000xff00 Cockpitpaper-walkelizaseq up
42161#498,105,792TB 47s

Disarmed. Arm Live Trade to broadcast operator-signed txs. Rust remains the engine bot. Never copy engine keys.

Tri-plane snapshot

SOL enforcement, TS decision, RS submit. Cockpit reads; it never holds the delegatee key.

SOLok

On-chain enforcement

33 facets · 33 libs · 203 B dispatcher · immutable EIP-2535. No diamondCut.

Diamond
0x000000…1bb43A
MevSafeFactory
0x000000…9a5404
Owner Safe
0x000000…200008
Owner0 7702
0x000000…cF61Af
AccountRouter
0x000000…8aE3E9
7702 attached
true
ATTACH_7702
true
OWNER0_7702_LIVE
true
Loupe
owner-gated 0xd76b31f3
TSok

Coordinator

Intent feeds, D3 filter, quote provenance, lane routing, calldata composition. DRY_RUN default.

Executor
rust
STRATEGIES_ENABLED
true
ENGINE DRY_RUN
false — open
ENGINE EXECUTION
true — armed
this desk
DISARMED
TS submit
locked off
Coordinator Postgres
scope of coordinator PG_URL — optional SQL on coordinator; not a DSN here; cockpit never binds; not QuestDB, not AlloyDB, not DATABASE_URL
DATABASE_URL
unset on this desk — not AlloyDB, not PG_URL
RSok

Engine

Only capital-moving boundary. REVM pre-flight, signing, inclusion. Timeboost bids live here.

Submitter
engine
AlloyDB
CacheDB<WrapDatabaseAsync<AlloyDB<Ethereum, RevmProvider>>>
ALLOY_DB_PROVIDER
ARB_RPC_HTTP
REVM
pre-flight
Timeboost
observe from cockpit
Broadcast
never from UI

Four-cast discriminator

Occupancy of the 203 B dispatcher is not a wiring signal. Unauth loupe NotOwner is.

CallLiveMeaning
owner()0x000000006CBfc3FbBe2eED64c54b93F351200008AdminFacet is cut. Owner is treasury Safe 1.5.0.
paused()falseGlobal pause is off.
jitLiveEnabled()trueAdminFacet JIT gate is on.
supportsInterface(IDiamondLoupe)trueIDiamondLoupe advertised. IDiamondCut is false — immutable.
facets()0xd76b31f3Loupe owner-gated. Stub would revert NoFacet.

Loupe — owner-gated catalog

Unauth 0x000000…1bb43A.facets() reverts 0xd76b31f3. Owner is treasury Safe 0x000000…200008. eth_call only — cockpit never broadcasts.

Solidity

interface IDiamondLoupe {
    struct Facet {
        address facetAddress;
        bytes4[] functionSelectors;
    }
    function facets() external view returns (Facet[] memory);
    function facetAddresses() external view returns (address[] memory);
    function facetFunctionSelectors(address) external view returns (bytes4[] memory);
    function facetAddress(bytes4) external view returns (address);
}

error DiamondLoupeFacet__NotOwner(); // 0xd76b31f3

modifier onlyOwner() {
    if (!LibAdminAuth.isOwner()) revert DiamondLoupeFacet__NotOwner();
    _;
}

function facets() external view onlyOwner returns (Facet[] memory out) {
    Layout storage l = LibExecutorStorage._layout();
    address[] memory addrs = l.facetAddressList;
    out = new Facet[](addrs.length);
    for (uint256 i; i < addrs.length; ++i) {
        out[i].facetAddress = addrs[i];
        out[i].functionSelectors = l.facetSelectorList[addrs[i]];
    }
}

cast (view)

# unauth — live discriminator (NotOwner, not NoFacet)
cast call 0x0000000691C319B26b8034f8BBAAE63F341bb43A "facets()" --rpc-url $ARB_RPC_HTTP
# revert 0xd76b31f3 DiamondLoupeFacet__NotOwner()

# owner-gated catalog — eth_call as treasury Safe (no broadcast)
cast call 0x0000000691C319B26b8034f8BBAAE63F341bb43A "facets()" \
  --from 0x000000006CBfc3FbBe2eED64c54b93F351200008 \
  --rpc-url $ARB_RPC_HTTP

# one selector → facet
cast call 0x0000000691C319B26b8034f8BBAAE63F341bb43A "facetAddress(bytes4)" 0x7a0ed627 \
  --from 0x000000006CBfc3FbBe2eED64c54b93F351200008 --rpc-url $ARB_RPC_HTTP
# → 0x9F7e9604B51C571B7179218B4c774cEE44231C03

Engine DBs

AlloyDB is REVM, not Google Cloud. Coordinator Postgres is PG_URL_SCOPE. QuestDB ILP is TCP :9009; coordinator desk currently QUESTDB_ENABLED=true. DATABASE_URL stays unset on this desk.

