Recommended topology
Web build
Build-time env (injected at CI or Docker build args):Worker deploy
Required secrets on the host:MANTLE_RPC_URL,AGENT_PRIVATE_KEY,AGENT_IDENTITY_ADDRESS=0xB86dC64573089D8DD89C5686010295bB4412D652AGENT_EOAandTREASURY_EOAmust match theAGENT_PRIVATE_KEYaddress (0x59ffc…for the live burner)- LLM keys (
Z_AI_API_KEY, etc.) orLLM_PROVIDER=local_rules - Optional 0G:
ZERO_G_RPC_URL,ZERO_G_PRIVATE_KEY,ZERO_G_CLI_PATH
DNS / CNAME
Health checks
- Worker:
GET /health - Web: static asset 200
- Contract: Mantlescan verified source
Pre-production checklist
-
LIVE_ENABLEDintentional for environment - Rate limits on
/run-cycleand runner endpoints - Sentry DSN configured (
SENTRY_DSN,VITE_SENTRY_DSN) - Secrets not in git — use host secret manager
- See Security for key custody guidance

