Approved workflow

Delivered and committed on main (commit 0b61f9b): the ALST token, the AllowlistLaunchHook, tests against a real v4-core PoolManager, ABI exports, and a README. Nothing is left uncommitted.

What was produced

• src/Allowlist.sol: fixed supply of 1,000,000,000 ALST, 18 decimals, no constructor arguments, minted once to the deployer, built on vendored solmate ERC20. No mint path, owner, proxy or selfdestruct.
• src/AllowlistLaunchHook.sol: extends v4-periphery BaseHook, single constructor argument is the PoolManager. Permissions are exactly afterInitialize and beforeSwap (bits 0x1080). Native-ETH pools get a 24 hour window from initialisation. Inside it, a swap is admitted only if tx.origin holds at least 1 ALST of currency1, read by a 50,000-gas staticcall decoded only on an exact 32-byte return. Otherwise it reverts NotAllowlisted(tx.origin). Emits HolderSwap, exposes openAt, isOpen, isAllowed and gatedCurrency1. Non-native pools are never gated.
• src/HookFlags.sol and test/mocks/MockERC20.sol: the library and mock the protected floor tests import, at the paths they expect.
• docs/abi/Allowlist.json and docs/abi/AllowlistLaunchHook.json, and a README covering assumptions, the tx.origin limits, deployment parameters and operational responsibilities.
• lib/: v4-core, v4-periphery, forge-std and solmate as plain files with commits recorded in lib/VENDORED.md. The latest v4-periphery no longer ships BaseHook, so it is pinned to the last commit that does; it pins the same v4-core commit as upstream main.

Verification

• With an empty environment and test/scratch removed: forge build, forge test (29 passed, 0 failed) and forge fmt --check all pass on solc 0.8.26, cancun, bytecode_hash = "none", ffi off, no filesystem permissions.
• Tests cover the launch rehearsal (one-sided ALST seed, first buy into an ETH-less pool, then a sell), the non-holder, 1 ALST minus 1 wei, and msg-sender-only cases reverting NotAllowlisted, reverting, garbage-returning, gas-burning and reentering balanceOf all yielding NotAllowlisted, the exact openAt boundary, ungated liquidity, direct callback refusal, and a fuzzed threshold.
• The two protected floor files were also run from scratch with the hook and token creation code supplied as env vars: 9 of 9 passed, and the token floor skips correctly with no env.

Deliberately not done, and things to flag

• No launch.json, no website and no deploy script. The manifest and frontend belong to later assignments, and the factory performs deployment. The README lists every parameter the manifest node needs.
• The workflow's generic guidance says to read swapper identity from hookData; the specific request for this hook mandates tx.origin with a stated reason. I followed the specific request and documented the limits in NatSpec and README.
• forge build prints two lint warnings on the hook: intended block.timestamp use for the window, and an event emitted after the staticcall. Neither is a defect, but the reviewer should expect them.

Done. launch.json is written at the repo root and is the only deliverable path touched.

What the manifest declares

• Discriminator is the first field: "kind": "univ4_hook".
• Hook is AllowlistLaunchHook with one constructor argument, the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543, matching the ABI constructor and source.
• Permissions are exactly afterInitialize and beforeSwap, the two flags set to true in the hook's getHookPermissions.
• Token is Allowlist, name Allowlist, symbol ALST, 18 decimals, matching the solmate constructor call in the source.
• Pool is native ETH paired currency (zero address, lowercase per the schema pattern), fee 3000, tickSpacing 60, initialPrice as decimal sqrtPriceX96 2^96, the 1:1 opening price the test launch rehearsal initializes with.
• Notes run 3396 characters, under the 4000 cap, and describe only the implementation. They state that supply, allocations, chain and gas come from the launch policy, not this file.

Verification

• A scratch Node script checked every schema constraint by hand, including field sets, patterns, ranges, the initialPrice refinement, notes length, and cross-checks against the hook source, both ABI constructors and the token metadata string. It passed.
• A scratch forge test deployed the hook at an address carrying bits 0x1080 and asserted getHookPermissions returns exactly the two declared flags. It passed.
• Full suite: 30 tests passed, 0 failed, with the offline build clean for src.

Notes for the reviewer

• The workflow does not state a numeric opening price, only that the factory seeds one-sided ALST liquidity below the opening price. I used the 1:1 sqrtPriceX96 from the existing tests and said so in notes. If the factory opens at a different price, that one string is the only field to change.
• The build emits a forge-lint checksum complaint for a literal in my scratch test only. Scratch is deleted before submission, so it has no effect on the deliverable.
• The untracked dotfiles that git status lists in the working tree are sandbox device-node masks owned by nobody, not files I created. The only tracked or real new file is launch.json.

Wrote .imd-findings.json.

One low-severity finding: the manifest places ALST-only liquidity above tick 0; the reproduced deposit contains ETH only.

No substantiated hook vulnerabilities in the requested scope. Targeted local Anvil checks passed; no Sepolia fork was run. Reviewed files remain unchanged.

Implemented the frontend, static export, deployment manifest, and documentation.

Build, typecheck, 5 protocol tests, and 15 browser test groups passed. Live RPC reads passed; no transactions were broadcast. Export size: 591 kB.

Validation report · Design documentation

Git commit was blocked by read-only .git; deliverables remain ready in the working tree. Root DESIGN.md was placed under docs/ to respect the allowed paths.