TokenOps
Recipe · Operations · Mainnet

Mainnet readiness checklist

Six gates. When all six close for a product, it ships on Ethereum mainnet. fhe-disperse is already there; fhe-vesting and fhe-airdrop are gated on (1) + (2).

The six gates#

  1. 1

    Audit publication

    Independent audit closes; report linked from /resources; every critical + high finding resolved and re-tested.

  2. 2

    Zama mainnet KMS

    Zama operates KMS against Ethereum mainnet with the same threshold posture as Sepolia. fhe-disperse already passed this.

  3. 3

    Design-partner pilots

    Three pilots running on Sepolia for a full quarter against production-like volume. Telemetry surfaces in the SDK adapter.

  4. 4

    CREATE3 deployment

    Deploy from the audited deployer so the mainnet address matches every other chain the deployer publishes from.

  5. 5

    Telemetry sink wired

    withTelemetry(client, adapter) feeds your operations dashboard. Don't go mainnet blind.

  6. 6

    DEPLOYED_ADDRESSES update

    After (1)–(5), the mainnet address lands in DEPLOYED_ADDRESSES in a minor SDK release. The docs site auto-picks it up.

Per-product status#

fhe-disperse · live on mainnet · audit publication pending (singleton itself is in production traffic).

fhe-vesting · Sepolia only · audit in progress + KMS readiness pending.

fhe-airdrop · Sepolia only · same gates as vesting.

For the full risk model + relayer dependency + HCU envelope, see Resources › Mainnet readiness. This recipe is the actionable checklist; that page is the deep rationale.

See also