Bootstrap copied BFF and local accounts with public Sendico contracts (#34)

README.md

@@ -1,7 +1,7 @@
 # SXCHNGE
 
 Product repository for the sxchnge public website, Flutter consumer app, reusable
-packages, and planned backend for frontend (BFF).
+packages, and a backend for frontend (BFF) bootstrapped from Sendico.
 
 ## Current state
 
@@ -11,9 +11,9 @@ with `go_router`. Its interface uses the shared theme's colors and typography.
 
 **Authentication, email verification and analytics use dummy services.** No real
 account or session is created, no email is delivered, and no analytics data is
-transmitted. The backend has an independent Go operational shell; product services
-are not connected. Session/KYC access guards and Sendico integration are not
-implemented.
+transmitted by those app services. The backend now contains locally owned copies
+of Sendico’s BFF runtime, auth/session stack and account service. The app is not
+connected to that backend or to Sendico yet.
 
 ## Repository structure
 
@@ -24,7 +24,7 @@ implemented.
 | [`sxchnge_theme`](frontend/packages/sxchnge_theme/README.md) | Reusable light/dark themes and bundled Onest font |
 | [`sxchnge_auth`](frontend/packages/sxchnge_auth/README.md) | Shared auth contracts, providers, two-factor page and dummy services |
 | [`sxchnge_analytics`](frontend/packages/sxchnge_analytics/README.md) | Typed journey events, recorder and bounded in-memory dummy analytics |
-| [`backend/`](backend/README.md) | Independent Go BFF starter, adapted foundations and provider integration plan |
+| [`backend/`](backend/README.md) | Copied BFF/auth/account foundation and isolated public Sendico contracts |
 | [`.agents/skills/`](.agents/skills) | Repository agent skills |
 | [`docs/`](docs/implementation.md) | Implementation records and UX measurement contracts |
 
@@ -144,17 +144,19 @@ usability, accessibility and journey measurement under the repository's UX rules
 
 ## Product boundaries
 
-The intended integration is: **consumer app → sxchnge BFF → supported Sendico API**.
+The integration is: **consumer app → sxchnge BFF → Sendico public HTTP API**.
+SXCHNGE is one organization in Sendico; its customers are owned locally.
 
 - sxchnge will own consumer registration/sessions, onboarding and exchange UX,
-  and mappings to stable, organization-scoped Sendico customer references.
+  and mappings from local customers to organization-scoped platform resources.
 - Sendico remains authoritative for payment execution, KYC records and
   verification, policy decisions and limit enforcement.
 - The sxchnge organization, backend integration principal and individual customer
   references are distinct identities. Consumers must not share the integration
   account's customer identity.
-- The BFF uses a supported provider API. Selected Sendico components may be
-  adapted into SXCHNGE-owned code; local Sendico module dependencies are not used.
+- The BFF uses only the public HTTP API. Existing BFF/auth/account components
+  are copied into SXCHNGE-owned code; private transports and sibling module
+  dependencies are not used.
   Integration credentials belong in the backend.
 
 Before backend integration, agree on the customer, KYC, eligibility/limits and
@@ -234,5 +236,7 @@ gaps and delivery phases. Selected Sendico code has been adapted with recorded
 [provenance](backend/PROVENANCE.md); the projects share no runtime modules.
 
 Run `make test-backend`, `make lint-backend` or `make run-backend` from the root.
-The starter exposes health and unconfigured readiness only. Authentication,
-persistence and live financial operations remain the next implementation phases.
+The copied runtime installs local authentication transport and initializes its
+account service. Signup/profile endpoints, verification delivery/completion,
+Flutter HTTP adapters and live Sendico operations remain to be wired. See the
+[backend run guide](backend/README.md) for local MongoDB configuration.