AgentPool v4.4 ownerless testnet and mainnet candidate

.agents/mcp_config.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "agentpool": {
+      "command": "node",
+      "args": [
+        "public/agentpool-mcp.mjs"
+      ],
+      "cwd": "."
+    }
+  }
+}

.env.example

@@ -3,6 +3,10 @@ AGENTPOOL_WALLET_PROFILE=
 AGENTPOOL_CHAIN_ID=84532
 AGENTPOOL_RPC_URL=https://sepolia.base.org
 DEPLOYER_PRIVATE_KEY=
+# Hosted Base Sepolia-only gas sponsor. Store only as a Sites secret.
+# It may send tiny capped test-ETH grants only after a device-signed
+# GAS_REQUEST. Never use a mainnet-funded key.
+AGENTPOOL_V43_GAS_SPONSOR_PRIVATE_KEY=
 # Optional override; defaults to 0.001 test ETH in wei.
 MIN_DEPLOYER_BALANCE_WEI=
 
@@ -59,6 +63,7 @@ V43_GENESIS_TIMESTAMP=
 V431_GENESIS_TIMESTAMP=
 V433_GENESIS_TIMESTAMP=
 V434_GENESIS_TIMESTAMP=
+V435_GENESIS_TIMESTAMP=
 MIN_V43_DEPLOYER_BALANCE_WEI=100000000000000
 
 # Hosted secret used to derive private capability exercises. Store only as a

.env.v44.mainnet.example

@@ -0,0 +1,61 @@
+# AgentPool v4.4 Base mainnet release candidate.
+# Copy to .env.v44.mainnet.local only after every evidence gate is approved.
+# Never commit the local file and never paste DEPLOYER_PRIVATE_KEY into chat.
+
+AGENTPOOL_MAINNET_RPC_URL=https://your-base-mainnet-rpc.example
+AGENTPOOL_V44_TESTNET_RPC_URL=https://sepolia.base.org
+AGENTPOOL_V44_TESTNET_RPC_URL_2=https://base-sepolia-rpc.publicnode.com
+# Exact immutable Base Sepolia campaign whose report clears the reliability gate.
+V44_TESTNET_CAMPAIGN_ID=mainnet-candidate-1
+DEPLOYER_PRIVATE_KEY=0xREPLACE_LOCALLY
+MIN_V44_DEPLOYER_BALANCE_WEI=10000000000000000
+
+# Exact clean Git commit containing the audited source and compiled settings.
+V44_SOURCE_COMMIT=0000000000000000000000000000000000000000
+
+# Immutable threshold authority deployed as part of the exact contract graph.
+# Owners must be distinct sorted signer addresses; no owner is an admin.
+V44_THRESHOLD_AUTHORITY_OWNERS=0x0000000000000000000000000000000000000001,0x0000000000000000000000000000000000000002,0x0000000000000000000000000000000000000003
+V44_THRESHOLD_AUTHORITY_THRESHOLD=2
+
+# Ignored local copy of mainnet-v44-gates.json containing evidence approvals.
+# Keeping approvals outside the tracked source avoids a circular source hash.
+V44_GATES_FILE=.mainnet-v44-gates.local.json
+
+# Unix timestamp 72 hours to 30 days after deployment.
+V44_GENESIS_TIMESTAMP=0
+
+# The deployment EOA, proposer, and all validators must be different addresses.
+V44_BOOTSTRAP_PROPOSER=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_1=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_2=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_3=0x0000000000000000000000000000000000000000
+
+# Public, non-zero bytes32 identifiers backed by validator-independence evidence.
+V44_VALIDATOR_1_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_VALIDATOR_2_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_VALIDATOR_3_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+
+# Evidence-addressed bootstrap system-improvement catalog. It must contain
+# 24-32 distinct objective tasks. Twenty successful settlements open the
+# ownerless transition; at least four additional tasks provide bounded
+# non-minting redundancy when a worker declines, expires, or fails.
+V44_BOOTSTRAP_ISSUE_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_BOOTSTRAP_OBJECTIVES_FILE=.mainnet-v44-bootstrap-objectives.local.json
+V44_BOOTSTRAP_OBJECTIVES_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_BOOTSTRAP_CATALOG_ID=base-mainnet-release-1
+V44_BOOTSTRAP_OBJECTIVE_MODE=reliability
+V44_BOOTSTRAP_PUBLIC_SPECIFICATIONS_FILE=outputs/v44-bootstrap-specifications.base-mainnet-release-1.json
+V44_BOOTSTRAP_PUBLIC_SPECIFICATIONS_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GENESIS_MODULE_HASH=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_GENESIS_MANIFEST_HASH=0x0000000000000000000000000000000000000000000000000000000000000000
+
+# These must equal the whole-file SHA-256 of each non-empty evidenceFile
+# referenced by the approved V44_GATES_FILE. Zero placeholders are rejected.
+V44_GATE_FINAL_SOURCE_REPRODUCIBILITY_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_INDEPENDENT_SECURITY_REVIEW_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_PUBLIC_TESTNET_RELIABILITY_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_VALIDATOR_INDEPENDENCE_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_ECONOMIC_INVARIANT_REVIEW_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_DEPLOYER_LEGAL_ASSESSMENT_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GATE_NAME_AND_SYMBOL_CLEARANCE_SHA256=0000000000000000000000000000000000000000000000000000000000000000

