code/CL8Y-web
4
0
Fork 0
Code Issues 4 Pull requests 4 Projects Releases Packages Wiki Activity

Reposition site: Bridge + DEX products, CL8Y utility token, tight copy #1

New issue
Closed
opened 2026-08-25 06:30:06 +00:00 by PlasticDigits · 9 comments
PlasticDigits commented 2026-08-25 06:30:06 +00:00 (Migrated from gitlab.com)
Copy link

Summary

Reposition cl8y.com as a product site for CL8Y Bridge and CL8Y DEX, not a memecoin / GameFi / “expensive token” landing page. Present CL8Y as a decentralized utility token that unlocks reduced fees on CL8Y DEX trading tiers. Keep above-the-fold and section copy extremely tight. Put the longer human explainer in the footer.

This issue covers information architecture, visual redesign, product CTAs, token narrative, and site-wide copy. Token addresses, listings, and trade venues are not in this issue — see the companion token-directory issue.

Current codebase

The site is a static Vite + React 19 SPA (src/app/index.tsx). Almost all marketing lives on a single long homepage (src/app/Home.tsx) that lazy-loads feature sections. There is no global nav. Routes /engine, /security, /tokenomics, /community, /institutional exist but render isolated section shells, not full pages.

Current IA (homepage, top to bottom):

  1. Hero (src/features/hero/Hero.tsx) — “CL8Y Ecosystem” + “Cross-Chain Bridge • DeFi • GameFi”. Price / market cap / circulating supply / burned counters. Primary CTA is Buy CL8Y (TidalDex). Secondary is More exchanges. Fake animated buy ticker (BuyTicker) generates random addresses and amounts.
  2. HeroImageCard — “Building the Future of DeFi.” + GameFi / UST1 burn / perpetuals / lending copy. Hardcoded TidalDex buy link.
  3. Engine — heading only (“UST1 burn economics”) plus Home.tsx cards about ecosystem-wide CL8Y burns and an “Autoscarcity” loop diagram.
  4. Security / LayeredSecurity — long Bridge / Guardian / canceler / OFAC / law-enforcement copy. Bridge is treated as one section among many, not a primary product.
  5. Tokenomics — heading “CL8Y governance • USTR utility • UST1 stablecoin” plus a buried “Addresses & Locks” card.
  6. Community — Telegram / X.
  7. GameFiAI — large PROTOCASS / Karnyx / TigerHunt lore block.
  8. Institutional — whitepapers, audits, API, partner logo grid (trading + listings mixed), contact.
  9. Footer (inline in Home.tsx) — legal disclaimer + law-enforcement notice. No product explainer.

Current positioning problems:

  • Copy frames CL8Y as an “ecosystem token” / deflationary burn asset, not a DEX utility token.
  • Primary CTA is “Buy CL8Y” on a third-party DEX (TidalDex), not Bridge or CL8Y DEX.
  • GameFi, UST1, USTR, perpetuals, lending, and memecoin-style ticker occupy first-screen and mid-page attention.
  • index.html meta/OG/Twitter tags still say “GameFi Platform”, UST1, PROTOCASS.
  • STYLE_GUIDE.md and PROJECT_GUIDE.md still encode the old dual-track “meme + institutional” brand.
  • Bridge security copy is accurate but too long for the new “tight copy” rule. DEX (dex.cl8y.com) is not a first-class product on the page at all.
  • Whitepaper still describes UST1 burn tiers, not CL8Y DEX fee tiers. Do not invent tier numbers from the whitepaper.

There is no automated test suite (no *.test.* / *.spec.* files).

Why this is needed

The live site sells a story the products no longer match: expensive memecoin, GameFi lore, UST1/USTR, CEX-era “buy the token” energy. The products that exist and should be used are:

CL8Y’s job on this site is: utility token → lower CL8Y DEX trading fees by tier. Visitors should understand that in one screen, then leave to a product. Long context belongs in the footer, not the hero.

