Docs / From demo to production

From demo to production

What has to happen, in order, before any real cashback is paid.

The public preview runs on a deterministic simulation. Simulated rounds prove the accounting and payout logic behave as designed; they do not prove anything about mainnet. Supplying a token address alone activates nothing.

The sequence 1. Clean production database. A new, separate database that has never held demo data. Demo records and signatures never move into it. 2. Secure signer. The developer wallet key is provisioned directly into the isolated signer without being displayed, logged or stored in code. Only its public address is shown for verification. Signing stays disabled. 3. Mint and creator verification. The token is checked on mainnet: mint program, SOL quote, that the developer wallet is the coin's creator-fee recipient, and that Pump's own cashback-coin mode is off. 4. Real indexing and reconciliation. Genuine purchases, sales and transfers are indexed from the mint's creation. Every holder's indexed quantity is reconciled against on-chain balances; mismatches are withheld, never estimated. 5. Paused, read-only validation. Claimable fees, eligible wallets, losses and multipliers are reviewed while nothing can be signed. 6. One approved, bounded test. One fee collection and one round with an explicit maximum spend. The signer enforces the same limits independently. Afterwards the system returns to paused automatically, and every transaction is reconciled on chain. 7. Explicit ongoing activation. Scheduled rounds start only after the test results reconcile and continuous operation is separately approved.