4.6. Phase 6: Testnet Deployment & Audit

fhenix-fairmarket/
├── .github/workflows/
│ ├── deploy-testnet.yml # Sequential deployment + smoke test automation
│ └── ci-contracts.yml # Pre-deploy security gates (Slither, coverage)
│
├── packages/contracts/
│ ├── deploy/
│ │ ├── 00_deploy_adapters.ts # CofheAdapter + NFTGuard deployment
│ │ ├── 01_deploy_core_proxy.ts # UUPS Proxy + initialization
│ │ └── 02_setup_factory.ts # AuctionFactory cloning setup
│ └── test/
│ ├── mocks/ # MockEigenLayerAVS, MockCofhe for final validation
│ └── integration/CoFHEFlow.test.ts # End-to-end cycle verification
│
├── packages/keeper/
│ ├── docker-compose.yml # Production-ready Keeper stack (Redis + services)
│ └── config.ts # Testnet RPC, AVS endpoints, alert thresholds
│
├── docs/
│ ├── architecture/async-cofhe-flow.md # Visual data flow for auditors
│ ├── operations/monitoring-kpis.md # KPI definitions + alerting logic
│ ├── security-model.md # Threat matrix + mitigation proofs
│ └── audit/audit-checklist.md # P0/P1 verification checklist
│
└── monitoring/
 ├── alerts.yml # Prometheus/Grafana alert rules
 ├── dashboard.json # Pre-built Grafana dashboard import
 └── kpi-export.ts # Script to export metrics for audit reports

# .github/workflows/deploy-testnet.yml
name: Deploy to Fhenix Testnet
on:
 push:
 branches: [release/testnet]
 workflow_dispatch:
 
jobs:
 deploy:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v4
 
 - name: Setup Node & pnpm
 uses: pnpm/action-setup@v2
 with:
 version: 9
 run_install: true
 
 - name: Deploy Adapters
 run: pnpm hardhat run packages/contracts/deploy/00_deploy_adapters.ts --network fhenix-testnet
 env:
 RPC_URL: ${{ secrets.FHENIX_TESTNET_RPC }}
 PRIVATE_KEY: ${{ secrets.DEPLOYER_PK }}
 
 - name: Deploy Core Proxy
 run: pnpm hardhat run packages/contracts/deploy/01_deploy_core_proxy.ts --network fhenix-testnet
 env: { RPC_URL: ${{ secrets.FHENIX_TESTNET_RPC }}, PRIVATE_KEY: ${{ secrets.DEPLOYER_PK }} }
 
 - name: Verify Contracts
 run: pnpm hardhat verify --network fhenix-testnet $(cat .deployed-addresses.json | jq -r '.proxy')
 
 - name: Smoke Test
 run: pnpm hardhat test:integration --network fhenix-testnet

# monitoring/alerts.yml (Prometheus Rule Format)
groups:
 - name: fhenix-fairmarket-critical
 rules:
 - alert: CoFHE_Resolution_Latency_High
 expr: avg(cofhe_resolution_latency_seconds) > 300
 for: 5m
 labels: { severity: critical }
 annotations:
 summary: "CoFHE resolution latency exceeds 300s threshold"
 action: "Add AVS validators or investigate FHEOS health"
 
 - alert: Fraud_Proof_Failure_Detected
 expr: rate(fraud_proof_verification_failures_total[5m]) > 0
 for: 1m
 labels: { severity: critical }
 annotations:
 summary: "Fraud proof verification failed - potential AVS manipulation"
 action: "Activate EmergencyHalt immediately"
 
 - alert: ClaimRefund_Success_Rate_Low
 expr: 1 - (rate(claim_refund_success_total[5m]) / rate(claim_refund_attempted_total[5m])) > 0.01
 for: 10m
 labels: { severity: warning }
 annotations:
 summary: "claimRefund() success rate below 99%"
 action: "Review Bundler gas limits and network congestion"

// scripts/chaos-test.ts
import { ethers, network } from 'hardhat';
import { expect } from 'chai';
 
describe('Chaos Engineering: Sequencer Outage Simulation', () => {
 it('should trigger Dynamic Dead Man\'s Switch after 30-min simulated outage', async () => {
 const [deployer, bidder] = await ethers.getSigners();
 const contract = await ethers.getContractAt('FhenixFairMarket', PROXY_ADDRESS);
 
 // 1. Create and fund auction
 await contract.connect(bidder).lockEscrow(AUCTION_ID, { value: ethers.parseEther('2') });
 await contract.connect(bidder).placeBid(AUCTION_ID, encryptedBid);
 
 // 2. Simulate sequencer halt by advancing time beyond dynamic timeout
 const timeout = await contract._getResolutionTimeout();
 await network.provider.send('evm_increaseTime', [Number(timeout) + 1800]); // +30 min buffer
 await network.provider.send('evm_mine');
 
 // 3. Trigger fallback void (permissionless)
 await contract.triggerFallbackVoid(AUCTION_ID);
 
 // 4. Verify state transition and fund recovery
 expect(await contract.getAuctionState(AUCTION_ID)).to.equal('VOIDED');
 expect(await contract.escrowBalances(AUCTION_ID, bidder.address)).to.equal(ethers.parseEther('2'));
 
 // 5. Verify FHE engine disabled
 expect(await contract.fheEngineActive(AUCTION_ID)).to.be.false;
 });
});