diff --git a/.env.master.example b/.env.master.example index f426da95..966dfcbe 100644 --- a/.env.master.example +++ b/.env.master.example @@ -15,6 +15,9 @@ PROXMOX_USER= PROXMOX_TOKEN_NAME= PROXMOX_TOKEN_VALUE= PROXMOX_ALLOW_ELEVATED= +# Production operator host: set PROXMOX_SAFE_DEFAULTS=1 so guarded maintenance scripts default to dry-run unless --apply or PROXMOX_OPS_APPLY=1 (see scripts/lib/proxmox-production-guard.sh). +# PROXMOX_SAFE_DEFAULTS= +# PROXMOX_OPS_ALLOWED_VMIDS= # --- Cloudflare --- # Prefer CLOUDFLARE_API_TOKEN scoped to Zone:DNS:Edit on the zones you use (avoid global Account API key when possible). @@ -27,6 +30,8 @@ CLOUDFLARE_ZONE_ID_D_BIS_ORG= CLOUDFLARE_ZONE_ID_MIM4U_ORG= CLOUDFLARE_ZONE_ID_SANKOFA_NEXUS= CLOUDFLARE_ZONE_ID_DEFI_ORACLE_IO= +# omdnl.org (apex + www): scripts/cloudflare/configure-omdnl-org-dns.sh +CLOUDFLARE_ZONE_ID_OMDNL_ORG= CLOUDFLARE_TUNNEL_TOKEN= CLOUDFLARE_TUNNEL_ID= CLOUDFLARE_TUNNEL_ID_ALLTRA_HYBX= @@ -44,6 +49,9 @@ CLOUDNS_AUTH_ID= CLOUDNS_AUTH_PASSWORD= # --- NPM / NPMplus --- +# Shared admin username for all NPMplus instances unless an instance-specific +# UI is deliberately configured differently. +# API scripts: use HTTPS on port 81 (e.g. https://192.168.11.167:81). Plain http:// typically 301-redirects to https:// and breaks POST /api/tokens unless curl uses --post301. NPM_URL= NPM_EMAIL= NPM_PASSWORD= @@ -52,10 +60,41 @@ NPM_PROXMOX_HOST= NPMPLUS_HOST= NPM_VMID= NPMPLUS_VMID= +NPM_PASSWORD_PRIMARY= +NPM_PASSWORD_SECONDARY= +NPM_PASSWORD_ALLTRA_HYBX= +NPM_PASSWORD_FOURTH= +NPM_PASSWORD_MIFOS= NPMPLUS_ALLTRA_HYBX_VMID= IP_NPMPLUS_ALLTRA_HYBX= +NPM_URL_SECONDARY= +NPM_URL_ALLTRA_HYBX= +NPM_URL_FOURTH= NPM_URL_MIFOS= +# --- NPMplus: public CCIP mainnet-cw relay health (upstream r630-01 :9863) --- +# Set then run: bash scripts/nginx-proxy-manager/update-npmplus-proxy-hosts-api.sh +# Or from SSH (r630-01 → NPM LAN): bash scripts/nginx-proxy-manager/upsert-ccip-relay-mainnet-cw-via-ssh.sh +# DNS (d-bis.org): bash scripts/cloudflare/configure-relay-mainnet-cw-dns.sh (or full zone: scripts/update-all-dns-to-public-ip.sh) +# CCIP_RELAY_MAINNET_CW_PUBLIC_HOST=relay-mainnet-cw.d-bis.org +# Optional: CCIP_RELAY_MAINNET_CW_UPSTREAM_IP=192.168.11.11 CCIP_RELAY_MAINNET_CW_UPSTREAM_PORT=9863 +# Explorer / mission-control (optional): name mainnet-cw normalizes to mainnet_cw (preferred primary in ccip_health.go). +# Set on the explorer API host or pass through explorer-monorepo/deployment/docker-compose.yml (api service). +# CCIP_RELAY_HEALTH_URLS=mainnet-cw=https://relay-mainnet-cw.d-bis.org/healthz,mainnet=http://192.168.11.11:9860/healthz +# CCIP_RELAY_HEALTH_URL= + +# --- info.defi-oracle.io (dedicated nginx LXC, not VMID 2400 RPC) --- +# Defaults in config/ip-addresses.conf: IP_INFO_DEFI_ORACLE_WEB=192.168.11.218, VMID 2410. +# IP_INFO_DEFI_ORACLE_WEB= +# INFO_DEFI_ORACLE_VMID= +# INFO_DEFI_ORACLE_UPSTREAM_IP= # NPM fleet: overrides forward_host for info.defi-oracle.io +# INFO_DEFI_ORACLE_EDGE_MODE=auto # auto | tunnel | public_ip — DNS script for info.defi-oracle.io +# INFO_DEFI_ORACLE_PUBLIC_IP= # WAN IP for public_ip mode (else PUBLIC_IP) +# CLOUDFLARE_ZONE_ID_DEFI_ORACLE_IO= # Required for set-info-defi-oracle-dns + purge-info-defi-oracle-cache +# INFO_DEFI_ORACLE_TUNNEL_UPSTREAM= # Tunnel ingress origin for info hostnames (default IP_INFO_DEFI_ORACLE_WEB) +# SPA: default runtime base is {origin}/token-aggregation (nginx on 2410 proxies to Blockscout). Override only if needed: +# In info-defi-oracle-138/.env.local (not this file): VITE_TOKEN_AGGREGATION_API_BASE=https://explorer.d-bis.org/token-aggregation + # --- Keycloak Admin API (optional) --- # For scripts/deployment/keycloak-sankofa-ensure-client-redirects.sh — merge portal/admin redirect URIs. # KEYCLOAK_URL=https://keycloak.sankofa.nexus @@ -64,6 +103,12 @@ NPM_URL_MIFOS= # KEYCLOAK_ADMIN=admin # KEYCLOAK_ADMIN_PASSWORD= +# --- IT read API (Sankofa portal /it on CT 7801) --- +# Base URL of sankofa-it-read-api (Phase 0). Merged into /opt/sankofa-portal/.env by: +# scripts/deployment/sankofa-portal-merge-it-read-api-env-from-repo.sh +# IT_READ_API_URL=http://192.168.11.11:8787 +# IT_READ_API_KEY= + # --- Fastly --- FASTLY_API_TOKEN= @@ -82,6 +127,10 @@ OMADA_CLIENT_SECRET= GITEA_URL= GITEA_TOKEN= GITEA_ORG= +# NPMplus upstream for gitea.d-bis.org (primary + fourth scripts). Defaults in config/ip-addresses.conf: VMID 104 @ .31:80 +# GITEA_PUBLIC_UPSTREAM_HOST=192.168.11.31 +# GITEA_PUBLIC_UPSTREAM_PORT=80 +# Dev-local Gitea on VM 5700 instead: GITEA_PUBLIC_UPSTREAM_HOST=192.168.11.59 GITEA_PUBLIC_UPSTREAM_PORT=3000 # --- Database & app auth --- DATABASE_URL= @@ -113,17 +162,125 @@ PINATA_API_SECRET= # --- Blockchain / SMOM-DBIS-138 (use smom-dbis-138/.env for PRIVATE_KEY) --- PRIVATE_KEY= +# Chain 138 Core (deploy/gas/scripts on LAN): http://192.168.11.211:8545 — IP:port; not FQDN. See docs/04-configuration/RPC_ENDPOINTS_MASTER.md RPC_URL_138= +# Public JSON-RPC for frontends, bridges, MetaMask: HTTPS FQDN only, e.g. https://rpc-http-pub.d-bis.org (not 192.168.11.221). LAN-only services may use http://192.168.11.221:8545 RPC_URL_138_PUBLIC= +# Token-aggregation publication bundle (explorer): deploy script uses TOKEN_AGG_CHAIN138_RPC_URL if set, else defaults to public node — see scripts/deploy-token-aggregation-for-publication.sh +# TOKEN_AGG_CHAIN138_RPC_URL= +# Optional PMM-only RPC for GET /api/v1/quote on-chain path (core RPC while indexer uses public) +# TOKEN_AGGREGATION_PMM_RPC_URL= +# TOKEN_AGGREGATION_PMM_QUERY_TRADER= +# Router-v2 execution stack (Chain 138 canonical live deployment) +ENHANCED_SWAP_ROUTER_V2_ADDRESS=0xF1c93F54A5C2fc0d7766Ccb0Ad8f157DFB4C99Ce +INTENT_BRIDGE_COORDINATOR_V2_ADDRESS=0x7D0022B7e8360172fd9C0bB6778113b7Ea3674E7 +CHAIN138_ENABLE_DODO_V3_EXECUTION=1 +# Chain 138 multi-provider venues (canonical live deployment) +UNISWAP_V3_ROUTER=0xde9cD8ee2811E6E64a41D5F68Be315d33995975E +UNISWAP_QUOTER_ADDRESS=0x6abbB1CEb2468e748a03A00CD6aA9BFE893AFa1f +UNISWAP_V3_WETH_USDT_POOL=0xa893add35aEfe6A6d858EB01828bE4592f12C9F5 +UNISWAP_V3_WETH_USDC_POOL=0xEC745bfb6b3cd32f102d594E5F432d8d85B19391 +UNISWAP_V3_WETH_USDT_FEE=500 +UNISWAP_V3_WETH_USDC_FEE=500 +BALANCER_VAULT=0x96423d7C1727698D8a25EbFB88131e9422d1a3C3 +BALANCER_WETH_USDT_POOL_ID=0x877cd220759e8c94b82f55450c85d382ae06856c426b56d93092a420facbc324 +BALANCER_WETH_USDC_POOL_ID=0xd8dfb18a6baf9b29d8c2dbd74639db87ac558af120df5261dab8e2a5de69013b +CURVE_3POOL=0xE440Ec15805BE4C7BabCD17A63B8C8A08a492e0f +ONEINCH_ROUTER=0x500B84b1Bc6F59C1898a5Fe538eA20A758757A4F +CHAIN138_DEPLOY_GAS_PRICE_WEI=1000 +# Chain 138 upstream-native Uniswap v3 replacement track +CHAIN138_UNISWAP_V3_NATIVE_CORE_REPO=/home/intlc/projects/uniswap-v3-core +CHAIN138_UNISWAP_V3_NATIVE_PERIPHERY_REPO=/home/intlc/projects/uniswap-v3-periphery +CHAIN138_UNISWAP_V3_NATIVE_FACTORY=0x2f7219276e3ce367dB9ec74C1196a8ecEe67841C +CHAIN138_UNISWAP_V3_NATIVE_NFT_DESCRIPTOR_LIBRARY=0x6F5fdE32DD2aC66B27e296EC9D6F4E79A3dE2947 +CHAIN138_UNISWAP_V3_NATIVE_TOKEN_DESCRIPTOR=0xca66DCAC4633555033F6fDDBE4234B6913c7ff51 +CHAIN138_UNISWAP_V3_NATIVE_POSITION_MANAGER=0x31b68BE5af4Df565Ce261dfe53D529005D947B48 +CHAIN138_UNISWAP_V3_NATIVE_SWAP_ROUTER=0xde9cD8ee2811E6E64a41D5F68Be315d33995975E +CHAIN138_UNISWAP_V3_NATIVE_QUOTER_V2=0x6abbB1CEb2468e748a03A00CD6aA9BFE893AFa1f +CHAIN138_UNISWAP_V3_NATIVE_WETH_USDT_POOL=0xa893add35aEfe6A6d858EB01828bE4592f12C9F5 +CHAIN138_UNISWAP_V3_NATIVE_WETH_USDC_POOL=0xEC745bfb6b3cd32f102d594E5F432d8d85B19391 +CHAIN138_UNISWAP_V3_NATIVE_FEE_TIER=500 +CHAIN138_NATIVE_GAS_PRICE=1000 +CHAIN138_NATIVE_DEPLOY_GAS_LIMIT=12000000 +CHAIN138_NATIVE_POOL_TX_GAS_LIMIT=12000000 +CHAIN138_NATIVE_WETH9=0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2 +CHAIN138_NATIVE_USDT=0x004b63A7B5b0E06f6bB6adb4a5F9f590BF3182D1 +CHAIN138_NATIVE_USDC=0x71D6687F38b93CCad569Fa6352c876eea967201b +CHAIN138_NATIVE_CURRENCY_LABEL=ETH +CHAIN138_UNISWAP_V3_INITIAL_USD_PER_WETH=2116.6 +CHAIN138_UNISWAP_V3_SEED_WETH_USDT_WETH=50 +CHAIN138_UNISWAP_V3_SEED_WETH_USDT_STABLE=105830 +CHAIN138_UNISWAP_V3_SEED_WETH_USDC_WETH=50 +CHAIN138_UNISWAP_V3_SEED_WETH_USDC_STABLE=105830 +# Cross-chain flash infra (Chain 138) +FLASH_UNIVERSAL_CCIP_BRIDGE=0xCd42e8eD79Dc50599535d1de48d3dAFa0BE156F8 +FLASH_CCIP_ROUTER=0x42DAb7b888Dd382bD5Adcf9E038dBF1fD03b4817 +FLASH_REPAY_RECEIVER_ROUTER=0x42DAb7b888Dd382bD5Adcf9E038dBF1fD03b4817 +FLASH_VAULT_CREDIT_ROUTER=0x42DAb7b888Dd382bD5Adcf9E038dBF1fD03b4817 +CROSS_CHAIN_FLASH_BRIDGE_ADAPTER=0xBe9e0B2d4cF6A3b2994d6f2f0904D2B165eB8ffC +CROSS_CHAIN_FLASH_REPAY_RECEIVER=0xD084b68cB4B1ef2cBA09CF99FB1B6552fd9b4859 +CROSS_CHAIN_FLASH_VAULT_CREDIT_RECEIVER=0x89F7a1fcbBe104BeE96Da4b4b6b7d3AF85f7E661 +# Optional same-chain ERC-3156 flash dry-run inputs (set when a canonical flash vault is deployed / approved) +FLASH_VAULT= +FLASH_VAULT_TOKEN= +FLASH_PROVIDER_RPC_URL= +FLASH_TEST_AMOUNT= # XDC Zero — second relayer pair (XDC Network mainnet <-> Chain 138). See docs/03-deployment/CHAIN138_XDC_ZERO_BRIDGE_RUNBOOK.md and config/xdc-zero/ -# Use XDC mainnet JSON-RPC only (chain id 50), not Ethereum L1. Default: -XDC_PARENTNET_URL=https://rpc.xinfin.network +# Use XDC mainnet JSON-RPC only (chain id 50), not Ethereum L1. Prefer erpc (rpc.xinfin.network often returns 5xx). +XDC_PARENTNET_URL=https://erpc.xinfin.network # Testnet (Apothem): https://rpc.apothem.network # Optional alias for 138 side (defaults to RPC_URL_138 in preflight if unset): XDC_ZERO_PEER_RPC_URL= # Ethereum L1 — used for dual-anchor attestation with scripts/omnl/omnl-chain138-attestation-tx.sh (consumes ETH gas). Alias: RPC_URL_MAINNET. ETHEREUM_MAINNET_RPC= +# Mainnet DODO PMM + optional TRUU volatile rail (see docs/03-deployment/MAINNET_PMM_TRUU_CWUSD_PEG_AND_BOT_RUNBOOK.md) +# Canonical integration: 0xa9F284eD010f4F7d7F8F201742b49b9f58e29b84 +DODO_PMM_INTEGRATION_MAINNET= +# --- Mainnet Aave flash quote-push (cWUSDC/USDC peg / rebalance without wallet USDC) --- +# If the deployer wallet already has USDC + cWUSDC: bash scripts/deployment/apply-mainnet-cwusdc-usdc-peg-tranche-from-wallet.sh --dry-run | --apply +# Deploy: bash scripts/deployment/deploy-mainnet-aave-quote-push-stack.sh --dry-run | --apply +# One shot: bash scripts/deployment/run-mainnet-aave-cwusdc-quote-push-once.sh --dry-run | --apply +# Loop: FLASH_LOOP_COUNT=3 bash scripts/deployment/run-mainnet-aave-cwusdc-quote-push-loop.sh --dry-run | --apply +# Forge sources: smom-dbis-138/script/flash/RunMainnetAaveCwusdcUsdcQuotePushOnce.s.sol +# Modeling (no chain writes): scripts/deployment/run-mainnet-cwusdc-flash-quote-push-model-sweep.sh +# Optional sweep tuning: FLASH_MODEL_GAS_TX_COUNT FLASH_MODEL_GAS_PER_TX FLASH_MODEL_MAX_POST_TRADE_DEV_BPS +AAVE_QUOTE_PUSH_RECEIVER_MAINNET= +QUOTE_PUSH_EXTERNAL_UNWINDER_MAINNET= +FLASH_QUOTE_AMOUNT_RAW= +# UNWIND_MODE: 0 = Uniswap V3 exactInputSingle (set UNWIND_V3_FEE_U24); 1 = DODO pool (UNWIND_DODO_POOL); +# 2 = Uniswap V3 exactInput packed path hex (UNWIND_V3_PATH_HEX) when no direct pool — see UniswapV3ExternalUnwinder. +UNWIND_MODE=0 +UNWIND_V3_FEE_U24= +# UNWIND_V3_PATH_HEX=0x... # UNWIND_MODE=2 — build: bash scripts/verify/build-uniswap-v3-exact-input-path-hex.sh +# UNWIND_DODO_POOL= +# Discover V3 pools: bash scripts/verify/probe-uniswap-v3-cwusdc-usdc-mainnet.sh +# Optional min-out overrides (script derives from pool query + Aave premium when unset): +# MIN_OUT_PMM= +# MIN_OUT_UNWIND= +# AAVE_FLASH_PREMIUM_BPS=5 +# UniswapV3ExternalUnwinder expects legacy SwapRouter exactInputSingle (not SwapRouter02 multicall). +# UNISWAP_V3_SWAP_ROUTER_MAINNET=0xE592427A0AEce92De3Edee1F18E0157C05861564 +# cWUSDT/cWUSDC public PMM on mainnet (see cross-chain-pmm-lps/config/deployment-status.json); override if redeployed: +# POOL_CWUSDT_CWUSDC_MAINNET=0xe944b7Cb012A0820c07f54D51e92f0e1C74168DB +# Optional public flash-lender candidates for no-broadcast dry-runs on Ethereum mainnet. +# Balancer mainnet vault is documented in smom-dbis-138/docs/bridge/trustless/ENV_VARIABLES_REFERENCE.md. +MAINNET_BALANCER_VAULT=0xBA12222222228d8Ba445958a75a0704d566BF2C8 +# Aave V3 Ethereum mainnet pool/provider, verified on-chain 2026-04-05 via ADDRESSES_PROVIDER() and FLASHLOAN_PREMIUM_TOTAL(). +MAINNET_AAVE_V3_POOL=0x87870Bca3F3fD6335C3F4ce8392D69350B4fA4E2 +MAINNET_AAVE_V3_POOL_ADDRESSES_PROVIDER=0x2f39d218133AFaB8F2B819B1066c7E434Ad94E9e +# Optional overrides (defaults match deployment-status.json / scripts) +TRUU_MAINNET= +PMM_TRUU_FEE_BPS= +PMM_TRUU_K= +# Optional extra cast check in scripts/verify/check-mainnet-pmm-peg-bot-readiness.sh +PMM_TRUU_BASE_TOKEN= +PMM_TRUU_QUOTE_TOKEN= +# Override initial DODO i for new pools only if governance changes baseline (top-up script default) +PMM_TRUU_INITIAL_I= +WORMHOLE_API_KEY= +WORMHOLE_EXECUTOR_URL=https://executor.labsapis.com +WORMHOLE_EXECUTOR_TESTNET_URL=https://executor-testnet.labsapis.com CHAIN_651940_RPC_URL= ETHERLINK_RPC_URL= TEZOS_RPC_URL= @@ -136,11 +293,72 @@ ETHERLINK_RELAY_BRIDGE= ETHERLINK_RELAY_PRIVATE_KEY= JUMPER_API_KEY= ONEINCH_API_KEY= +# Optional: 1inch dev API base (default https://api.1inch.dev/swap/v6.0) — see packages/economics-toolkit/src/swap-engine/oneinch-quote.ts +ONEINCH_API_URL= +DODO_API_KEY= +DODO_SECRET_KEY= +DODO_DEVELOPER_API_KEY= +# Optional: hosted DODO SmartTrade swap URL (default https://api.dodoex.io/route-service/developer/swap) +DODO_QUOTE_URL= +# Optional override for hosted DODO quote probes; if unset, scripts derive USER_ADDR +# from PRIVATE_KEY and fall back to the standard deployer wallet. +USER_ADDR= MOONPAY_API_KEY= MOONPAY_SECRET_KEY= RAMP_NETWORK_API_KEY= ONRAMPER_API_KEY= +# --- Changelly Exchange API v2 (Chain 138 → mainnet → BTC payout pathway; backend only) --- +# Docs: https://docs.changelly.com/ — register keys via pro@changelly.com +# Private key: PEM file on server or KMS reference; never expose to frontend builds. +CHANGELLY_API_PUBLIC_KEY= +CHANGELLY_API_PRIVATE_KEY_PEM_PATH= + +# --- Canonical GRU / D-WIN token surfaces used by PMM, reporting, and staged x402 cutover --- +CUSDT_V2_ADDRESS_138= +CUSDC_V2_ADDRESS_138= +CAUSDT_ADDRESS_138=0x5fdDF65733e3d590463F68f93Cf16E8c04081271 +CUSDW_ADDRESS_138= +AUSDT_ADDRESS_651940=0x015B1897Ed5279930bC2Be46F661894d219292A6 +CAXAUC_ADDRESS_651940= +CAXAUT_ADDRESS_651940= +CWAXAUC_ADDRESS_651940= +CWAXAUT_ADDRESS_651940= +USDW_ADDRESS_25= +# Optional: CMC "USD DWIN" native USDW (post-migration); canonical pins are config/token-mapping-multichain.json -> dwinUsdWinPublic +USDW_DWIN_BSC= +USDW_DWIN_POLYGON= +CWAUSDT_ADDRESS_56=0xe1a51Bc037a79AB36767561B147eb41780124934 +CWAUSDT_ADDRESS_137=0xf12e262F85107df26741726b074606CaFa24AAe7 +CWAUSDT_ADDRESS_43114=0xff3084410A732231472Ee9f93F5855dA89CC5254 +CWAUSDT_ADDRESS_42220=0xC158b6cD3A3088C52F797D41f5Aa02825361629e +CWUSDW_ADDRESS_56= +CWUSDW_ADDRESS_137= +CWUSDW_ADDRESS_43114= +USDW_WRAP_VAULT_56= +USDW_WRAP_VAULT_137= +USDW_NATIVE_ADDRESS_56= +USDW_NATIVE_ADDRESS_137= +# Legacy wrapped-token aliases still seen in smom-dbis-138/.env and accepted by token-aggregation: +CWUSDW_BSC= +CWUSDW_AVALANCHE= + +# --- cW* bridge role grants (scripts/deployment/grant-cw-bridge-roles-on-chain.sh) --- +# Optional: legacy gas price wei, or percent bump over cast gas-price (default 150). Mainnet/L2s need this when base fee spikes. +# CW_GRANT_GAS_PRICE_WEI= +# CW_GRANT_GAS_BUMP_PCT=150 + +# --- WEMIX3.0 mainnet (chain id 1111) --- +# Official RPC (HTTPS): https://docs.wemix.com/en/quick-start/start-node/use-public-api-server-rpc +# Swap on-chain to native WEMIX for gas after assets are on 1111: https://wemix.fi/swap +# No in-repo route for ETH/BNB/POL → WEMIX; see docs/03-deployment/WEMIX_ACQUISITION_TABLED.md +WEMIX_RPC=https://api.wemix.com +# WEMIX_MAINNET_RPC= # alias also read by grant-cw-bridge-roles-on-chain.sh + +# --- GRU deployer funding gates (check-gru-v2-deployer-funding-status.sh, check-full-deployment-status.sh) --- +# Arbitrum native balance must exceed this wei threshold or a funding blocker is raised. Set to 0 to skip (planning/CI only). +# GRU_FUNDING_ARBITRUM_THRESHOLD_WEI=440872740000000000 + # --- GRU Transport / cW hard-peg bridge controls (Chain 138 -> public chains) --- # Canonical L1 bridge env used by the GRU transport overlay and token-aggregation. CHAIN138_L1_BRIDGE= @@ -151,10 +369,12 @@ CW_BRIDGE_CRONOS= CW_BRIDGE_BSC= CW_BRIDGE_POLYGON= CW_BRIDGE_GNOSIS= +CW_BRIDGE_CELO= CW_BRIDGE_AVALANCHE= CW_BRIDGE_BASE= CW_BRIDGE_ARBITRUM= CW_BRIDGE_OPTIMISM= +CW_BRIDGE_WEMIX= CW_RESERVE_VERIFIER_CHAIN138= CW_STABLECOIN_RESERVE_VAULT= CW_RESERVE_SYSTEM= @@ -166,24 +386,31 @@ CW_CANONICAL_USDT= CW_CANONICAL_USDC= CW_USDT_RESERVE_ASSET= CW_USDC_RESERVE_ASSET= -CW_MAX_OUTSTANDING_USDT_MAINNET= -CW_MAX_OUTSTANDING_USDC_MAINNET= +CW_MAX_OUTSTANDING_USDT_MAINNET=10000000000000 +CW_MAX_OUTSTANDING_USDC_MAINNET=10000000000000 CW_MAX_OUTSTANDING_USDT_CRONOS= CW_MAX_OUTSTANDING_USDC_CRONOS= CW_MAX_OUTSTANDING_USDT_BSC= CW_MAX_OUTSTANDING_USDC_BSC= +CW_MAX_OUTSTANDING_AUSDT_BSC= CW_MAX_OUTSTANDING_USDT_POLYGON= CW_MAX_OUTSTANDING_USDC_POLYGON= +CW_MAX_OUTSTANDING_AUSDT_POLYGON= CW_MAX_OUTSTANDING_USDT_GNOSIS= CW_MAX_OUTSTANDING_USDC_GNOSIS= +CW_MAX_OUTSTANDING_USDT_CELO= +CW_MAX_OUTSTANDING_USDC_CELO= +CW_MAX_OUTSTANDING_AUSDT_CELO= CW_MAX_OUTSTANDING_USDT_AVALANCHE= CW_MAX_OUTSTANDING_USDC_AVALANCHE= +CW_MAX_OUTSTANDING_AUSDT_AVALANCHE= CW_MAX_OUTSTANDING_USDT_BASE= CW_MAX_OUTSTANDING_USDC_BASE= CW_MAX_OUTSTANDING_USDT_ARBITRUM= CW_MAX_OUTSTANDING_USDC_ARBITRUM= CW_MAX_OUTSTANDING_USDT_OPTIMISM= CW_MAX_OUTSTANDING_USDC_OPTIMISM= +CW_MAX_OUTSTANDING_WEMIX_WEMIX= CW_FREEZE_AVAX_L2_CONFIG= # --- Alerts & monitoring --- @@ -275,6 +502,32 @@ RPC_URL_138_FIREBLOCKS= WS_URL_138_FIREBLOCKS= CHAIN_ID_138= +# --- PMM soak grid (6534 wallets; operator funding scripts) --- +# Runbook: docs/11-references/CHAIN138_GRID_6534_WALLET_FUNDING_PLAN.md +# Optional stable RPC for long runs (avoids LAN Core flaps during thousands of cast sends): +# PMM_SOAK_RPC_URL_OVERRIDE=https://rpc-http-pub.d-bis.org +# Full-grid resume orchestrator: start at this leg only (native|mint|cusdt|cusdc|mirr_usdt|mirr_usdc) +# PMM_SOAK_START_LEG= +# Skip native when every wallet already funded (max linear index is 6533; use 6534 to skip native): +# PMM_SOAK_RESUME_NATIVE_FROM_LINEAR= +# Per-chunk progress/ETA in pmm-soak-operator-fund-grid.sh (0 = quiet except final line per chunk): +# PMM_SOAK_FUND_PROGRESS_EVERY=50 +# PMM_SOAK_FUND_CHUNK=250 + +# --- @proxmox/economics-toolkit (path-check / exec broadcast; operator LAN only) --- +# Validate checked-in strategy JSON: pnpm run economics:validate (optional: pip install check-jsonschema for schema pass) +# Optional: same as PRIVATE_KEY for guarded swap broadcast (see packages/economics-toolkit/config/executor-allowlist.example.json). +# ECONOMICS_EXEC_PRIVATE_KEY= +# Set to 1 to broadcast after successful simulation (default is dry-run). +# ECONOMICS_EXEC_APPLY= +# POST JSON when path-check clears economics gate (optional). +# ECONOMICS_ALERT_WEBHOOK= +# Per-chain RPC override for economics-toolkit gas-quote: ECONOMICS_GAS_RPC_1=, ECONOMICS_GAS_RPC_56=, etc. +# (Listed chain IDs are CR/LF-stripped when using scripts/lib/load-project-env.sh — same as RPC_URL_138.) +# ECONOMICS_GAS_SKIP_USD=1 Skip CoinGecko; print native gas cost only +# Optional: economics-toolkit gas-budget derives EOA from this if --address omitted (else PRIVATE_KEY) +# ECONOMICS_GAS_BUDGET_PRIVATE_KEY= + # --- Phoenix deploy API --- PORT= GITEA_TOKEN= diff --git a/AGENTS.md b/AGENTS.md index c09af61a..1651a56b 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -12,12 +12,19 @@ Orchestration for Proxmox VE, Chain 138 (`smom-dbis-138/`), explorers, NPMplus, |------|-----------| | Doc index | `docs/MASTER_INDEX.md` | | Chain 138 PMM swap quote (CLI) | `bash scripts/verify/pmm-swap-quote-chain138.sh --token-in … --amount-in …` — on-chain `querySellBase`/`querySellQuote` + suggested `minOut` for `DODOPMMIntegration.swapExactIn` (REST `/quote` is xy=k only). | +| **DeFi economics toolkit** (flash/gas buckets, path gate, dry-run exec, live gas quotes, multi-leg strategies) | `pnpm run economics:test`; `pnpm run economics:validate` (parse + optional `check-jsonschema` on smoke/template); `pnpm exec economics-toolkit calc|path-check|gas-quote|gas-budget|prepare-swap|exec`; `pnpm exec economics-toolkit strategy