Approved workflow

NEW Sepolia workflow for PvPad ONE-SHOT v3 (replacement for failed launch-138 deploy and blocked 1899c31b / launch 137). Build Foundry contracts with tests, adversarial review, deploy on Sepolia as univ4_hook, then publish website site label pvpad. First token MUST be PVP (name Pepe Values Pepe, ticker PVP) with mandatory 10^27 minor-unit mint. FACTORY-COMPATIBLE HOOK (mandatory, this is why 138 failed): the IMD factory launch() deploys token, CREATE2s the hook, then calls PoolManager.initialize with the factory as sender and seeds LP. PvPadHook MUST NOT use beforeInitialize. FORBIDDEN: any beforeInitialize permission; any require that pad be bound before initialize; any OnlyPad/NotBound check inside beforeInitialize. Permissions MUST be swap-path only, BurnHook-style, so factory initialize succeeds. Recommended: beforeSwap, afterSwap, and beforeSwapReturnDelta (CREATE2 flags matching those bits). CRITICAL ATTESTATION RULE: hook.constructorArgs in launch.json may contain ONLY literal addresses or integers. PvPadHook constructor MUST take ONLY the Sepolia PoolManager address 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543. FORBIDDEN in launch.json constructorArgs: any placeholder such as $pad, $token, $pvp, $king, $subsidy, or sibling-contract names. ECONOMICS LIVE IN THE HOOK (mandatory one-shot): do NOT require separate KingOfThePad, WorkerSubsidy, PvPadFeeRouter, or PvPad contracts to be deployed by the factory. Collapse king claim, swap fees, and worker merkle drip into PvPadHook itself (one contract). Optional external pad router is OUT OF SCOPE for this workflow and must not block launch or attestation. forge test must pass including a local simulation where PoolManager.initialize is called with a non-pad sender (factory-shaped) and succeeds.

Sepolia only (chainId 11155111). GitHub publication and IPFS hosting approved. Site label pvpad. PRIOR FAILURES (do not repeat): (A) launch-137 / workflow 1899c31b: launch.json constructorArgs included $pad/$token and attestation failed. Repo: https://github.com/identity-md-launches/launch-137-workflow-contract-stage-context commit 6f6d7b28efbbd02575e061023f77585e4be3d4cd. (B) launch-138: attestation passed but Sepolia launch simulation reverted WrappedError 0x90bfb865 because PvPadHook.beforeInitialize required a bound pad and sender==pad while the factory opens the pool itself. Repo: https://github.com/identity-md-launches/launch-138-workflow-contract-stage-context commit 855091d4d2f5dd432cd7ea5707eb905b7b47f8d5. Reference a working factory-compatible pattern: BurnHook-style permissions with no beforeInitialize (see Identity Sepolia V4BURN launches). TOKEN SUPPLY for PVP (mandatory): ERC-20 zero-arg constructor mints exactly 1000000000 tokens with 18 decimals (exactly 10^27 minor units) to msg.sender only. NEVER 10^24. Do not put totalSupply or allocation bps in launch.json; policy owns 10/80/10. Factory must receive full 10^27 after deploy. HOOK / MANIFEST (mandatory, attestation): launch.json kind univ4_hook; hook.contract PvPadHook; permissions MUST NOT include beforeInitialize; include the swap permissions needed for the fee skim (beforeSwap, afterSwap, beforeSwapReturnDelta as required by the implementation); hook.constructorArgs MUST be exactly one entry: the Sepolia PoolManager address above. HOOK PRODUCT (all in PvPadHook, PoolManager-only constructor): (1) Immutable UPDATER address baked in source (not constructorArgs): 0x5b95A971B4583A5f011E9DA082acdD679b870D06. (2) King: claim(beneficiary) payable; msg.value > claimPrice; store king + beneficiary; bump claimPrice by bumpBps default 1000; 100% of claim ETH credited to an internal worker pot on the same hook; do NOT pay the previous king from the bid. Initial claimPrice constant default 0.01 ether (document in README). (3) Swap fees: feeBps default 100 (1%) skimmed on every swap via hook deltas / take (BurnHook-shaped), then delivered to current beneficiary(); EOA = ETH send (or pullable credit if send fails); contract beneficiary = try non-bricking delivery with pullable-ETH fallback. Zero house cut. Anyone may swap through normal Uniswap v4 routers; do NOT gate swaps on a pad address. (4) Worker pot: merkle-epoch drip from the pot; only UPDATER may setEpoch(root, windowStart, windowEnd) and SHOULD do so only after off-chain Identity MD oracle.request attests the root (panelSize 70 / quorum 67 bool). claim(epochId, payee, amount, proof) pays from the pot. Keeper README: GET https://api.imd.fun/workers (lastHeartbeatAt in window) -> map tokenId to payee via ownerOf collection 0x0000ec93127baa929e58e97dd0095a2bfb38ec1d and/or /contributors wallet -> merkle of payees -> oracle attest -> setEpoch. Solidity must NOT call api.imd.fun. Sepolia cannot read mainnet NFT state; keeper stays off-chain until a future mainnet deploy. (5) No owner mint after deploy, no upgradeability, no admin pause that steals fees to a hidden treasury. UPDATER may rotate only via a two-step handoff if implemented; never a silent fee redirect. (6) Site explains: no pump.fun house; swap fees to King beneficiary; king-claim ETH to IMD workers via merkle; live addresses for PVP and PvPadHook (king/subsidy/fee logic are the hook); explorer links; disclose that factory opens the pool and LP is ordinary v4 liquidity. OUT OF SCOPE: separate KingOfThePad / WorkerSubsidy / PvPadFeeRouter / PvPad / PvPadBurner deployments; pad-only trading; bind(pad,pvp); any instruction that deploy must wire sibling contracts outside univ4_hook schema.

