_ID=1284
+NEXT_PUBLIC_SCHEMA_REGISTRY=0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+NEXT_PUBLIC_EAS_ADDR=0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+NEXT_PUBLIC_SCHEMA_UID=0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+NEXT_PUBLIC_FEEGATE_ADDR=0x1b79e8a759f06720E5a45105D29a707E51c44918
+```
+
+### Indexer Environment Variables
+
+Update `indexer/.env`:
+
+```env
+MOONBEAM_RPC=https://rpc.api.moonbeam.network
+REGISTRY_ADDR=0xD680d4F3852A527BedbF12fB261F6922dfD98e28
+EAS_ADDR=0xd3cC2cfEb2904b465b0743460e38FeD0C1Ed1c75
+SCHEMA_UID=0x1b219d056f55ec3a19488c61f9d6afac696ab273cd615bfeaed122253bf1ad55
+FEEGATE_ADDR=0x1b79e8a759f06720E5a45105D29a707E51c44918
+```
+
+## Next Steps
+
+1. ✅ Contracts deployed to Moonbeam
+2. ⏳ Verify contracts on Moonscan (optional but recommended)
+3. ⏳ Update frontend environment variables
+4. ⏳ Update indexer configuration
+5. ⏳ Deploy indexer to production
+6. ⏳ Deploy frontend to Vercel
+7. ⏳ End-to-end testing on mainnet
+
+## Notes
+
+- All contracts compiled with Solidity 0.8.28
+- Legacy transaction mode used for compatibility with Moonbeam
+- EIP-3855 warning is expected and doesn't affect functionality
+- Schema UID is deterministic based on the schema definition
+- FeeGate is configured as the resolver for the CubidTrust schema
+- Initial lifetime fee: 100 GLMR (changeable by deployer)
+- Fee charged on 3rd attestation per issuer
+- Nonce-based replay protection implemented
diff --git a/frontend/__tests__/app-header.test.tsx b/frontend/__tests__/app-header.test.tsx
index 072e0d4..5d06556 100644
--- a/frontend/__tests__/app-header.test.tsx
+++ b/frontend/__tests__/app-header.test.tsx
@@ -32,7 +32,9 @@ describe("AppHeader", () => {
     act(() => {
       useUserStore.setState({
         session,
-        user: { user_id: "1", display_name: "Sky Trail", cubid_id: "sky" },
+        user: { user_id: "1", display_name: "Sky Trail", cubid_id: "sky", evm_address: "0x123" },
+        walletAddress: null,
+        initialised: true,
       });
     });
 
@@ -42,6 +44,7 @@ describe("AppHeader", () => {
     expect(screen.getByRole("link", { name: /My QR code/i })).toHaveAttribute("href", "/scan/my-qr");
     expect(screen.getByRole("link", { name: /Camera/i })).toHaveAttribute("href", "/scan/camera");
     expect(screen.getByRole("link", { name: /My Circle/i })).toHaveAttribute("href", "/circle");
+    expect(screen.getByRole("link", { name: /Indexer/i })).toHaveAttribute("href", "/indexer");
     expect(screen.getByText("Sky Trail")).toBeInTheDocument();
     expect(screen.getByText("ST")).toBeInTheDocument();
   });
diff --git a/frontend/__tests__/auth-provider.test.tsx b/frontend/__tests__/auth-provider.test.tsx
index 461a8ea..c075e6f 100644
--- a/frontend/__tests__/auth-provider.test.tsx
+++ b/frontend/__tests__/auth-provider.test.tsx
@@ -56,6 +56,7 @@ describe("AuthProvider", () => {
       expect(useUserStore.getState().session).toBe(session);
     });
     expect(useUserStore.getState().user).toEqual(profile);
+    expect(useUserStore.getState().initialised).toBe(true);
     expect(fetchMyProfileMock).toHaveBeenCalledTimes(1);
 
     fetchMyProfileMock.mockResolvedValueOnce(null);
@@ -87,6 +88,7 @@ describe("AuthProvider", () => {
 
     expect(useUserStore.getState().session).toBeNull();
     expect(useUserStore.getState().user).toBeNull();
+    expect(useUserStore.getState().initialised).toBe(true);
     expect(fetchMyProfileMock).not.toHaveBeenCalled();
 
     errorSpy.mockRestore();
diff --git a/frontend/__tests__/home-page.test.tsx b/frontend/__tests__/home-page.test.tsx
index c135d02..180ef68 100644
--- a/frontend/__tests__/home-page.test.tsx
+++ b/frontend/__tests__/home-page.test.tsx
@@ -29,6 +29,9 @@ describe("Home page", () => {
     const ctas = screen.getAllByRole("link", { name: /Start verifying now/i });
     expect(ctas).toHaveLength(2);
     ctas.forEach((cta) => expect(cta).toHaveAttribute("href", "/signin"));
+
+    const indexerLink = screen.getByRole("link", { name: /Visit Moonbeam indexer/i });
+    expect(indexerLink).toHaveAttribute("href", "/indexer");
   });
 
   it("shows quick actions when the user is signed in", () => {
@@ -40,7 +43,9 @@ describe("Home page", () => {
     act(() => {
       useUserStore.setState({
         session,
-        user: { user_id: "1", display_name: "Agent Maple", cubid_id: "maple" },
+        user: { user_id: "1", display_name: "Agent Maple", cubid_id: "maple", evm_address: "0x123" },
+        walletAddress: null,
+        initialised: true,
       });
     });
 
@@ -49,5 +54,6 @@ describe("Home page", () => {
     expect(screen.getByText(/let’s keep building trusted links/i)).toBeInTheDocument();
     expect(screen.getByRole("link", { name: /Share your QR/i })).toHaveAttribute("href", "/scan/my-qr");
     expect(screen.getByRole("link", { name: /Open camera/i })).toHaveAttribute("href", "/scan/camera");
+    expect(screen.getByRole("link", { name: /Open Moonbeam indexer/i })).toHaveAttribute("href", "/indexer");
   });
 });
diff --git a/frontend/__tests__/indexer-page.test.tsx b/frontend/__tests__/indexer-page.test.tsx
new file mode 100644
index 0000000..a3e74e2
--- /dev/null
+++ b/frontend/__tests__/indexer-page.test.tsx
@@ -0,0 +1,17 @@
+import { render, screen } from "@testing-library/react";
+import { describe, expect, it } from "vitest";
+
+import IndexerPage from "../src/app/indexer/page";
+
+describe("Indexer page", () => {
+  it("embeds the Moonbeam indexer inside the app shell", () => {
+    render(<IndexerPage />);
+
+    expect(screen.getByRole("heading", { name: /Moonbeam indexer/i })).toBeInTheDocument();
+    const iframe = screen.getByTitle(/Moonbeam indexer/i);
+    expect(iframe).toHaveAttribute("src", "/api/indexer/moonscan");
+    expect(
+      screen.getByRole("link", { name: /Open Moonbeam indexer in a new tab/i }),
+    ).toHaveAttribute("href", "https://moonbeam.moonscan.io/");
+  });
+});
diff --git a/frontend/__tests__/profile-page.test.tsx b/frontend/__tests__/profile-page.test.tsx
index 5b102bf..7508c3f 100644
--- a/frontend/__tests__/profile-page.test.tsx
+++ b/frontend/__tests__/profile-page.test.tsx
@@ -3,7 +3,7 @@ import { act, fireEvent, render, screen, within } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import ProfilePage from "../src/app/(routes)/profile/page";
+import ProfilePage from "../src/app/profile/page";
 import { useUserStore } from "../src/lib/store";
 
 const { replaceMock } = vi.hoisted(() => ({
@@ -36,7 +36,10 @@ describe("ProfilePage", () => {
           cubid_id: "cubid_me",
           display_name: "Maple Leaf",
           photo_url: "https://example.com/photo.png",
+          evm_address: "0x123",
         },
+        walletAddress: null,
+        initialised: true,
       });
     });
   });
@@ -52,6 +55,7 @@ describe("ProfilePage", () => {
 
     expect(screen.getByText(/This name can be a nickname/i)).toBeInTheDocument();
     expect(screen.getByText(/Maple Leaf/)).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: /connect wallet/i })).toBeInTheDocument();
 