kinds|template|validate|eval|optimize|optimize-multi|optimize-random|optimize-descent|enrich|runbook|exec-plan`; live refresh: `bash scripts/economics/refresh-strategy-from-live.sh [--apply] `; examples `config/strategy-bounds.example.json`, `config/strategy-optimize-dims.example.json`; template `packages/economics-toolkit/config/strategy-template.json`, smoke `strategy-smoke.json`, schema `strategy.schema.json`; allowlist `packages/economics-toolkit/config/executor-allowlist.example.json`; `gas-networks.json`; flow tables `packages/economics-toolkit/docs/FLOW_INPUTS_OUTPUTS_TABLE.md`; CI `.github/workflows/economics-toolkit.yml`. | | Chain 138 info site (`info.defi-oracle.io`) | Dedicated nginx LXC (default VMID **2410** / `IP_INFO_DEFI_ORACLE_WEB`): `provision-info-defi-oracle-web-lxc.sh` then `sync-info-defi-oracle-to-vmid2400.sh` (sync asserts `/token-aggregation` proxy); NPM fleet `scripts/nginx-proxy-manager/update-npmplus-proxy-hosts-api.sh`; Cloudflare DNS `scripts/cloudflare/set-info-defi-oracle-dns-to-vmid2400-tunnel.sh`; cache `pnpm run cloudflare:purge-info-defi-oracle-cache`; runbook `docs/04-configuration/INFO_DEFI_ORACLE_IO_DEPLOYMENT.md`; `pnpm run verify:info-defi-oracle-public` (SPA routes including `/governance`, `/ecosystem`, `/documentation`, `/solacenet`, `llms.txt`, `agent-hints.json`, **same-origin** token-aggregation JSON; `INFO_SITE_BASE=…` optional); CI `info-defi-oracle-138.yml` (build) and `verify-info-defi-oracle-public.yml` (weekly + manual smoke); optional `pnpm run audit:info-defi-oracle-site` (`pnpm exec playwright install chromium`) | +| **omdnl.org** (static landing) | Nginx LXC VMID **10203** / `IP_OMDNL_ORG_WEB` (default 192.168.11.222): `scripts/deployment/provision-omdnl-org-web-lxc.sh` → `sync-omdnl-org-static-to-ct.sh`; Cloudflare `configure-omdnl-org-dns.sh` (`CLOUDFLARE_ZONE_ID_OMDNL_ORG`, `PUBLIC_IP`); NPM `upsert-omdnl-org-proxy-host.sh`; content in `sites/omdnl-org/public/`. | | **SolaceNet + gateway rails** (dbis_core) | Hub map: `docs/04-configuration/SOLACENET_PUBLIC_HUB.md`. Backlog: `dbis_core/docs/solacenet/REMAINING_TASKS_FULL_LIST.md`. Gap IDs: `dbis_core/docs/solacenet/PROTOCOL_GAPS_CHECKLIST.md`. **Delta audit** (missing wiring, naming drift, CI): `dbis_core/docs/solacenet/AUDIT_GAPS_INCONSISTENCIES_MISSING.md`. Enforce rails runbook: `dbis_core/docs/solacenet/SOLACENET_GATEWAY_RAILS_ENFORCE_RUNBOOK.md`. Tests: `cd dbis_core && npm run test:gateway` (unit + HTTP integration). **Provider seed:** `cd dbis_core && npm run seed:gateway-provider` (needs `DATABASE_URL`). **Smoke (auth):** `bash scripts/verify/check-dbis-core-gateway-rails.sh`. **Outbox worker:** `cd dbis_core && npm run worker:gateway-outbox` (`DATABASE_URL`). CI: `.github/workflows/dbis-core-gateway-ci.yml`. API: `GET/POST /api/v1/gateway/rails*` (optional `SOLACENET_GATEWAY_RAILS_ENFORCE`) — `dbis_core/src/core/gateway/routes/gateway.routes.ts`. | | cXAUC/cXAUT unit | 1 full token = 1 troy oz Au — `docs/11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md` (section 5.1) | | GRU / UTRNF token naming (`c*` vs collateral prefix) | `docs/04-configuration/naming-conventions/README.md`, `docs/04-configuration/naming-conventions/02_DBIS_NAMESPACE_AND_UTRNF_MAPPING.md` | | PMM mesh 6s tick | `smom-dbis-138/scripts/reserve/pmm-mesh-6s-automation.sh` — `docs/integration/ORACLE_AND_KEEPER_CHAIN138.md` (PMM mesh automation) | +| **PMM soak grid (33×33×6 wallets)** | `docs/11-references/CHAIN138_GRID_6534_WALLET_FUNDING_PLAN.md` — one-shot `scripts/deployment/pmm-soak-complete-operator-bootstrap.sh` (`PMM_SOAK_AUTO_INIT_GRID_MNEMONIC=1` … `--apply-funds --to-linear 19`); full-grid resume `scripts/deployment/pmm-soak-complete-grid-funding-operator.sh` (`PMM_SOAK_START_LEG`, `PMM_SOAK_RESUME_NATIVE_FROM_LINEAR`, `PMM_SOAK_RPC_URL_OVERRIDE`, `PMM_SOAK_FUND_PROGRESS_EVERY` via fund-grid); tranche driver `scripts/deployment/pmm-soak-operator-fund-full-grid-tranches.sh`; export `pmm-soak-export-wallet-grid.py`, fund `pmm-soak-operator-fund-grid.sh`, pools `scripts/lib/pmm-soak-pools.sh`, bots `chain138-pmm-soak-grid-bot.sh` / `chain138-pmm-random-soak-swaps.sh` (`--pool-preset`, `--swap-via`; `scripts/lib/pmm-soak-dotenv-override.sh` preserves caller `PMM_SOAK_POOL_*` / `CHAIN138_PMM_SOAK_SWAP_VIA` over `.env`), smoke `scripts/deployment/pmm-soak-grid-smoke-check.sh`, CI `.github/workflows/pmm-soak-grid-smoke.yml` | | Mainnet cWUSD\* peg, TRUU PMM, bot readiness | `docs/03-deployment/MAINNET_PMM_TRUU_CWUSD_PEG_AND_BOT_RUNBOOK.md` (§11 live inventory) — `scripts/verify/check-mainnet-pmm-peg-bot-readiness.sh`, `scripts/deployment/deploy-mainnet-pmm-cw-truu-pool.sh`, `scripts/deployment/add-mainnet-truu-pmm-topup.sh`, `scripts/deployment/compute-mainnet-truu-liquidity-amounts.sh`, `scripts/deployment/compute-mainnet-truu-pmm-seed-amounts.sh`; `cross-chain-pmm-lps/config/deployment-status.json` `pmmPoolsVolatile`; `docs/11-references/CONTRACT_ADDRESSES_REFERENCE.md` (Mainnet TRUU PMM); `check-full-deployment-status.sh` when `ETHEREUM_MAINNET_RPC` + `DODO_PMM_INTEGRATION_MAINNET` are set | +| Mainnet cWUSD\* hybrid flash loop (modeled ladder + readiness) | `docs/03-deployment/MAINNET_CWUSD_HYBRID_FLASH_LOOP_CALCULATION_WHITEPAPER.md`; `scripts/analytics/pmm-flash-push-break-even.mjs` (`--sequential-matched-loops`, `--full-loop-dry-run --execution-grade`); `scripts/verify/check-public-pmm-dry-run-readiness.sh`; `scripts/verify/run-mainnet-cwusdc-usdc-ladder-steps-1-3.sh` (optional `PMM_FLASH_EXIT_PRICE_CMD`); `scripts/verify/print-mainnet-cwusdc-usdc-pmm-sellbase-implied-price.sh` (pool-implied diagnostic); `scripts/verify/print-mainnet-cwusdc-external-exit-quote.sh` (DODO / 1inch hosted quote for `--external-exit-price-cmd`); same APIs in `pnpm exec economics-toolkit swap-quote` | +| Mainnet cWUSDT/cWUSDC PMM + USDT↔USDC pathing | `cross-chain-pmm-lps/config/deployment-status.json` (`cWUSDT`/`cWUSDC`); `scripts/deployment/compute-mainnet-cwusdt-cwusdc-seed-amounts.sh`, `deploy-mainnet-cwusdt-cwusdc-pool.sh`, `add-mainnet-public-dodo-cw-liquidity.sh --pair=cwusdt-cwusdc`, `run-mainnet-cwusdt-cwusdc-soak-roundtrips.sh`; `scripts/verify/plan-mainnet-usdt-usdc-via-cw-paths.sh`; `scripts/verify/report-mainnet-deployer-liquidity-and-routes.sh` (deployer + deep USDC/USDT venues); `run-mainnet-public-dodo-cw-swap.sh --pair=cwusdt-cwusdc`; `.env.master.example` `POOL_CWUSDT_CWUSDC_MAINNET` | +| Mainnet cWUSDC/USDC **1:1 reserve peg** (6dp raw vault parity) | `scripts/verify/check-mainnet-cwusdc-usdc-reserve-peg.sh` (`PEG_IMBALANCE_MAX_BPS`, default 25); remediate with `scripts/deployment/plan-mainnet-cwusdc-usdc-rebalance-liquidity.sh` then `add-mainnet-public-dodo-cw-liquidity.sh --pair=cwusdc-usdc` (both `--base-amount` and `--quote-amount`; `--dry-run` first) | +| Mainnet cWUSDC/USDC rebalance **without wallet USDC** (flash quote-push) | Plan: `scripts/deployment/plan-mainnet-cwusdc-flash-quote-push-rebalance.sh`; **models**: `run-mainnet-cwusdc-flash-quote-push-model-sweep.sh`; **V3 pool probe**: `scripts/verify/probe-uniswap-v3-cwusdc-usdc-mainnet.sh`; **V3 path hex (UNWIND_MODE=2)**: `scripts/verify/build-uniswap-v3-exact-input-path-hex.sh`; **deploy stack**: `deploy-mainnet-aave-quote-push-stack.sh` (`--dry-run` / `--apply`); **one tx**: `run-mainnet-aave-cwusdc-quote-push-once.sh`; **loop**: `run-mainnet-aave-cwusdc-quote-push-loop.sh` + `FLASH_LOOP_COUNT`. Forge: `smom-dbis-138/script/flash/RunMainnetAaveCwusdcUsdcQuotePushOnce.s.sol` (`UNWIND_MODE` 0=fee / 1=DODO pool / 2=V3 path hex). Whitepaper: `MAINNET_CWUSD_HYBRID_FLASH_LOOP_CALCULATION_WHITEPAPER.md`. | | VMID / IP / FQDN | `docs/04-configuration/ALL_VMIDS_ENDPOINTS.md` | | Proxmox Mail Proxy (LAN SMTP) | VMID **100** `192.168.11.32` (`proxmox-mail-gateway`) — submission **587** / **465**; see Mail Proxy note in `ALL_VMIDS_ENDPOINTS.md` | | Spare R630 storage + optional tune-up | `scripts/proxmox/ensure-r630-spare-node-storage.sh`, `scripts/proxmox/provision-r630-03-six-ssd-thinpools.sh`, `scripts/proxmox/pve-spare-host-optional-tuneup.sh` · load balance / migrate: `docs/04-configuration/PROXMOX_LOAD_BALANCING_RUNBOOK.md` | @@ -26,10 +33,13 @@ Orchestration for Proxmox VE, Chain 138 (`smom-dbis-138/`), explorers, NPMplus, | Proxmox mgmt FQDN DNS + `/etc/hosts` snippet | `bash scripts/verify/check-proxmox-mgmt-fqdn.sh` (`--print-hosts`, optional `--ssh`) | | Proxmox SSH check (all 5 nodes) | `bash scripts/security/ensure-proxmox-ssh-access.sh` (`--fqdn`, optional `--copy` for `ssh-copy-id`) | | Proxmox cluster hardware poll (LAN, key SSH) | `bash scripts/verify/poll-proxmox-cluster-hardware.sh` — writes `reports/status/hardware_poll_*.txt`; companion narrative + ARP/edge: `reports/status/hardware_and_connected_inventory_*.md` | -| IT live inventory + IPAM drift (LAN, Phase 0) | `bash scripts/it-ops/export-live-inventory-and-drift.sh` → `reports/status/live_inventory.json`, `drift.json` (exit **2** only if duplicate guest IPs; merges `ip-addresses.conf` + `ALL_VMIDS_ENDPOINTS.md`). [SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md](docs/03-deployment/SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md). Spec: [SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md](docs/02-architecture/SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md) | -| IT inventory read API (Phase 0 stub) | `python3 services/sankofa-it-read-api/server.py` — GET `/health`, `/v1/inventory/live`, `/v1/inventory/drift`; optional `IT_READ_API_KEY` + `X-API-Key`; optional `IT_READ_API_CORS_ORIGINS` (comma-separated). [services/sankofa-it-read-api/README.md](services/sankofa-it-read-api/README.md), systemd [config/systemd/sankofa-it-read-api.service.example](config/systemd/sankofa-it-read-api.service.example) | -| **IT read API LAN bootstrap** | `bash scripts/deployment/bootstrap-sankofa-it-read-api-lan.sh` — rsync → `/opt/proxmox` on seed PVE, systemd + `/etc/sankofa-it-read-api.env`, repo `.env` + portal CT 7801 merge, weekly export timer on PVE. NPM: [upsert-it-read-api-proxy-host.sh](scripts/nginx-proxy-manager/upsert-it-read-api-proxy-host.sh); DNS: [add-it-api-sankofa-dns.sh](scripts/cloudflare/add-it-api-sankofa-dns.sh). [SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md](docs/03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md) | -| Keycloak