.env.example

# Upgrade Siren - environment variables
#
# Copy this file to .env and fill in the values. Never commit .env (gitignored).
# Keys are loaded by forge script and the provisioning scripts in scripts/.

# Sepolia deployer wallet. 32-byte hex (with or without 0x prefix).
# Used by scripts/deploy/Deploy.s.sol to broadcast the demo fixture deployment.
# Custody decision: see Tracker US-060.
DEPLOYER_PRIVATE_KEY=

# ENS operator wallet. Used by scripts/provision-ens.ts (US-010) to write
# upgrade-siren:* records and the atomic upgrade_manifest. Must be a separate
# key from DEPLOYER_PRIVATE_KEY per the SCOPE.md key-custody policy.
OPERATOR_PRIVATE_KEY=

# EIP-712 Siren Report signing key. Used by scripts/sign-reports.ts (US-011)
# to sign the safe / dangerous / unverified scenario reports. Must recover to
# the address recorded in the upgrade-siren:owner ENS record so the verdict
# engine validates production reports against the canonical owner.
REPORT_SIGNER_PRIVATE_KEY=

# Alchemy RPC endpoints. Sepolia is required for the demo; mainnet is used
# only by scripts/check-ens-parent.ts (read-only registry queries).
ALCHEMY_RPC_SEPOLIA=
ALCHEMY_RPC_MAINNET=