THE LAW OF EVERY LAUNCH

Launchpads before this launched tokens. TAVERN launches economies. One launchGame() deploys a full game: fixed-supply coin, Uniswap v4 pool with the tithe hook, vault-birth NFT population, staking floor and an ETH-backed yield token — atomically, or not at all. Creators configure a bounded parameter set; the engine code is fixed for every launch — no arbitrary code, ever. The Sherwood-cast game is launch #1, the flagship proof. This page is the template every launch runs.

§0THE ONE-SENTENCE GAME

Lock the coin to be born a villager; Peasants forge $GOLD, Sheriffs tax it, and every swap of the coin on its Uniswap v4 pool pays a real-ETH tithe into the game's Treasury that backs $GOLD with hard ETH — so the game token is a claim on real trading volume, not a promise.

§1ASSETS

§2THE LOOP — WHY EACH ACTOR KEEPS PLAYING

• Peasant: stake → forge GOLD → cash to ETH at backing, or burn it upgrading rarity. Upgrade iff you believe future volume > current backing. A real bet, not a ponzi step.
• Sheriff: earns claim tax + exit-gamble losses + mint-snipes + a direct ETH slice of every raid. Sheriffs are long game activity itself.
• Trader who never mints: swaps pay the tithe. Exiting the coin literally funds the players who stay. Dumps feed the room they dump on.
• Coin holder: births + tolls only burn; treasury buybacks only burn. Supply is monotone-decreasing from game activity.

§3THE V4 HOOK — THE 2% BREAKDOWN

• Pool: native ETH / coin, dynamic-fee, hook attached. Total swap cost to trader: 2.00%.
• The tithe is skimmed via afterSwap-returns-delta, taken only on the ETH-denominated side (input on buys, output on sells) — the treasury accrues pure ETH and never market-sells the coin.
• Applies symmetrically to buys and sells. Symmetry is the no-exit-friction proof: selling is never dearer than buying.
• No owner levers on the fee. Constants, immutable, verified in the constructor against the mined hook-address flag mask.

§4RAIDS — TREASURY DISTRIBUTION

Permissionless raid() when the treasury ≥ threshold (1 ETH):

§5$GOLD BACKING — THE EXCHEQUER

• cashOut(amount): burn GOLD, receive pot × amount / totalSupply ETH.
• Invariant G1: a cash-out leaves the backing ratio (pot/supply) unchanged. Fee inflow and upgrade-burns strictly raise it. The only dilutant is new emission, which is hard-capped — the claim on the pot is finite and the long-run ratio is volume-driven.
• GOLD's market price has a hard floor at the backing ratio (arb: buy under backing → burn → profit) and trades above it on upgrade demand.
• No first-mover advantage → no bank run. Queue-free by construction.

§7CLASS & RARITY — FLAGSHIP NUMBERS

§10THE FACTORY — WHAT A CREATOR CAN AND CANNOT TOUCH

• launchGame(cfg) is atomic: coin (CREATE2, fixed supply), v4 pool + hook wiring, Villagers + Floor + Exchequer, initial liquidity from the launch payment with the LP position locked/burned. All-or-nothing (S6).
• Per-game isolation is an invariant: treasuries, backings and fee accrual never cross between games.
• S7: no post-launch lever exists on any instance; factory owner powers end at parameter bounds.

§11THE CREATIVE SKIN — YOURS ENTIRELY

The economics are law. The world is yours. Every launch runs the identical engine — same fees, same splits, same invariants — but each game can look like its own world: its own earner and predator classes, yield-token name, rarity names, lore and palette. The skin lives in the coin itself: TavernCoin.tokenMetadata, a ≤512-byte string set once at launch (LaunchConfig.coinMetadata) and immutable forever, like everything else. A skin changes zero numbers — the yield token's real name on chain stays GOLD, the backing stays ETH, the odds stay whatever the creator's bounded dials said.

Inline theme — compact JSON in the metadata string:

The four built-in packs — art the tavern owns, an earner/predator pair each:

PACK	EARNER	PREDATOR	ACCENT
sherwood	Peasant	Sheriff	forest
outlaws	Merchant	Outlaw	ember
castle	Blacksmith	Knight	steel
wilds	King	Wolf	night

External themes — {"v":1,"uri":"https://…/theme.json"} on chain, pointing at a JSON file with the same fields plus optional custom sprites:

• Fetched by the game page with a hard 3-second timeout; any failure (timeout, non-200, bad JSON) → tavern-classic skin. The page never blocks on a theme.
• uri and sprite URLs must be https; sprite URLs are only ever rendered as <img src> — never fetched as code, never inlined.
• External themes may not point at further URIs (no recursion).

Sanitization — enforced on every theme, inline or external:

§6ATTACKS, AND WHY THEY DIE

• Death spiral (GOLD hyperinflation) — the Wolf Game killer. Hard emission cap + ETH backing + upgrade burns: GOLD is never worth zero while the pot is non-zero.
• Wash trading — fees aren't rewarded to traders; washing only donates to the treasury. Self-defeating.
• Peek-and-abandon mint — burn happens at commit, commits non-refundable, open birthRevealFor. Dead.
• Exit-roll simulation — two-phase commit/reveal on unstake; the seed block doesn't exist at commit; the >256-block fallback is worst-case for the committer. Dead.
• Sheriff cartel steering steals — the steal pool freezes at the victim's commit; staking afterwards can't steer selection. Dead.
• Bank-run on the Exchequer — cash-outs are ratio-neutral (G1); no first-mover advantage, so no run.
• Raid MEV — permissionless with a fixed split; the buyback leg takes a caller-supplied minOut checked against a 30-min TWAP floor from the hook's own observations. Sandwiching a capped, TWAP-floored buy is unprofitable.
• Vault under-collateralization — totalVaulted == coin held for vaults is a tested engine invariant; redeems can never exceed vaults.
• Emission-cap griefing — cap consumption is proportional to real staking (per-token rate × time); cap sized ≥ 4 years of full-population forging.

§8WHAT IS EXPLICITLY NOT IN THE GAME

§9SOLVENCY INVARIANTS — TESTED, AND SHOWN LIVE IN THE UI

LIVE STATUS

THE FLAGSHIP CAST

⌂ back to the TAVERN · play the flagship · launch a game