DATABASE_URL=postgres://praxis:praxis_local_only@127.0.0.1:55432/praxis
# Production requires the canonical HTTPS origin; redeploy after changing it.
APP_ORIGIN=http://localhost:3000
PRAXIS_NETWORK=testnet

# Generate unique secrets locally. Never commit real values.
PRAXIS_SESSION_PEPPER=replace-with-a-random-secret
PRAXIS_CREDENTIAL_PEPPER=replace-with-a-different-random-secret
PRAXIS_INTERNAL_TOKEN=replace-with-an-internal-reconciliation-token

# One Testnet operator key signs only after policy, simulation, and hosted
# Walrus evidence gates succeed. Never commit the real value.
PRAXIS_OPERATOR_KEY=suiprivkey...

# Optional transport overrides. Normal SDK reads use gRPC and GraphQL.
# SUI_GRPC_URL=https://fullnode.testnet.sui.io:443
# SUI_GRAPHQL_URL=https://graphql.testnet.sui.io/graphql
# NEXT_PUBLIC_SUI_RPC_URL=https://fullnode.testnet.sui.io:443

PRAXIS_AGENT_RATE_LIMIT=60

# Phase 1 seed and explicitly authorized live smoke inputs.
PRAXIS_PHASE1_OWNER_ADDRESS=0x...
PRAXIS_PHASE1_WALLET_ADDRESS=0x...
PRAXIS_PHASE1_VENDOR_ADDRESS=0x...
PRAXIS_PHASE1_DENIED_ADDRESS=0x...
PRAXIS_PHASE1_RESEARCH_TOKEN=px_agent_...
PRAXIS_PHASE1_TRADING_TOKEN=px_agent_...
PRAXIS_PHASE1_INJECTED_TOKEN=px_agent_...
PRAXIS_PHASE1_DRAIN_AMOUNT_MIST=
# PRAXIS_LIVE_TESTNET_CONFIRM=YES
# PRAXIS_SMOKE_RUN_ID=manual-stable-run-id

# Legacy direct SDK demo only. Hosted Phase 1 rejects sealed reasoning.
PRAXIS_SEAL_SECRET=