01 / THE MENTAL MODEL
A Hook is a rule layer around a market.
Uniswap v4 Hooks are contracts that can run at specific moments in a pool’s lifecycle—before or after actions such as a swap. That makes a pool programmable, but raw Hook development still demands contract engineering and careful security review.
Hook OS exposes a deliberately smaller, visual language. You combine reviewed primitives; the platform converts your choices into one immutable typed runtime configuration. You design the product logic without receiving an arbitrary-code escape hatch.
Creator Mode and Advanced Mode are two ways to write the same safe runtime—not a “simple product” and a hidden Solidity editor.
02 / TWO WAYS TO CREATE
No-code at every depth.
Start with the feeling.
Answer short questions about what should happen, when it should happen, and what users should see. Hook OS chooses a compatible structure and explains every decision in normal language.
- Best for first-time creators
- Opinionated safe defaults
- Immediate product preview
Compose the whole system.
Arrange friendly When / If / Then / Remember blocks, combine multiple primitives, and tune their bounded controls. The extra power is compositional—not technical configuration.
- No addresses, oracle IDs, or ABI fields
- Plain-language compatibility feedback
- The same protected publish path
03 / ONE PROJECT, START TO FINISH
Community Season, followed all the way through.
The Studio explains each step as you reach it. This is the whole arc at once, with the real values this project produces: every figure below is computed by the same functions the Studio calls, so it cannot quietly stop matching the product.Start from an outcome, not a mechanism
What should trading in this market make people want to do?
Make every completed trade move one shared campaign toward its next public level.- Best for
- Community quests, launch seasons, collaborative milestones, and products that need a reason to return.
- The rule in one sentence
- When a trade finishes successfully, if the shared campaign is still below its final milestone, then fill public progress and advance the community season.
- What the creator does not choose
- Progress has a ceiling. Levels are finite. The mechanic cannot move or tax funds.
Answer the questions the starting system asks
How should the shared campaign feel?
3 questions, each with a default that already compiles.- Campaign size
- Season — Choose how long the shared journey should feel.
- Milestone pace
- Steady — Choose how much activity is needed before the next level appears.
- Number of levels
- 12 levels — The final level is permanent and visible before launch.
See what the answers compiled into
What does the pool actually call, and what can it touch?
afterSwap — nothing else.- Permissions
- 0x0040. This is the exact bitmap Uniswap v4 checks; a callback that is not in it can never run.
- Capabilities
- EMIT_EVENT, READ_POOL, WRITE_STATE. There is no capability for moving someone else's funds, so no design can request one.
- Risk tier
- medium (score 7). Scored from what the design does, not from who wrote it.
- Blocking issues
- None. This design is publishable as it stands.
Run it against the market before anyone can lose anything
Does it still behave when the market is hostile?
6 scenarios completed without a policy escape.- The market it is tested against
- A 12 ETH swap into 300 ETH of liquidity at 180 bps realized volatility. These conditions are fixed for every design — a creator cannot soften them until the report passes.
- Scenarios
- That one swap plus adversarial variants of it, all deterministic — the same design always produces the same report.
- Invariants
- All 5 held: dynamic-fee-cap, hook-fee-cap, return-delta-cap, fee-split-conservation, non-negative-cashflow.
- What this is not
- A passing report is evidence the design stays inside its bounds, not an audit and not a promise that the market will succeed.
Publish the token, the auction, and the page together
What exists on the chain after signing once?
A fixed supply of 1,000,000,000 tokens, one auction, and one launch record binding them to this design's hash.- Auction
- 60% of supply, open for 300 blocks — ~1h on Ethereum.
- Minimum raise
- 0.01 ETH. Below it nothing graduates and every contributor withdraws their own ETH — the launch does not keep it.
- Platform trading fee
- 1%, immutable, applied in the official pool. It is not a number this example chose.
- This is a test network
- Every token and every ETH amount in this walkthrough is a Sepolia test asset with no monetary value.
04 / LIVE TYPED RUNTIME
Six primitives. Strange ideas welcome.
Each primitive reads settled pool state, stores only bounded state, and emits indexable events for the project’s dApp.CommunityProgressProgress
Make activity visible.Every settled swap can add its launched-token flow to a public meter. The meter has an immutable cap — 1×, 10×, or 100× the fixed supply, chosen before publishing — so the state cannot grow forever.
SeasonAdvancedSeasons
Turn volume into chapters.Advance a shared level when declared flow milestones are reached. Choose a pace — one level every 0.25×, 1×, or 4× the fixed supply — and a finite 7, 12, or 20-level season before publishing.
PublicCooldownStartedThreshold cooldown
Give the whole market a rhythm.A qualifying settled trade starts a 15, 45, or 60-second public cooldown. A minimum-flow threshold prevents dust trades from cheaply arming it.
MarketMovementMovement
Publish what the pool actually did.Emit the final Uniswap v4 tick and settled token flow after each completed swap, giving a connected dApp a canonical market-movement feed.
PriceBandCrossedPrice bands
Make the chart a world.Divide the live tick range into immutable 120, 600, or 1,800-tick bands and publish every crossing. Use them as zones, levels, gates, chapters, or game territory.
DirectionalStreakUpdatedDirection streaks
Turn momentum into a mechanic.Count consecutive settled swaps in the same direction. The opposite direction resets the story, and a hard cap of 3, 7, or 12 keeps the counter bounded.