AlloyDB
CacheDB<WrapDatabaseAsync<AlloyDB<Ethereum, RevmProvider>>>

Engine REVM warm cache (ADR-026). Misses fault to ARB_RPC_HTTP. Not Google Cloud.

WarmBase
CacheDB<WarmBase> over RevmDb

Preflight hot path. Verified V2 slot 8 served warm; else storage faults fresh.

Web3Db
cold CacheDB fallback

Used when warm cache is unwired. alloy 2.0 provider — not bundled AlloyDB 1.8.

ARB_RPC_HTTP
engine + coordinator env

AlloyDB HTTP provider. Cockpit observes via publicnode — never the engine key.

Coordinator Postgres
scope of coordinator PG_URL — optional SQL on coordinator; not a DSN here; cockpit never binds; not QuestDB, not AlloyDB, not DATABASE_URL

PG_URL is the coordinator env. PG_URL_SCOPE is this label. Never emit PG_URL=.

QuestDB ILP
TCP :9009 ILP — coordinator only, fail-open, default off

Coordinator desk QUESTDB_ENABLED=true (observed 2026-08-25). Code default is fail-open off. mev_feed_events · mev_opportunity_events · mev_tx_events · mev_plan_events · mev_settlement_events · mev_telemetry_smoke. Engine is not a writer. Desk never binds :9009/:8812.

Grafana QuestDB
coordinator Grafana plugin — PGWire :8812 uid=questdb; not ILP :9009; cockpit never binds

Plugin questdb-questdb-datasource. uid=questdb. PGWire questdb:8812. UI http://127.0.0.1:3000. Not ILP. Not postgres.

DATABASE_URL
unset on this desk — not AlloyDB, not PG_URL

Sandbox Neon/PGLite convention. Auth-off + DATABASE_URL fail-closes. Do not set here.

Engine desk (observed 2026-08-25)

Labels and flags only. No keys, no DSNs, no PRIVATE_KEY. Engine is ARMED. This cockpit is DISARMED.

DRY_RUN
false

Engine protection OFF. This desk never submits.

EXECUTION_ENABLED
true

Engine kill OPEN. This desk stays disarmed.

ATTACH_7702
true

Live: AccountRouter is 7702 attached.

ACCOUNT_ROUTER_7702_ATTACHED
true

AccountRouter is the live 7702 implementation.

OWNER0_7702_LIVE
true

23 B prefix 0xef0100 → AccountRouter

ENGINE_ATTACH_7702
true

Engine attach is on. This desk never SetCode.

REQUIRE_PRIVATE_RPC
true

Engine archive. Cockpit uses publicnode.

QUESTDB_ENABLED
true

Coordinator ILP on (observed). Code default is fail-open off. This desk never binds :9009.

BOLD_FINALITY_RISK_ENABLED
false

default-off. Not a vendored OffchainLabs/bold dep. Gates cross-chain / withdrawal-sensitive only. Same-chain atomic keeps own sim gates. This desk never polls.

KAIROS_RPC_URL
optimistic-rpc (observed)

Engine env currently points KAIROS_RPC_URL at optimistic-rpc. Standard pin is https://rpc.kairos-timeboost.xyz. This desk never sets it, never sends X-Api-Key.

STRATEGIES_ENABLED
true

Lanes selected on engine.

STRATEGY_TIMEBOOST_AUTO_BID_ENABLED
true

Engine auto-bid on. This desk always skip.

MEV_EXECUTOR
rust

Only capital-moving boundary.

ALLOW_TS_SOLIDITY_SUBMISSION
false

TS submit locked.

ALCHEMY_ARB_APP_PRIMARY
mev

engine Alchemy arb-mainnet apps (labels only). Cockpit observes via publicnode — never the engine key.

ALCHEMY_ARB_APP_RESERVE_1
etch

label only — no key

ALCHEMY_ARB_APP_RESERVE_2
eth

label only — no key

TOKEN_ALLOWLIST
755

engine TOKEN_ALLOWLIST — 755 addresses, chain 42161. Regenerated by scripts/env/sync-token-allowlist.py. This desk never filters fills.