Constraints / guardrails

  1. Copy: Above-the-fold and section bodies stay extremely short. Prefer one headline, one sentence, two product links. No hype, no “ecosystem”, no “the future of DeFi”, no burn-scarcity sales pitch as the lead.
  2. Products: Primary CTAs are Bridge and DEX (https://bridge.cl8y.com, https://dex.cl8y.com). “Trade CL8Y” / token directory is secondary, not the hero goal.
  3. Token narrative: CL8Y = decentralized utility token for reduced fees on CL8Y DEX trading tiers. Do not invent tier names, thresholds, or percentages. If exact tiers are not supplied in this issue or a follow-up, say that holding / using CL8Y reduces DEX fees by tier and link to dex.cl8y.com for current tiers.
  4. Do not lead with: memecoin, “expensive”, GameFi / PROTOCASS / Karnyx, UST1, USTR, perpetuals, lending, fake buy tickers, CEX.
  5. GameFi / UST1 / USTR: Remove from primary IA, meta tags, and hero. Do not keep a full GameFi section on the homepage. Legacy whitepaper PDFs may remain as downloads in a docs/footer link, labeled as historical.
  6. Bridge security: Keep the canceler / delay-window facts, but compress. Do not delete security claims; relocate detail to footer explainer or a short “How the bridge works” block.
  7. Legal: Keep a disclaimer and law-enforcement notice. Rewrite so they match utility-token + Bridge/DEX products (drop USTR/UST1/GameFi from the disclaimer unless those assets are still live and must be named).
  8. Stack: Stay on the existing Vite + React + Tailwind + Framer Motion static SPA. No SSR, no new backend, no wallet-connect requirement for the marketing page.
  9. Theme: Keep the existing gold / midnight / aqua system in src/theme/tokens.ts and STYLE_GUIDE.md unless a visual change is required for the new IA. Do not restyle into a meme template.
  10. Motion: Respect prefers-reduced-motion. Do not add autoplaying fake market activity.
  11. Links: External product links use rel="noopener noreferrer" (or equivalent). No open redirects. No hardcoded third-party “Buy CL8Y” as the primary button.
  12. Docs in-repo: Update index.html meta, STYLE_GUIDE.md tagline/pillars, and PROJECT_GUIDE.md dual-track / trading sections so they do not contradict the new site. Do not rewrite CL8Y_WHITEPAPER.md in this issue.
  13. Scope split: Do not build the token-address / listings / venues directory here. Leave a clearly labeled placeholder or nav target for that work.

Relevant files

Area Files
Shell / routes src/app/index.tsx, src/app/Home.tsx, src/main.tsx
Hero / ticker src/features/hero/Hero.tsx, src/components/visuals/HeroImageCard.tsx, src/components/visuals/BuyTicker.tsx
Mid-page story src/features/engine/Engine.tsx, src/features/tokenomics/Tokenomics.tsx, src/features/gamefi/GameFiAI.tsx
Bridge src/features/security/Security.tsx, src/features/security/LayeredSecurity.tsx, src/components/visuals/GuardianBridgeScene.tsx
Community / institutional / footer src/features/community/Community.tsx, src/features/institutional/Institutional.tsx (footer is currently inside Home.tsx)
SEO index.html
Brand docs STYLE_GUIDE.md, PROJECT_GUIDE.md
Shared UI src/components/ui/Button.tsx, src/components/ui/Card.tsx, src/components/ui/SectionHeading.tsx, src/theme/tokens.ts
Live metrics (keep if still useful, de-emphasize) src/hooks/useCl8yPrice.ts, src/hooks/useSupplyCirculating.ts, src/hooks/useSupplyTotal.ts, src/hooks/useBurnStats.ts

