# Livre Wallet Mainnet Readiness

Date: 2026-05-12

This document is the launch checklist before Livre Wallet should be promoted from devnet testing to public mainnet use.

## Current Status

- Devnet final-fee pools exist and have been tested from leaf 0.
- Private Relay withdrawal has been tested successfully.
- Emergency Withdrawal remains available as a recovery/testing path where the user pays gas directly.
- Relayer Network and Stats Dashboard are visible in the app.

## Mainnet Launch Requirements

1. Final program IDs
   - Deploy fresh mainnet shielded pool program.
   - Record final program ID in source, release notes, and website.
   - Do not reuse devnet pool addresses for mainnet.

2. Final fee collector
   - Set the permanent Livre protocol fee wallet.
   - Verify 0.5% deposit fee routes to the fee wallet.
   - Verify relayer fees are paid to the relayer submitter account.

3. Fresh mainnet pools from leaf 0
   - Create new pools with the final launch fee schedule.
   - Start every public mainnet pool at leaf index 0.
   - Publish pool IDs, denominations, fees, and deployment transactions.

4. Upgrade authority plan
   - Preferred launch path: multisig-controlled authority during early public beta.
   - Later hardening path: freeze or permanently remove upgrade authority after audits and operational confidence.
   - Public docs must state who controls upgrades, what threshold is required, and when freezing is planned.

5. Relayer network
   - Publish the official relayer endpoint list.
   - Publish the relayer operator guide.
   - Confirm the app can use multiple relayers and survive one relayer going offline.
   - Confirm relayer wallet balances are monitored so relayed withdrawals do not stall.

6. Source, circuits, and tooling
   - Publish clean source.
   - Publish circuits and verification keys.
   - Publish reproducible build notes.
   - Publish exact release checksums.

7. Website and mirrors
   - Host the main website/download page.
   - Mirror static website content to IPFS or another static mirror.
   - Publish SHA256 checksums beside downloads.

8. User safety copy
   - Explain Private Relay versus Emergency Withdrawal.
   - Explain that waiting improves privacy.
   - Explain that a relayer cannot change recipient, amount, proof, or withdrawal data.
   - Explain that fresh deposits have the weakest anonymity set.

## Mainnet Fee Schedule Target

- Deposit fee: 0.5% to Livre fee wallet.
- Shield relayer fee: 0.05% when a relayer sponsors shielding.
- Withdraw relayer fee: 0.05% when a relayer submits the withdrawal proof.

## Do Not Launch Until

- macOS release package is built from clean source.
- SHA256 checksums are published.
- Mainnet pools are freshly deployed from leaf 0.
- Upgrade authority status is publicly documented.
- Relayer operator guide is public.
- At least one full shield plus Private Relay withdraw test passes on final mainnet configuration, using a small amount.