{
  "steps": [
    {
      "key": "contracts_and_tests",
      "paths": [
        "src/**",
        "test/**",
        "script/**",
        "abi/**",
        "docs/**",
        "README.md",
        "artifacts/contracts/**",
        ".gas-snapshot"
      ],
      "skill": "build-contract-project",
      "dependsOn": [],
      "objective": "Implement and test VolatilityGuardHook and VolatilityGuardToken as a complete Foundry deliverable using the accepted pinned/vendored dependencies and configuration, bytecode_hash=none. Do not rewrite protected configuration, foundry.toml, remappings.txt, lib/ or .github/; flag an incompatible/missing base as a blocker. Produce actual offline build/test/fmt evidence, ABI JSON, architecture/threat-model/integration documentation and factory launch inputs for the automatically added manifest. References are background, not a research assignment. Scripts only simulate; workers never receive keys or broadcast. Preserve all operator settings and Sepolia-only authorization. Define explicit bounded mathematical formulas, units, rounding, thresholds and deterministic state transitions, with no extra admin powers. Own repairs to blocking review findings within this same scope, adding regressions and refreshing ABI, evidence and launch inputs before independent clearance.",
      "references": [
        "uniswap-v4-hooks",
        "uniswap-v4-security",
        "defi-native",
        "public-rpcs"
      ],
      "acceptanceCriteria": [
        "VGL is Volatility Guard Lab, 18 decimals, no constructor arguments, exactly 10^27 base units minted to deployer, fixed supply with no mint backdoor. All token/hookAdmin/treasury/LP owners are 0x09ec38170e94532eddb57c69dfc4f1fdcd0d4a60. Allocation: 80% LP, 10% treasury, 10% contributors with 1h lock and 30% per-wallet cap; no additional ownership powers.",
        "Hook supports arbitrary currencies and isolates every PoolId; bounded observation ring/TWAP and EWMA volatility drive adaptive price-deviation limits and a rolling volume budget resistant to split swaps. Specify both directions and exact-input/output accounting, currency units, conservative rounding, bounded execution and caps.",
        "NORMAL/WARMUP/GUARDED/RECOVERY handle stale history and low liquidity with deterministic recovery. Initialization/warmup cannot brick the pool, LP exits remain possible, and breaker logic never relies on reverted writes persisting. Authenticate canonical PoolManager callbacks/accounting; sender/hookData never establish trusted identity. No discretionary administration or total-MEV-protection claims.",
        "Verify Sepolia chain 11155111 PoolManager 0xe03a1074c86cfedd5c142c4f04f1a1536e203543. ETH currency is zero address; canonical sorted ETH/VGL pool uses static fee 3000, tickSpacing 60, sqrtPriceX96 792281625142643375935439503360000 (0.00000001 ETH/VGL). Hook permission address bits and factory deployment parameters match actual bytecode and callbacks.",
        "Factory seeds at most 8e26 VGL base units and ZERO ETH. Derive widest aligned token-only range from opening price/spacing and round liquidity down; simulate actual pool initialization, allocation and seeded position wiring. Use only existing verified periphery and no new deployed helper. Gas uses configured deployer within existing 0.3 Sepolia ETH ceiling; no additional funds/spending authorization.",
        "Pinned/vendored project builds without network or submodules. Run forge build, forge test, forge fmt --check offline; meaningful success/failure, fuzz/invariant/stress coverage includes accounting, isolation, manipulation/split volume, unauthorized callbacks, reentrancy, stale history, edge values, recovery and LP exits. Record actual test counts, gas, failures and limitations; deployed size above 24576 bytes is a blocker.",
        "Export real ABI JSON and document architecture, threat model, exact pool key, quote/swap/liquidity/position-exit recipes, decoded errors, deployment parameters/defaults, operational responsibilities and reproducible commands. Provide local nonbroadcast deployment simulation and wiring test; retain test evidence and gas snapshot in the owned paths.",
        "Launch inputs expose exact bytecode/ABI, constructor and factory parameters, allocations/locks, ownership, hook permissions, zero-ETH seed math and budget for automatic manifest generation. No manufactured deployment receipts or addresses; source and evidence are ready for authorized publication, with unsafe/unfinished aspects explicit."
      ]
    },
    {
      "key": "independent_review",
      "skill": "adversarial-review",
      "dependsOn": [
        "contracts_and_tests"
      ],
      "objective": "Independently review the actual contract, test, script and documentation outputs AND the control-plane-generated launch manifest against the request and resolved Sepolia univ4_hook policy v2. This read-only assignment depends directly on the sole preceding writer. Return concrete severity-ranked findings to that originating writer for scoped repairs; withhold completion until repaired code, regression evidence and regenerated manifest have been independently re-reviewed and all blocking findings resolved. Do not write fixes, receive keys or broadcast. The authorized deployment service may proceed only after independent clearance of the exact final code and manifest; verified factory deployment and seeded-pool evidence must precede frontend handoff.",
      "acceptanceCriteria": [
        "Every finding names a concrete failing input or state and is ranked by severity; inspect code AND launch manifest, including actual tests and evidence rather than trusting claimed success.",
        "Check PoolManager authenticity, hook address permissions, accounting and rounding for both directions/exact modes, arbitrary currencies, per-pool isolation, bounded execution, manipulated observations, split volume, reentrancy, stale/low liquidity, recovery, revert persistence and LP exits.",
        "Check supply, contributor lock/cap and allocations, fixed ownership/no extra powers, exact pool price/fee/spacing, verified existing periphery, token-only widest aligned rounded-down seed, zero ETH, configured deployer gas ceiling, chain 11155111 and no keys/broadcast/helper/mainnet permissions.",
        "Review offline build/test/fmt and fuzz/invariant/stress evidence, actual counts/gas/limitations, ABI and integration recipes. Blocking findings prevent verified deployment and frontend handoff.",
        "Every blocking finding is repaired by the originating contract writer with a regression test or answered with substantiated evidence, then independently checked here. Repairs touch only finding-related owned files. Re-run offline build/test/fmt and affected fuzz/invariant/stress checks; refresh ABI, docs, gas, launch inputs and generated manifest. Unresolved blockers prevent completion.",
        "Independently re-review the final code AND regenerated manifest after every repair; clearance must identify the reviewed source/bytecode and manifest so stale approval cannot authorize changed deployment inputs. Preserve all original requirements and record residual risks and actual limitations.",
        "Authorized deployment service verifies factory deployment, deployed source/runtime and seeded pool against cleared inputs; provide actual addresses, pool key/id, start block, seeded position, allocation/lock evidence and receipts. Simulation or unavailable/failed deployment cannot satisfy this gate. Workers never receive keys or broadcast."