realm role for portal `/it` | `bash scripts/deployment/keycloak-sankofa-ensure-it-admin-role.sh` (CT 7802 via SSH); assign `sankofa-it-admin` to IT users. Portal: `IT_READ_API_URL` + optional `IT_READ_API_KEY` on CT 7801. Weekly export timer: [config/systemd/sankofa-it-inventory-export.timer.example](config/systemd/sankofa-it-inventory-export.timer.example) | +| Proxmox LXC cluster health poll (LAN, key SSH) | `bash scripts/verify/poll-lxc-cluster-health.sh` — pulls `/cluster/resources` + per-node load/PSI/`pvesm`; writes `reports/status/lxc_cluster_health_*.json` and `.txt`; exits `0` ok / `1` warn / `2` crit / `3` collection failure | +| Proxmox LXC rebalance planner (read-only) | `bash scripts/verify/plan-lxc-rebalance-from-health-report.sh [--report reports/status/lxc_cluster_health_*.json] --source r630-01 --target r630-04` — ranks move candidates, prints `pct migrate` commands, excludes chain-critical / infra-critical names by pattern | +| IT live inventory + IPAM drift (LAN, Phase 0) | `bash scripts/it-ops/export-live-inventory-and-drift.sh` → `reports/status/live_inventory.json`, `drift.json` (exit **2** only if duplicate guest IPs; merges `ip-addresses.conf` + `ALL_VMIDS_ENDPOINTS.md`). Optional **`IT_BFF_SNAPSHOT_DB=/path/it.sqlite`** appends export metadata; optional **`IT_COLLECT_IP_NEIGH=1`** on PVE enables `ip neigh` sample in collector. [SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md](docs/03-deployment/SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md). Spec: [SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md](docs/02-architecture/SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md); ADR: [SANKOFA_IT_API_DEPLOYMENT_DECISION.md](docs/02-architecture/SANKOFA_IT_API_DEPLOYMENT_DECISION.md) | +| IT inventory read API (Phase 0–1 BFF stub) | `python3 services/sankofa-it-read-api/server.py` — GET `/health`, `/v1/summary`, `/v1/collector-contract`, `/v1/portmap/joined` (stub), `/v1/inventory/live`, `/v1/inventory/drift`; POST `/v1/inventory/refresh` (returns `drift_exit_code`; **2** = duplicate IP alert). Optional `IT_READ_API_KEY`, `IT_BFF_OIDC_ISSUER` (health only). [services/sankofa-it-read-api/README.md](services/sankofa-it-read-api/README.md), systemd [config/systemd/sankofa-it-read-api.service.example](config/systemd/sankofa-it-read-api.service.example) | +| **IT read API LAN bootstrap** | `bash scripts/deployment/bootstrap-sankofa-it-read-api-lan.sh` — rsync → `/opt/proxmox` on seed PVE (includes `config/it-operations/`), systemd + `/etc/sankofa-it-read-api.env`, repo `.env` + portal CT 7801 merge, weekly export timer on PVE. NPM: [upsert-it-read-api-proxy-host.sh](scripts/nginx-proxy-manager/upsert-it-read-api-proxy-host.sh); DNS: [add-it-api-sankofa-dns.sh](scripts/cloudflare/add-it-api-sankofa-dns.sh). [SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md](docs/03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md) | +| Keycloak realm role + group for portal `/it` | `bash scripts/deployment/keycloak-sankofa-ensure-it-admin-role.sh` then `bash scripts/deployment/keycloak-sankofa-ensure-it-admin-group.sh` (CT 7802 via SSH); add IT users to group **sankofa-it-admin**. MFA: [SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md](docs/03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md). Portal: `IT_READ_API_URL` + optional `IT_READ_API_KEY` on CT 7801. Weekly export timer: [config/systemd/sankofa-it-inventory-export.timer.example](config/systemd/sankofa-it-inventory-export.timer.example) | +| IT VLAN + port map + billing skeleton | VLAN runbook [VLAN_FLAT_11_TO_SEGMENTED_RUNBOOK.md](docs/03-deployment/VLAN_FLAT_11_TO_SEGMENTED_RUNBOOK.md); port layers [IT_PORT_MAP_LAYERS_SPEC.md](docs/02-architecture/IT_PORT_MAP_LAYERS_SPEC.md); edge IPs [IT_OPS_EDGE_DISCOVERY_IPS.md](docs/04-configuration/IT_OPS_EDGE_DISCOVERY_IPS.md); collectors contract [IT_LIVE_COLLECTORS_CONTRACT.md](docs/02-architecture/IT_LIVE_COLLECTORS_CONTRACT.md); Stripe outline [IT_OPERATIONS_BILLING_STRIPE_OUTLINE.md](docs/03-deployment/IT_OPERATIONS_BILLING_STRIPE_OUTLINE.md); guarded Proxmox preview [scripts/it-ops/proxmox-guarded-write-adapter.sh](scripts/it-ops/proxmox-guarded-write-adapter.sh); Gitea `.gitea/workflows/live-inventory-hardware-weekly.yml` | | IT admin UI next steps (Keycloak + portal `/it`) | [docs/03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md](docs/03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md) | | Config validation | `bash scripts/validation/validate-config-files.sh` (optional: `python3 -m pip install check-jsonschema` for `validate-dbis-institutional-schemas.sh`, `validate-naming-convention-registry-examples.sh`, `validate-jvmtm-regulatory-closure-schemas.sh`, `validate-reserve-provenance-package.sh`; includes explorer Chain 138 inventory vs `config/smart-contracts-master.json`) | | Chain 138 contract addresses (JSON + bytecode) | `config/smart-contracts-master.json` — `bash scripts/verify/check-contracts-on-chain-138.sh` (expect **75/75** when Core RPC reachable; jq uses JSON when file present) | diff --git a/docs/MASTER_INDEX.md b/docs/MASTER_INDEX.md index fde73064..d9264765 100644 --- a/docs/MASTER_INDEX.md +++ b/docs/MASTER_INDEX.md @@ -1,9 +1,9 @@ # Documentation — Master Index -**Last Updated:** 2026-03-31 +**Last Updated:** 2026-04-10 **Purpose:** Single entry point for all project documentation. Use this index to find canonical sources and avoid deprecated or duplicate content. -**Status:** Preflight and Chain 138 next steps completed (**64/64** on-chain per [check-contracts-on-chain-138.sh](../../scripts/verify/check-contracts-on-chain-138.sh) when LAN RPC reachable; includes **ISO20022Router**, canonical + legacy CCIP router/WETH9 bridge, `config/smart-contracts-master.json`). **2026-03-30:** Live verification — [LIVE_VERIFICATION_LOG_2026-03-30.md](00-meta/LIVE_VERIFICATION_LOG_2026-03-30.md) (public + private E2E **Failed: 0**, config validation, `run-all-validation.sh --skip-genesis`). **2026-03-06:** Prior doc pass referred to 59 addresses; script list grew through **61** → **62** → **64** (PMM, vault/reserve, CompliantFiatTokens, ISO router, CCIP legacy pair). **2026-03-04:** Celo CCIP bridges deployed; Phase A–D tracked in [03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md](03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md). Phase C: [PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md](03-deployment/PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md); Phase D: [PHASE_D_OPTIONAL_CHECKLIST.md](03-deployment/PHASE_D_OPTIONAL_CHECKLIST.md). **On-chain verification:** DODOPMMIntegration canonical cUSDT/cUSDC — [EXPLORER_TOKEN_LIST_CROSSCHECK](11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md) §8. **Remaining:** Wemix 0.4 WEMIX, LINK fund, cW* + edge pools — see [00-meta/TODOS_CONSOLIDATED.md](00-meta/TODOS_CONSOLIDATED.md). +**Status:** Preflight and Chain 138 next steps completed (**88/88** on-chain per [check-contracts-on-chain-138.sh](../scripts/verify/check-contracts-on-chain-138.sh) when LAN RPC reachable; includes **ISO20022Router**, canonical + legacy CCIP router/WETH9 bridge, the cross-chain flash trio, the GRU V2 USD pair, the router-v2 execution stack, the upstream-native Uniswap v3 stack, and the funded pilot-compatible Balancer / Curve_3 / 1inch venues in `config/smart-contracts-master.json`). **2026-04-03:** Flash rollout closed out; `UniversalCCIPFlashBridgeAdapter`, `CrossChainFlashRepayReceiver`, and `CrossChainFlashVaultCreditReceiver` are deployed and Blockscout-verified. **2026-04-03:** `EnhancedSwapRouterV2`, `IntentBridgeCoordinatorV2`, and the route-executor adapters were promoted into the live Chain 138 inventory after a successful DODO v3 proof swap. **2026-04-03:** upstream-native `Uniswap_v3` was deployed, corrected to the canonical fee-500 pools, cut over into the public `/token-aggregation/api/v2` planner, and is now verifiable together with the funded `Balancer`, `Curve_3`, and `1inch` venues through [check-chain138-pilot-dex-venues.sh](../scripts/verify/check-chain138-pilot-dex-venues.sh). **2026-04-03:** GRU V2 USD is forward-canonical ready, and the ranked GRU rollout plus public-chain cW* pool graph are now summarized by [check-full-deployment-status.sh](../scripts/verify/check-full-deployment-status.sh). **2026-04-03:** the explorer now also publishes the public-network GRU v2 truth table at `https://explorer.d-bis.org/config/GRU_V2_PUBLIC_DEPLOYMENT_STATUS.json`, backed by [check-gru-v2-public-protocols.sh](../scripts/verify/check-gru-v2-public-protocols.sh). **2026-03-30:** Live verification — [LIVE_VERIFICATION_LOG_2026-03-30.md](00-meta/LIVE_VERIFICATION_LOG_2026-03-30.md) (public + private E2E **Failed: 0**, config validation, `run-all-validation.sh --skip-genesis`). **2026-03-06:** Prior doc pass referred to 59 addresses; script list grew through **61** → **62** → **64** → **67** → **75** → **79** → **86** → **88** (PMM, vault/reserve, CompliantFiatTokens, ISO router, CCIP legacy pair, flash infra, router-v2 execution stack, native Uniswap v3 stack, venue layer, and GRU V2 pair). **2026-03-04:** Celo CCIP bridges deployed; Phase A–D tracked in [03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md](03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md). Phase C: [PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md](03-deployment/PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md); Phase D: [PHASE_D_OPTIONAL_CHECKLIST.md](03-deployment/PHASE_D_OPTIONAL_CHECKLIST.md). **On-chain verification:** DODOPMMIntegration canonical cUSDT/cUSDC — [EXPLORER_TOKEN_LIST_CROSSCHECK](11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md) §8. **Remaining:** public-chain `cW*` pools, GRU Wave 1 transport activation, global-priority backlog currencies, Solana/non-EVM rollout, Wemix 0.4 WEMIX, and LINK fund — see [00-meta/TODOS_CONSOLIDATED.md](00-meta/TODOS_CONSOLIDATED.md). **Continue and complete (operator/LAN):** (1) `./scripts/run-completable-tasks-from-anywhere.sh` then (2) `./scripts/run-all-operator-tasks-from-lan.sh` (use `--skip-backup` if `NPM_PASSWORD` not set; add `--deploy` or `--create-vms` as needed). Operator scripts load dotenv from repo `.env` and `smom-dbis-138/.env` automatically. **P1 local slice:** `bash scripts/verify/run-p1-local-verification.sh` (`--with-iru-tests` optional); full P1 IDs in [TODOS_CONSOLIDATED.md](00-meta/TODOS_CONSOLIDATED.md#p1--merged-backlog-2026-03-30). @@ -21,6 +21,11 @@ | **Your personal checklist** | [00-meta/NEXT_STEPS_FOR_YOU.md](00-meta/NEXT_STEPS_FOR_YOU.md) | | **Operator runbook (LAN/creds)** | [00-meta/NEXT_STEPS_OPERATOR.md](00-meta/NEXT_STEPS_OPERATOR.md) | | **Operator copy-paste commands** | [00-meta/OPERATOR_READY_CHECKLIST.md](00-meta/OPERATOR_READY_CHECKLIST.md) — exact commands for Blockscout, NPMplus, CCIP, 502 fix, backup, deploy | +| **Explorer RPC access runbook** | [03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md](03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md) | +| **Explorer edge enforcement** | [../explorer-monorepo/deployment/ACCESS_EDGE_ENFORCEMENT_RUNBOOK.md](../explorer-monorepo/deployment/ACCESS_EDGE_ENFORCEMENT_RUNBOOK.md) | +| **Explorer access API reference** | [11-references/EXPLORER_ACCESS_API_REFERENCE.md](11-references/EXPLORER_ACCESS_API_REFERENCE.md) | +| **Explorer access architecture** | [02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md](02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md) | +| **Thirdweb portal deployment model** | [04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md](04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md) | | **Required / optional / recommended (full plan)** | [00-meta/COMPLETE_REQUIRED_OPTIONAL_RECOMMENDED_INDEX.md](00-meta/COMPLETE_REQUIRED_OPTIONAL_RECOMMENDED_INDEX.md) | | **Single task list** | [00-meta/TODOS_CONSOLIDATED.md](00-meta/TODOS_CONSOLIDATED.md) | | **Execution: multiple routes + liquidity (all + optional, suggested order)** | [00-meta/EXECUTION_CHECKLIST_MULTIPLE_ROUTES_AND_LIQUIDITY.md](00-meta/EXECUTION_CHECKLIST_MULTIPLE_ROUTES_AND_LIQUIDITY.md) | @@ -29,7 +34,8 @@ | **Next steps (concise)** | [00-meta/NEXT_STEPS_LIST.md](00-meta/NEXT_STEPS_LIST.md) — bridge/swap/Phase C status, quick commands | | **Still not done (operator/external)** | [00-meta/STILL_NOT_DONE_EXECUTION_CHECKLIST.md](00-meta/STILL_NOT_DONE_EXECUTION_CHECKLIST.md) | | **Remaining tasks (one page)** | [00-meta/REMAINING_TASKS.md](00-meta/REMAINING_TASKS.md) | -| **Contract next steps (Chain 138)** | [11-references/CONTRACT_NEXT_STEPS_LIST.md](11-references/CONTRACT_NEXT_STEPS_LIST.md) — on-chain check (64 addr), Blockscout, env | +| **Contract next steps (Chain 138)** | [11-references/CONTRACT_NEXT_STEPS_LIST.md](11-references/CONTRACT_NEXT_STEPS_LIST.md) — on-chain check (86 addr), Blockscout, env | +| **All-network contract verification / publication closure** | [03-deployment/ALL_NETWORK_CONTRACT_VERIFICATION_AND_PUBLICATION_RUNBOOK.md](03-deployment/ALL_NETWORK_CONTRACT_VERIFICATION_AND_PUBLICATION_RUNBOOK.md), [11-references/CONTRACT_VERIFICATION_AND_PUBLICATION_MATRIX_ALL_NETWORKS.md](11-references/CONTRACT_VERIFICATION_AND_PUBLICATION_MATRIX_ALL_NETWORKS.md) | | **Integration gaps (OMNL / Core / RTGS / ISO)** | [00-meta/INTEGRATION_GAPS_AND_NEXT_STEPS_2026-03-30.md](00-meta/INTEGRATION_GAPS_AND_NEXT_STEPS_2026-03-30.md) | | **Task check report (verify before completing)** | [00-meta/TASK_CHECK_REPORT.md](00-meta/TASK_CHECK_REPORT.md) | | **Gaps status (all gap sources + fixes)** | [00-meta/GAPS_STATUS.md](00-meta/GAPS_STATUS.md) | @@ -46,6 +52,8 @@ | Task list | [00-meta/TODO_TASK_LIST_MASTER.md](00-meta/TODO_TASK_LIST_MASTER.md), [00-meta/TODOS_CONSOLIDATED.md](00-meta/TODOS_CONSOLIDATED.md) | — | | Deployment order | [03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md](03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md), [03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md](03-deployment/REMAINING_DEPLOYMENTS_FOR_FULL_NETWORK_COVERAGE.md) (Phases A–D) | — | | Phase C (cW* + edge pools) | [03-deployment/PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md](03-deployment/PHASE_C_CW_AND_EDGE_POOLS_RUNBOOK.md) | — | +| Mainnet PMM: cWUSD* peg, TRUU, bots | [03-deployment/MAINNET_PMM_TRUU_CWUSD_PEG_AND_BOT_RUNBOOK.md](03-deployment/MAINNET_PMM_TRUU_CWUSD_PEG_AND_BOT_RUNBOOK.md) (live inventory §11), `scripts/verify/check-mainnet-pmm-peg-bot-readiness.sh`, `scripts/deployment/deploy-mainnet-pmm-cw-truu-pool.sh`, `scripts/deployment/add-mainnet-truu-pmm-topup.sh`, `scripts/deployment/compute-mainnet-truu-liquidity-amounts.sh`, `scripts/deployment/compute-mainnet-truu-pmm-seed-amounts.sh`; flow: [02-architecture/SMOM_DBIS_138_FULL_DEPLOYMENT_FLOW_MAP.md](02-architecture/SMOM_DBIS_138_FULL_DEPLOYMENT_FLOW_MAP.md) section 6.1; addresses: [11-references/CONTRACT_ADDRESSES_REFERENCE.md](11-references/CONTRACT_ADDRESSES_REFERENCE.md) (Mainnet TRUU PMM subsection) | — | +| Mainnet cWUSD* hybrid flash loop (model + readiness) | [03-deployment/MAINNET_CWUSD_HYBRID_FLASH_LOOP_CALCULATION_WHITEPAPER.md](03-deployment/MAINNET_CWUSD_HYBRID_FLASH_LOOP_CALCULATION_WHITEPAPER.md); `scripts/analytics/pmm-flash-push-break-even.mjs` (`--sequential-matched-loops`, `--execution-grade`); `scripts/verify/check-public-pmm-dry-run-readiness.sh`; `scripts/verify/run-mainnet-cwusdc-usdc-ladder-steps-1-3.sh`; `scripts/verify/print-mainnet-cwusdc-usdc-pmm-sellbase-implied-price.sh`; `scripts/verify/print-mainnet-cwusdc-external-exit-quote.sh` (DODO / 1inch) | Modeled ladder and gates; use hosted quote script or `economics-toolkit swap-quote` for live exit inputs | | Phase D (optional XAU/vaults/trustless) | [03-deployment/PHASE_D_OPTIONAL_CHECKLIST.md](03-deployment/PHASE_D_OPTIONAL_CHECKLIST.md) | — | | **OMNL + DBIS Core + Chain 138 + Smart Vault + external RTGS** | [03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md](03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md) | — | | **Chain 138 as SWIFT-replacement rail (UETR vs on-chain ids, audit scope)** | [03-deployment/OJK_BI_AUDIT_JVMTM_REMEDIATION_AND_UETR_POLICY.md](03-deployment/OJK_BI_AUDIT_JVMTM_REMEDIATION_AND_UETR_POLICY.md) | — | @@ -53,15 +61,27 @@ | **Reserve provenance / funding attestation (3FR staged package)** | [`config/reserve-provenance-package/README.md`](../config/reserve-provenance-package/README.md), `scripts/validation/validate-reserve-provenance-package.sh` | — | | **DBIS institutional JSON (settlement, registry, trust/governance/policy)** | [`config/dbis-institutional/README.md`](../config/dbis-institutional/README.md), `scripts/validation/validate-dbis-institutional-schemas.sh`, `scripts/verify/sync-blockscout-address-labels-from-registry.sh` | — | | **ISO-20022 → on-chain (methodology + multi-network intake)** | [04-configuration/SMART_CONTRACTS_ISO20022_FIN_METHODOLOGY.md](04-configuration/SMART_CONTRACTS_ISO20022_FIN_METHODOLOGY.md), [04-configuration/ISO20022_INTAKE_GATEWAY_CONTRACT_MULTI_NETWORK.md](04-configuration/ISO20022_INTAKE_GATEWAY_CONTRACT_MULTI_NETWORK.md); Rail: [dbis-rail/ISO_GATEWAY_AND_RELAYER_SPEC.md](dbis-rail/ISO_GATEWAY_AND_RELAYER_SPEC.md) | — | +| **SolaceNet** (capability plane, gateway rails, public hub) | [04-configuration/SOLACENET_PUBLIC_HUB.md](04-configuration/SOLACENET_PUBLIC_HUB.md); `dbis_core/docs/solacenet/` (governance, [PROTOCOL_GAPS_CHECKLIST.md](../dbis_core/docs/solacenet/PROTOCOL_GAPS_CHECKLIST.md), [REMAINING_TASKS_FULL_LIST.md](../dbis_core/docs/solacenet/REMAINING_TASKS_FULL_LIST.md), [AUDIT_GAPS_INCONSISTENCIES_MISSING.md](../dbis_core/docs/solacenet/AUDIT_GAPS_INCONSISTENCIES_MISSING.md), plugin vs gateway bridge); public web **https://info.defi-oracle.io/solacenet** | — | | **Token / bridge naming (UTRNF + DBIS / Chain 138 mapping)** | [04-configuration/naming-conventions/README.md](04-configuration/naming-conventions/README.md) | — | | **GRU c* V2 standards and implementation plan** | [04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md](04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md) | — | +| **GRU V2 Chain 138 readiness** | [04-configuration/GRU_V2_CHAIN138_READINESS.md](04-configuration/GRU_V2_CHAIN138_READINESS.md) | Live readiness gate for deployed `cUSDT V2` / `cUSDC V2` | +| **GRU V2 IPFS metadata** | [04-configuration/GRU_V2_IPFS_METADATA_RUNBOOK.md](04-configuration/GRU_V2_IPFS_METADATA_RUNBOOK.md) | IPFS-backed `tokenURI` / disclosure / reporting flow for GRU v2 assets | | **GRU standards profile** | [04-configuration/GRU_STANDARDS_PROFILE.md](04-configuration/GRU_STANDARDS_PROFILE.md), [`../config/gru-standards-profile.json`](../config/gru-standards-profile.json) | — | | **GRU FX onboarding checklist** | [04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md](04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md) | — | | **GRU ISO-4217 currency manifest** | [`../config/gru-iso4217-currency-manifest.json`](../config/gru-iso4217-currency-manifest.json) | — | +| **GRU global-priority cross-chain rollout** | [04-configuration/GRU_GLOBAL_PRIORITY_CROSS_CHAIN_ROLLOUT.md](04-configuration/GRU_GLOBAL_PRIORITY_CROSS_CHAIN_ROLLOUT.md), [`../config/gru-global-priority-currency-rollout.json`](../config/gru-global-priority-currency-rollout.json), `scripts/verify/check-gru-global-priority-rollout.sh`, [11-references/GRU_V2_PUBLIC_PROTOCOL_DEPLOYMENT_STATUS.md](11-references/GRU_V2_PUBLIC_PROTOCOL_DEPLOYMENT_STATUS.md), `scripts/verify/check-gru-v2-public-protocols.sh`, [03-deployment/GRU_V2_PUBLIC_DEPLOYMENT_QUEUE.md](03-deployment/GRU_V2_PUBLIC_DEPLOYMENT_QUEUE.md), [03-deployment/GRU_V2_BLOCKER_RESOLUTION_MATRIX.md](03-deployment/GRU_V2_BLOCKER_RESOLUTION_MATRIX.md), [03-deployment/GRU_V2_DEPLOYER_FUNDING_STATUS.md](03-deployment/GRU_V2_DEPLOYER_FUNDING_STATUS.md), `scripts/verify/check-gru-v2-deployment-queue.sh`, `scripts/verify/check-gru-v2-deployer-funding-status.sh` | Planning queue plus public-network status verifier, blocker-resolution matrix, deployer-funding gate, and operator deployment queue for bridges, Wave 1 transport, and public cW protocol rollout | +| **Gas-native `c*` / `cW*` rollout** | [03-deployment/GAS_NATIVE_C_STAR_CW_ROLLOUT_RUNBOOK.md](03-deployment/GAS_NATIVE_C_STAR_CW_ROLLOUT_RUNBOOK.md), `scripts/verify/check-gas-public-pool-status.sh`, `scripts/verify/check-gru-transport-preflight.sh`, [`../config/gru-transport-active.json`](../config/gru-transport-active.json), [`../cross-chain-pmm-lps/config/deployment-status.json`](../cross-chain-pmm-lps/config/deployment-status.json) | Operator sequence for Wave 1 gas families, publication env, DODO/Uniswap staging, and runtime-readiness checks | | **UTRNF / naming (symbols, registries)** | [04-configuration/naming-conventions/](04-configuration/naming-conventions/) (`01`–`04`) | Complements GRU `c* V2` matrix | | Operational runbooks | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md) | RUNBOOKS_MASTER_INDEX.md — use OPERATIONAL_RUNBOOKS as single source | -| Contract / address status | [11-references/ADDRESS_MATRIX_AND_STATUS.md](11-references/ADDRESS_MATRIX_AND_STATUS.md), [11-references/CONTRACT_ADDRESSES_REFERENCE.md](11-references/CONTRACT_ADDRESSES_REFERENCE.md), [11-references/CONTRACT_NEXT_STEPS_LIST.md](11-references/CONTRACT_NEXT_STEPS_LIST.md) (64-addr check) | CONTRACT_INVENTORY_AND_VERIFICATION (deleted) | -| **Proxmox VMIDs, LAN IPs, NPM targets** | [04-configuration/ALL_VMIDS_ENDPOINTS.md](04-configuration/ALL_VMIDS_ENDPOINTS.md) (includes **Proxmox Mail Proxy** VMID 100 / `192.168.11.32`), [`config/ip-addresses.conf`](../config/ip-addresses.conf), [11-references/NETWORK_CONFIGURATION_MASTER.md](11-references/NETWORK_CONFIGURATION_MASTER.md), [`config/proxmox-operational-template.json`](../config/proxmox-operational-template.json) | Dated inventories under `docs/archive/` (paths on disk only) | +| **Explorer access and RPC products** | [03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md](03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md), [02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md](02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md), [11-references/EXPLORER_ACCESS_API_REFERENCE.md](11-references/EXPLORER_ACCESS_API_REFERENCE.md), [`explorer-monorepo/backend/api/rest/swagger.yaml`](../explorer-monorepo/backend/api/rest/swagger.yaml) | Billing and edge enforcement still require separate infrastructure wiring | +| **Thirdweb deployment methodology in the explorer** | [04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md](04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md), [04-configuration/THIRDWEB_ACCOUNT_ABSTRACTION_SUPPORT.md](04-configuration/THIRDWEB_ACCOUNT_ABSTRACTION_SUPPORT.md), [01-getting-started/THIRDWEB_RPC_QUICKSTART.md](01-getting-started/THIRDWEB_RPC_QUICKSTART.md) | Repo access, CI builds, and Blockscout verification remain your responsibility | +| OP Stack Standard Rollup (Ethereum mainnet, Superchain registry) | [03-deployment/OP_STACK_STANDARD_ROLLUP_SUPERCHAIN_RUNBOOK.md](03-deployment/OP_STACK_STANDARD_ROLLUP_SUPERCHAIN_RUNBOOK.md), [03-deployment/OP_STACK_L2_AND_BESU138_BRIDGE_NOTES.md](03-deployment/OP_STACK_L2_AND_BESU138_BRIDGE_NOTES.md), [`config/op-stack-superchain/`](../config/op-stack-superchain/), [`scripts/op-stack/`](../scripts/op-stack/) | — | +| Wormhole NTT + Executor operator prep | [03-deployment/WORMHOLE_NTT_EXECUTOR_OPERATOR_RUNBOOK.md](03-deployment/WORMHOLE_NTT_EXECUTOR_OPERATOR_RUNBOOK.md), [04-configuration/WORMHOLE_AI_RESOURCES_LLM_PLAYBOOK.md](04-configuration/WORMHOLE_AI_RESOURCES_LLM_PLAYBOOK.md), [`config/wormhole/`](../config/wormhole/), [`scripts/wormhole/`](../scripts/wormhole/) | Chain 138 is not currently listed in Wormhole’s supported chain references | +| Contract / address status | [11-references/ADDRESS_MATRIX_AND_STATUS.md](11-references/ADDRESS_MATRIX_AND_STATUS.md), [11-references/CONTRACT_ADDRESSES_REFERENCE.md](11-references/CONTRACT_ADDRESSES_REFERENCE.md), [11-references/CONTRACT_NEXT_STEPS_LIST.md](11-references/CONTRACT_NEXT_STEPS_LIST.md) (88-addr check) | CONTRACT_INVENTORY_AND_VERIFICATION (deleted) | +| **Chain 138 PMM soak grid (33×33×6 wallets)** | [11-references/CHAIN138_GRID_6534_WALLET_FUNDING_PLAN.md](11-references/CHAIN138_GRID_6534_WALLET_FUNDING_PLAN.md); fund [`../scripts/deployment/pmm-soak-operator-fund-grid.sh`](../scripts/deployment/pmm-soak-operator-fund-grid.sh), full-grid resume [`../scripts/deployment/pmm-soak-complete-grid-funding-operator.sh`](../scripts/deployment/pmm-soak-complete-grid-funding-operator.sh), tranches [`../scripts/deployment/pmm-soak-operator-fund-full-grid-tranches.sh`](../scripts/deployment/pmm-soak-operator-fund-full-grid-tranches.sh); bots [`../scripts/deployment/chain138-pmm-soak-grid-bot.sh`](../scripts/deployment/chain138-pmm-soak-grid-bot.sh), [`../scripts/deployment/chain138-pmm-random-soak-swaps.sh`](../scripts/deployment/chain138-pmm-random-soak-swaps.sh); smoke [`../scripts/deployment/pmm-soak-grid-smoke-check.sh`](../scripts/deployment/pmm-soak-grid-smoke-check.sh); CI [`.github/workflows/pmm-soak-grid-smoke.yml`](../.github/workflows/pmm-soak-grid-smoke.yml); dotenv helper [`../scripts/lib/pmm-soak-dotenv-override.sh`](../scripts/lib/pmm-soak-dotenv-override.sh) | — | +| **Proxmox VMIDs, LAN IPs, NPM targets** | [04-configuration/ALL_VMIDS_ENDPOINTS.md](04-configuration/ALL_VMIDS_ENDPOINTS.md) (includes **Proxmox Mail Proxy** VMID 100 / `192.168.11.32`), [`config/ip-addresses.conf`](../config/ip-addresses.conf), [11-references/NETWORK_CONFIGURATION_MASTER.md](11-references/NETWORK_CONFIGURATION_MASTER.md), [`config/proxmox-operational-template.json`](../config/proxmox-operational-template.json); read-only diff: [`scripts/verify/audit-proxmox-operational-template.sh`](../scripts/verify/audit-proxmox-operational-template.sh) (five-node default) | Dated inventories under `docs/archive/` (paths on disk only) | +| **IT operations controller** (IPAM, VLAN migration, port maps, Proxmox/UniFi/NPM integrations, Sankofa admin UI, licenses/billing hooks) | [02-architecture/SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md](02-architecture/SANKOFA_IT_OPERATIONS_CONTROLLER_SPEC.md), [SANKOFA_IT_API_DEPLOYMENT_DECISION.md](02-architecture/SANKOFA_IT_API_DEPLOYMENT_DECISION.md), [IT_LIVE_COLLECTORS_CONTRACT.md](02-architecture/IT_LIVE_COLLECTORS_CONTRACT.md), [IT_PORT_MAP_LAYERS_SPEC.md](02-architecture/IT_PORT_MAP_LAYERS_SPEC.md) | Phase 0–1: `scripts/it-ops/`, read API [`services/sankofa-it-read-api/`](../services/sankofa-it-read-api/), [`config/it-operations/`](../config/it-operations/), [SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md](03-deployment/SANKOFA_IT_OPS_LIVE_INVENTORY_SCRIPTS.md), Keycloak/portal [SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md](03-deployment/SANKOFA_IT_OPS_KEYCLOAK_PORTAL_NEXT_STEPS.md), VLAN [VLAN_FLAT_11_TO_SEGMENTED_RUNBOOK.md](03-deployment/VLAN_FLAT_11_TO_SEGMENTED_RUNBOOK.md), edge IPs [IT_OPS_EDGE_DISCOVERY_IPS.md](04-configuration/IT_OPS_EDGE_DISCOVERY_IPS.md), billing outline [IT_OPERATIONS_BILLING_STRIPE_OUTLINE.md](03-deployment/IT_OPERATIONS_BILLING_STRIPE_OUTLINE.md); Gitea `.gitea/workflows/live-inventory-hardware-weekly.yml`; hardware poll [`scripts/verify/poll-proxmox-cluster-hardware.sh`](../scripts/verify/poll-proxmox-cluster-hardware.sh); LXC health poll [`scripts/verify/poll-lxc-cluster-health.sh`](../scripts/verify/poll-lxc-cluster-health.sh); rebalance planner [`scripts/verify/plan-lxc-rebalance-from-health-report.sh`](../scripts/verify/plan-lxc-rebalance-from-health-report.sh) | +| **Gitea** (org forge VMID 104, NPM, binary upgrades) | [04-configuration/GITEA_PLATFORM_AND_UPGRADE_RUNBOOK.md](04-configuration/GITEA_PLATFORM_AND_UPGRADE_RUNBOOK.md), [04-configuration/GITEA_IP_CONFLICT_CHECK.md](04-configuration/GITEA_IP_CONFLICT_CHECK.md), [04-configuration/PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md](04-configuration/PHOENIX_DEPLOY_API_GITEA_INTEGRATION.md) | `scripts/operator/upgrade-gitea-lxc.sh`; `GITEA_PUBLIC_UPSTREAM_*` / `IP_GITEA_INFRA` in `config/ip-addresses.conf` | | **FQDN → expected content (web / API / RPC)** | [04-configuration/FQDN_EXPECTED_CONTENT.md](04-configuration/FQDN_EXPECTED_CONTENT.md) | — | | **Sankofa / Phoenix public vs portal vs admin endpoints (fix list)** | [03-deployment/SANKOFA_PHOENIX_PUBLIC_PORTAL_ADMIN_ENDPOINT_CORRECTION_TASKS.md](03-deployment/SANKOFA_PHOENIX_PUBLIC_PORTAL_ADMIN_ENDPOINT_CORRECTION_TASKS.md) | — | | **Sankofa marketplace surfaces** (native vs partner offerings; IRU catalog vs portal SSO vs Studio landing) | [03-deployment/SANKOFA_MARKETPLACE_SURFACES.md](03-deployment/SANKOFA_MARKETPLACE_SURFACES.md) | — | @@ -75,15 +95,16 @@ | Area | Index / key doc | |------|-----------------| | **00-meta** (tasks, next steps, phases) | [00-meta/NEXT_STEPS_INDEX.md](00-meta/NEXT_STEPS_INDEX.md), [00-meta/PHASES_AND_TASKS_MASTER.md](00-meta/PHASES_AND_TASKS_MASTER.md) | -| **02-architecture** | [02-architecture/](02-architecture/) — **Public sector + Phoenix catalog baseline** (Sankofa **native vs partner** marketplace: [03-deployment/SANKOFA_MARKETPLACE_SURFACES.md](03-deployment/SANKOFA_MARKETPLACE_SURFACES.md)): [02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md](02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md); **canonical Sankofa / Phoenix boundaries and taxonomy:** [02-architecture/SANKOFA_PHOENIX_CANONICAL_BOUNDARIES_AND_TAXONOMY.md](02-architecture/SANKOFA_PHOENIX_CANONICAL_BOUNDARIES_AND_TAXONOMY.md); **current remaining-task tracker:** [02-architecture/SANKOFA_PHOENIX_REMAINING_TASKS.md](02-architecture/SANKOFA_PHOENIX_REMAINING_TASKS.md); **Phase 4 migration runbook:** [02-architecture/SANKOFA_PHOENIX_PHASE4_MIGRATION_RUNBOOK.md](02-architecture/SANKOFA_PHOENIX_PHASE4_MIGRATION_RUNBOOK.md); **complete Sankofa / Phoenix phased execution plan:** [02-architecture/SANKOFA_PHOENIX_COMPLETE_PHASED_EXECUTION_PLAN.md](02-architecture/SANKOFA_PHOENIX_COMPLETE_PHASED_EXECUTION_PLAN.md); **non-goals (incl. catalog vs marketing §9):** [02-architecture/NON_GOALS.md](02-architecture/NON_GOALS.md); **DBIS Chain 138:** [dbis_chain_138_technical_master_plan.md](../dbis_chain_138_technical_master_plan.md), [02-architecture/DBIS_NODE_ROLE_MATRIX.md](02-architecture/DBIS_NODE_ROLE_MATRIX.md), [02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md](02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md); **DBIS