     const previewHeading = screen.getByRole("heading", { name: /Preview for peers/i });
     const previewAside = previewHeading.closest("aside");
diff --git a/frontend/__tests__/results-page.test.tsx b/frontend/__tests__/results-page.test.tsx
index 4de4896..87a89fb 100644
--- a/frontend/__tests__/results-page.test.tsx
+++ b/frontend/__tests__/results-page.test.tsx
@@ -1,12 +1,45 @@
-import { render, screen } from "@testing-library/react";
-import { beforeEach, describe, expect, it } from "vitest";
+import type { Session } from "@supabase/supabase-js";
+import { act, render, screen } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import ResultsPage from "../src/app/(routes)/results/page";
+import ResultsPage from "../src/app/results/page";
 import { useScanStore } from "../src/lib/scanStore";
+import { useUserStore } from "../src/lib/store";
+
+const { replaceMock } = vi.hoisted(() => ({ replaceMock: vi.fn() }));
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({ replace: replaceMock }),
+}));
 
 describe("ResultsPage", () => {
   beforeEach(() => {
     useScanStore.getState().reset();
+    replaceMock.mockReset();
+    act(() => {
+      useUserStore.getState().reset();
+    });
+
+    const session = { access_token: "token", user: { id: "user-1" } } as unknown as Session;
+    act(() => {
+      useUserStore.setState({
+        session,
+        user: {
+          user_id: "user-1",
+          cubid_id: "cubid_me",
+          display_name: "Maple",
+          evm_address: "0x123",
+        },
+        walletAddress: null,
+        initialised: true,
+      });
+    });
+  });
+
+  afterEach(() => {
+    act(() => {
+      useUserStore.getState().reset();
+    });
   });
 
   it("prompts for verification when no result is cached", () => {
diff --git a/frontend/__tests__/scan-camera-page.test.tsx b/frontend/__tests__/scan-camera-page.test.tsx
index 7c421fa..81a927a 100644
--- a/frontend/__tests__/scan-camera-page.test.tsx
+++ b/frontend/__tests__/scan-camera-page.test.tsx
@@ -3,7 +3,7 @@ import { act, fireEvent, render, screen, waitFor } from "@testing-library/react"
 import userEvent from "@testing-library/user-event";
 import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
 
-import CameraPage from "../src/app/(routes)/scan/camera/page";
+import CameraPage from "../src/app/scan/camera/page";
 import { useScanStore } from "../src/lib/scanStore";
 import { useUserStore } from "../src/lib/store";
 
@@ -26,6 +26,7 @@ const {
 vi.mock("next/navigation", () => ({
   useRouter: () => ({
     push: pushMock,
+    replace: vi.fn(),
   }),
 }));
 
@@ -72,8 +73,14 @@ describe("CameraPage", () => {
 
     useUserStore.setState({
       session,
-      user: { user_id: session.user.id, cubid_id: "cubid_me" },
+      user: {
+        user_id: session.user.id,
+        cubid_id: "cubid_me",
+        display_name: "Maple",
+        evm_address: "0xViewer",
+      },
       walletAddress: null,
+      initialised: true,
     });
 
     getUserMediaMock.mockResolvedValue({
diff --git a/frontend/__tests__/scan-qr-page.test.tsx b/frontend/__tests__/scan-qr-page.test.tsx
index 9174a7b..4b1d36b 100644
--- a/frontend/__tests__/scan-qr-page.test.tsx
+++ b/frontend/__tests__/scan-qr-page.test.tsx
@@ -2,7 +2,7 @@ import type { Session } from "@supabase/supabase-js";
 import { act, render, screen, waitFor } from "@testing-library/react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import MyQrPage from "../src/app/(routes)/scan/my-qr/page";
+import MyQrPage from "../src/app/scan/my-qr/page";
 import type { HandshakeCompletion } from "../src/lib/handshake";
 import { useScanStore } from "../src/lib/scanStore";
 import { useUserStore } from "../src/lib/store";
@@ -16,6 +16,7 @@ const { pushMock, subscribeToHandshakeMock, randomUuidMock } = vi.hoisted(() =>
 vi.mock("next/navigation", () => ({
   useRouter: () => ({
     push: pushMock,
+    replace: vi.fn(),
   }),
 }));
 
@@ -48,7 +49,10 @@ describe("MyQrPage", () => {
         user_id: "user-1",
         cubid_id: "cubid_me",
         display_name: "Casey Rivers",
+        evm_address: "0x123",
       },
+      walletAddress: null,
+      initialised: true,
     });
   });
 
