{
  "schema": "vaultfire.base-v3-partner-pilot-transition-requirements.v1",
  "status": "requirements-only-not-authorized",
  "fromMode": "read-only-bootstrap",
  "toMode": "limited-partner-pilot",
  "chain": {"name": "base", "chainId": 8453},
  "pilotTruthfulness": {
    "baseOnly": true,
    "activeDesignPartnerLimit": 1,
    "requiredActiveDesignPartnersForActivation": 1,
    "currentActiveDesignPartners": 0,
    "privacyMeaning": "data minimization and commitments; Base transactions remain public",
    "disputeFilingBond": "fully refundable filing bond; never a fee, slash, or forfeiture",
    "flourishingMeasurements": "non-slashable and separate from pilot bond economics",
    "excludedValueFlows": ["solana", "cross-chain"]
  },
  "evidencePlaceholders": {
    "writtenPartnerAcceptance": null,
    "qualifiedCounselReview": null,
    "baseSepoliaRehearsal": null,
    "x402SettlementEvidence": null
  },
  "governance": {
    "requiredThreshold": "3-of-5",
    "minimumTimelockSeconds": 86400,
    "separateGuardianRequired": true,
    "existingFounderControlledSignersMustBeLabeledNonIndependent": true,
    "signerRotationRequiredAsPartnersJoin": true
  },
  "requiredInputsBeforeAnyProposal": [
    "three or more distinct, independently reviewed attester addresses and their authority/independence records",
    "named adjudicators, exactly one named design partner with written acceptance, and named pilot module addresses",
    "exact immutable native-wei caps and a separate allocation-cap decision",
    "independent review evidence covering bytecode, constructor bindings, activation calldata, and all public value-entry surfaces",
    "guardian pause coverage plan for every later deployed child bond before controller write enablement",
    "x402/Bazaar decision recorded as disabled unless separately approved and verified",
    "monitoring, incident response, and explicit 3-of-5 activation approval"
  ],
  "orderedTimelockedProposals": [
    {
      "step": 1,
      "purpose": "Install only the one reviewed design-partner allowlist entry, attester/adjudicator/module allowlists, and exact native-ETH caps while writes stay disabled.",
      "mustKeep": {
        "controller.deployEnabled": false,
        "controller.writeEnabled": false,
        "bondFactory.deployAllowed": false,
        "x402Enabled": false,
        "bazaarDiscoveryEnabled": false,
        "paymentRoutesEnabled": false
      }
    },
    {
      "step": 2,
      "purpose": "If child bonds are needed, authorize a narrowly reviewed construction window, deploy the specific child bonds, record their deterministic addresses/codehashes, then close the construction window again.",
      "mustKeep": {
        "controller.writeEnabled": false,
        "publicValueAcceptanceEnabled": false
      }
    },
    {
      "step": 3,
      "purpose": "Obtain and independently verify guardian pause coverage for every deployed child bond, then verify all role/address/codehash evidence again.",
      "blockingRule": "Do not enable controller writes or accept pilot value until guardian pause coverage is verified for each child bond."
    },
    {
      "step": 4,
      "purpose": "Submit a final separately timelocked 3-of-5 activation proposal with the exact reviewed calldata: controller caps, approved modules/partners, controller deploy/write flags, factory deploy flag, and only the required attester/adjudicator authorization calls.",
      "blockingRule": "No broad enable call, no wildcard or multi-partner allowlist, no public x402/Bazaar/payment route, no Solana/cross-chain value flow, and no value acceptance is authorized by this requirements document."
    }
  ],
  "forbiddenAtBootstrap": [
    "signing", "broadcasting", "wallet generation", "attester authorization", "adjudicator authorization", "design partner authorization", "module authorization", "child bond deployment", "controller flag enablement", "factory deployment enablement", "funding", "x402 enablement", "Bazaar enablement", "pilotReady claim"
  ],
  "signedApprovals": []
}