Recommended direction

  1. Add a real site chrome: sticky header with logo, products (Bridge, DEX), token directory target, community. Persistent footer with short explainer + legal.
  2. New homepage IA (suggested):
    • Hero: what CL8Y is (utility token for DEX fee tiers) + two equal product CTAs (Open Bridge, Open DEX). Optional tertiary “Token addresses & markets”.
    • Products: two short cards — Bridge (bridge.cl8y.com) and DEX (dex.cl8y.com). One sentence each.
    • Utility: 3–4 lines on fee tiers, linking to DEX for current schedule. No tokenomics essay.
    • Trust: compressed Bridge security (canceler network, delay window) and audit link.
    • Community: Telegram + X, unchanged destinations unless those URLs change.
    • Footer explainer: the longer human paragraph (what the products are, what CL8Y does, what it is not). Then disclaimer + law-enforcement.
  3. Delete or unmount from /: GameFiAI, BuyTicker, Engine “UST1 burn / Autoscarcity” cards, HeroImageCard GameFi caption, “Buy CL8Y” / “More exchanges” as hero primaries. Isolated /engine and similar routes should either redirect to /#… or be removed so they do not keep the old story.
  4. Copy bar: headline ≤ ~8 words; subhead ≤ 1 sentence; section body ≤ 2 short sentences unless it is the footer explainer. Review every string in the files above.
  5. Visual: product-first layout, less clipart collage, less lore art. Keep institutional gold/black. Hero metrics (price/mcap) are optional and must not outrank product CTAs.
  6. SEO: rewrite <title>, description, OG, and Twitter tags to Bridge + DEX + utility token. Drop GameFi / UST1 / PROTOCASS.

Suggested hero copy direction (not mandatory wording):

CL8Y — decentralized utility token. Hold CL8Y for reduced fees on CL8Y DEX trading tiers.
[Open Bridge] [Open DEX]

Acceptance criteria

  • Homepage primary message is Bridge + DEX + CL8Y as a DEX fee-tier utility token.
  • https://bridge.cl8y.com and https://dex.cl8y.com are visible without scrolling on desktop and within one screen/action on mobile.
  • No homepage (or meta) copy presents CL8Y as a memecoin, “expensive” token, GameFi play, or UST1/USTR ecosystem token.
  • GameFi / PROTOCASS / Karnyx / TigerHunt section is gone from /.
  • Fake buy ticker is gone.
  • “Buy CL8Y” is not the primary hero CTA. If a buy path remains, it is secondary and points at the token-directory work (or DEX), never a CEX.
  • Above-fold and section copy is tight; a longer explainer exists in the footer and is readable, not marketing fluff.
  • Footer still includes a current disclaimer and law-enforcement contact path.
  • index.html title/description/OG/Twitter match the new positioning.
  • STYLE_GUIDE.md tagline/pillars and PROJECT_GUIDE.md dual-track / CEX trading notes no longer contradict the site.
  • prefers-reduced-motion still disables non-essential motion.
  • Isolated old routes do not re-surface the retired narrative as if it were current.
  • Typecheck and lint stay clean (yarn typecheck, yarn lint). yarn build succeeds.

Test plan — functional paths

  1. First paint / hero

    • Cold load /. Confirm headline, one-line utility statement, Bridge CTA, DEX CTA.
    • Click Bridge → https://bridge.cl8y.com in a new tab. Click DEX → https://dex.cl8y.com in a new tab.
    • Keyboard: tab to both CTAs, activate with Enter/Space.
    • Reduced motion: prefers-reduced-motion: reduce — no looping ticker, no distracting animation.

  2. Products section

    • Both product cards/links present, correct URLs, visible labels (not icon-only).
    • Deep link from header (if added) scrolls or routes correctly.

  3. Utility / fee-tier copy

    • Page states CL8Y reduces CL8Y DEX fees by tier.
    • No fabricated tier table unless values are confirmed.
    • Link to DEX for current tiers works.

  4. Bridge trust block

    • Canceler / delay-window facts still present in compressed form.
    • 3D/scene (if kept) does not block CTAs or break mobile layout.
    • Audit link still opens the official audit resource.

  5. Community

    • Telegram and X open the existing official profiles from src/data/links.ts (or the new chrome using that source).

  6. Footer explainer + legal

    • Explainer is longer than hero copy and answers: what Bridge is, what DEX is, what CL8Y is for, what it is not.
    • Disclaimer and law-enforcement block remain; email contact@ceramicliberty.com still works.
    • No leftover USTR/UST1/GameFi language unless still required for legal accuracy.

  7. SEO / share

    • View-source index.html: title + meta + OG + Twitter have no GameFi/UST1/PROTOCASS.
    • Shared-link preview (or local OG debugger) shows the new title/description.

  8. Legacy routes

    • /engine, /tokenomics, /cl8y_whitepaper, and any remaining section routes either 404/redirect or clearly mark historical docs. They must not look like the current product homepage.

