# NFT and metadata — executable lab

## Bài toán → Vấn đề → Giải pháp
Unique ownership, tokenURI, authorized transfers. A centralized implementation cannot assume on-chain transfers and application accounting are automatically synchronized. Implement the contract with explicit validation, accounting and revert behavior.

## Setup
1. Install Foundry (`forge --version`) and Solidity compiler 0.8.24 (Foundry can download it when online).
2. `cd solution && forge build && forge test -vvv`.
3. Read `src/TrainingNFT.sol` and `test/Lab.t.sol`, then implement your own version in `starter/`.

## Test plan
- Successful state transition, correct getter values and events where relevant.
- Revert on invalid amount, unauthorized call or duplicate identifier as applicable.
- Add a fuzz test and one failure injection case.

## Expected output
`forge test` exits 0 with `[PASS]` for each included test. This is an expected result, not a verified runtime log.

## Exercises
1. Add tests for two distinct actors and zero addresses.
2. Explain the trust boundary and identify missing production controls.
3. Extend the contract using OpenZeppelin in a separate production-style branch.

## Interview
Q: Why is an event not enough to prove final payment? A: Logs can be removed by chain reorg; verify receipt, confirmations/finality, chain ID, token address, and log identity.
Q: Is this contract production ready? A: No; the examples omit standards compliance, audits, upgrade and operational controls.