MIN_PROFIT_WEI
5000000000000000

0.005 ETH floor on engine

MAX_GAS_WEI
30000000

30M gas ceiling per tx

MAX_TX_VALUE_WEI
0

No native value on engine txs

ARB_SEQUENCER_RPC_URL
https://arb1-sequencer.arbitrum.io/rpc

Public Offchain Labs sequencer. Write-only — eth_chainId unavailable. Queue 1024 / 12s. No SLA. This desk never eth_sendRawTransaction from chat.

ARB_SEQUENCER_FEED_URL
wss://arb1-feed.arbitrum.io/feed

Official wss://arb1-feed.arbitrum.io/feed from llms-full.txt.

MEV_ENGINE_OSTIUM_ADDRESS_TARGETS
0x6D0bA1f9996DBD8885827e1b2e8f6593e7702411,0x7720fc8C8680bF4A1Af99D44C6c265A74e9742a9

F2 fallback for Ostium/Stork oracle writes. Not a secret.

Grafana QuestDB datasource

Read path on the coordinator host. Plugin questdb-questdb-datasource, uid=questdb, PGWire :8812. Not ILP :9009. Not postgres. This desk never binds :3000.

  1. 01

    Coordinator Grafana only

    This desk does not bind :3000. Set GRAFANA_ADMIN_PASSWORD on the coordinator host (compose fails closed with no default). Open http://127.0.0.1:3000 there.

  2. 02

    Install the QuestDB plugin — not Postgres

    Compose already sets GF_INSTALL_PLUGINS=questdb-questdb-datasource. Do not add a Grafana type=postgres datasource pointed at QuestDB.

  3. 03

    Provision uid=questdb

    File: monitoring/grafana/provisioning/datasources/datasources.yml (mounted read-only). name=QuestDB, uid=questdb, type=questdb-questdb-datasource, access=proxy, editable=false.

  4. 04

    PGWire :8812 — never ILP :9009

    jsonData.server=questdb (compose DNS), port=8812. :9009 is the coordinator ILP writer. :9000 is the HTTP console. Grafana must not use either.

  5. 05

    Auth is compose-provisioned

    username=admin, tlsMode=disable, timeout=120, queryTimeout=60. Password is QuestDB OSS default in compose secureJsonData — never emitted from this desk.

  6. 06

    Apply schema before enabling ILP

    psql -h 127.0.0.1 -p 8812 -U admin -d qdb -f infra/questdb/schema.sql — then QUESTDB_ENABLED=true on the coordinator. Schema-first; ILP is fail-open and default off.

  7. 07

    Dashboards reference uid, not display name

    questdb-execution.json must use { uid: "questdb", type: "questdb-questdb-datasource" }. coordinator-overview stays on Prometheus uid=prometheus.

  8. 08

    Query live writer columns

    Use event (not phase), opportunity_id (not candidate_id), estimated_profit_wei (not profit_wei). Plugin format is integer enum 1, not "time_series" / "table" strings.

  9. 09

    Verify on the coordinator host

    Grafana Explore → QuestDB → SELECT count() FROM mev_telemetry_smoke. This desk never proxies Grafana, never enables QUESTDB_ENABLED, never binds :8812/:9009/:3000.

Provisioned datasource (coordinator)

# monitoring/grafana/provisioning/datasources/datasources.yml
# Coordinator Grafana only. Cockpit never applies this.
  - name: QuestDB
    uid: questdb
    type: questdb-questdb-datasource
    access: proxy
    editable: false
    jsonData:
      server: questdb
      port: 8812
      username: admin
      tlsMode: disable
      timeout: "120"
      queryTimeout: "60"
    # secureJsonData.password = QuestDB OSS default from compose — not from this desk

SOL inventory

All pins

Full Gen-3 facet cut and linked-library set. Codesize snapshot — re-check from Pins.

Diamond facets (33 cuts)