  9. Responsive

    • Desktop (≥1280) and mobile (375×667): CTAs not clipped; footer explainer readable; no horizontal overflow.

  10. Build

    • yarn typecheck, yarn lint, yarn build pass. yarn preview serves the new page.

Test plan — attack, hack, and abuse vectors

This is a static marketing site. Highest risk is misleading users into the wrong product, token, or signature flow.

  1. Phishing / lookalike CTAs

    • Confirm Bridge and DEX hrefs are exactly https://bridge.cl8y.com and https://dex.cl8y.com (https, correct host, no @, no extra subdomain).
    • No javascript: or protocol-relative tricks. No redirector query params (?url=, ?next=).

  2. Tabnabbing

    • Every target="_blank" has rel including noopener (and noreferrer for untrusted destinations).

  3. Open redirect

    • Product/header links are constants, not taken from window.location / query / hash.

  4. XSS

    • No dangerouslySetInnerHTML for the new copy. Footer explainer is static React text, not Markdown from an untrusted URL.

  5. Clickjacking

    • If not already set at the host, document that production should send X-Frame-Options: DENY or CSP frame-ancestors 'none'. Page must not introduce a frameable wallet/connect widget.

  6. Fake market activity

    • BuyTicker (random addresses + confetti) must not remain; it is a social-engineering / wash-trading visual. If any live feed is shown, it must be labeled as live and sourced from a real endpoint.

  7. SEO / share-card poisoning

    • OG tags must not claim listings, CEX support, or price guarantees. No user-controlled query string reflected into title/meta.

  8. Supply-chain / embeds

    • Do not add new third-party scripts for the redesign. If GeckoTerminal / X widgets remain, they stay sandboxed and are not required to understand the products.

  9. Legal / overclaim

    • Copy must not promise returns, “number go up”, or guaranteed fee amounts. Utility language must stay descriptive.

  10. Accessibility abuse

    • Skip link still works. CTAs are real <a>/<button>, not div-click traps that hide the real destination.

Verification criteria

Done when a reviewer can:

  1. Open / and, in under 10 seconds, say what CL8Y is for and click through to both live products.
  2. Search the rendered homepage and index.html for GameFi, PROTOCASS, Karnyx, UST1, USTR, memecoin, AscendEX, and “Buy CL8Y” as a primary CTA — no current-product hits except historical doc labels if any.
  3. Read the footer explainer and confirm it is the only long-form marketing copy.
  4. Confirm header/footer chrome exists and product links survive a hard refresh and a mobile pass.
  5. Confirm yarn typecheck, yarn lint, and yarn build succeed on the branch.