.env.v44.testnet.example

@@ -0,0 +1,56 @@
+# AgentPool v4.4 Base Sepolia campaign deployment.
+# Copy to .env.v44.testnet.local. Never commit private keys.
+
+V44_TESTNET_ONLY_ACK=I_UNDERSTAND_THIS_IS_VALUELESS_BASE_SEPOLIA
+# Unique lowercase deployment slot. Existing campaign manifests are never overwritten.
+V44_TESTNET_CAMPAIGN_ID=mainnet-candidate-1
+AGENTPOOL_V44_TESTNET_RPC_URL=https://sepolia.base.org
+AGENTPOOL_V44_TESTNET_RPC_URL_2=https://base-sepolia-rpc.publicnode.com
+DEPLOYER_PRIVATE_KEY=0xREPLACE_LOCALLY
+# Operator floor. Preflight also enforces the greater of 0.0005 test ETH or
+# five times the RPC-verified cost of the tracked prior v4.4 deployment.
+MIN_V44_TESTNET_DEPLOYER_BALANCE_WEI=1
+
+# Exact clean Git commit and its generated source evidence.
+V44_SOURCE_COMMIT=0000000000000000000000000000000000000000
+V44_SOURCE_EVIDENCE_FILE=outputs/v44-source-reproducibility.json
+V44_THRESHOLD_AUTHORITY_OWNERS=0x0000000000000000000000000000000000000001,0x0000000000000000000000000000000000000002,0x0000000000000000000000000000000000000003
+V44_THRESHOLD_AUTHORITY_THRESHOLD=2
+
+# Unix timestamp 72 hours to 30 days after deployment.
+V44_GENESIS_TIMESTAMP=0
+
+# The deployer, proposer, and validators must be five distinct addresses.
+V44_BOOTSTRAP_PROPOSER=0x0000000000000000000000000000000000000000
+# Worker signs through its own device-local wallet; the coordinator never stores
+# or receives this private key.
+V44_BOOTSTRAP_WORKER=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_1=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_2=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_3=0x0000000000000000000000000000000000000000
+V44_VALIDATOR_1_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_VALIDATOR_2_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_VALIDATOR_3_GROUP_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+
+V44_BOOTSTRAP_ISSUE_ID=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_BOOTSTRAP_OBJECTIVES_FILE=.testnet-v44-bootstrap-objectives.local.json
+V44_BOOTSTRAP_OBJECTIVES_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+# Real campaign deployments require a generated public verification specification
+# file bound to the private challenge catalog. Use mechanics-only only for local
+# contract-flow rehearsal; it can never satisfy the reliability gate.
+V44_BOOTSTRAP_OBJECTIVE_MODE=reliability
+V44_BOOTSTRAP_PUBLIC_SPECIFICATIONS_FILE=outputs/v44-bootstrap-specifications.mainnet-candidate-1.json
+V44_BOOTSTRAP_PUBLIC_SPECIFICATIONS_SHA256=0000000000000000000000000000000000000000000000000000000000000000
+V44_GENESIS_MODULE_HASH=0x0000000000000000000000000000000000000000000000000000000000000000
+V44_GENESIS_MANIFEST_HASH=0x0000000000000000000000000000000000000000000000000000000000000000
+
+# Coordinator-only Base Sepolia keys. Keep them in .env.local, never Git.
+TESTNET_OPERATIONS_PRIVATE_KEY=0xREPLACE_LOCALLY
+TESTNET_VALIDATOR_1_PRIVATE_KEY=0xREPLACE_LOCALLY
+TESTNET_VALIDATOR_2_PRIVATE_KEY=0xREPLACE_LOCALLY
+TESTNET_VALIDATOR_3_PRIVATE_KEY=0xREPLACE_LOCALLY
+
+# Participant bridge options. Prefer a wallet file so each AI/device retains
+# custody. The private key is never sent to the remote read-only MCP.
+AGENTPOOL_V44_HOME=.agentpool-v44-testnet
+# AGENTPOOL_V44_WALLET_FILE=C:\\absolute\\path\\base-sepolia-wallet.json

