> ## Documentation Index
> Fetch the complete documentation index at: https://firmament.shaikazeem.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Live Safety

> Live Solana configuration and safety gates.

# Live Safety

Live mode signs maker-side actions. Configure it deliberately.

## Worker gate

`runtime.enable_protocol_workers` controls live adapter startup.

Default local config sets it to `false`. In that mode the API and runtime projection start, but live RFQ and settlement actions are unavailable.

Set it to `true` only after credentials, caps, and asset mints are ready.

## Required secrets

Store these in `.env`:

* `SOLANA_RPC_URL`
* exactly one maker keypair source: `MAKER_PRIVATE_KEY`, `MAKER_KEYPAIR_PATH`, or `MAKER_KEYPAIR_JSON`
* `JUPITER_API_KEY` when Jupiter is enabled
* `CIRCLE_GATEWAY_SOLANA_ADDRESS` when Gateway is enabled

The maker wallet and `CIRCLE_GATEWAY_SOLANA_ADDRESS` must refer to the same
approved Solana depositor for Gateway deposit/refill smoke tests.

Admin auth secrets are separate and are not part of the public API docs.

## Required policy

Store these in `config.toml`:

* supported assets and mint addresses
* quote expiry and spreads
* max quote, trade, refill, and daily notionals
* stale-price limits
* inventory thresholds
* Gateway refill thresholds
* reconciliation dust thresholds

The sample config uses `VERIFY_CBBTC_SOLANA_MINT_BEFORE_LIVE_USE` for cbBTC. Replace it before enabling live workers. Coinbase currently lists the Solana cbBTC mint as:

```text theme={null}
cbbtcf3aa214zXHbiAZQwf4122FBYbraNdFqgw4iMij
```

Do not raise caps just to make a route pass. Check Jupiter route minimums first.

## Operating checks

Before and after a live run, inspect:

* `/health`
* `/v1/assets`
* `/v1/runtime/state`
* `/v1/runtime/events`
* `/v1/runtime/ledger`
* `/v1/runtime/trades`

Keep live demo caps small. Do not raise caps to force a route through.

Run non-mutating checks first:

```bash theme={null}
scripts/smoke.sh all-non-mutating
```

Mutating groups such as `gateway-deposit`, `gateway-refill`, `jupiter-swap`,
`jupiter-cbbtc-swap`, `live-cbbtc-rfq`, and `live-gateway-cbbtc-rfq` spend real
mainnet funds. They require explicit `RUN_LIVE_*` opt-ins.