web / d-bis.org institutional blueprint:** [02-architecture/DBIS_WEB_AND_INSTITUTION_MASTER_BLUEPRINT.md](02-architecture/DBIS_WEB_AND_INSTITUTION_MASTER_BLUEPRINT.md) | -| **03-deployment** | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md), [03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md](03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md), **Public sector live checklist:** [03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md](03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md), **Proxmox VE ops template:** [03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md](03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md) · [`config/proxmox-operational-template.json`](config/proxmox-operational-template.json); **DBIS Phase 1–3:** [03-deployment/PHASE1_DISCOVERY_RUNBOOK.md](03-deployment/PHASE1_DISCOVERY_RUNBOOK.md), [03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md](03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md), [03-deployment/CALIPER_CHAIN138_PERF_HOOK.md](03-deployment/CALIPER_CHAIN138_PERF_HOOK.md), [03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md](03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md), [03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md](03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md), **RTGS canonical production checklist and institutional-finance layers:** [03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md), [03-deployment/DBIS_RTGS_FX_TRANSACTION_CATALOG.md](03-deployment/DBIS_RTGS_FX_TRANSACTION_CATALOG.md), [03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md](03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md), [03-deployment/DBIS_RTGS_DEPOSITORY_AND_CUSTODY_OPERATING_MODEL.md](03-deployment/DBIS_RTGS_DEPOSITORY_AND_CUSTODY_OPERATING_MODEL.md), [03-deployment/DBIS_RTGS_FX_AND_LIQUIDITY_OPERATING_MODEL.md](03-deployment/DBIS_RTGS_FX_AND_LIQUIDITY_OPERATING_MODEL.md), [03-deployment/DBIS_RTGS_CONTROL_PLANE_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_CONTROL_PLANE_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_RTGS_LATER_PHASE_SIDECARS_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_LATER_PHASE_SIDECARS_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_INTEGRATION_BLUEPRINT.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_INTEGRATION_BLUEPRINT.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTABLE_TASK_LIST.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTABLE_TASK_LIST.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTION_STATUS_2026-03-29.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTION_STATUS_2026-03-29.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md), [03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md](03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md), [03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md), [03-deployment/DBIS_IDENTITY_COMPLETION_PACKAGE_RUNBOOK.md](03-deployment/DBIS_IDENTITY_COMPLETION_PACKAGE_RUNBOOK.md), [03-deployment/DBIS_IDENTITY_ENDORSER_HANDSHAKE_RUNBOOK.md](03-deployment/DBIS_IDENTITY_ENDORSER_HANDSHAKE_RUNBOOK.md) | -| **04-configuration** | [04-configuration/README.md](04-configuration/README.md), [04-configuration/naming-conventions/README.md](04-configuration/naming-conventions/README.md) (UTRNF + DBIS token/bridge naming), [04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md](04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md) (paths, registry, token-mapping, LiFi/Jumper), [04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md](04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md) (canonical `c* V2` standards, facet mapping, migration plan), [04-configuration/GRU_STANDARDS_PROFILE.md](04-configuration/GRU_STANDARDS_PROFILE.md) and [`../config/gru-standards-profile.json`](../config/gru-standards-profile.json) (machine-readable x402, EIP/ERC, transport, governance, and ISO-4217-plus standards profile), [04-configuration/GRU_STORAGE_GOVERNANCE_AND_SUPERVISION_STANDARD.md](04-configuration/GRU_STORAGE_GOVERNANCE_AND_SUPERVISION_STANDARD.md) and [`../config/gru-governance-supervision-profile.json`](../config/gru-governance-supervision-profile.json) (deterministic storage namespaces, jurisdiction-aware proposal review, supervision metadata, and upgrade notice periods), [04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md](04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md) (end-to-end FX currency attachment), [`../config/gru-iso4217-currency-manifest.json`](../config/gru-iso4217-currency-manifest.json) (machine-readable supported currency manifest); **info.defi-oracle.io (Chain 138 hub SPA):** [04-configuration/INFO_DEFI_ORACLE_IO_DEPLOYMENT.md](04-configuration/INFO_DEFI_ORACLE_IO_DEPLOYMENT.md), app [info-defi-oracle-138/README.md](../info-defi-oracle-138/README.md); **Chain 138 wallets:** [04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md); **Chain 2138 testnet wallets:** [04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md); **OMNL Indonesia / HYBX-BATCH-001:** [04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md](04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md), [04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md](04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md) | +| **02-architecture** | [02-architecture/](02-architecture/) — **Public sector + Phoenix catalog baseline** (Sankofa **native vs partner** marketplace: [03-deployment/SANKOFA_MARKETPLACE_SURFACES.md](03-deployment/SANKOFA_MARKETPLACE_SURFACES.md)): [02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md](02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md); **canonical Sankofa / Phoenix boundaries and taxonomy:** [02-architecture/SANKOFA_PHOENIX_CANONICAL_BOUNDARIES_AND_TAXONOMY.md](02-architecture/SANKOFA_PHOENIX_CANONICAL_BOUNDARIES_AND_TAXONOMY.md); **current remaining-task tracker:** [02-architecture/SANKOFA_PHOENIX_REMAINING_TASKS.md](02-architecture/SANKOFA_PHOENIX_REMAINING_TASKS.md); **Phase 4 migration runbook:** [02-architecture/SANKOFA_PHOENIX_PHASE4_MIGRATION_RUNBOOK.md](02-architecture/SANKOFA_PHOENIX_PHASE4_MIGRATION_RUNBOOK.md); **complete Sankofa / Phoenix phased execution plan:** [02-architecture/SANKOFA_PHOENIX_COMPLETE_PHASED_EXECUTION_PLAN.md](02-architecture/SANKOFA_PHOENIX_COMPLETE_PHASED_EXECUTION_PLAN.md); **non-goals (incl. catalog vs marketing §9):** [02-architecture/NON_GOALS.md](02-architecture/NON_GOALS.md); **DBIS Chain 138:** [dbis_chain_138_technical_master_plan.md](../dbis_chain_138_technical_master_plan.md), [02-architecture/DBIS_NODE_ROLE_MATRIX.md](02-architecture/DBIS_NODE_ROLE_MATRIX.md), [02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md](02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md); **Chain 138 deployment topology (spider map, stack, cross-chain, explorer command center):** [02-architecture/SMOM_DBIS_138_FULL_DEPLOYMENT_FLOW_MAP.md](02-architecture/SMOM_DBIS_138_FULL_DEPLOYMENT_FLOW_MAP.md) — interactive Mermaid tabs: **More → Visual Command Center** on the explorer → `/chain138-command-center.html`; **DBIS web / d-bis.org institutional blueprint:** [02-architecture/DBIS_WEB_AND_INSTITUTION_MASTER_BLUEPRINT.md](02-architecture/DBIS_WEB_AND_INSTITUTION_MASTER_BLUEPRINT.md); **explorer access-control plane:** [02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md](02-architecture/EXPLORER_ACCESS_CONTROL_AND_API_KEY_ARCHITECTURE.md) | +| **03-deployment** | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md), [03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md](03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md), **Public sector live checklist:** [03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md](03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md), **Proxmox VE ops template:** [03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md](03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md) · [`../config/proxmox-operational-template.json`](../config/proxmox-operational-template.json); **Explorer RPC access runbook:** [03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md](03-deployment/EXPLORER_ACCESS_AND_RPC_PRODUCTS_RUNBOOK.md); **DBIS Phase 1–3:** [03-deployment/PHASE1_DISCOVERY_RUNBOOK.md](03-deployment/PHASE1_DISCOVERY_RUNBOOK.md), [03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md](03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md), [03-deployment/CALIPER_CHAIN138_PERF_HOOK.md](03-deployment/CALIPER_CHAIN138_PERF_HOOK.md), [03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md](03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md), [03-deployment/DBIS_HYPERLEDGER_PRODUCT_INTEGRATION_CHECKLIST.md](03-deployment/DBIS_HYPERLEDGER_PRODUCT_INTEGRATION_CHECKLIST.md), [03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md](03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md), **RTGS canonical production checklist and institutional-finance layers:** [03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md), [03-deployment/DBIS_RTGS_FX_TRANSACTION_CATALOG.md](03-deployment/DBIS_RTGS_FX_TRANSACTION_CATALOG.md), [03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md](03-deployment/OMNL_DBIS_CORE_CHAIN138_SMART_VAULT_RTGS_RUNBOOK.md), [03-deployment/DBIS_RTGS_DEPOSITORY_AND_CUSTODY_OPERATING_MODEL.md](03-deployment/DBIS_RTGS_DEPOSITORY_AND_CUSTODY_OPERATING_MODEL.md), [03-deployment/DBIS_RTGS_FX_AND_LIQUIDITY_OPERATING_MODEL.md](03-deployment/DBIS_RTGS_FX_AND_LIQUIDITY_OPERATING_MODEL.md), [03-deployment/DBIS_RTGS_CONTROL_PLANE_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_CONTROL_PLANE_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_RTGS_LATER_PHASE_SIDECARS_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_LATER_PHASE_SIDECARS_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_INTEGRATION_BLUEPRINT.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_INTEGRATION_BLUEPRINT.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTABLE_TASK_LIST.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTABLE_TASK_LIST.md), [03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTION_STATUS_2026-03-29.md](03-deployment/DBIS_OMNL_INDONESIA_BNI_E2E_EXECUTION_STATUS_2026-03-29.