AgenC Mainnet Deployment Checklist
Before mainnet deployment, a proper MPC trusted setup ceremony is REQUIRED.
AgenC Mainnet Deployment Checklist
Critical: ZK Trusted Setup (Issue #334)
Before mainnet deployment, a proper MPC trusted setup ceremony is REQUIRED.
Current State
Required Actions
- Conduct MPC ceremony with minimum 3 independent contributors
- Apply random beacon from public source (e.g., drand)
- Publish contribution transcript for audit
- Regenerate verifying_key.rs from ceremony output
- Verify gamma_g2 != delta_g2 in new key
Verification
Run: cargo test --package agenc-coordination verify_key_validity
(Add this test to verify gamma != delta)
References
Pre-Deploy Gates (mandatory)
Readiness check
Prerequisites
./scripts/check-deployment-readiness.sh exists and is executableSteps
- Run:
bash
./scripts/check-deployment-readiness.sh --network mainnetExpected Output
text
All checks PASSTroubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| script exits non-zero | missing env/toolchain/config | follow the script output and rerun |
Test + mutation gates
Prerequisites
Steps
- LiteSVM fast integration suite:
npm run test:fast- Runtime unit tests:
cd runtime && npm run test- Runtime mutation gates:
cd runtime && npm run mutation:ci && npm run mutation:gatesExpected Output
text
# all commands exit 0Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
npm run test:fast fails | protocol regression | fix before deploy |
| mutation gate fails | behavior drift or insufficient coverage | inspect mutation artifact and remediate |
Verifying key validation (mandatory)
Prerequisites
./scripts/validate-verifying-key.sh exists and is executableSteps
- Run:
bash
./scripts/validate-verifying-key.shExpected Output
text
# script exits 0 and prints PASS for production-safety checksTroubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| gamma/delta equality check fails | dev VK in repo | complete MPC ceremony and regenerate verifying_key.rs |
Build artifact verification (verifiable build)
Prerequisites
Steps
- Build verifiable program:
bash
anchor build --verifiable- Record executable hash:
bash
solana-verify get-executable-hash target/deploy/agenc_coordination.soExpected Output
text
# solana-verify prints a hash (record it in the deployment log)Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| build differs across machines | toolchain mismatch | align Anchor/Solana versions and rebuild |