A cooperative market season
Swaps fill public progress, milestones advance finite season levels, price-band crossings reveal new neighborhoods, and a direction streak gives the interface its live momentum story.
- Progress
- Seasons
- Price bands
- Direction streaks
Rewards and token burns are intentionally blocked at publish.
The current runtime does not contain a funded reward ledger, identity-safe claims, or a burn action. You may explore those ideas in a design preview, but they cannot pass the protected publish review today.
Arbitrary Solidity is not an Advanced Mode feature.
Unreviewed code and unrestricted external calls would break the shared safety model. New capabilities can arrive as reviewed, versioned primitives—not as a hidden code box.
05 / PUBLISH AND FUND
One transaction. No creator-funded LP position.
When review passes, the Studio quotes the current $2-equivalent ETH publish fee, adds gas, and asks for one Sepolia wallet transaction. That transaction publishes the fixed-supply token, immutable runtime commitments, launch metadata, and its CCA route together.
A CCA is the funding and price-discovery phase. Buyers submit bids against a changing clearing price. When a launch succeeds, the configured liquidity strategy uses launch demand to form the official Uniswap v4 market. The creator is not asked to deposit a conventional LP position from personal capital.
- 01Token supply commitsFixed launch allocation
- 02Buyers fund the CCAOnchain price discovery
- 03Conditions resolveRaise and auction outcome
- 04Liquidity migratesOfficial Hook OS v4 pool
06 / PRODUCT AND DISCOVERY
Launch a token, or launch the place people use it.
A connected product surface.
Design a real interface around the runtime: progress, levels, bands, streaks, funding state, and trading actions can read the same published launch and Hook events. It is a dApp tied to the product—not a detached static marketing export.
- Published from the same creator flow
- Uses reviewed wallet and launch adapters
- Gets a direct “Open dApp” route from Browse
The dApp is optional.
Not every token needs a custom experience. A creator can publish without one and still receive a clear project page, lifecycle status, chart, CCA participation, and post-migration buy-and-sell terminal.
- Searchable project summary
- Canonical launch evidence
- No empty or fake “app” button
The action changes with onchain state; a funding auction is never presented as a liquid spot market.
- 01Design
Describe the experience, choose safe behaviors, and preview what users will see.
- 02Publish
One Sepolia transaction commits the token, typed runtime, launch settings, and project metadata.
- 03Funding
Browse shows the CCA phase, clearing-price chart, project summary, and bid action.
- 04Trading
After successful settlement and migration, the project page becomes a simple buy-and-sell terminal.
- 05Experience
If the creator published a dApp, its button opens the connected product. Otherwise, trading remains available.
07 / ECONOMICS
Four numbers. No hidden category.
The immutable 1% applies to swaps through the project’s official Hook OS pool. Unrelated third-party pools are outside that Hook’s enforcement boundary.
08 / RUG-RESISTANT BY CONSTRUCTION
Protection is a boundary, not a slogan.
Hook OS removes specific control paths. It does not promise profit, eliminate market risk, or stand in for a third-party security audit.What construction removes
- Owner minting: the published token supply is fixed.
- Admin trading controls: no owner pause, blacklist, or upgrade switch in the fixed token.
- Arbitrary execution: runtime choices cannot call unknown contracts or move user assets freely.
- Unbounded state: counters, seasons, bands, and streaks have declared limits.
- Hidden official-pool fees: platform and creator shares are bounded and committed at publish.
- Creator LP withdrawal path: launch positions route to the immutable vault.
What remains risky
- Smart-contract risk: this Sepolia alpha has not been independently audited.
- Market risk: demand can disappear and a token can lose all market value.
- Launch risk: a CCA may fail to meet its stated conditions or form useful liquidity.
- Social risk: protected contracts cannot make a creator’s claims, community, or external links truthful.
- Interface risk: users should verify the network, contract, transaction, and wallet prompt.
- Scope: Hook OS guarantees apply only to the published components and official pool described here.
Sepolia test release. Balances here are test ETH, and no outside firm has reviewed these contracts. Use test assets only.
09 / CURRENT DEPLOYMENT
Inspect the Sepolia evidence.
These links are read from the project’s current deployment manifest at build time, so a future alpha redeploy updates this page with the new addresses.6 of 6 addresses below have published source: this repository’s Solidity recompiles to the exact bytecode the chain returns for them, and Sourcify holds that source for anyone to read. The fee ceiling is something you can check rather than something we assert.Creates the protected launch route and records its commitments.
0xf8C945DD8F4bf15278e07ca055e448Ce31514B52Runs the typed market behavior and official-pool fee rules.
0xD32aD583C86aa74aF8C3F59B4f40FDDc41B0a0C4Runs the drawn programs published from the free canvas, under the same fee ceiling as the kernel.
0xA2281E74731262371985399c30358d8Cb0597fCFAnchors each published program and its immutable configuration.
0xBDB239c21a7d1E92155E6Fa2F47B63d366e37D51Receives locked launch positions and recovery assets without an owner withdrawal path.
0x5CC474e6f5c242dd9FEd583f1a03673C9AEfa50dDeployed both hooks at addresses whose low bits are the permissions they declare, which is how v4 knows which callbacks to run.
0xC8B7f20559172d19C5027dFa963CDAf9da39CB6e0x66fdd2e08045b4e1af32e605dec6dcaecba0f3f24d918d986289a70924679ed2Inspect transactionTHE RULE CAN START AS A SENTENCE.