diff --git a/frontend/package.json b/frontend/package.json
index a187749..348abfd 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -12,6 +12,7 @@
   "dependencies": {
     "@supabase/ssr": "^0.7.0",
     "@supabase/supabase-js": "^2.80.0",
+    "jsqr": "^1.4.0",
     "qrcode.react": "^4.2.0",
     "next": "16.0.1",
     "react": "19.2.0",
diff --git a/frontend/src/app/(routes)/circle/page.tsx b/frontend/src/app/(routes)/circle/page.tsx
deleted file mode 100644
index ac0d2d3..0000000
--- a/frontend/src/app/(routes)/circle/page.tsx
+++ /dev/null
@@ -1,138 +0,0 @@
-"use client";
-
-import { useEffect, useMemo, useState } from "react";
-
-import type { ProfileResponse } from "@/lib/api";
-import { getProfile } from "@/lib/api";
-import { useUserStore } from "@/lib/store";
-
-function formatFreshness(seconds: number): string {
-  if (seconds < 60) return `${seconds}s ago`;
-  if (seconds < 3_600) return `${Math.floor(seconds / 60)}m ago`;
-  if (seconds < 86_400) return `${Math.floor(seconds / 3_600)}h ago`;
-  return `${Math.floor(seconds / 86_400)}d ago`;
-}
-
-export default function CirclePage() {
-  const profile = useUserStore((state) => state.user);
-  const walletAddress = useUserStore((state) => state.walletAddress ?? state.user?.evm_address ?? null);
-
-  const [query, setQuery] = useState(profile?.cubid_id ?? "");
-  const [activeCubid, setActiveCubid] = useState(profile?.cubid_id ?? "");
-  const [data, setData] = useState<ProfileResponse | null>(null);
-  const [status, setStatus] = useState<string | null>(null);
-  const [error, setError] = useState<string | null>(null);
-
-  const profileReady = useMemo(() => Boolean(profile?.cubid_id), [profile?.cubid_id]);
-
-  useEffect(() => {
-    setQuery(profile?.cubid_id ?? "");
-    setActiveCubid(profile?.cubid_id ?? "");
-  }, [profile?.cubid_id]);
-
-  useEffect(() => {
-    if (!activeCubid) {
-      setData(null);
-      return;
-    }
-    let cancelled = false;
-    async function fetchData() {
-      setStatus("Loading attestations…");
-      setError(null);
-      try {
-        const result = await getProfile(activeCubid, { issuer: walletAddress ?? undefined });
-        if (!cancelled) {
-          setData(result);
-          setStatus(null);
-        }
-      } catch (err) {
-        if (!cancelled) {
-          const message = err instanceof Error ? err.message : "Failed to load profile";
-          setError(message);
-          setStatus(null);
-        }
-      }
-    }
-
-    fetchData();
-    return () => {
-      cancelled = true;
-    };
-  }, [activeCubid, walletAddress]);
-
-  return (
-    <section className="space-y-6">
-      <header className="space-y-2">
-        <h1 className="text-3xl font-semibold">My Circle</h1>
-        <p className="text-muted-foreground">
-          View the latest inbound attestations for a Cubid ID and track who you&apos;ve vouched for using your connected wallet.
-        </p>
-      </header>
-
-      <div className="space-y-2">
-        <label className="flex flex-col gap-2 text-sm font-medium sm:flex-row sm:items-center">
-          <span>Search Cubid ID</span>
-          <div className="flex w-full gap-2 sm:w-auto">
-            <input
-              className="flex-1 rounded border border-neutral-300 px-3 py-2 text-base shadow-sm focus:border-neutral-500 focus:outline-none dark:border-neutral-700 dark:bg-neutral-900"
-              onChange={(event) => setQuery(event.target.value)}
-              placeholder="cubid_peer123"
-              value={query}
-            />
-            <button
-              className="rounded bg-black px-4 py-2 text-white shadow-sm transition hover:bg-neutral-800 disabled:cursor-not-allowed disabled:opacity-60 dark:bg-white dark:text-black"
-              disabled={!query}
-              onClick={() => setActiveCubid(query.trim())}
-              type="button"
-            >
-              Load
-            </button>
-          </div>
-        </label>
-        {!profileReady ? (
-          <p className="text-sm text-red-500">Complete onboarding to view your circle.</p>
-        ) : null}
-      </div>
-
-      {status ? <p className="text-sm text-muted-foreground">{status}</p> : null}
-      {error ? <p className="text-sm text-red-500">{error}</p> : null}
-
-      {data ? (
-        <div className="grid gap-6 md:grid-cols-2">
-          <section className="space-y-3">
-            <h2 className="text-xl font-semibold">Inbound ({data.inbound.length})</h2>
-            <p className="text-sm text-muted-foreground">Wallets who vouched for {data.cubidId}.</p>
-            <ul className="space-y-3">
-              {data.inbound.map((attn) => (
-                <li key={`${attn.issuer}-${attn.uid}`} className="rounded border border-neutral-200 p-3 shadow-sm dark:border-neutral-800">
-                  <p className="font-medium">Issuer {attn.issuer}</p>
-                  <p className="text-sm text-muted-foreground">
-                    Trust level {attn.trustLevel} · {attn.circle ?? "no circle"} · {formatFreshness(attn.freshnessSeconds)}
-                  </p>
-                </li>
-              ))}
-              {data.inbound.length === 0 ? <li className="text-sm text-muted-foreground">No attestations yet.</li> : null}
-            </ul>
-          </section>
-          <section className="space-y-3">
-            <h2 className="text-xl font-semibold">Outbound ({data.outbound.length})</h2>
-            <p className="text-sm text-muted-foreground">
-              Cubid IDs you&apos;ve vouched for as {walletAddress ?? "your wallet"}.
-            </p>
-            <ul className="space-y-3">
-              {data.outbound.map((attn) => (
-                <li key={`${attn.cubidId}-${attn.uid}`} className="rounded border border-neutral-200 p-3 shadow-sm dark:border-neutral-800">
-                  <p className="font-medium">{attn.cubidId}</p>
-                  <p className="text-sm text-muted-foreground">
-                    Trust level {attn.trustLevel} · {attn.circle ?? "no circle"} · {formatFreshness(attn.freshnessSeconds)}
-                  </p>
-                </li>
-              ))}
-              {data.outbound.length === 0 ? <li className="text-sm text-muted-foreground">No outbound vouches yet.</li> : null}
-            </ul>
-          </section>
-        </div>
-      ) : null}
-    </section>
-  );
-}
diff --git a/frontend/src/app/api/indexer/moonscan/route.ts b/frontend/src/app/api/indexer/moonscan/route.ts
new file mode 100644
index 0000000..c0bcc2d
--- /dev/null
+++ b/frontend/src/app/api/indexer/moonscan/route.ts
@@ -0,0 +1,47 @@
+const MOONSCAN_URL = "https://moonbeam.moonscan.io/";
+const FALLBACK_HTML = `<!doctype html><html><head><title>Moonbeam indexer unavailable</title></head><body><main><h1>Moonbeam indexer unavailable</h1><p>We couldn't load the Moonbeam explorer right now. Try opening it in a new tab.</p></main></body></html>`;
+
+export const runtime = "nodejs";
+
+export async function GET() {
+  try {
+    const response = await fetch(MOONSCAN_URL, {
+      headers: {
+        "User-Agent":
+          "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
+      },
+      next: { revalidate: 300 },
+    });
+
+    if (!response.ok) {
+      throw new Error(`Unexpected status ${response.status}`);
+    }
+
+    let html = await response.text();
+
+    if (!/<base\s/i.test(html)) {
+      if (/<head>/i.test(html)) {
+        html = html.replace(/<head>/i, `<head><base href="${MOONSCAN_URL}">`);
+      } else {
+        html = `<head><base href="${MOONSCAN_URL}"></head>${html}`;
+      }
+    }
+
+    return new Response(html, {
+      headers: {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "public, max-age=0, s-maxage=300",
+      },
+      status: 200,
+    });
+  } catch (error) {
+    return new Response(FALLBACK_HTML, {
+      headers: {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "no-store",
+      },
+      status: 502,
+      statusText: error instanceof Error ? error.message : "Failed to load Moonbeam explorer",
+    });
+  }
+}
diff --git a/frontend/src/app/circle/page.tsx b/frontend/src/app/circle/page.tsx
new file mode 100644
index 0000000..a082485
--- /dev/null
+++ b/frontend/src/app/circle/page.tsx
@@ -0,0 +1,163 @@
+"use client";
+
+import { useEffect, useMemo, useState } from "react";
+
+import type { ProfileResponse } from "@/lib/api";
+import { getProfile } from "@/lib/api";
+import { useRequireCompletedOnboarding } from "@/lib/onboarding";
+import { useUserStore } from "@/lib/store";
+
+function formatFreshness(seconds: number): string {
+  if (seconds < 60) return `${seconds}s ago`;
+  if (seconds < 3_600) return `${Math.floor(seconds / 60)}m ago`;
+  if (seconds < 86_400) return `${Math.floor(seconds / 3_600)}h ago`;
+  return `${Math.floor(seconds / 86_400)}d ago`;
+}
+
+export default function CirclePage() {
+  const { profile, ready } = useRequireCompletedOnboarding();
+  const walletAddress = useUserStore((state) => state.walletAddress ?? state.user?.evm_address ?? null);
+
+  const [data, setData] = useState<ProfileResponse | null>(null);
+  const [status, setStatus] = useState<string | null>(null);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (!ready) {
+      setData(null);
+      return;
+    }
+    const cubidId = profile?.cubid_id ?? null;
+    const issuer = walletAddress ?? profile?.evm_address ?? null;
+    if (!cubidId) {
+      setData(null);
+      setStatus(null);
+      setError("Your profile is missing a Cubid ID.");
+      return;
+    }
+    if (!issuer) {
+      setData(null);
+      setStatus(null);
+      setError("Connect your wallet to view issued credentials.");
+      return;
+    }
+    let cancelled = false;
+    async function fetchData(currentCubid: string, currentIssuer: string) {
+      setStatus("Loading attestations…");
+      setError(null);
+      try {
+        const result = await getProfile(currentCubid, { issuer: currentIssuer });
+        if (!cancelled) {
+          setData(result);
+          setStatus(null);
+        }
+      } catch (err) {
+        if (!cancelled) {
+          const message = err instanceof Error ? err.message : "Failed to load profile";
+          setError(message);
+          setStatus(null);
+        }
+      }
+    }
+
+    void fetchData(cubidId, issuer);
+    return () => {
+      cancelled = true;
+    };
+  }, [profile?.cubid_id, profile?.evm_address, ready, walletAddress]);
+
+  const groupedByCircle = useMemo(() => {
+    if (!data) {
+      return [] as Array<{ circle: string | null; items: ProfileResponse["outbound"] }>;
+    }
+    const groups = new Map<string | null, ProfileResponse["outbound"]>();
+    for (const attn of data.outbound) {
+      const key = attn.circle ?? null;
+      const list = groups.get(key) ?? [];
+      list.push(attn);
+      groups.set(key, list);
+    }
+    return Array.from(groups.entries())
+      .map(([circle, items]) => ({ circle, items: items.sort((a, b) => a.freshnessSeconds - b.freshnessSeconds) }))
+      .sort((a, b) => {
+        const circleA = a.circle ?? "";
+        const circleB = b.circle ?? "";
+        return circleA.localeCompare(circleB);
+      });
+  }, [data]);
+
+  if (!ready) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Checking your circle…</h1>
+        <p className="text-sm text-muted-foreground">We’re verifying your onboarding details.</p>
+      </section>
+    );
+  }
+
+  return (
+    <section className="space-y-6">
+      <header className="space-y-2">
+        <h1 className="text-3xl font-semibold">My Circle</h1>
+        <p className="text-muted-foreground">
+          Explore every credential you&apos;ve issued and see who&apos;s vouched for you.
+        </p>
+      </header>
+
+      {status ? <p className="text-sm text-muted-foreground">{status}</p> : null}
+      {error ? <p className="text-sm text-red-500">{error}</p> : null}
+
+      {data ? (
+        <div className="space-y-6">
+          <section className="space-y-3">
+            <h2 className="text-xl font-semibold">Inbound ({data.inbound.length})</h2>
+            <p className="text-sm text-muted-foreground">Wallets who vouched for {data.cubidId}.</p>
+            <ul className="space-y-3">
+              {data.inbound.map((attn) => (
+                <li key={`${attn.issuer}-${attn.uid}`} className="rounded border border-neutral-200 p-3 shadow-sm dark:border-neutral-800">
+                  <p className="font-medium">Issuer {attn.issuer}</p>
+                  <p className="text-sm text-muted-foreground">
+                    Trust level {attn.trustLevel} · {attn.circle ?? "no circle"} · {formatFreshness(attn.freshnessSeconds)}
+                  </p>
+                </li>
+              ))}
+              {data.inbound.length === 0 ? <li className="text-sm text-muted-foreground">No attestations yet.</li> : null}
+            </ul>
+          </section>
+
+          <section className="space-y-4">
+            <div className="space-y-1">
+              <h2 className="text-xl font-semibold">Outbound ({data.outbound.length})</h2>
+              <p className="text-sm text-muted-foreground">
+                Credentials you&apos;ve issued as {walletAddress ?? profile?.evm_address} grouped by circle.
+              </p>
+            </div>
+            {groupedByCircle.length === 0 ? (
+              <p className="text-sm text-muted-foreground">You haven&apos;t issued any credentials yet.</p>
+            ) : null}
+            <div className="grid gap-4 md:grid-cols-2">
+              {groupedByCircle.map((group) => (
+                <section key={group.circle ?? "uncategorised"} className="space-y-3 rounded border border-neutral-200 p-4 shadow-sm dark:border-neutral-800">
+                  <header className="space-y-1">
+                    <h3 className="text-lg font-semibold">{group.circle ?? "No circle tag"}</h3>
+                    <p className="text-xs uppercase tracking-[0.2em] text-muted-foreground">{group.items.length} credential{group.items.length === 1 ? "" : "s"}</p>
+                  </header>
+                  <ul className="space-y-3">
+                    {group.items.map((attn) => (
+                      <li key={`${attn.cubidId}-${attn.uid}`} className="rounded border border-neutral-200 p-3 shadow-sm dark:border-neutral-800">
+                        <p className="font-medium">{attn.cubidId}</p>
+                        <p className="text-sm text-muted-foreground">
+                          Trust level {attn.trustLevel} · {formatFreshness(attn.freshnessSeconds)} · Issued {new Date(attn.issuedAt * 1000).toLocaleString()}
+                        </p>
+                      </li>
+                    ))}
+                  </ul>
+                </section>
+              ))}
+            </div>
+          </section>
+        </div>
+      ) : null}
+    </section>
+  );
+}
diff --git a/frontend/src/app/indexer/page.tsx b/frontend/src/app/indexer/page.tsx
new file mode 100644
index 0000000..6efd59b
--- /dev/null
+++ b/frontend/src/app/indexer/page.tsx
@@ -0,0 +1,33 @@
+import Link from "next/link";
+
+const INDEXER_URL = "https://moonbeam.moonscan.io/";
+const INDEXER_PROXY_PATH = "/api/indexer/moonscan";
+
+export default function IndexerPage() {
+  return (
+    <section className="space-y-6">
+      <header className="space-y-2">
+        <span className="text-xs font-semibold uppercase tracking-[0.3em] text-sky-400/80">Moonbeam tooling</span>
+        <h1 className="text-3xl font-semibold text-slate-50">Moonbeam indexer</h1>
+        <p className="max-w-3xl text-sm text-slate-300/90">
+          Browse transaction details, contract events, and on-chain history without leaving Trust Me Bro. The Moonbeam explorer
+          streams through our proxy so you can jump straight back into handshakes when you are done.
+        </p>
+      </header>
+
+      <div className="overflow-hidden rounded-3xl border border-slate-700/60 bg-slate-950/70 shadow-inner shadow-black/50">
+        <iframe
+          className="h-[70vh] w-full"
+          src={INDEXER_PROXY_PATH}
+          title="Moonbeam indexer"
+          allowFullScreen
+          loading="lazy"
+        />
+      </div>
+
+      <p className="text-xs text-slate-400">
+        Having trouble loading the explorer? <Link className="font-semibold text-sky-300 underline hover:text-sky-200" href={INDEXER_URL} rel="noreferrer" target="_blank">Open Moonbeam indexer in a new tab</Link>.
+      </p>
+    </section>
+  );
+}
diff --git a/frontend/src/app/(routes)/new-user/page.tsx b/frontend/src/app/new-user/page.tsx
similarity index 83%
rename from frontend/src/app/(routes)/new-user/page.tsx
rename to frontend/src/app/new-user/page.tsx
index a1a3b9f..8aed83b 100644
--- a/frontend/src/app/(routes)/new-user/page.tsx
+++ b/frontend/src/app/new-user/page.tsx
@@ -1,46 +1,54 @@
 "use client";
 