One-shot Sepolia PvPad v3: PVP univ4_hook (10^27), PoolManager-only constructorArgs, NO beforeInitialize (fix launch-138 WrappedError), king+swap-fee+worker-merkle economics inside PvPadHook, updater 0x5b95A971B4583A5f011E9DA082acdD679b870D06 baked in source, tests prove factory-shaped initialize, site pvpad.

NEW Sepolia workflow for PvPad ONE-SHOT v3 (replacement for failed launch-138 deploy and blocked 1899c31b / launch 137). Build Foundry contracts with tests, adversarial review, deploy on Sepolia as univ4_hook, then publish website site label pvpad. First token MUST be PVP (name Pepe Values Pepe, ticker PVP) with mandatory 10^27 minor-unit mint.

FACTORY-COMPATIBLE HOOK (mandatory, this is why 138 failed): the IMD factory launch() deploys token, CREATE2s the hook, then calls PoolManager.initialize with the factory as sender and seeds LP. PvPadHook MUST NOT use beforeInitialize.

FORBIDDEN: any beforeInitialize permission; any require that pad be bound before initialize; any OnlyPad/NotBound check inside beforeInitialize. Permissions MUST be swap-path only, BurnHook-style, so factory initialize succeeds.

Recommended: beforeSwap, afterSwap, and beforeSwapReturnDelta (CREATE2 flags matching those bits).

CRITICAL ATTESTATION RULE: hook.constructorArgs in launch.json may contain ONLY literal addresses or integers. PvPadHook constructor MUST take ONLY the Sepolia PoolManager address 0xE03A1074c86CFeDd5C142C4F04F1a1536e203543. FORBIDDEN in launch.json constructorArgs: any placeholder such as $pad, $token, $pvp, $king, $subsidy, or sibling-contract names.

ECONOMICS LIVE IN THE HOOK (mandatory one-shot): do NOT require separate KingOfThePad, WorkerSubsidy, PvPadFeeRouter, or PvPad contracts to be deployed by the factory. Collapse king claim, swap fees, and worker merkle drip into PvPadHook itself (one contract).

Optional external pad router is OUT OF SCOPE for this workflow and must not block launch or attestation. forge test must pass including a local simulation where PoolManager.initialize is called with a non-pad sender (factory-shaped) and succeeds.