33 contracts · 453,317 B runtime · immutable EIP-2535 · loupe owner-gated

#ContractAddressBytesLive
1

AcrossFacet

0xEc887A…16A187

6,999snapshot
2

AdminConfigFacet

0xea1C1A…E1b36d

15,051snapshot
3

AdminFacet

0x98606c…AE38eF

17,821snapshot
4

AdminVenueConfigFacet

0x4A9d60…0cd6dA

20,397snapshot
5

ChainFacet

0x83cEbB…D32091

9,860snapshot
6

CowFacet

0x6894b6…a9DD1F

20,322snapshot
7

CreditFacet

0x3078D5…C63390

18,469snapshot
8

DelegateeConfigFacet

0xcB28C4…e90547

6,455snapshot
9

DelegateeFacet

0xBd65fc…2A9673

24,093snapshot
10

DiamondLoupeFacet

0x9F7e96…231C03

2,422snapshot
11

DispatchSequencerFacet

0xd8d43D…F44781

17,210snapshot
12

ExecutorIntrospectionFacet

0x8D8272…9D8691

1,205snapshot
13

FarmingFacet

0xeeE25c…989E92

10,791snapshot
14

FlashBundleFacet

0x08f802…53cBEc

16,571snapshot
15

FlashDexCallbackFacet

0x0fD033…55f36D

23,602snapshot
16

FlashFacet

0xC82e67…7BC81b

20,068snapshot
17

FlashIntentFacet

0x775655…ad8E07

18,498snapshot
18

GuardDogFacet

0x679bF3…f71251

6,565snapshot
19

HookPolicyFacet

0xB6c3C8…5320dd

2,963snapshot
20

IntelligenceFacet

0x150512…3c48e0

8,318snapshot
21

IntentLayerFacet

0xE12F37…8da86D

20,457snapshot
22

JitFacet

0x5E6290…F6810f

15,962snapshot
23

LaunchSniperFacet

0x1C1c08…794bBC

12,996snapshot
24

LiquidationFacet

0xd46bFc…B025cb

22,676snapshot
25

LpNftFacet

0xA2007c…cD1779

8,333snapshot
26

NativeArbFacet

0x1902aE…1659Bf

15,167snapshot
27

NftMarketFacet

0xd88c7f…d2e731

7,176snapshot
28

OrchHFacet

0x378F6d…141fA6

16,112snapshot
29

SandwichFacet

0x36B372…5b6348

13,776snapshot
30

ToolsFacet

0x2bd833…5Cb7A9

9,075snapshot
31

UniswapXFacet

0x69d726…E2648d

8,920snapshot
32

ValidatorFacet

0xaFF4Ed…a54C05

14,359snapshot
33

VenueRegistryFacet

0xFeA24d…C68336

20,628snapshot

Linked libraries (30 + 3 for 7702)

33 contracts · 199,241 B runtime · LibEcdsaLowS, LibPasskeyVerify, LibMevBotAaveLoop are the 7702 trio

#ContractAddressBytesLive
1

LibAaveViews

0x2e18Aa…e31b99

825snapshot
2

LibCowMatch

0x4Ab965…901736

4,297snapshot
3

LibCredit

0x1a9971…5C9380

7,409snapshot
4

LibEnvelope

0x4ea221…0Db3d0

1,077snapshot
5

LibErc6909Guard

0x1c00De…F1df3F

1,002snapshot
6

LibExecutorCore

0x35aD41…C15988

21,272snapshot
7

LibFlashVenue

0x9284FF…F264Ed

1,549snapshot
8

LibGasOracle

0xC78A82…882036

4,037snapshot
9

LibIntelligenceAdmission

0xd4c4e2…17c59f

15,755snapshot
10

LibIntentAdmission

0x04dBA0…c89b4f

19,709snapshot
11

LibJit

0xe81e29…83A71a

5,433snapshot
12

LibJitCreditOrchestrator

0xfAe515…01F809

7,535snapshot
13

LibJitV3

0x26122A…1Faae2

11,274snapshot
14

LibLiquidation

0x3AdCc6…04Abc0

9,442snapshot
15

LibLocalSignal

0x174a3a…3B9125

1,110snapshot
16

LibNativeArb

0x799Af4…cfBF84

6,385snapshot
17

LibNonce

0x4edf24…8907F0

589snapshot
18

LibOrchhDispatch

0x2405e1…1e9deb

13,756snapshot
19

LibPriceOracle

0xa36687…f71501

5,775snapshot
20

LibRiskCaps

0xbfcc71…5cBCba

604snapshot
21

LibSandwich

0x743482…BC31Fb

5,837snapshot
22

LibSignal

0x2ac8F6…dd69B7

1,072snapshot
23

LibSlippage

0x4CE9c4…a30b8C

763snapshot
24

LibSnipe

0x62F29e…E43F87

5,573snapshot
25

LibSpend

0x3F642C…772De3

1,412snapshot
26

LibSpendGuard

0x7d08a0…a2dce9

4,937snapshot
27

LibTheCompact

0x7F9076…091a64

1,193snapshot
28

LibTokenDecimals

0x39a85F…Ef7029

2,468snapshot
29

LibVenueDispatch

0x99470c…94846e

20,021snapshot
30

RouterRegistry

0x6B6128…8FCede

10,709snapshot
31

LibEcdsaLowS

7702 path

0x22D134…4E3499

514snapshot
32

LibPasskeyVerify

7702 path

0x75e61d…1feC8e

1,564snapshot
33

LibMevBotAaveLoop

7702 path

0x906B11…c7d5Cf

4,343snapshot