 import { useRouter } from "next/navigation";
-import { type FormEvent, useEffect, useState } from "react";
+import { type FormEvent, useEffect, useMemo, useState } from "react";
 
-import { isValidCubidId, requestCubidId } from "../../../lib/cubid";
-import { upsertMyProfile } from "../../../lib/profile";
-import { useUserStore } from "../../../lib/store";
-import { ensureWallet } from "../../../lib/wallet";
+import { isValidCubidId, requestCubidId } from "../../lib/cubid";
+import { useRestrictToIncompleteOnboarding } from "../../lib/onboarding";
+import { upsertMyProfile } from "../../lib/profile";
+import { useUserStore } from "../../lib/store";
+import { ensureWallet } from "../../lib/wallet";
+
+function createRandomCubidId(): string {
+  const globalCrypto = globalThis.crypto;
+  if (globalCrypto && typeof globalCrypto.randomUUID === "function") {
+    return `cubid_${globalCrypto.randomUUID().replace(/-/g, "")}`;
+  }
+  return `cubid_${Math.random().toString(36).slice(2, 34)}`;
+}
 
 export default function NewUserPage() {
   const router = useRouter();
-  const session = useUserStore((state) => state.session);
-  const profile = useUserStore((state) => state.user);
+  const { session, profile, ready } = useRestrictToIncompleteOnboarding();
   const setUser = useUserStore((state) => state.setUser);
   const setWalletAddress = useUserStore((state) => state.setWalletAddress);
 
+  const initialCubidId = useMemo(() => profile?.cubid_id ?? createRandomCubidId(), [profile?.cubid_id]);
   const [form, setForm] = useState({
     displayName: profile?.display_name ?? "",
     photoUrl: profile?.photo_url ?? "",
-    cubidId: profile?.cubid_id ?? "",
+    cubidId: initialCubidId,
   });
   const [status, setStatus] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
   const [saving, setSaving] = useState(false);
 
   useEffect(() => {
-    if (!session) {
-      router.replace("/(routes)/signin");
-      return;
-    }
-    if (profile?.cubid_id) {
-      router.replace("/(routes)/profile");
-    }
-  }, [profile?.cubid_id, router, session]);
-
-  useEffect(() => {
-    setForm({
+    setForm((prev) => ({
       displayName: profile?.display_name ?? "",
       photoUrl: profile?.photo_url ?? "",
-      cubidId: profile?.cubid_id ?? "",
-    });
-  }, [profile]);
+      cubidId: profile?.cubid_id ?? prev.cubidId ?? initialCubidId,
+    }));
+  }, [initialCubidId, profile?.cubid_id, profile?.display_name, profile?.photo_url]);
+
+  if (!ready) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Loading your onboarding flow…</h1>
+        <p className="text-sm text-muted-foreground">Hold tight while we confirm your session.</p>
+      </section>
+    );
+  }
 