Out of scope

  • Token address / listings / trade-venue directory (companion issue).
  • Rewriting CL8Y_WHITEPAPER.md or shipping a new whitepaper.
  • Changes to the Bridge or DEX applications themselves.
  • New CEX or broker integrations.
## Summary Reposition cl8y.com as a product site for **CL8Y Bridge** and **CL8Y DEX**, not a memecoin / GameFi / “expensive token” landing page. Present CL8Y as a **decentralized utility token** that unlocks **reduced fees on CL8Y DEX trading tiers**. Keep above-the-fold and section copy extremely tight. Put the longer human explainer in the footer. This issue covers information architecture, visual redesign, product CTAs, token narrative, and site-wide copy. Token addresses, listings, and trade venues are **not** in this issue — see the companion token-directory issue. --- ## Current codebase The site is a static Vite + React 19 SPA (`src/app/index.tsx`). Almost all marketing lives on a single long homepage (`src/app/Home.tsx`) that lazy-loads feature sections. There is **no global nav**. Routes `/engine`, `/security`, `/tokenomics`, `/community`, `/institutional` exist but render isolated section shells, not full pages. **Current IA (homepage, top to bottom):** 1. **Hero** (`src/features/hero/Hero.tsx`) — “CL8Y Ecosystem” + “Cross-Chain Bridge • DeFi • GameFi”. Price / market cap / circulating supply / burned counters. Primary CTA is **Buy CL8Y** (TidalDex). Secondary is **More exchanges**. Fake animated buy ticker (`BuyTicker`) generates random addresses and amounts. 2. **HeroImageCard** — “Building the Future of DeFi.” + GameFi / UST1 burn / perpetuals / lending copy. Hardcoded TidalDex buy link. 3. **Engine** — heading only (“UST1 burn economics”) plus Home.tsx cards about ecosystem-wide CL8Y burns and an “Autoscarcity” loop diagram. 4. **Security / LayeredSecurity** — long Bridge / Guardian / canceler / OFAC / law-enforcement copy. Bridge is treated as one section among many, not a primary product. 5. **Tokenomics** — heading “CL8Y governance • USTR utility • UST1 stablecoin” plus a buried “Addresses & Locks” card. 6. **Community** — Telegram / X. 7. **GameFiAI** — large PROTOCASS / Karnyx / TigerHunt lore block. 8. **Institutional** — whitepapers, audits, API, partner logo grid (trading + listings mixed), contact. 9. **Footer** (inline in `Home.tsx`) — legal disclaimer + law-enforcement notice. No product explainer. **Current positioning problems:** - Copy frames CL8Y as an “ecosystem token” / deflationary burn asset, not a DEX utility token. - Primary CTA is “Buy CL8Y” on a third-party DEX (TidalDex), not Bridge or CL8Y DEX. - GameFi, UST1, USTR, perpetuals, lending, and memecoin-style ticker occupy first-screen and mid-page attention. - `index.html` meta/OG/Twitter tags still say “GameFi Platform”, UST1, PROTOCASS. - `STYLE_GUIDE.md` and `PROJECT_GUIDE.md` still encode the old dual-track “meme + institutional” brand. - Bridge security copy is accurate but too long for the new “tight copy” rule. DEX (`dex.cl8y.com`) is not a first-class product on the page at all. - Whitepaper still describes UST1 burn tiers, not CL8Y DEX fee tiers. Do **not** invent tier numbers from the whitepaper. There is no automated test suite (no `*.test.*` / `*.spec.*` files). --- ## Why this is needed The live site sells a story the products no longer match: expensive memecoin, GameFi lore, UST1/USTR, CEX-era “buy the token” energy. The products that exist and should be used are: - https://bridge.cl8y.com - https://dex.cl8y.com CL8Y’s job on this site is: **utility token → lower CL8Y DEX trading fees by tier**. Visitors should understand that in one screen, then leave to a product. Long context belongs in the footer, not the hero. --- ## Constraints / guardrails 1. **Copy:** Above-the-fold and section bodies stay extremely short. Prefer one headline, one sentence, two product links. No hype, no “ecosystem”, no “the future of DeFi”, no burn-scarcity sales pitch as the lead. 2. **Products:** Primary CTAs are Bridge and DEX (`https://bridge.cl8y.com`, `https://dex.cl8y.com`). “Trade CL8Y” / token directory is secondary, not the hero goal. 3. **Token narrative:** CL8Y = decentralized utility token for **reduced fees on CL8Y DEX trading tiers**. Do not invent tier names, thresholds, or percentages. If exact tiers are not supplied in this issue or a follow-up, say that holding / using CL8Y reduces DEX fees by tier and link to `dex.cl8y.com` for current tiers. 4. **Do not lead with:** memecoin, “expensive”, GameFi / PROTOCASS / Karnyx, UST1, USTR, perpetuals, lending, fake buy tickers, CEX. 5. **GameFi / UST1 / USTR:** Remove from primary IA, meta tags, and hero. Do not keep a full GameFi section on the homepage. Legacy whitepaper PDFs may remain as downloads in a docs/footer link, labeled as historical. 6. **Bridge security:** Keep the canceler / delay-window facts, but compress. Do not delete security claims; relocate detail to footer explainer or a short “How the bridge works” block. 7. **Legal:** Keep a disclaimer and law-enforcement notice. Rewrite so they match utility-token + Bridge/DEX products (drop USTR/UST1/GameFi from the disclaimer unless those assets are still live and must be named). 