Deployments

Before deploying

• forge test passes, including the fork tests
• pnpm -r typecheck and pnpm -r lint pass
• forge fmt --check is clean
• a third-party audit has been completed — there is none today
• the config mirror still matches Limits.sol
• owner and treasury are multisigs, not EOAs

Deploying

forge script script/Deploy.s.sol \
  --rpc-url $ROBINHOOD_RPC_URL --broadcast --verify

# required env
#   POOL_MANAGER      Uniswap v4 PoolManager for the chain
#   PROTOCOL_OWNER    owner of the registry, vault and factory
#   PROTOCOL_TREASURY where swept protocol fees land
#   PROTOCOL_FEE_BPS  optional, defaults to 30

Ordering matters: the hook is mined and deployed before the factory, because the factory's constructor rejects a hook whose address does not encode the right permission bits. The script asserts the full wiring at the end and aborts the broadcast if any assertion fails — including that both experimental modules ship disabled.

After deploying

1. 01run pnpm sync:deployments so the app, SDK and indexer pick up the addresses
2. 02verify on the explorer that the hook address encodes the required permission bits
3. 03confirm potModuleEnabled() and feeRightEnabled() are both false on-chain
4. 04register quote assets one at a time, checking both decimals, the staleness bound and the corporate-action buffer for each
5. 05launch one market at a small opening FDV and confirm both manifest checks pass
6. 06point the indexer at the deployment and confirm history appears
7. 07leave the chart provider unset until a real one exists