   async function handleGenerateCubid() {
     if (!session?.user?.email) {
@@ -77,6 +85,9 @@ export default function NewUserPage() {
 
   async function handleSubmit(event: FormEvent) {
     event.preventDefault();
+    if (!ready) {
+      return;
+    }
     setError(null);
     if (!isValidCubidId(form.cubidId)) {
       setError("Cubid ID must match cubid_[a-z0-9]{4,32}");
diff --git a/frontend/src/app/page.tsx b/frontend/src/app/page.tsx
index b5e06f5..0afc945 100644
--- a/frontend/src/app/page.tsx
+++ b/frontend/src/app/page.tsx
@@ -58,10 +58,17 @@ const QUICK_ACTIONS = [
     title: "Issue a new attestation",
     description: "Record a fresh connection with trust level, circle tag, and expiry in one flow.",
   },
+  {
+    href: "/indexer",
+    title: "Open Moonbeam indexer",
+    description: "Inspect attestations, transactions, and contract calls without leaving the Trust Me Bro shell.",
+  },
 ];
 
 const ctaClassName =
   "inline-flex items-center justify-center rounded-full border border-sky-400/40 bg-sky-500/20 px-6 py-3 text-sm font-semibold uppercase tracking-[0.3em] text-sky-100 shadow-lg shadow-sky-500/20 transition hover:border-sky-300 hover:bg-sky-500/30";
+const secondaryCtaClassName =
+  "inline-flex items-center justify-center rounded-full border border-slate-500/40 bg-transparent px-6 py-3 text-sm font-semibold uppercase tracking-[0.3em] text-slate-200 shadow-lg shadow-black/30 transition hover:border-sky-300 hover:text-sky-200";
 
 export default function Home() {
   const session = useUserStore((state) => state.session);
@@ -84,10 +91,13 @@ export default function Home() {
             <Link className={ctaClassName} href="/signin">
               Start verifying now
             </Link>
-            <p className="text-sm text-slate-300/80">
-              No passwords. Just a magic link and your trusted network.
-            </p>
+            <Link className={secondaryCtaClassName} href="/indexer">
+              Visit Moonbeam indexer
+            </Link>
           </div>
+          <p className="text-sm text-slate-300/80">
+            No passwords. Just a magic link and your trusted network.
+          </p>
         </section>
 
         <section className="grid gap-6 md:grid-cols-3">
diff --git a/frontend/src/app/(routes)/profile/page.tsx b/frontend/src/app/profile/page.tsx
similarity index 80%
rename from frontend/src/app/(routes)/profile/page.tsx
rename to frontend/src/app/profile/page.tsx
index 74c4b4e..d958788 100644
--- a/frontend/src/app/(routes)/profile/page.tsx
+++ b/frontend/src/app/profile/page.tsx
@@ -1,17 +1,17 @@
 "use client";
  
 
-import { useRouter } from "next/navigation";
 import { type FormEvent, useEffect, useMemo, useState } from "react";
 
-import { upsertMyProfile } from "../../../lib/profile";
-import { useUserStore } from "../../../lib/store";
+import { useRequireCompletedOnboarding } from "../../lib/onboarding";
+import { upsertMyProfile } from "../../lib/profile";
+import { useUserStore } from "../../lib/store";
+import { ensureWallet } from "../../lib/wallet";
 
 export default function ProfilePage() {
-  const router = useRouter();
-  const session = useUserStore((state) => state.session);
-  const profile = useUserStore((state) => state.user);
+  const { session, profile, ready } = useRequireCompletedOnboarding();
   const setUser = useUserStore((state) => state.setUser);
+  const setWalletAddress = useUserStore((state) => state.setWalletAddress);
 
   const [displayName, setDisplayName] = useState(profile?.display_name ?? "");
   const [photoUrl, setPhotoUrl] = useState(profile?.photo_url ?? "");
@@ -31,11 +31,14 @@ export default function ProfilePage() {
     setImageError(false);
   }, [photoPreviewUrl]);
 
-  useEffect(() => {
-    if (!session) {
-      router.replace("/(routes)/signin");
-    }
-  }, [router, session]);
+  if (!ready || !session || !profile) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Loading your profile…</h1>
+        <p className="text-sm text-muted-foreground">One moment while we confirm your onboarding status.</p>
+      </section>
+    );
+  }
 
   async function handleSubmit(event: FormEvent) {
     event.preventDefault();
@@ -61,6 +64,22 @@ export default function ProfilePage() {
     }
   }
 
+  async function handleConnectWallet() {
+    setError(null);
+    setStatus("Requesting wallet access…");
+    try {
+      const address = await ensureWallet();
+      const updated = await upsertMyProfile({ evm_address: address });
+      setUser(updated);
+      setWalletAddress(address);
+      setStatus("Wallet linked");
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Wallet connection failed";
+      setError(message);
+      setStatus(null);
+    }
+  }
+
   return (
     <section className="space-y-6">
       <header className="space-y-2">
@@ -102,6 +121,13 @@ export default function ProfilePage() {
           >
             Save changes
           </button>
+          <button
+            className="rounded border border-neutral-400 px-4 py-2 text-sm font-medium transition hover:bg-neutral-100 dark:border-neutral-700 dark:hover:bg-neutral-900"
+            onClick={handleConnectWallet}
+            type="button"
+          >
+            Connect wallet
+          </button>
           {status ? <p className="text-sm text-green-600 dark:text-green-400">{status}</p> : null}
           {error ? <p className="text-sm text-red-600 dark:text-red-400">{error}</p> : null}
         </form>
@@ -130,7 +156,6 @@ export default function ProfilePage() {
             )}
             <div className="space-y-1">
               <p className="text-base font-semibold">{previewName}</p>
-              <p className="text-xs uppercase tracking-[0.2em] text-neutral-500 dark:text-neutral-400">Trust Me Bro</p>
               <p className="text-sm text-muted-foreground">Cubid ID: {profile?.cubid_id ?? "Pending from onboarding"}</p>
             </div>
           </div>
diff --git a/frontend/src/app/(routes)/results/page.tsx b/frontend/src/app/results/page.tsx
similarity index 80%
rename from frontend/src/app/(routes)/results/page.tsx
rename to frontend/src/app/results/page.tsx
index c0cc800..c7bc09c 100644
--- a/frontend/src/app/(routes)/results/page.tsx
+++ b/frontend/src/app/results/page.tsx
@@ -1,6 +1,7 @@
 "use client";
 
 import Badge from "@/components/Badge";
+import { useRequireCompletedOnboarding } from "@/lib/onboarding";
 import { useScanStore } from "@/lib/scanStore";
 
 function formatFreshness(seconds: number): string {
@@ -11,8 +12,18 @@ function formatFreshness(seconds: number): string {
 }
 
 export default function ResultsPage() {
+  const { ready } = useRequireCompletedOnboarding();
   const result = useScanStore((state) => state.lastResult);
 
+  if (!ready) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Loading overlaps…</h1>
+        <p className="text-sm text-muted-foreground">Confirming your session before showing shared issuers.</p>
+      </section>
+    );
+  }
+
   return (
     <section className="space-y-4">
       <h1 className="text-3xl font-semibold">Trusted overlaps</h1>
diff --git a/frontend/src/app/(routes)/scan/camera/page.tsx b/frontend/src/app/scan/camera/page.tsx
similarity index 85%
rename from frontend/src/app/(routes)/scan/camera/page.tsx
rename to frontend/src/app/scan/camera/page.tsx
index ac03103..451eb2e 100644
--- a/frontend/src/app/(routes)/scan/camera/page.tsx
+++ b/frontend/src/app/scan/camera/page.tsx
@@ -1,11 +1,12 @@
 "use client";
 
 import { useRouter } from "next/navigation";
-import { type FormEvent, useState } from "react";
+import { type FormEvent, useRef, useState } from "react";
 
 import QRScanner from "@/components/QRScanner";
 import { requestQrChallenge, verifyQrChallenge } from "@/lib/api";
 import { type HandshakeCompletion, notifyHandshakeComplete } from "@/lib/handshake";
+import { useRequireCompletedOnboarding } from "@/lib/onboarding";
 import { useScanStore } from "@/lib/scanStore";
 import { useUserStore } from "@/lib/store";
 import { ensureWallet } from "@/lib/wallet";
@@ -18,8 +19,7 @@ type ParsedQrPayload = {
 
 export default function CameraPage() {
   const router = useRouter();
-  const session = useUserStore((state) => state.session);
-  const profile = useUserStore((state) => state.user);
+  const { session, profile, ready } = useRequireCompletedOnboarding();
   const walletAddress = useUserStore((state) => state.walletAddress ?? state.user?.evm_address ?? null);
   const setWalletAddress = useUserStore((state) => state.setWalletAddress);
   const setResult = useScanStore((state) => state.setResult);
@@ -32,12 +32,14 @@ export default function CameraPage() {
   const [targetSignature, setTargetSignature] = useState("");
   const [status, setStatus] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
+  const challengeInFlightRef = useRef(false);
+  const [scannerError, setScannerError] = useState<string | null>(null);
 
