# BOX Token Launch Runbook

Date: 2026-06-11

This runbook keeps BOX moving from local build to private EVM staging to public Zweichain without leaking keys or turning the site into investment marketing.

## 1. Preflight

Required non-secret decisions:

- Public site target: `box.zweichain.net`
- Contract name: `BOX Boxing AI Token`
- Symbol: `BOX`
- Decimals: `18`
- Supply: `1,000,000,000 BOX`
- Owner: treasury multisig
- Minting: constructor-only fixed mint

Required secret or deployment inputs:

- `BOX_TREASURY_MULTISIG`
- `BOX_DEPLOYER_PRIVATE_KEY`
- `BOX_PRIVATE_RPC_URL`
- `BOX_PRIVATE_CHAIN_ID`
- `BOX_PRIVATE_EXPLORER_URL`
- `ZWEICHAIN_PUBLIC_RPC_URL`
- `ZWEICHAIN_PUBLIC_CHAIN_ID`
- `ZWEICHAIN_PUBLIC_EXPLORER_URL`

Never commit `.env`.

## 2. Local checks

```powershell
npm install
npm run build
npm test
npm run check:env:private
```

Expected result:

- Contract compiles.
- Tests pass.
- Private environment check prints `BOX private environment OK`.

## 3. Private EVM deployment

```powershell
npm run deploy:private
npm run verify:private
```

Save outputs:

- `deployments/box-private.json`
- private explorer URL
- contract address
- chain ID
- treasury multisig balance

Private pass criteria:

- Total supply is exactly `1,000,000,000 BOX`.
- Treasury multisig owns the full supply.
- Owner is treasury multisig.
- `pause()` and `unpause()` are treasury-only.
- Normal transfer works after unpause.
- No `mint()` function is exposed.

## 4. Public Zweichain deployment

Do not continue until private deployment passes.

```powershell
npm run check:env:public
npm run deploy:public
npm run verify:public
```

Save outputs:

- `deployments/zweichain-public.json`
- public explorer URL
- contract address
- chain ID
- treasury multisig balance

## 5. Site update after public deploy

Update:

- `metadata/box.token.json`
- `metadata/metamask-watch-asset.template.json`
- `site-status.json`
- `index.html` network status copy
- the visible launch console on `index.html`

Do not publish the public contract address until the deployment record and verification script agree.

## 6. Heian link card

Proposed card:

> BOX - Boxing AI Token: champion-led boxing matching, gym pilots, Unity training, and robot physical intelligence on Zweichain.

The card should link to `https://box.zweichain.net`.

## 7. Wording guardrails

Allowed:

- utility token,
- gym pilot credits,
- coach review credits,
- training-session credits,
- boxing AI contribution rewards,
- future Unity app unlocks.

Avoid:

- profit promise,
- investment return,
- guaranteed appreciation,
- athlete or gym speculation,
- medical claims,
- unapproved champion names, photos, records, or endorsements.