Approved workflow

Release Oneway Launch (token symbol OWLN) on Sepolia as a univ4_hook launch. Token: Oneway Launch (OWLN), total supply 1,000,000,000 OWLN with 18 decimals, minted once to the deployer (a separate zero-argument ERC-20, no mint, owner or admin). Hook: BuyOnlyWindowHook, a Uniswap v4 hook on the token's native-ETH pool that allows only buys for the first 300 blocks. afterInitialize records opensAt[poolId] = block.number + 300 for pools whose currency0 is native ETH and never reverts. beforeSwap reverts with SellsLocked(opensAt) for every sell (oneForZero, token to ETH; exact-in and exact-out alike) while block.number < opensAt, and otherwise returns a zero delta; buys are always allowed and nothing is ever charged in either direction. No liquidity or donate callbacks, so LPs can add and remove at any time. The window cannot be extended, shortened or re-armed: there is no admin and a pool initializes once. Event: WindowSet(poolId, opensAt). Views: opensAt(poolId), sellsOpen(poolId). Public-safety note for the README and site: blocking sells is the mechanism honeypots use; here it is a disclosed, fixed 300-block (about an hour on Sepolia) test of launch-time gating, visible on-chain before anyone buys. Deploy shape, matching the live Sepolia hook launches 170, 183 and 186 (launch 168 passed the mainnet PoolManager and is not a model): BuyOnlyWindowHook's only constructor argument is the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543; every rate, window and threshold here is a source constant; there is no owner, admin, setter, pause, upgrade or sweep, and no $owner or $token argument. Permissions are exactly afterInitialize, beforeSwap (low address bits 0x1080), all others false; the constructor calls Hooks.validateHookPermissions and the CREATE2 salt is mined for those bits. The factory initializes the pool (currency0 native ETH, currency1 OWLN, fee 3000, tickSpacing 60) and seeds one-sided OWLN liquidity, so nothing in the hook may revert that initialize or that liquidity add (launch 138 was parked when a beforeInitialize gate reverted the factory), and the first buy lands in a pool that holds no ETH. All state is keyed by PoolId; a pool on this hook whose currency0 is not native ETH gets zero deltas and no other effect. Every callback requires msg.sender == PoolManager. Tests (Foundry, a real v4-core PoolManager deployed in the test, hook at a mined address): a launch rehearsal that initializes at the manifest price, seeds one-sided OWLN liquidity like the factory and makes the first buy into the ETH-less pool; exact-in and exact-out in both directions; dust amounts; a pool whose currency0 is not ETH; direct callback calls from a non-PoolManager address revert; fuzzed sizes; and specifically: buys and reverted sells (exact-in and exact-out) in block opensAt - 1; sells succeed at exactly opensAt; liquidity removal works during the window; a non-ETH pool is never gated; the hook holds no funds. An independent adversarial review (read-only) must attack: every way to sell during the window (exact-output swaps that buy ETH, other routers, a second ETH pool on the same hook, which has its own window), whether afterInitialize can revert the factory, the off-by-one at opensAt, and whether anything can make the lock permanent. It reports each finding with the exact call sequence that triggers it. Website: one static page (dist/index.html) that reads the hook's views and events and the pool price through Uniswap's Sepolia StateView 0xe1dd9c3fa50edb962e442f60dfbc432e24537e4c, with a buy/sell form that swaps through Uniswap's published Sepolia PoolSwapTest router 0x9b6b46e2c869aa39918db7f52f5557fe577b6eee (has code; manager() is the PoolManager above). It shows the countdown in blocks and minutes to opensAt, whether sells are open, and a sell button disabled until then.

Sepolia (11155111) only, launched as univ4_hook on the native-ETH pool the factory opens. GitHub publication and IPFS hosting are approved. Launch token: fixed supply of 1,000,000,000, 18 decimals, no constructor arguments, minted to msg.sender, no mint or admin. One hook; enable only the permission flags its logic uses and never revert the factory's pool initialisation or its one-sided seed. Like every hook launch that has gone live, the hook constructor takes exactly one argument, the Sepolia PoolManager 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543; rates, recipients and the token are source constants or learned from the pool key, and there is no owner. Take any hook fee through return deltas (settled as ERC-6909 claims, paid out by pull) instead of assuming a dynamic-fee pool key. Where a swapper identity is needed, read it from hookData; a swap without valid hookData credits nobody (a router can never claim), and hookData is unauthenticated, which the README states. No external oracles or VRF, no proxies, delegatecall or selfdestruct. foundry.toml sets bytecode_hash = "none". Any website is a static export with index.html in dist/. Site label lab-buy-only-launch-hook.

Build OWLN and BuyOnlyWindowHook (permissions afterInitialize, beforeSwap; PoolManager-only constructor) with a launch-rehearsal Foundry suite and an independent adversarial review, deploy them through the factory on Sepolia, then build the one-page site against the live pool.

Website: one static page (dist/index.html) that reads the hook's views and events and the pool price through Uniswap's Sepolia StateView 0xe1dd9c3fa50edb962e442f60dfbc432e24537e4c, with a buy/sell form that swaps through Uniswap's published Sepolia PoolSwapTest router 0x9b6b46e2c869aa39918db7f52f5557fe577b6eee (has code; manager() is the PoolManager above). It shows the countdown in blocks and minutes to opensAt, whether sells are open, and a sell button disabled until then.