-  function parseQrPayload(): ParsedQrPayload {
-    if (!rawQr.trim()) {
+  function parseQrPayload(raw: string): ParsedQrPayload {
+    if (!raw.trim()) {
       throw new Error("Paste a QR payload first");
     }
-    const payload = JSON.parse(rawQr) as ParsedQrPayload;
+    const payload = JSON.parse(raw) as ParsedQrPayload;
     if (!payload.cubidId) {
       throw new Error("QR payload missing cubidId");
     }
@@ -49,11 +51,12 @@ export default function CameraPage() {
 
   async function handleParse() {
     try {
-      const payload = parseQrPayload();
+      const payload = parseQrPayload(rawQr);
       setParsed(payload);
       setTargetAddress(payload.address ?? "");
       setStatus("QR payload parsed");
       setError(null);
+      setScannerError(null);
     } catch (err) {
       const message = err instanceof Error ? err.message : "Invalid QR payload";
       setError(message);
@@ -62,26 +65,34 @@ export default function CameraPage() {
     }
   }
 
-  async function handleChallenge() {
-    if (!parsed) {
-      setError("Parse a QR payload first");
-      return;
-    }
+  async function issueChallenge(payload: ParsedQrPayload) {
     if (!session?.access_token) {
       setError("Supabase session required");
       return;
     }
+    if (challengeInFlightRef.current) {
+      return;
+    }
+    challengeInFlightRef.current = true;
+    if (!parsed) {
+      setParsed(payload);
+    }
+    setViewerSignature(null);
+    setChallenge(null);
     setStatus("Requesting challenge…");
     setError(null);
     try {
-      const result = await requestQrChallenge(parsed.cubidId, session.access_token);
+      const result = await requestQrChallenge(payload.cubidId, session.access_token);
       setChallenge({ id: result.challengeId, value: result.challenge });
       setStatus("Challenge issued. Share it with your peer to sign.");
+      setScannerError(null);
     } catch (err) {
       const message = err instanceof Error ? err.message : "Failed to request challenge";
       setError(message);
       setStatus(null);
       setChallenge(null);
+    } finally {
+      challengeInFlightRef.current = false;
     }
   }
 
@@ -197,6 +208,34 @@ export default function CameraPage() {
     }
   }
 
+  function handleScanDetected(value: string) {
+    setRawQr(value);
+    try {
+      const payload = parseQrPayload(value);
+      setParsed(payload);
+      setTargetAddress(payload.address ?? "");
+      setTargetSignature("");
+      setStatus("QR code detected. Preparing challenge…");
+      setError(null);
+      setScannerError(null);
+      void issueChallenge(payload);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Invalid QR payload";
+      setParsed(null);
+      setStatus(null);
+      setError(message);
+    }
+  }
+
+  if (!ready || !session || !profile) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Preparing your scanner…</h1>
+        <p className="text-sm text-slate-300/80">We're confirming your onboarding details.</p>
+      </section>
+    );
+  }
+
   return (
     <section className="space-y-8">
       <header className="space-y-3">
@@ -204,19 +243,20 @@ export default function CameraPage() {
         <h1 className="text-3xl font-semibold text-slate-50">Scan a peer and finish the handshake</h1>
         <p className="max-w-2xl text-sm text-slate-300/90">
           Point your camera at their Cubid QR or paste the JSON payload directly. Once both sides sign the temporary challenge,
-          we’ll surface the overlap from EAS.
+          we'll surface the overlap from EAS.
         </p>
       </header>
 
       <div className="grid gap-6 lg:grid-cols-[minmax(0,3fr)_minmax(0,2fr)]">
         <div className="space-y-4 rounded-3xl border border-slate-700/50 bg-slate-900/60 p-6 shadow-lg shadow-black/40">
-          <QRScanner />
+          <QRScanner onScan={handleScanDetected} onScanError={setScannerError} />
           <p className="text-sm text-slate-300/90">
             Allow camera access so we can scan Cubid QR codes directly. We prioritise the rear camera on mobile to keep codes in focus.
           </p>
           <p className="text-xs text-slate-400">
             If the scan struggles, use the developer tools to paste a payload manually.
           </p>
+          {scannerError ? <p className="text-sm text-rose-300">{scannerError}</p> : null}
         </div>
 
         <details className="rounded-3xl border border-slate-700/60 bg-slate-900/60 p-6 text-slate-200 shadow-lg shadow-black/40">
@@ -251,7 +291,7 @@ export default function CameraPage() {
                     <p className="font-medium text-slate-50">Target Cubid: {parsed.cubidId}</p>
                     <button
                       className="rounded-full border border-slate-600/70 px-4 py-2 text-xs font-semibold uppercase tracking-[0.3em] text-slate-200 transition hover:border-sky-400/60 hover:text-sky-200"
-                      onClick={handleChallenge}
+                      onClick={() => parsed && void issueChallenge(parsed)}
                       type="button"
                     >
                       Issue challenge
diff --git a/frontend/src/app/(routes)/scan/my-qr/page.tsx b/frontend/src/app/scan/my-qr/page.tsx
similarity index 84%
rename from frontend/src/app/(routes)/scan/my-qr/page.tsx
rename to frontend/src/app/scan/my-qr/page.tsx
index a09f6b7..c2c2c43 100644
--- a/frontend/src/app/(routes)/scan/my-qr/page.tsx
+++ b/frontend/src/app/scan/my-qr/page.tsx
@@ -6,8 +6,8 @@ import { useEffect, useMemo, useState } from "react";
 
 import QRDisplay from "@/components/QRDisplay";
 import { subscribeToHandshake } from "@/lib/handshake";
+import { useRequireCompletedOnboarding } from "@/lib/onboarding";
 import { useScanStore } from "@/lib/scanStore";
-import { useUserStore } from "@/lib/store";
 
 function createHandshakeChannel(): string {
   const globalCrypto = globalThis.crypto;
@@ -19,8 +19,7 @@ function createHandshakeChannel(): string {
 
 export default function MyQrPage() {
   const router = useRouter();
-  const session = useUserStore((state) => state.session);
-  const profile = useUserStore((state) => state.user);
+  const { session, profile, ready } = useRequireCompletedOnboarding();
   const setResult = useScanStore((state) => state.setResult);
 
   const [timestamp, setTimestamp] = useState(() => Date.now());
@@ -31,6 +30,13 @@ export default function MyQrPage() {
     setTimestamp(Date.now());
   }, [profile?.cubid_id]);
 
+  useEffect(() => {
+    const interval = window.setInterval(() => {
+      setTimestamp(Date.now());
+    }, 60_000);
+    return () => window.clearInterval(interval);
+  }, []);
+
   useEffect(() => {
     setHandshakeMessage(null);
     setHandshakeChannel(createHandshakeChannel());
@@ -81,21 +87,13 @@ export default function MyQrPage() {
     };
   }, [handshakeChannel, profile?.cubid_id, router, setResult]);
 
