Decisions

Decided (do not reopen)

  • The $TALON token launches together with the product, and features ship afterwards one at a time as public catalysts (owner decision 2026-09-30). This replaces the earlier default of deferring the token to roadmap Step 4. Buybacks start manual (weekly, from the treasury, posted publicly). Held-back features and their switches are in docs/release-plan.md.
  • Telegram is paused until after launch (owner decision 2026-09-30). Approvals and alerts happen in the TALON app. The bot code stays in apps/telegram; to turn it on, deploy the telegram service and set TELEGRAM_ENABLED=true on the api and worker and NEXT_PUBLIC_TELEGRAM_ENABLED=true on the website.
  • Postgres and Redis are both Railway services in the same project as api, worker and telegram (decision 2026-10-03). This replaces Neon, whose free tier storage ran out: token_stats holds 30 days of per-minute samples for up to 300 tokens, about 13 million rows. Railway keeps database traffic on the private network, bundles the cost into the plan already paying for the app services, and needs no code change because packages/db is plain postgres-js over a DATABASE_URL. Wiring, the SSL and IPv6 rules, the dump and restore steps and the capacity numbers are in infra/railway.md. Railway has no point-in-time restore on Hobby, so a scheduled dump replaces Neon's branching.
  • Name: TALON, ticker $TALON.
  • Wallets: Privy server wallets (local encrypted keystore for dev/testnet only).
  • Launchpad: Pons V2 only in MVP.
  • Authentication is wallet only (Sign-In With Ethereum), owner decision 2026-09-23.
    • What: users sign in only by connecting an EVM wallet and signing an EIP-4361 message. No email signup, no magic link, no Google, no password. Login, creating an agent, funding it, and launching a token all work with nothing but a wallet.
    • Why: every TALON user already needs a wallet to fund an agent, so a wallet is the lowest-friction identity and removes a whole class of account recovery, email deliverability, and credential storage problems. It also gives the platform a verified owner address to use as the natural destination for agent funds.
    • Consequences:
      • No email is collected. Anything that assumed an email (notifications, whoami labels, receipts) uses the owner wallet address, Telegram, or the dashboard instead.
      • The connected wallet is the owner identity. It owns that user's agents and API keys; losing the wallet means losing access to the TALON account (agent funds stay in the agents' own wallets and are not lost with it).
      • Each agent still has its own separate Privy server wallet. The owner wallet is used only for identity, funding agents, and receiving withdrawals; it never signs agent transactions.
      • The default transfer whitelist of a new agent is the owner wallet, so withdrawals go back to it without extra setup.
      • Smart contract wallets are supported through EIP-1271 and EIP-6492 signature checks against Robinhood Chain.
      • WalletConnect needs a Reown project id in the web app env (NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID). Injected browser wallets work without it.
      • The CLI device flow is unchanged at the API level; the browser step becomes "connect your wallet and approve the code".
  • Fees: creators keep 75% of collected creator fees; platform takes 25%. 60% of the platform share ($15 of every $100) is reserved for $TALON buyback and burn once the token exists; until then it accrues in the platform treasury wallet.

Open decisions surfaced at the end of Phase 1

These need a human answer. The build proceeds with the provisional default in each row so nothing blocks; each default is a one-line config change to reverse.

DecisionProvisional default used in the buildWhere to change
Final domainDecided 2026-10-02: www.deploytalon.com (the apex redirects to www). Planned subdomains: api.deploytalon.com for the API, mcp.deploytalon.com for hosted MCP.NEXT_PUBLIC_SITE_URL on Vercel, WEB_URL on the API, apps/cli and apps/mcp defaults
Launch $TALON on Pons at day one, or deferDecided 2026-09-30: launch with the product (see Decided above). Earlier default was to defer. The roadmap you sent places the $TALON token in Step 4 (month 6+). The platform 25% share accrues in the treasury wallet; the 60% buyback earmark is tracked in earnings accounting but not executed.apps/worker fee tracker flag BUYBACK_ENABLED
Add a swap fee on top of the creator-fee shareNo. Matches ClawPump's model.packages/tools/src/trading/swap.ts has a PLATFORM_SWAP_FEE_BPS constant set to 0 and no fee leg is encoded
Production RPC providerAlchemy placeholder in .env.example (robinhood-mainnet.g.alchemy.com/v2/KEY, HTTPS + WSS). Alchemy does not offer debug/trace on this chain; if debug_traceCall simulation is wanted, QuickNode is the alternative. The chain package accepts any ordered list of URLs, so switching is an env change.ROBINHOOD_RPC_URLS, ROBINHOOD_WS_URL

Findings that affect the plan

  • The npm name talon is taken (an unrelated package at v2.3.2). The CLI is published as @talon/cli with a talon binary, so npx @talon/cli ... works and talon ... works after a global install. If the @talon npm scope is not available either, the fallback names talon-cli and talon-mcp are free as of 2026-09-22. Publishing also needs an npm login on this machine.

  • Pons V2 has no testnet deployment. Curve trades and launches can only be exercised on mainnet with tiny amounts. Swaps and transfers are testable on 46630 (Uniswap v4 PoolManager exists there; periphery unverified), and the FeeSplitter deploys to 46630.

  • The launch call takes creatorFeeRecipient directly, so the FeeSplitter address can be set at launch time with no follow-up timelocked transfer.

  • Mainnet Blockscout API is Cloudflare-gated for headless clients. ABIs come from Sourcify and all indexing is done from RPC logs.

  • HOOD is not a stock token in the official registry as of 2026-09-22.

Launch with an agent (spec: docs/launch-with-a-mind.md, 2026-10-06)

  • Provisional: creator share 0 to 25% (default 15%), platform 10% fixed, treasury gets the rest. Founder to confirm.
  • Provisional: no holder payouts in v1; stock treasuries are described as the agent's reserves, never returns. Legal review before any payout feature.
  • Open: whether the platform share buys $TALON. Legal review first.