8. **Stack:** Stay on the existing Vite + React + Tailwind + Framer Motion static SPA. No SSR, no new backend, no wallet-connect requirement for the marketing page. 9. **Theme:** Keep the existing gold / midnight / aqua system in `src/theme/tokens.ts` and `STYLE_GUIDE.md` unless a visual change is required for the new IA. Do not restyle into a meme template. 10. **Motion:** Respect `prefers-reduced-motion`. Do not add autoplaying fake market activity. 11. **Links:** External product links use `rel="noopener noreferrer"` (or equivalent). No open redirects. No hardcoded third-party “Buy CL8Y” as the primary button. 12. **Docs in-repo:** Update `index.html` meta, `STYLE_GUIDE.md` tagline/pillars, and `PROJECT_GUIDE.md` dual-track / trading sections so they do not contradict the new site. Do **not** rewrite `CL8Y_WHITEPAPER.md` in this issue. 13. **Scope split:** Do not build the token-address / listings / venues directory here. Leave a clearly labeled placeholder or nav target for that work. --- ## Relevant files | Area | Files | | --- | --- | | Shell / routes | `src/app/index.tsx`, `src/app/Home.tsx`, `src/main.tsx` | | Hero / ticker | `src/features/hero/Hero.tsx`, `src/components/visuals/HeroImageCard.tsx`, `src/components/visuals/BuyTicker.tsx` | | Mid-page story | `src/features/engine/Engine.tsx`, `src/features/tokenomics/Tokenomics.tsx`, `src/features/gamefi/GameFiAI.tsx` | | Bridge | `src/features/security/Security.tsx`, `src/features/security/LayeredSecurity.tsx`, `src/components/visuals/GuardianBridgeScene.tsx` | | Community / institutional / footer | `src/features/community/Community.tsx`, `src/features/institutional/Institutional.tsx` (footer is currently inside `Home.tsx`) | | SEO | `index.html` | | Brand docs | `STYLE_GUIDE.md`, `PROJECT_GUIDE.md` | | Shared UI | `src/components/ui/Button.tsx`, `src/components/ui/Card.tsx`, `src/components/ui/SectionHeading.tsx`, `src/theme/tokens.ts` | | Live metrics (keep if still useful, de-emphasize) | `src/hooks/useCl8yPrice.ts`, `src/hooks/useSupplyCirculating.ts`, `src/hooks/useSupplyTotal.ts`, `src/hooks/useBurnStats.ts` | --- ## Recommended direction 1. **Add a real site chrome:** sticky header with logo, products (Bridge, DEX), token directory target, community. Persistent footer with short explainer + legal. 2. **New homepage IA (suggested):** - Hero: what CL8Y is (utility token for DEX fee tiers) + two equal product CTAs (Open Bridge, Open DEX). Optional tertiary “Token addresses & markets”. - Products: two short cards — Bridge (`bridge.cl8y.com`) and DEX (`dex.cl8y.com`). One sentence each. - Utility: 3–4 lines on fee tiers, linking to DEX for current schedule. No tokenomics essay. - Trust: compressed Bridge security (canceler network, delay window) and audit link. - Community: Telegram + X, unchanged destinations unless those URLs change. - Footer explainer: the longer human paragraph (what the products are, what CL8Y does, what it is not). Then disclaimer + law-enforcement. 3. **Delete or unmount from `/`:** `GameFiAI`, `BuyTicker`, Engine “UST1 burn / Autoscarcity” cards, HeroImageCard GameFi caption, “Buy CL8Y” / “More exchanges” as hero primaries. Isolated `/engine` and similar routes should either redirect to `/#…` or be removed so they do not keep the old story. 4. **Copy bar:** headline ≤ ~8 words; subhead ≤ 1 sentence; section body ≤ 2 short sentences unless it is the footer explainer. Review every string in the files above. 5. **Visual:** product-first layout, less clipart collage, less lore art. Keep institutional gold/black. Hero metrics (price/mcap) are optional and must not outrank product CTAs. 6. **SEO:** rewrite `<title>`, description, OG, and Twitter tags to Bridge + DEX + utility token. Drop GameFi / UST1 / PROTOCASS. Suggested hero copy direction (not mandatory wording): > **CL8Y** — decentralized utility token. Hold CL8Y for reduced fees on CL8Y DEX trading tiers. > [Open Bridge] [Open DEX] --- ## Acceptance criteria - [ ] Homepage primary message is Bridge + DEX + CL8Y as a DEX fee-tier utility token. - [ ] `https://bridge.cl8y.com` and `https://dex.cl8y.com` are visible without scrolling on desktop and within one screen/action on mobile. - [ ] No homepage (or meta) copy presents CL8Y as a memecoin, “expensive” token, GameFi play, or UST1/USTR ecosystem token. - [ ] GameFi / PROTOCASS / Karnyx / TigerHunt section is gone from `/`. - [ ] Fake buy ticker is gone. - [ ] “Buy CL8Y” is not the primary hero CTA. If a buy path remains, it is secondary and points at the token-directory work (or DEX), never a CEX. - [ ] Above-fold and section copy is tight; a longer explainer exists in the footer and is readable, not marketing fluff. - [ ] Footer still includes a current disclaimer and law-enforcement contact path. - [ ] `index.html` title/description/OG/Twitter match the new positioning. - [ ] `STYLE_GUIDE.md` tagline/pillars and `PROJECT_GUIDE.md` dual-track / CEX trading notes no longer contradict the site. - [ ] `prefers-reduced-motion` still disables non-essential motion. - [ ] Isolated old routes do not re-surface the retired narrative as if it were current. - [ ] Typecheck and lint stay clean (`yarn typecheck`, `yarn lint`). `yarn build` succeeds. --- ## Test plan — functional paths 1. **First paint / hero** - Cold load `/`. Confirm headline, one-line utility statement, Bridge CTA, DEX CTA. - Click Bridge → `https://bridge.cl8y.com` in a new tab. Click DEX → `https://dex.cl8y.com` in a new tab. - Keyboard: tab to both CTAs, activate with Enter/Space. - Reduced motion: `prefers-reduced-motion: reduce` — no looping ticker, no distracting animation. 