-  if (!session) {
+  if (!ready || !session || !profile) {
     return (
       <section className="space-y-4 rounded-3xl border border-white/10 bg-white/5 p-8 text-slate-200 shadow-lg shadow-sky-900/30">
         <header className="space-y-2">
-          <h1 className="text-3xl font-semibold text-slate-50">Share your QR once you’re signed in</h1>
-          <p className="text-sm text-slate-300/80">
-            Generate a Cubid QR only after authenticating. That way, every handshake originates from a trusted session.
-          </p>
+          <h1 className="text-3xl font-semibold text-slate-50">Preparing your QR…</h1>
+          <p className="text-sm text-slate-300/80">We&apos;re confirming your onboarding status.</p>
         </header>
-        <Link
-          className="inline-flex items-center justify-center rounded-full border border-sky-400/40 bg-sky-500/20 px-5 py-2 text-sm font-semibold uppercase tracking-[0.3em] text-sky-100 shadow-lg shadow-sky-500/20 transition hover:border-sky-300 hover:bg-sky-500/30"
-          href="/signin"
-        >
-          Sign in to continue
-        </Link>
       </section>
     );
   }
@@ -122,7 +120,6 @@ export default function MyQrPage() {
           />
           <div className="space-y-1">
             <p className="text-lg font-semibold text-slate-50">{displayName}</p>
-            <p className="text-xs uppercase tracking-[0.3em] text-slate-400">Trust Me Bro</p>
             <p className="text-sm text-slate-300">Cubid ID: {profile?.cubid_id ?? "—"}</p>
           </div>
           {handshakeMessage ? (
diff --git a/frontend/src/app/(routes)/scan/page.tsx b/frontend/src/app/scan/page.tsx
similarity index 100%
rename from frontend/src/app/(routes)/scan/page.tsx
rename to frontend/src/app/scan/page.tsx
diff --git a/frontend/src/app/(routes)/signin/page.tsx b/frontend/src/app/signin/page.tsx
similarity index 90%
rename from frontend/src/app/(routes)/signin/page.tsx
rename to frontend/src/app/signin/page.tsx
index 0b2667b..e5bdc7f 100644
--- a/frontend/src/app/(routes)/signin/page.tsx
+++ b/frontend/src/app/signin/page.tsx
@@ -3,8 +3,9 @@
 import { useRouter } from "next/navigation";
 import { type FormEvent, useEffect, useState } from "react";
 
-import { signInWithOtp } from "../../../lib/auth";
-import { useUserStore } from "../../../lib/store";
+import { signInWithOtp } from "../../lib/auth";
+import { hasCompletedOnboarding } from "../../lib/onboarding";
+import { useUserStore } from "../../lib/store";
 
 export default function SignInPage() {
   const router = useRouter();
@@ -20,8 +21,7 @@ export default function SignInPage() {
       return;
     }
 
-    const missingProfile = !profile?.cubid_id || !profile?.display_name || !profile?.evm_address;
-    const destination = missingProfile ? "/new-user" : "/circle";
+    const destination = hasCompletedOnboarding(profile) ? "/circle" : "/new-user";
     router.push(destination);
   }, [profile, router, session]);
 
diff --git a/frontend/src/app/(routes)/vouch/page.tsx b/frontend/src/app/vouch/page.tsx
similarity index 95%
rename from frontend/src/app/(routes)/vouch/page.tsx
rename to frontend/src/app/vouch/page.tsx
index 8181c2d..cfe8d99 100644
--- a/frontend/src/app/(routes)/vouch/page.tsx
+++ b/frontend/src/app/vouch/page.tsx
@@ -5,10 +5,12 @@ import { useMemo, useState } from "react";
 import QRDisplay from "@/components/QRDisplay";
 import { prepareAttestation, relayAttestation } from "@/lib/api";
 import { isValidCubidId } from "@/lib/cubid";
+import { useRequireCompletedOnboarding } from "@/lib/onboarding";
 import { useUserStore } from "@/lib/store";
 import { ensureWallet } from "@/lib/wallet";
 
 export default function VouchPage() {
+  const { ready } = useRequireCompletedOnboarding();
   const [cubid, setCubid] = useState("");
   const [recipient, setRecipient] = useState("");
   const [trustLevel, setTrustLevel] = useState(3);
@@ -26,6 +28,15 @@ export default function VouchPage() {
   const valid = isValidCubidId(cubid);
   const payload = useMemo(() => ({ cubidId: cubid || "cubid_demo", ts: Date.now() }), [cubid]);
 
+  if (!ready) {
+    return (
+      <section className="space-y-4">
+        <h1 className="text-3xl font-semibold">Preparing attestation tools…</h1>
+        <p className="text-sm text-muted-foreground">Confirming your onboarding status.</p>
+      </section>
+    );
+  }
+
   function normaliseCircle(value: string): string | null {
     const trimmed = value.trim();
     if (!trimmed) return null;
diff --git a/frontend/src/components/AppFooter.tsx b/frontend/src/components/AppFooter.tsx
index 0263343..aff2c4b 100644
--- a/frontend/src/components/AppFooter.tsx
+++ b/frontend/src/components/AppFooter.tsx
@@ -9,6 +9,7 @@ const DEVELOPER_SHORTCUTS = [
   { href: "/scan/my-qr", label: "6. My QR" },
   { href: "/scan/camera", label: "7. Camera" },
   { href: "/results", label: "8. Results" },
+  { href: "/indexer", label: "9. Indexer" },
 ];
 
 export function AppFooter() {
diff --git a/frontend/src/components/AppHeader.tsx b/frontend/src/components/AppHeader.tsx
index c7f082a..06ff58b 100644
--- a/frontend/src/components/AppHeader.tsx
+++ b/frontend/src/components/AppHeader.tsx
@@ -52,6 +52,9 @@ export function AppHeader() {
           <Link className="transition hover:text-sky-300" href="/circle">
             My Circle
           </Link>
+          <Link className="transition hover:text-sky-300" href="/indexer">
+            Indexer
+          </Link>
         </nav>
 
         <Link className="group flex items-center gap-3" href="/profile">
diff --git a/frontend/src/components/AuthProvider.tsx b/frontend/src/components/AuthProvider.tsx
index 5c5c382..ed6d01b 100644
--- a/frontend/src/components/AuthProvider.tsx
+++ b/frontend/src/components/AuthProvider.tsx
@@ -15,6 +15,7 @@ export function AuthProvider({ children }: AuthProviderProps) {
   const setSession = useUserStore((state) => state.setSession);
   const setUser = useUserStore((state) => state.setUser);
   const reset = useUserStore((state) => state.reset);
+  const setInitialised = useUserStore((state) => state.setInitialised);
 
   useEffect(() => {
     let isMounted = true;
@@ -34,6 +35,10 @@ export function AuthProvider({ children }: AuthProviderProps) {
       } catch (error) {
         console.error("Failed to bootstrap Supabase session", error);
         reset();
+      } finally {
+        if (isMounted) {
+          setInitialised(true);
+        }
       }
     }
 
@@ -52,13 +57,14 @@ export function AuthProvider({ children }: AuthProviderProps) {
       } else {
         setUser(null);
       }
+      setInitialised(true);
     });
 
     return () => {
       isMounted = false;
       listener?.subscription.unsubscribe();
     };
-  }, [reset, setSession, setUser]);
+  }, [reset, setInitialised, setSession, setUser]);
 
   return <>{children}</>;
 }
diff --git a/frontend/src/components/QRScanner.tsx b/frontend/src/components/QRScanner.tsx
index b8afced..5b0ea77 100644
--- a/frontend/src/components/QRScanner.tsx
+++ b/frontend/src/components/QRScanner.tsx
@@ -1,11 +1,20 @@
 "use client";
 
+import jsQR from "jsqr";
 import { useEffect, useRef, useState } from "react";
 
 type CameraStatus = "idle" | "loading" | "ready" | "error" | "unsupported";
 
-export default function QRScanner() {
+type QRScannerProps = {
+  onScan?: (value: string) => void;
+  onScanError?: (message: string) => void;
+};
+
+export default function QRScanner({ onScan, onScanError }: QRScannerProps) {
   const videoRef = useRef<HTMLVideoElement | null>(null);
+  const canvasRef = useRef<HTMLCanvasElement | null>(null);
+  const lastDetectedRef = useRef<string | null>(null);
+  const lastDetectedAtRef = useRef<number>(0);
   const [status, setStatus] = useState<CameraStatus>("idle");
   const [error, setError] = useState<string | null>(null);
   const [attempt, setAttempt] = useState(0);
@@ -58,6 +67,81 @@ export default function QRScanner() {
     };
   }, [attempt]);
 