.gitattributes

@@ -0,0 +1 @@
+public/agentpool-v44-readonly-bundle.json text eol=lf

.github/ISSUE_TEMPLATE/v44-mcp-compatibility.yml

@@ -0,0 +1,46 @@
+name: v4.4 MCP compatibility report
+description: Report a reproducible read-only MCP client connection
+title: "[v4.4 MCP] "
+labels:
+  - integration
+body:
+  - type: input
+    id: client
+    attributes:
+      label: MCP client and version
+      placeholder: Client name and exact version
+    validations:
+      required: true
+  - type: textarea
+    id: connection
+    attributes:
+      label: Connection and discovery result
+      description: Report the handshake, transport, discovered tools, and structured errors.
+    validations:
+      required: true
+  - type: textarea
+    id: evidence
+    attributes:
+      label: Redacted evidence
+      description: Include minimal logs with secrets, prompts, artifacts, and device identifiers removed.
+    validations:
+      required: true
+  - type: dropdown
+    id: control
+    attributes:
+      label: Control-domain relationship
+      options:
+        - Same operator or controller as an existing participant
+        - Independent operator and controller
+        - Unknown or not assessed
+    validations:
+      required: true
+  - type: checkboxes
+    id: boundary
+    attributes:
+      label: Confirm the read-only boundary
+      options:
+        - label: No wallet, gas, signing, transfer, or reward claim was required.
+          required: true
+        - label: I understand heartbeats and repeated polling are not useful contribution.
+          required: true

.github/ISSUE_TEMPLATE/v44-readonly-observation.yml

@@ -0,0 +1,60 @@
+name: v4.4 read-only observation
+description: Report a reproducible deployment, metadata, finality, or MCP finding
+title: "[v4.4 observation] "
+labels:
+  - observation
+body:
+  - type: markdown
+    attributes:
+      value: |
+        v4.4 is read-only and currently pays 0 tAPOOL. Never include a private
+        key, seed phrase, API key, private prompt, or plaintext buyer artifact.
+  - type: input
+    id: source
+    attributes:
+      label: Source commit and release
+      description: Pin the exact source commit, v4.4 release, and network.
+      placeholder: commit SHA; v4.4; Base Sepolia
+    validations:
+      required: true
+  - type: textarea
+    id: commands
+    attributes:
+      label: Reproduction commands
+      description: Include the smallest safe sequence another participant can rerun.
+      render: shell
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected result
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual result and hashes
+      description: Redact secrets and include block numbers or content hashes where relevant.
+    validations:
+      required: true
+  - type: dropdown
+    id: control
+    attributes:
+      label: Control-domain relationship
+      description: This is an honesty declaration, not proof of independence.
+      options:
+        - Same operator or controller as an existing participant
+        - Independent operator and controller
+        - Unknown or not assessed
+    validations:
+      required: true
+  - type: checkboxes
+    id: boundary
+    attributes:
+      label: Safety boundary
+      options:
+        - label: I used no production wallet, real asset, or secret.
+          required: true
+        - label: I understand this report has no promised current or retroactive reward.
+          required: true

.github/workflows/ci.yml

@@ -13,12 +13,74 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
+      # Reliability tests reproduce the historical Base Sepolia contract
+      # source commit independently from the current evidence-pipeline HEAD.
       - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+      - name: Verify exact requested source head
+        shell: bash
+        run: |
+          expected="${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}"
+          test "$(git rev-parse HEAD)" = "$expected"
       - uses: actions/setup-node@v5
         with:
           node-version: "22.13.0"
           cache: npm
       - run: npm ci
+      - run: npm audit --audit-level=moderate
       - run: npm run contracts:compile
+      - run: npm run evidence:v4.4:source
+      - run: npm run evidence:v4.4:source:verify
+      - run: npm run contracts:rehearse:v4.3:public
+      - run: npm run contracts:rehearse:v4.3.9
+      - run: npm run contracts:rehearse:v4.4:mainnet
+      - run: npm run contracts:rehearse:v4.4:full
       - run: npm run build
       - run: npm test
+
+  security-static:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+      - name: Verify exact requested source head
+        shell: bash
+        run: |
+          expected="${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}"
+          test "$(git rev-parse HEAD)" = "$expected"
+      - uses: actions/setup-node@v5
+        with:
+          node-version: "22.13.0"
+          cache: npm
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+      - run: npm ci
+      - run: npm run contracts:compile
+      - run: python -m pip install slither-analyzer==0.11.6
+      - run: solc-select install 0.8.36
+      - run: solc-select use 0.8.36
+      - run: npm run security:slither:v4.4
+
+  installer-windows:
+    runs-on: windows-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+      - name: Verify exact requested source head
+        shell: bash
+        run: |
+          expected="${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}"
+          test "$(git rev-parse HEAD)" = "$expected"
+      - uses: actions/setup-node@v5
+        with:
+          node-version: "22.13.0"
+          cache: npm
+      - run: npm ci
+      - run: npm run test:installer:windows

.gitignore

@@ -32,6 +32,15 @@ yarn-error.log*
 .env*
 !.env.example
 !.env.wallets.example
+!.env.v44.mainnet.example
+!.env.v44.testnet.example
+/.mainnet-v44-gates.local.json
+/.mainnet-v44-bootstrap-objectives.local.json
+/.testnet-v44-bootstrap-objectives.local.json
+/.testnet-v44-*.local.json
+/deployments/8453.v44.partial.json
+/deployments/84532.v44.partial.json
+/deployments/84532.v44.*.partial.json
 
 # vercel
 .vercel
@@ -43,3 +52,5 @@ next-env.d.ts
 /.wrangler/
 /outputs/
 /work/
+/lib/v44-build-manifest.generated.ts
+/public/agentpool-v44-build-manifest.json