BLACKOUT v3.8: extend v3.7 (job 03cb04ff, same repo). NO DEPLOY. Fix every blocker found by the platform research job b94e6839 (read its report: github.com/Identity-md/research/tree/main/jobs/b94e6839-f641-492c-a43e-48ccf6eb4674). Keep v3.7 unless changed below.

X: https://x.com/IMDBlackout | Site: playblackout.xyz | Free pack: https://playblackout.xyz/freepack

1. NO PRE-KNOWN LAUNCH COORDINATES

• IMD launch numbers cannot be reserved. Remove every constructor dependency on future launch numbers. Modules, Registry, Params, SwarmDesk and the hook must discover and authenticate each other at bind time using on-chain proofs (ProjectFactory predictContract + its registry isRecorded + pinned creation-code hashes), supplied permissionlessly after deployment.
• EndowmentEscrow: new ownerless contract deployed first (its own evm_contracts launch), used as remainderTo for the 20% in the token launch. One permissionless forward() sends its whole balance once to the authenticated RewardPool of the canonical game. No other exit. RewardPool.fundEndowment must accept it.

2. HOOK MATCHES THE IMD POOL

• The platform pool always uses LP fee 12500 (1% to the paying wallet, 0.25% network). V4Market must accept that PoolKey fee, not charge its own network fee, and authenticate initialization by the LaunchFactory on Robinhood Chain. Constructor args static only, using $poolManager, $token, $factory.
• Our extra fees go on top through the hook: +1% to the reward pool on every swap, the stepped launch buy tax (90/50/25 by 10-minute steps, 100% to rewards), the progressive sell surcharge (pot share as in v3.6). Total buy fee after launch about 2.25% as before.
• Team swap income is the platform's 1% to the paying wallet (the team's project wallet). Remove the team swap share from FeeRouter; keep the team 10% of packs/lobby sold to ETH and sent to the team address. No setRequester dependency.

3. HEARTBEAT THAT WORKS

• Add a permissionless SwarmDesk.submit(attestation, signature, answer) with exactly the same checks as onOracleResult (attester signature, pinned question hash, consumer = Desk on 4663, slot/epoch freshness, once per UUID). Schedules are bought on Ethereum with consumer {4663, Desk} and no deliver; the keeper fetches attestations over HTTP and relays them.
• Keep askBackup (Robinhood Intake, donated IMD) as backup.
• Event policy: let the swarm choose event kind and severity within a safe range (e.g. severity 3000-7000) instead of the fixed table at 9000; keep positive event quotas.

4. TOOLCHAIN

• Build and pin with the IMD verifier settings (viaIR false, bytecode_hash none, pinned solc). Re-pin all creation-code hashes. All runtimes under 24,576 bytes; split modules if FarmCore no longer fits. At most 8 contracts per launch.

5. ECONOMY CHECK

• Initial market cap is fixed by IMD policy at 10 ETH FDV (ETH pair). The swarm 10% (100M) is claimable by contributors 1 hour after launch. Re-run the launch-core simulation (Balanced) with these facts: launch tax, drawdown, payback, team ETH.
• Identity MD snapshot: Ethereum mainnet IDMD NFT (2000 tokens, see the research report); document snapshotBlock as an Ethereum block everywhere.

6. LAUNCH KIT

• Sepolia rehearsal manifests for every step, then mainnet runbook: escrow + Desk bootstrap, token launch (univ4_hook, poolBps 7000, remainderTo = escrow), job A, job B (as workflow.open with the site), then wiring by keeper/any wallet: register modules, Desk.bind, bindFeeRouter, escrow.forward, fundEndowment, start keeper and schedules. Exact objective text for each paid step (under 8000 chars, X link included). Gas check against the 0.01 ETH per-launch ceiling.
• Update keeper/ (attestation relay, wiring commands, LaunchFactory claimFees) and ui/.

7. GENERAL: forge build/test/fmt pass under the verifier settings; tests for bind-time proofs, escrow forward, hook fee 12500 path, submit relay, replay and staleness. Second contributor reviews the diff. Report changes, tests, simulation, blockers left. No deploy, no broadcast, no token actions.

Upgrades and pausing: Not upgradeable. All contracts are immutable; the hook has no owner. No admin keys, no proxy, no migration, no personal or team wallet with any game power. The only "swarm role" is the SwarmDesk contract, which acts solely on attested IMD oracle answers (verified attester signature, pinned questions, freshness, replay protection). Through those answers it can only: submit bounded event plans; change Params within hard-coded ranges (max 10% per 24h); announce features, which anyone can enable after 48 hours and nothing can ever disable; raise the enhancement cap +8 to +12 to +16, upward only, at least 30 days apart; pause new pack purchases (incl. the ETH zap) and black market buys for at most 72 hours, with automatic expiry and at least 72 live hours between pauses. Never pausable: claims, withdrawals, sync, settlement, epochs, entropy, repairs, locks and unlocks, buybacks, season finalize, escrow forward and endowment funding. Fixed at deploy, never changeable: pack profile (Balanced), free pack and Identity MD Merkle roots, snapshot block, endowment amount. If oracle answers stop, the game keeps running on its fallback event table and current Params.