Fix README deployment claim and test container in CI

Author: CodeWithRJ006

.github/workflows/ci.yml

@@ -35,12 +35,24 @@ jobs:
           # We don't have a chain.test.ts yet but adding placeholder for adversarial suite
           
       - name: Build Docker Image
-        run: |
-          docker build --progress=plain -t structura-proxy . > build.log 2>&1 || true
+        run: docker build -t structura-proxy .
 
-      - name: Upload Docker Log
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: docker-build-log
-          path: build.log
+      - name: Run and Test Docker Container
+        run: |
+          # 1. Start in background to test API
+          docker run --name proxy -d -p 4000:4000 -e RZP_KEY_ID=mock -e RZP_KEY_SECRET=mock structura-proxy
+          
+          # Wait for boot
+          sleep 5
+          
+          # Check API
+          curl -f http://localhost:4000/stats
+          
+          # Clean up background container
+          docker rm -f proxy
+          
+          # 2. Test stdio MCP interaction directly via pipe
+          echo '{"jsonrpc":"2.0","method":"tools/list","id":1}' | docker run -i -e RZP_KEY_ID=mock -e RZP_KEY_SECRET=mock structura-proxy > response.txt
+          
+          cat response.txt
+          grep -q 'fetch_all_payments' response.txt

README.md

@@ -60,7 +60,7 @@ structura/
 - **Approval results aren't relayed back to the agent:** When an agent is placed in `REQUIRE_APPROVAL`, they get an immediate error (pending review). When human approval happens minutes later, the action executes against Razorpay, but the result is not pushed to the now-disconnected MCP client.
 - **No dashboard auth:** The API is unprotected, relying on network-layer isolation.
 - **Tamper-evident, not tamper-proof:** An attacker with unrestricted DB access can rewrite the entire hash-chain from scratch.
-- **Free-tier deployment's disk persistence:** The live deployment runs on a Render Web Service free-tier. **It does not support persistent disks.** `structura.db` will be wiped on every redeploy, sleep, or wake cycle.
+- **Free-tier deployment's disk persistence:** Not yet deployed to a persistent host - verified via Docker build in CI; live URL pending. (When deployed to free tiers like Render Web Service, it does not support persistent disks, meaning `structura.db` will be wiped on every redeploy or sleep cycle.)
 - **No /metrics Prometheus endpoint:** Only a simple `/stats` JSON endpoint exists.
 
 ## Setup / running locally