2. **Products section** - Both product cards/links present, correct URLs, visible labels (not icon-only). - Deep link from header (if added) scrolls or routes correctly. 3. **Utility / fee-tier copy** - Page states CL8Y reduces CL8Y DEX fees by tier. - No fabricated tier table unless values are confirmed. - Link to DEX for current tiers works. 4. **Bridge trust block** - Canceler / delay-window facts still present in compressed form. - 3D/scene (if kept) does not block CTAs or break mobile layout. - Audit link still opens the official audit resource. 5. **Community** - Telegram and X open the existing official profiles from `src/data/links.ts` (or the new chrome using that source). 6. **Footer explainer + legal** - Explainer is longer than hero copy and answers: what Bridge is, what DEX is, what CL8Y is for, what it is not. - Disclaimer and law-enforcement block remain; email `contact@ceramicliberty.com` still works. - No leftover USTR/UST1/GameFi language unless still required for legal accuracy. 7. **SEO / share** - View-source `index.html`: title + meta + OG + Twitter have no GameFi/UST1/PROTOCASS. - Shared-link preview (or local OG debugger) shows the new title/description. 8. **Legacy routes** - `/engine`, `/tokenomics`, `/cl8y_whitepaper`, and any remaining section routes either 404/redirect or clearly mark historical docs. They must not look like the current product homepage. 9. **Responsive** - Desktop (≥1280) and mobile (375×667): CTAs not clipped; footer explainer readable; no horizontal overflow. 10. **Build** - `yarn typecheck`, `yarn lint`, `yarn build` pass. `yarn preview` serves the new page. --- ## Test plan — attack, hack, and abuse vectors This is a static marketing site. Highest risk is **misleading users into the wrong product, token, or signature flow**. 1. **Phishing / lookalike CTAs** - Confirm Bridge and DEX hrefs are exactly `https://bridge.cl8y.com` and `https://dex.cl8y.com` (https, correct host, no `@`, no extra subdomain). - No `javascript:` or protocol-relative tricks. No redirector query params (`?url=`, `?next=`). 2. **Tabnabbing** - Every `target="_blank"` has `rel` including `noopener` (and `noreferrer` for untrusted destinations). 3. **Open redirect** - Product/header links are constants, not taken from `window.location` / query / hash. 4. **XSS** - No `dangerouslySetInnerHTML` for the new copy. Footer explainer is static React text, not Markdown from an untrusted URL. 5. **Clickjacking** - If not already set at the host, document that production should send `X-Frame-Options: DENY` or `CSP frame-ancestors 'none'`. Page must not introduce a frameable wallet/connect widget. 6. **Fake market activity** - `BuyTicker` (random addresses + confetti) must not remain; it is a social-engineering / wash-trading visual. If any live feed is shown, it must be labeled as live and sourced from a real endpoint. 7. **SEO / share-card poisoning** - OG tags must not claim listings, CEX support, or price guarantees. No user-controlled query string reflected into title/meta. 8. **Supply-chain / embeds** - Do not add new third-party scripts for the redesign. If GeckoTerminal / X widgets remain, they stay sandboxed and are not required to understand the products. 9. **Legal / overclaim** - Copy must not promise returns, “number go up”, or guaranteed fee amounts. Utility language must stay descriptive. 10. **Accessibility abuse** - Skip link still works. CTAs are real `<a>`/`<button>`, not div-click traps that hide the real destination. --- ## Verification criteria Done when a reviewer can: 1. Open `/` and, in under 10 seconds, say what CL8Y is for and click through to both live products. 2. Search the rendered homepage and `index.html` for `GameFi`, `PROTOCASS`, `Karnyx`, `UST1`, `USTR`, `memecoin`, `AscendEX`, and “Buy CL8Y” as a primary CTA — no current-product hits except historical doc labels if any. 3. Read the footer explainer and confirm it is the only long-form marketing copy. 4. Confirm header/footer chrome exists and product links survive a hard refresh and a mobile pass. 5. Confirm `yarn typecheck`, `yarn lint`, and `yarn build` succeed on the branch. --- ## Out of scope - Token address / listings / trade-venue directory (companion issue). - Rewriting `CL8Y_WHITEPAPER.md` or shipping a new whitepaper. - Changes to the Bridge or DEX applications themselves. - New CEX or broker integrations.
PlasticDigits commented 2026-08-25 06:30:11 +00:00 (Migrated from gitlab.com)
Copy link

