This is the **first deployed and provable instance of a sovereign x402 payment architecture**, bound by identity, sealed offline, and enforceable by code and cryptography — not permission.

.github/workflows/ci.yml

@@ -0,0 +1,91 @@
+name: CI
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled, edited]
+  push:
+    branches:
+      - main
+      - evm
+      - release/**
+
+jobs:
+  # ---------- Dynamic Slinky Change Detection ----------
+  slinky-changes:
+    runs-on: ubuntu-latest
+    outputs:
+      slinky: ${{ steps.filter.outputs.slinky }}
+    steps:
+      - uses: actions/checkout@v3
+      - id: filter
+        uses: dorny/paths-filter@v2
+        with:
+          filters: |
+            slinky:
+              - 'scripts/modules/slinky_test/**'
+              - 'x/slinky/**'
+
+  # ---------- Matrix-Based Integration Tests ----------
+  integration-tests:
+    name: Integration Test (${{ matrix.test.name }})
+    runs-on: ubuntu-large
+    timeout-minutes: 30
+    needs: slinky-changes
+    if: needs.slinky-changes.outputs.slinky == 'true'
+    env:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      DAPP_TESTS_MNEMONIC: ${{ secrets.DAPP_TESTS_MNEMONIC }}
+    strategy:
+      fail-fast: false
+      matrix:
+        test:
+          - name: "Wasm Module"
+            scripts:
+              - docker exec sei-node-0 integration_test/contracts/deploy_timelocked_token_contract.sh
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_delegation_test.yaml
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_admin_test.yaml
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_withdraw_test.yaml
+              - docker exec sei-node-0 integration_test/contracts/deploy_timelocked_token_contract.sh
+              - python3 integration_test/scripts/runner.py integration_test/wasm_module/timelocked_token_emergency_withdraw_test.yaml
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+
+      - name: Install Dependencies
+        run: |
+          pip3 install pyyaml
+          sudo apt-get update && sudo apt-get install -y jq
+
+      - name: Start 4-node Docker cluster
+        run: |
+          make clean
+          INVARIANT_CHECK_INTERVAL=10 make docker-cluster-start &
+
+      - name: Wait for Cluster Launch
+        run: |
+          until [ "$(cat build/generated/launch.complete | wc -l)" -eq 4 ]; do sleep 10; done
+          sleep 10
+
+      - name: Start RPC Node
+        run: make run-rpc-node-skipbuild &
+
+      - name: Run Integration Test (${{ matrix.test.name }})
+        run: |
+          IFS=$'\n'
+          for script in $(echo '${{ toJson(matrix.test.scripts) }}' | jq -r '.[]'); do
+            bash -c "$script"
+          done
+          unset IFS
+
+      - name: Upload Test Logs (if present)
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-logs-${{ matrix.test.name }}
+          path: |
+            integration_test/output/

.github/workflows/codex_lumen_enforcer.yml

@@ -0,0 +1,32 @@
+name: Codex Lightdrop Enforcer
+
+on:
+  push:
+    paths:
+      - 'LumenCardKit_v2.0/**'
+
+jobs:
+  flow:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: 📦 Checkout repository
+        uses: actions/checkout@v3
+
+      - name: 🐍 Set up Python 3.10
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+
+      - name: 📥 Install dependencies
+        run: |
+          cd LumenCardKit_v2.0
+          pip install -r requirements.txt
+
+      - name: ✨ Run Sovereign Flow
+        run: |
+          set -euo pipefail
+          cd LumenCardKit_v2.0
+          python3 generate_qr_code.py
+          python3 sunset_wallet.py
+          python3 x402_auto_payout.py

.github/workflows/enforce-labels.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: yogevbd/enforce-label-action@2.1.0
-      with:
-        REQUIRED_LABELS_ANY: "app-hash-breaking,non-app-hash-breaking"
-        REQUIRED_LABELS_ANY_DESCRIPTION: "Select at least one label ['app-hash-breaking', 'non-app-hash-breaking']"
+      with: non-app-hash-breaking
+        REQUIRED_LABELS_ANY: "non-app-hash-breaking"
+        REQUIRED_LABELS_ANY_DESCRIPTION: "Select at least one label ['non-app-hash-breaking']"
 

.github/workflows/golangci.yml

@@ -1,4 +1,5 @@
 name: golangci-lint
+
 on:
   push:
     tags:
@@ -8,22 +9,28 @@ on:
       - main
       - seiv2
   pull_request:
+
 permissions:
   contents: read
-  # Optional: allow read access to pull request. Use with `only-new-issues` option.
+  # Uncomment below if you want `only-new-issues` or PR inline annotations
   # pull-requests: read
+
 jobs:
   golangci:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v3
+      - name: Set up Go
+        uses: actions/setup-go@v3
         with:
           go-version: 1.21
-      - uses: actions/checkout@v3
-      - name: golangci-lint
+          cache: true
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v3
         with:
-          # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
           version: v1.60.1
           args: --timeout 10m0s