Complete security hardening before XTZ/USDt mainnet launch

[KevinMehrabi]

Objective

Track the remaining contract, frontend, integration, deployment, and review work required before an XTZ/USDt mainnet launch.

Remediation checklist

Contract and deployment

• Complete the confidential security remediation work and coordinated review.
• Finalize and implement the XTZ/USDt pool fee model #240
• Harden pool manager and fee-recipient controls #241
• Harden the FA2 and USDt integration boundary #242
• Add production FA2 protocol-fee contract tests and pinned CI #243
• Make DEX deployment exact, resumable, and auditable #244
• Preserve a minimum permanent liquidity floor #245

Frontend and transaction safety

• Prevent stale quotes from updating active transactions #246
• Verify wallet account and network before submitting operations #247
• Preserve exact transaction integers and clean up FA2 permissions #248
• Harden and directly test the Sirius adapter #249
• Define an allowlisted token-to-token routing policy #250

Review and release readiness

• Complete an sTEZ security review before production activation #251
• Version and publish a sanitized security review baseline #252

Release evidence required

• Final reviewed repository commit
• Reproducible Michelson artifact hashes
• Passing contract and frontend CI
• Testnet operation hashes for lifecycle and administrative paths
• Deployment manifest containing production addresses, parameters, hashes, and roles
• Independent review of the final contract artifact
• Explicit approval from the designated release owners

Mainnet deployment and full liquidity funding remain blocked until the release-blocking work is closed or has a documented, approved risk disposition.