Approved workflow

Release Maxtx (token symbol MAXT) on Sepolia as a univ4_hook launch. Token: Maxtx (MAXT), total supply 1,000,000,000 MAXT with 18 decimals, minted once to the deployer (a separate zero-argument ERC-20, no mint, owner or admin). Hook: MaxTxHook, a Uniswap v4 hook on the token's native-ETH pool that caps single buys for the first day. afterInitialize records endBlock[poolId] = block.number + 7,200 for pools whose currency0 is native ETH and never reverts. CAP is the source constant 5,000,000 x 10^18 (0.5% of the fixed 1,000,000,000 supply). While block.number < endBlock, a buy (zeroForOne) may not deliver more than CAP tokens: an exact-out buy with amountSpecified above CAP reverts in beforeSwap with CapExceeded(CAP, requested); an exact-in buy is checked in afterSwap against the tokens it actually received, |delta.amount1()|, and reverts the same way. Sells are never capped. From endBlock on nothing is checked. No fee, no funds, no admin. README: the cap is per swap, so several swaps (even in one transaction) get around it; it slows single large buys and does not stop a determined buyer. Deploy shape, matching the live Sepolia hook launches 170 and 186 (168 passed the mainnet PoolManager and is not a model): MaxTxHook's only constructor argument is the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543; every rate, window and threshold here is a source constant; there is no owner, admin, setter, pause, upgrade or sweep, and no $owner or $token argument. Permissions are exactly afterInitialize, beforeSwap, afterSwap (low address bits 0x10C0), all others false; the constructor calls Hooks.validateHookPermissions and the CREATE2 salt is mined for those bits. The factory initializes the pool (currency0 native ETH, currency1 MAXT, fee 3000, tickSpacing 60) and seeds one-sided MAXT liquidity, so nothing in the hook may revert that initialize or that liquidity add (launch 138 was parked when a beforeInitialize gate reverted the factory), and the first buy lands in a pool that holds no ETH. All state is keyed by PoolId; a pool on this hook whose currency0 is not native ETH gets zero deltas and no other effect. Every callback requires msg.sender == PoolManager. Tests (Foundry, a real v4-core PoolManager deployed in the test, hook at a mined address): a launch rehearsal that initializes at the manifest price, seeds one-sided MAXT liquidity like the factory and makes the first buy into the ETH-less pool; exact-in and exact-out in both directions; dust amounts; a pool whose currency0 is not ETH; direct callback calls from a non-PoolManager address revert; fuzzed sizes; and specifically: an exact-out buy of exactly CAP passes and CAP + 1 reverts; an exact-in buy delivering CAP + 1 reverts; at endBlock - 1 the cap applies and at endBlock it does not; sells are uncapped; several capped swaps in a row pass. An independent adversarial review (read-only) must attack: the off-by-one at endBlock, which amount the afterSwap check measures (LP fee inside or outside), paths that deliver more than CAP in one swap, and whether afterInitialize can revert the factory. It reports each finding with the exact call sequence that triggers it. Website: one static page (dist/index.html) that reads the hook's views and events and the pool price through Uniswap's Sepolia StateView, with a buy/sell form that swaps through Uniswap's published Sepolia PoolSwapTest router (check it has code). It shows the cap, whether it is active, blocks left, and a buy form that quotes the output and warns before a swap that would revert.

Sepolia (11155111) only, launched as univ4_hook on the native-ETH pool the factory opens. GitHub publication and IPFS hosting are approved. Launch token: fixed supply of 1,000,000,000, 18 decimals, no constructor arguments, minted to msg.sender, no mint or admin. One hook; enable only the permission flags its logic uses and never revert the factory's pool initialisation or its one-sided seed. Like every hook launch that has gone live, the hook constructor takes exactly one argument, the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543; rates, recipients and the token are source constants or learned from the pool key, and there is no owner. Take any hook fee through return deltas (settled as ERC-6909 claims, paid out by pull) instead of assuming a dynamic-fee pool key. Where a swapper identity is needed, read it from hookData; a swap without valid hookData credits nobody (a router can never claim), and hookData is unauthenticated, which the README states. No external oracles or VRF, no proxies, delegatecall or selfdestruct. foundry.toml sets bytecode_hash = "none". Any website is a static export with index.html in dist/. Site label lab-max-tx-hook.

Build MAXT and MaxTxHook (permissions afterInitialize, beforeSwap, afterSwap; PoolManager-only constructor) with a launch-rehearsal Foundry suite and an independent adversarial review, deploy them through the factory on Sepolia, then build the one-page site against the live pool.

Website: one static page (dist/index.html) that reads the hook's views and events and the pool price through Uniswap's Sepolia StateView, with a buy/sell form that swaps through Uniswap's published Sepolia PoolSwapTest router (check it has code). It shows the cap, whether it is active, blocks left, and a buy form that quotes the output and warns before a swap that would revert.