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md), [03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md](03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md), [03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md), [03-deployment/DBIS_IDENTITY_COMPLETION_PACKAGE_RUNBOOK.md](03-deployment/DBIS_IDENTITY_COMPLETION_PACKAGE_RUNBOOK.md), [03-deployment/DBIS_IDENTITY_ENDORSER_HANDSHAKE_RUNBOOK.md](03-deployment/DBIS_IDENTITY_ENDORSER_HANDSHAKE_RUNBOOK.md) | +| **04-configuration** | [04-configuration/README.md](04-configuration/README.md), [04-configuration/naming-conventions/README.md](04-configuration/naming-conventions/README.md) (UTRNF + DBIS token/bridge naming), [04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md](04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md) (paths, registry, token-mapping, LiFi/Jumper), [04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md](04-configuration/GRU_C_STAR_V2_STANDARDS_MATRIX_AND_IMPLEMENTATION_PLAN.md) (canonical `c* V2` standards, facet mapping, migration plan), [04-configuration/GRU_STANDARDS_PROFILE.md](04-configuration/GRU_STANDARDS_PROFILE.md) and [`../config/gru-standards-profile.json`](../config/gru-standards-profile.json) (machine-readable x402, EIP/ERC, transport, governance, and ISO-4217-plus standards profile), [04-configuration/GRU_STORAGE_GOVERNANCE_AND_SUPERVISION_STANDARD.md](04-configuration/GRU_STORAGE_GOVERNANCE_AND_SUPERVISION_STANDARD.md) and [`../config/gru-governance-supervision-profile.json`](../config/gru-governance-supervision-profile.json) (deterministic storage namespaces, jurisdiction-aware proposal review, supervision metadata, and upgrade notice periods), [04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md](04-configuration/GRU_FX_CURRENCY_ONBOARDING_CHECKLIST.md) (end-to-end FX currency attachment), [04-configuration/GRU_GLOBAL_PRIORITY_CROSS_CHAIN_ROLLOUT.md](04-configuration/GRU_GLOBAL_PRIORITY_CROSS_CHAIN_ROLLOUT.md) and [`../config/gru-global-priority-currency-rollout.json`](../config/gru-global-priority-currency-rollout.json) (tiered global-priority rollout queue + verifier), [`../config/gru-iso4217-currency-manifest.json`](../config/gru-iso4217-currency-manifest.json) (machine-readable supported currency manifest); **Thirdweb explorer portal model:** [04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md](04-configuration/THIRDWEB_EXPLORER_PORTAL_DEPLOYMENT_MODEL.md); **info.defi-oracle.io (Chain 138 hub SPA):** [04-configuration/INFO_DEFI_ORACLE_IO_DEPLOYMENT.md](04-configuration/INFO_DEFI_ORACLE_IO_DEPLOYMENT.md), app [info-defi-oracle-138/README.md](../info-defi-oracle-138/README.md); **Chain 138 wallets:** [04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md); **Chain 2138 testnet wallets:** [04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md); **OMNL Indonesia / HYBX-BATCH-001:** [04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md](04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md), [04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md](04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md) | | **06-besu** | [06-besu/MASTER_INDEX.md](06-besu/MASTER_INDEX.md) | | **Testnet (2138)** | [testnet/DEFI_ORACLE_META_TESTNET_2138_RUNBOOK.md](testnet/DEFI_ORACLE_META_TESTNET_2138_RUNBOOK.md), [testnet/TESTNET_DEPLOYMENT.md](testnet/TESTNET_DEPLOYMENT.md) | -| **07-ccip** | [07-ccip/](07-ccip/), Truth plan: [07-ccip/TRUTH_NETWORK_BRIDGE_SPEC.md](07-ccip/TRUTH_NETWORK_BRIDGE_SPEC.md), [00-meta/CW_BRIDGE_TASK_LIST.md](00-meta/CW_BRIDGE_TASK_LIST.md); **XDC Zero + Chain 138 (parallel to CCIP):** [07-ccip/XDC_ZERO_CHAIN138.md](07-ccip/XDC_ZERO_CHAIN138.md) → [03-deployment/CHAIN138_XDC_ZERO_BRIDGE_RUNBOOK.md](03-deployment/CHAIN138_XDC_ZERO_BRIDGE_RUNBOOK.md), [`config/xdc-zero/`](../config/xdc-zero/) | -| **11-references** | [11-references/ADDRESS_MATRIX_AND_STATUS.md](11-references/ADDRESS_MATRIX_AND_STATUS.md), [11-references/CONTRACT_ADDRESSES_REFERENCE.md](11-references/CONTRACT_ADDRESSES_REFERENCE.md), [11-references/DEPLOYER_CONTRACTS_INVENTORY_AND_VERIFICATION_STATUS.md](11-references/DEPLOYER_CONTRACTS_INVENTORY_AND_VERIFICATION_STATUS.md) (all contracts by deployer wallet, network, verified/not), [11-references/DEPLOYED_TOKENS_BRIDGES_LPS_AND_ROUTING_STATUS.md](11-references/DEPLOYED_TOKENS_BRIDGES_LPS_AND_ROUTING_STATUS.md) (tokens, bridges, DODO/Uniswap LPs, full route map), [11-references/DEPLOYER_TO_PUBLIC_STABLECOIN_ROUTES.md](11-references/DEPLOYER_TO_PUBLIC_STABLECOIN_ROUTES.md) (deployer→public stablecoin routes), [11-references/ROUTES_NO_PREFUNDED_BRIDGE_REQUIRED.md](11-references/ROUTES_NO_PREFUNDED_BRIDGE_REQUIRED.md) (routes where bridge pre-fund not required), [11-references/CCIP_138_DESTINATION_RECEIVER_BY_CHAIN_AND_TOKEN.md](11-references/CCIP_138_DESTINATION_RECEIVER_BY_CHAIN_AND_TOKEN.md) (per-chain per-token: mint vs receive+forward vs release), [11-references/DEPLOYMENT_DATA_SOURCES_INDEX.md](11-references/DEPLOYMENT_DATA_SOURCES_INDEX.md) (dotenv and config files with contract deployments), [11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md](11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md) (Explorer /tokens vs repo token lists), [11-references/CW_STAR_CMC_COINGECKO_LISTING_STATUS.md](11-references/CW_STAR_CMC_COINGECKO_LISTING_STATUS.md) (cW* on CMC/CoinGecko), [11-references/COMPLETE_CREDENTIAL_EIDAS_PROGRAM_REPOS.md](11-references/COMPLETE_CREDENTIAL_EIDAS_PROGRAM_REPOS.md) (Complete Credential / eIDAS connector repo authority + manifest), [11-references/HARDWARE_INVENTORY_MASTER.md](11-references/HARDWARE_INVENTORY_MASTER.md), [11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md](11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md), [11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md](11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md) | +| **07-ccip** | [07-ccip/](07-ccip/), Truth plan: [07-ccip/TRUTH_NETWORK_BRIDGE_SPEC.md](07-ccip/TRUTH_NETWORK_BRIDGE_SPEC.md), [00-meta/CW_BRIDGE_TASK_LIST.md](00-meta/CW_BRIDGE_TASK_LIST.md); **XDC Zero + Chain 138 (parallel to CCIP):** [07-ccip/XDC_ZERO_CHAIN138.md](07-ccip/XDC_ZERO_CHAIN138.md) → [03-deployment/CHAIN138_XDC_ZERO_BRIDGE_RUNBOOK.md](03-deployment/CHAIN138_XDC_ZERO_BRIDGE_RUNBOOK.md), [03-deployment/CHAIN138_XDC_ZERO_DEPLOYMENT_TROUBLESHOOTING.md](03-deployment/CHAIN138_XDC_ZERO_DEPLOYMENT_TROUBLESHOOTING.md), [`config/xdc-zero/`](../config/xdc-zero/), [`scripts/xdc-zero/`](../scripts/xdc-zero/) | +| **11-references** | [11-references/ADDRESS_MATRIX_AND_STATUS.md](11-references/ADDRESS_MATRIX_AND_STATUS.md), [11-references/CONTRACT_ADDRESSES_REFERENCE.md](11-references/CONTRACT_ADDRESSES_REFERENCE.md), [11-references/DEPLOYER_CONTRACTS_INVENTORY_AND_VERIFICATION_STATUS.md](11-references/DEPLOYER_CONTRACTS_INVENTORY_AND_VERIFICATION_STATUS.md) (all contracts by deployer wallet, network, verified/not), [11-references/CONTRACT_VERIFICATION_AND_PUBLICATION_MATRIX_ALL_NETWORKS.md](11-references/CONTRACT_VERIFICATION_AND_PUBLICATION_MATRIX_ALL_NETWORKS.md) (generated all-network verification/publication backlog), [11-references/PUBLICATION_PACK_EXPLORER_STATUS.md](11-references/PUBLICATION_PACK_EXPLORER_STATUS.md) (live explorer status for the five requested publication packs, including `Unknown` counts), [11-references/PUBLICATION_ACTIONABLE_BACKLOG.md](11-references/PUBLICATION_ACTIONABLE_BACKLOG.md) (which pack entries are auto-submittable vs manual/external vs inventory only), [11-references/DEPLOYED_TOKENS_BRIDGES_LPS_AND_ROUTING_STATUS.md](11-references/DEPLOYED_TOKENS_BRIDGES_LPS_AND_ROUTING_STATUS.md) (tokens, bridges, DODO/Uniswap LPs, full route map), [11-references/DEPLOYER_TO_PUBLIC_STABLECOIN_ROUTES.md](11-references/DEPLOYER_TO_PUBLIC_STABLECOIN_ROUTES.md) (deployer→public stablecoin routes), [11-references/ROUTES_NO_PREFUNDED_BRIDGE_REQUIRED.md](11-references/ROUTES_NO_PREFUNDED_BRIDGE_REQUIRED.md) (routes where bridge pre-fund not required), [11-references/CCIP_138_DESTINATION_RECEIVER_BY_CHAIN_AND_TOKEN.md](11-references/CCIP_138_DESTINATION_RECEIVER_BY_CHAIN_AND_TOKEN.md) (per-chain per-token: mint vs receive+forward vs release), [11-references/DEPLOYMENT_DATA_SOURCES_INDEX.md](11-references/DEPLOYMENT_DATA_SOURCES_INDEX.md) (dotenv and config files with contract deployments), [11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md](11-references/EXPLORER_TOKEN_LIST_CROSSCHECK.md) (Explorer /tokens vs repo token lists), [11-references/EXPLORER_ACCESS_API_REFERENCE.md](11-references/EXPLORER_ACCESS_API_REFERENCE.md) (access-console auth, subscriptions, API keys, usage), [11-references/CW_STAR_CMC_COINGECKO_LISTING_STATUS.md](11-references/CW_STAR_CMC_COINGECKO_LISTING_STATUS.md) (cW* on CMC/CoinGecko), [11-references/COMPLETE_CREDENTIAL_EIDAS_PROGRAM_REPOS.md](11-references/COMPLETE_CREDENTIAL_EIDAS_PROGRAM_REPOS.md) (Complete Credential / eIDAS connector repo authority + manifest), [11-references/HARDWARE_INVENTORY_MASTER.md](11-references/HARDWARE_INVENTORY_MASTER.md), [11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md](11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md), [11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md](11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md) | | **Hardware / 13-node** | [11-references/HARDWARE_INVENTORY_MASTER.md](11-references/HARDWARE_INVENTORY_MASTER.md) (R630×13, R750×3, 7920×2, UDM Pro×2, XG×2), [02-architecture/R630_13_NODE_DOD_HA_MASTER_PLAN.md](02-architecture/R630_13_NODE_DOD_HA_MASTER_PLAN.md), [11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md](11-references/13_NODE_NETWORK_AND_CABLING_CHECKLIST.md), [11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md](11-references/13_NODE_AND_ASSETS_BRING_ONLINE_CHECKLIST.md) | | **Runbooks** | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md) | +| **Upstream-native Uniswap v3 replacement track (Chain 138)** | [03-deployment/CHAIN138_UNISWAP_V3_UPSTREAM_NATIVE_RUNBOOK.md](03-deployment/CHAIN138_UNISWAP_V3_UPSTREAM_NATIVE_RUNBOOK.md) and `bash scripts/verify/check-chain138-uniswap-v3-upstream-native-readiness.sh` | ---