+  useEffect(() => {
+    lastDetectedRef.current = null;
+    lastDetectedAtRef.current = 0;
+  }, [attempt]);
+
+  useEffect(() => {
+    if (status !== "ready") {
+      return;
+    }
+
+    const canvas = canvasRef.current ?? document.createElement("canvas");
+    canvasRef.current = canvas;
+    const context = canvas.getContext("2d", { willReadFrequently: true });
+    if (!context) {
+      const message = "Camera stream unavailable for processing.";
+      setStatus("error");
+      setError(message);
+      onScanError?.(message);
+      return;
+    }
+
+    let cancelled = false;
+    let frameRequest = 0;
+
+    const scanFrame = () => {
+      if (cancelled) {
+        return;
+      }
+      const video = videoRef.current;
+      if (!video || video.readyState < HTMLMediaElement.HAVE_ENOUGH_DATA) {
+        frameRequest = window.requestAnimationFrame(scanFrame);
+        return;
+      }
+
+      const width = video.videoWidth;
+      const height = video.videoHeight;
+      if (!width || !height) {
+        frameRequest = window.requestAnimationFrame(scanFrame);
+        return;
+      }
+
+      canvas.width = width;
+      canvas.height = height;
+      context.drawImage(video, 0, 0, width, height);
+
+      try {
+        const imageData = context.getImageData(0, 0, width, height);
+        const result = jsQR(imageData.data, imageData.width, imageData.height, { inversionAttempts: "attemptBoth" });
+        if (result?.data) {
+          const now = Date.now();
+          const recentlyDetected = now - lastDetectedAtRef.current < 1500;
+          if (result.data !== lastDetectedRef.current || recentlyDetected) {
+            lastDetectedRef.current = result.data;
+            lastDetectedAtRef.current = now;
+            onScan?.(result.data);
+          }
+        }
+      } catch (scanError) {
+        const message = scanError instanceof Error ? scanError.message : "Failed to decode QR code";
+        setError(message);
+        setStatus("error");
+        onScanError?.(message);
+      }
+
+      frameRequest = window.requestAnimationFrame(scanFrame);
+    };
+
+    frameRequest = window.requestAnimationFrame(scanFrame);
+
+    return () => {
+      cancelled = true;
+      window.cancelAnimationFrame(frameRequest);
+    };
+  }, [onScan, onScanError, status]);
+
   const showOverlay = status === "loading" || status === "error" || status === "unsupported";
 
   return (
diff --git a/frontend/src/lib/onboarding.ts b/frontend/src/lib/onboarding.ts
new file mode 100644
index 0000000..9fdfd04
--- /dev/null
+++ b/frontend/src/lib/onboarding.ts
@@ -0,0 +1,57 @@
+import { useRouter } from "next/navigation";
+import { useEffect } from "react";
+
+import type { UserProfile } from "./store";
+import { useUserStore } from "./store";
+
+export function hasCompletedOnboarding(user: UserProfile | null): boolean {
+  return Boolean(user?.cubid_id && user?.display_name && user?.evm_address);
+}
+
+export function useRequireCompletedOnboarding() {
+  const router = useRouter();
+  const initialised = useUserStore((state) => state.initialised);
+  const session = useUserStore((state) => state.session);
+  const profile = useUserStore((state) => state.user);
+
+  useEffect(() => {
+    if (!initialised) {
+      return;
+    }
+    if (!session) {
+      router.replace("/signin");
+      return;
+    }
+    if (!hasCompletedOnboarding(profile)) {
+      router.replace("/new-user");
+    }
+  }, [initialised, profile, router, session]);
+
+  const ready = Boolean(initialised && session && hasCompletedOnboarding(profile));
+
+  return { session, profile, ready } as const;
+}
+
+export function useRestrictToIncompleteOnboarding() {
+  const router = useRouter();
+  const initialised = useUserStore((state) => state.initialised);
+  const session = useUserStore((state) => state.session);
+  const profile = useUserStore((state) => state.user);
+
+  useEffect(() => {
+    if (!initialised) {
+      return;
+    }
+    if (!session) {
+      router.replace("/signin");
+      return;
+    }
+    if (hasCompletedOnboarding(profile)) {
+      router.replace("/circle");
+    }
+  }, [initialised, profile, router, session]);
+
+  const ready = Boolean(initialised && session && !hasCompletedOnboarding(profile));
+
+  return { session, profile, ready } as const;
+}
diff --git a/frontend/src/lib/store.ts b/frontend/src/lib/store.ts
index ebc89a1..8452252 100644
--- a/frontend/src/lib/store.ts
+++ b/frontend/src/lib/store.ts
@@ -13,9 +13,11 @@ type UserState = {
   session: Session | null;
   user: UserProfile | null;
   walletAddress: string | null;
+  initialised: boolean;
   setSession: (session: Session | null) => void;
   setUser: (user: UserProfile | null) => void;
   setWalletAddress: (address: string | null) => void;
+  setInitialised: (value: boolean) => void;
   reset: () => void;
 };
 
@@ -23,8 +25,10 @@ export const useUserStore = create<UserState>((set) => ({
   session: null,
   user: null,
   walletAddress: null,
+  initialised: false,
   setSession: (session) => set({ session }),
   setUser: (user) => set({ user }),
   setWalletAddress: (walletAddress) => set({ walletAddress }),
-  reset: () => set({ session: null, user: null, walletAddress: null }),
+  setInitialised: (value) => set({ initialised: value }),
+  reset: () => set({ session: null, user: null, walletAddress: null, initialised: false }),
 }));
diff --git a/frontend/types/jsqr.d.ts b/frontend/types/jsqr.d.ts
new file mode 100644
index 0000000..8d70727
--- /dev/null
+++ b/frontend/types/jsqr.d.ts
@@ -0,0 +1,43 @@
+declare module "jsqr" {
+  type InversionAttempt = "dontInvert" | "onlyInvert" | "attemptBoth" | "invertFirst";
+
+  interface Point {
+    x: number;
+    y: number;
+  }
+
+  interface QRLocation {
+    topLeftCorner: Point;
+    topRightCorner: Point;
+    bottomLeftCorner: Point;
+    bottomRightCorner: Point;
+    topLeftFinderPattern: Point;
+    topRightFinderPattern: Point;
+    bottomLeftFinderPattern: Point;
+  }
+
+  interface QRCodeChunk {
+    type: string;
+    text?: string;
+    byteLength?: number;
+  }
+
+  interface QRCode {
+    binaryData: Uint8ClampedArray;
+    data: string;
+    chunks: QRCodeChunk[];
+    version: number;
+    location: QRLocation;
+  }
+
+  interface Options {
+    inversionAttempts?: InversionAttempt;
+  }
+
+  export default function jsQR(
+    data: Uint8ClampedArray,
+    width: number,
+    height: number,
+    options?: Options,
+  ): QRCode | null;
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f86c2d9..2410edc 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -67,6 +67,9 @@ importers:
       '@supabase/supabase-js':
         specifier: ^2.80.0
         version: 2.80.0
+      jsqr:
+        specifier: ^1.4.0
+        version: 1.4.0
       next:
         specifier: 16.0.1
         version: 16.0.1(@babel/core@7.28.5)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
@@ -4528,6 +4531,12 @@ packages:
       }
     engines: { node: '>=12', npm: '>=6' }
 
+  jsqr@1.4.0:
+    resolution:
+      {
+        integrity: sha512-dxLob7q65Xg2DvstYkRpkYtmKm2sPJ9oFhrhmudT1dZvNFFTlroai3AWSpLey/w5vMcLBXRgOJsbXpdN9HzU/A==,
+      }
+
   jsx-ast-utils@3.3.5:
     resolution:
       {
@@ -9765,6 +9774,8 @@ snapshots:
       ms: 2.1.3
       semver: 7.7.3
 
+  jsqr@1.4.0: {}
+
   jsx-ast-utils@3.3.5:
     dependencies:
       array-includes: 3.1.9