# Livre Wallet Mainnet Readiness

Date: 2026-05-12

This document is the launch checklist before Livre Wallet should be promoted from devnet testing to public mainnet use.

## Current Status

- Devnet final-fee pools exist and have been tested from leaf 0.
- Private Relay withdrawal has been tested successfully.
- Emergency Withdrawal remains available as a recovery/testing path where the user pays gas directly.
- Relayer Network and Stats Dashboard are visible in the app.
- Public devnet website, Mac download, source archive, checksums, and relayer docs are published at `https://solprivatewallet.com`.

## Beta Mainnet Decisions

- Launch authority: multisig-controlled during early beta.
- Hardening path: freeze or remove upgrade authority after mainnet testing, review, and audit confidence.
- First public platform: macOS desktop only.
- Mainnet website/API domain: `solprivatewallet.com` and `api.solprivatewallet.com`.
- Public warning posture: devnet builds must stay clearly labeled until a separate mainnet build is published.

## Mainnet Values To Finalize

- Multisig threshold and signer addresses: TBD.
- Final protocol fee wallet: TBD.
- Mainnet shielded pool program ID: TBD.
- Final mainnet pool IDs and denominations: TBD.
- Mainnet relayer wallet address: TBD.
- Mainnet relayer API endpoint list: TBD.
- Tiny mainnet test amount: TBD.

The canonical fill-in tracker is `MAINNET_VALUES.md`.

## Mainnet Dry Run Order

1. Create the multisig and set it as upgrade authority for beta.
2. Deploy the fresh mainnet program and record the final program ID.
3. Create fresh mainnet pools from leaf 0 with the final fee schedule.
4. Configure mainnet Kora/relayers against mainnet RPC and the final pool list.
5. Build a separate mainnet Mac app pointed at the mainnet API/config.
6. Run one tiny shield test into a fresh pool.
7. Wait long enough to verify privacy scoring and later-deposit accounting.
8. Run one Private Relay withdrawal and verify the user wallet does not pay withdrawal gas.
9. Verify fee routing: 0.5% protocol deposit fee plus configured relayer fee.
10. Publish the mainnet build, hashes, final IDs, and authority status.

## Mainnet Launch Requirements

1. Final program IDs
   - Deploy fresh mainnet shielded pool program.
   - Record final program ID in source, release notes, and website.
   - Do not reuse devnet pool addresses for mainnet.

2. Final fee collector
   - Set the permanent Livre protocol fee wallet.
   - Verify 0.5% deposit fee routes to the fee wallet.
   - Verify relayer fees are paid to the relayer submitter account.

3. Fresh mainnet pools from leaf 0
   - Create new pools with the final launch fee schedule.
   - Start every public mainnet pool at leaf index 0.
   - Publish pool IDs, denominations, fees, and deployment transactions.

4. Upgrade authority plan
   - Preferred launch path: multisig-controlled authority during early public beta.
   - Later hardening path: freeze or permanently remove upgrade authority after audits and operational confidence.
   - Public docs must state who controls upgrades, what threshold is required, and when freezing is planned.

5. Relayer network
   - Publish the official relayer endpoint list.
   - Publish the relayer operator guide.
   - Confirm the app can use multiple relayers and survive one relayer going offline.
   - Confirm relayer wallet balances are monitored so relayed withdrawals do not stall.

6. Source, circuits, and tooling
   - Publish clean source.
   - Publish circuits and verification keys.
   - Publish reproducible build notes.
   - Publish exact release checksums.

7. Website and mirrors
   - Host the main website/download page.
   - Mirror static website content to IPFS or another static mirror.
   - Publish SHA256 checksums beside downloads.

8. User safety copy
   - Explain Private Relay versus Emergency Withdrawal.
   - Explain that waiting improves privacy.
   - Explain that a relayer cannot change recipient, amount, proof, or withdrawal data.
   - Explain that fresh deposits have the weakest anonymity set.

## Mainnet Fee Schedule Target

- Deposit fee: 0.5% to Livre fee wallet.
- Shield relayer fee: 0.05% when a relayer sponsors shielding.
- Withdraw relayer fee: 0.05% when a relayer submits the withdrawal proof.

## Do Not Launch Until

- macOS release package is built from clean source.
- SHA256 checksums are published.
- Mainnet pools are freshly deployed from leaf 0.
- Upgrade authority status is publicly documented.
- Relayer operator guide is public.
- At least one full shield plus Private Relay withdraw test passes on final mainnet configuration, using a small amount.