      ]
    },
    {
      "key": "frontend_and_launch",
      "paths": [
        "web/**",
        "dist/**",
        "README.md",
        "docs/**",
        "artifacts/launch/**"
      ],
      "skill": "frontend-for-contract",
      "dependsOn": [
        "independent_review"
      ],
      "objective": "Final proposed assignment integrates all accepted sequential outputs after the authorized service provides verified live Sepolia contracts and a seeded pool. Build the complete React/Vite/TypeScript + RainbowKit/wagmi/viem dapp in web/ with committed relative-base dist/ export. Use actual accepted ABIs, deployment receipts and verified existing periphery. Validate real interactions and prepare source, receipts and test evidence for the existing signed GitHub publisher and static site for configured Pinata. Only these already-authorized services publish, using configured org/service and automatic naming; no caller repo/CID is needed. Record returned real repository/IPFS URLs and verify the functional public site. No additional integrate-project step; the automatic manifest supplies the sole integrate-role assignment.",
      "acceptanceCriteria": [
        "Deliver responsive usable site, source and lockfile, dist/index.html and assets with relative URLs suitable for static/IPFS hosting. Centralize actual chain IDs, addresses, ABIs and public RPC configuration without private credentials. Injected wallets work without extra credentials; README explains install, preview, rebuild and publish.",
        "Explain hook mechanics, threat model and limitations with no total MEV protection claim. Live dashboard shows per-pool tick/TWAP, volatility, deviation, rolling volume/state/events and stale/RPC failures; simulation demos are explicitly labeled and isolated from live data.",
        "Primary ETH/VGL swaps support direction/amount, balances/max including gas needs, actual periphery quotes, slippage/minimum received, required approvals, wallet-signed swaps, pending/success/failure states, decoded errors and explorer links. All primary contract actions have appropriate controls and connected reads show live state; no fabricated quotes/receipts.",
        "Explain and enforce token-sided bootstrap: buy with ETH first; reverse trades depend on accrued ETH liquidity. Offer supported-position exits through existing verified periphery and validate position ownership/permissions. No new deployed helper, spending authority, discretionary admin controls or worker-signed user transactions.",
        "Run production build, typecheck and meaningful responsive/interaction tests for both swap directions, wallet/chain states, rejected signing, guard reverts, funds/RPC errors, approvals and exits. Document actual results and untested live-chain behavior; mocks validate components only and never prove deployed integration.",
        "Integrate actual ABIs, verified deployment handoff and seeded pool; verify reachable Sepolia reads and real quote/swap wiring against existing periphery. Exercise both directions where accrued ETH permits and inspect actual receipts where authorized transactions exist; do not invent signing/spending permission to complete tests. Any missing required live proof blocks completion.",
        "Authorized publisher publishes real source, contract/frontend test evidence, verified source and deployment receipts to its configured GitHub org with automatic repository naming; configured Pinata publishes static export with automatic naming. Record actual URLs/CID and check public repository evidence and functional reachable IPFS site with relative assets and live configuration.",
        "Final acceptance covers all preceding branches and original requirements: contracts live and verified on Sepolia with real seeded pool, blockers repaired and independently cleared, source/evidence published and functional IPFS dapp reachable. Missing/failed service handoffs or live checks remain explicit incompletion, never mock success. Preserve existing 0.3 Sepolia ETH gas ceiling and all destination permissions."
      ]
    }
  ],
  "version": 1,
  "questions": [],
  "sharedInterfaces": "Chain: contracts_and_tests -> independent_review -> frontend_and_launch; every dependency requires actual accepted outputs, not mocks. Contract writer owns src/, test/, script/, abi/, docs/, README.md, artifacts/contracts/ and .gas-snapshot; frontend later owns web/, dist/, README.md, docs/ and artifacts/launch/. Shared docs are serially handed over; no concurrent writers. ABI JSON plus docs/integration.md define typed reads/events, units, rounding, errors and verified periphery quote/swap/exit recipes. Dashboard interface exposes per-PoolId tick/TWAP, EWMA volatility, deviation limit, rolling volume, state and freshness. Mocks match ABI/errors and wallet lifecycle, are labeled fixtures/simulations, and never replace live quotes, data or receipts. Control plane adds the sole integrate-role manifest; no integrate-project. Review consumes code AND manifest; originating writer repairs blockers, regenerating launch inputs/manifest for independent re-review before clearance. Verified service handoff supplies chainId, addresses, runtime verification, pool key/id, start block, position, allocations and real receipts before frontend. Only authorized services deploy/publish: Sepolia 11155111, signed publisher configured GitHub org and configured Pinata, both automatic naming. Workers get no keys or broadcast authority. No mainnet, new helper, added admin powers or funding; existing 0.3 Sepolia ETH gas ceiling. Frontend integrates all outputs and verifies publication/site evidence."
}