Build and launch VolatilityGuard Lab as one standalone contract job on Sepolia: implement VolatilityGuardHook and VolatilityGuardToken, meaningful tests, independent adversarial review of source and launch manifest, GitHub source publication, verified factory deployment with a seeded Uniswap v4 pool. No website or IPFS deliverable.

Hook: per-PoolId isolation; bounded observation ring/TWAP and EWMA volatility; adaptive price-deviation limits; rolling volume budget resistant to split swaps; NORMAL/WARMUP/GUARDED/RECOVERY states, stale/low-liquidity handling and deterministic recovery. Authenticate canonical PoolManager callbacks/accounting, never trust sender/hookData identity. Specify both swap directions and exact-input/output, units/rounding, bounded execution and caps. Keep LP exits possible and initialization/warmup non-bricking. Reverts cannot persist breaker transitions. No discretionary admin powers or claim of total MEV protection. Support arbitrary currencies.

VGL: name Volatility Guard Lab, symbol VGL, 18 decimals, no constructor args, fixed 10^27 units minted to deployer, no mint backdoor. Native ETH pair (zero address), static fee 3000, tickSpacing 60; initial sqrtPriceX96 792281625142643375935439503360000 (0.00000001 ETH/VGL). Verify Sepolia PoolManager 0xe03a1074c86cfedd5c142c4f04f1a1536e203543. Use existing verified periphery, no new deployed helper. Workers never receive deployment keys or broadcast.

Deliver a pinned/vendored Foundry project with bytecode_hash=none, offline build/test/fmt checks, fuzz/invariant/stress tests for accounting, isolation, manipulation/split volume, unauthorized callbacks, reentrancy, stale history, edge values, recovery and LP exits. Report actual counts, gas, failures and limitations. Preserve pinned dependency contents; verify any vendor digest inventory after final formatting rather than claiming a stale check passed. Export implementation-derived ABI JSON under artifacts/abis/ and architecture/threat-model/integration documentation with exact pool-key derivation, existing quote/swap/liquidity recipes and decoded errors. Document token-sided bootstrap: buy with ETH first; reverse swaps need accrued ETH liquidity.

Resolved operator policy: Sepolia univ4_hook policy v2, never mainnet. Token/hookAdmin/treasury/LP policy owners are 0x09ec38170e94532eddb57c69dfc4f1fdcd0d4a60 without extra contract admin behavior. Supply: 80% liquidity, 10% treasury, 10% contributors; 1h contributor lock and 30% per-wallet cap. Factory seeds up to 8e26 VGL units and ZERO ETH. Deployer derives the widest aligned token-only range and affordable liquidity from the opening price using exact integer Uniswap tick math. Configured deployer gas is capped by the existing 0.3 Sepolia ETH policy; no extra funding or spending authority.

Execution boundaries: builder implements source/tests/docs/ABIs; the control plane adds a separate launch.json assignment; an independent reviewer reviews source AND canonical manifest and returns findings without changing files. Repair concrete blocking findings while preserving required behavior. Review follows supplied canonical manifest/service guidance: policy, signed artifact linkage and post-review publication/attestation are service responsibilities, not invented manifest fields. Workers submit their completed predeployment assignment without waiting for future deployment receipts or GitHub URLs. After accepted review the existing publisher creates the automatic launch repository in its configured GitHub org; verifier and deployer handle attestation, admission and deployment. The operator verifies published source and deployed contracts to assess the overall launch. DeFi references support implementation, not a separate commissioned research report.