USSD Setup & Test Report — AgriGuard Admin

Live USSD Status

● LIVE OFF (Safe Mode)

The Live toggle activates the real USSD dial code on the public website. It must only be enabled after Africa's Talking allocates a shortcode and the callback URL is confirmed to be working. The browser demo simulator remains available for presentations regardless of this setting.

Live is OFF — dial code pending

Africa's Talking Dashboard Configuration

Complete these steps inside your Africa's Talking account before enabling Live mode. These URLs must be pasted exactly as shown into the AT USSD service settings.

1

Create a USSD service in AT dashboard Log in at account.africastalking.com → USSD → Create New Service. Note the allocated shortcode (e.g. *284#).

2

Paste the Callback URL Under "Service Settings → Callback URL", enter:

Configure CALLBACK_BASE_URL in .env first

This is the HTTPS endpoint on your Node.js backend server.

3

Paste the Events URL (optional but recommended)

Configure CALLBACK_BASE_URL in .env first

Receives session-end events to clean up sessions and log usage.

4

Set API credentials in .env

            AT_API_KEY=your_api_key_from_AT

            AT_USERNAME=your_AT_username

            AT_SHORTCODE=*284#

            AT_CALLBACK_SECRET=strong_random_secret

            CALLBACK_BASE_URL=https://api.agriguard.one

            ADMIN_API_KEY=strong_admin_key

5

Run a live test Dial the shortcode from an MTN or Airtel Uganda SIM and verify the menu appears. Check the server log for [ussd/callback] entries. Then use the Test Report below to confirm all paths pass.

6

Enable Live mode (last step) Fill in the Allocated Code field below and flip the Live toggle above. The public website will immediately show the real dial code.

Admin Config — Runtime Settings

These values are stored in the backend process memory and update the public website display. Changes persist until the server restarts. For permanent persistence, copy values to .env.

Allocated USSD Code

Display Text (public)

Supported Networks (comma-separated)

Charging Description (public)

Backend Base URL

USSD Test Report

Run these tests against the browser demo simulator (always available) and against the live AT integration once a shortcode is allocated. Mark results manually or click Run All Tests to simulate demo-mode checks.

#	Test Case	Input Sequence	Expected Outcome	Demo Result	Live Result

Data Protection Checklist

Control	Implementation	Status
National ID in demo	Removed from all demo screens — phone number used instead	✓ DONE
National ID in live USSD	Not collected via USSD — policy ref + phone only	✓ DONE
Consent capture	Explicit consent step (Step 5 of 5) before policy creation	✓ DONE
Policy cross-access	lookupPolicy() verifies caller phone matches policy holder	✓ DONE
Payout guarantees	No UGX amounts or "48 hours" promises in live USSD flow	✓ DONE
Demo/Live separation	Demo simulator labelled ⚠ SIMULATION ONLY; no real records created	✓ DONE
Public exposure of admin config	AT credentials, callback secret, admin API key only in server .env	✓ DONE
Session security	Sessions keyed by AT sessionId + phone; TTL 90s; purged on END	✓ DONE

Insurance Transaction Gating

Gate	Rule	Status
"Check My Policy"	Returns policy only if record genuinely exists in store; null → "not found" message	✓ GATED
"Request Payout Guidance"	Shows verified claim instructions only — no payout promise or fixed amount	✓ GATED
UGX 6,500 / "48 hours"	Not shown in USSD live flow — only in informational help screen as satellite mechanism description	✓ GATED
Policy status check before payout guidance	Inactive/Pending/Completed policies shown with status — no guidance issued	✓ GATED