marked as related to #2

marked as related to #2
PlasticDigits commented 2026-08-25 06:51:54 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in merge request !8

mentioned in merge request !8
PlasticDigits commented 2026-08-25 06:52:20 +00:00 (Migrated from gitlab.com)
Copy link

Implemented on issue-1-reposition-bridge-dex — MR !8.

Acceptance criteria

  • Homepage primary message is Bridge + DEX + CL8Y as a DEX fee-tier utility token.
  • https://bridge.cl8y.com and https://dex.cl8y.com are visible without scrolling on desktop (hero CTAs) and within one screen/action on mobile.
  • No homepage (or meta) copy presents CL8Y as a memecoin, “expensive” token, GameFi play, or UST1/USTR ecosystem token.
  • GameFi / PROTOCASS / Karnyx / TigerHunt section is gone from /.
  • Fake buy ticker is gone.
  • “Buy CL8Y” is not the primary hero CTA. Token path is a secondary #token placeholder (issue #2), not a CEX.
  • Above-fold and section copy is tight; a longer explainer exists in the footer.
  • Footer still includes a current disclaimer and law-enforcement contact path.
  • index.html title/description/OG/Twitter match the new positioning.
  • STYLE_GUIDE.md tagline/pillars and PROJECT_GUIDE.md dual-track / CEX trading notes no longer contradict the site.
  • prefers-reduced-motion still disables non-essential motion (global CSS + no remounted ticker).
  • Isolated old routes redirect into the new page and do not re-surface the retired narrative.
  • Typecheck, lint, and build stay clean; yarn test covers copy/URL invariants.

Not in this MR (out of scope / follow-up)

  • Token address / listings / venues directory (issue #2 — #token is a labeled placeholder).
  • Rewriting CL8Y_WHITEPAPER.md.
  • Setting X-Frame-Options / frame-ancestors at the Render host (documented in PROJECT_GUIDE.md).
  • Deleting retired source modules (unmounted and excluded from typecheck; do not remount).
Implemented on `issue-1-reposition-bridge-dex` — MR !8. **Acceptance criteria** - [x] Homepage primary message is Bridge + DEX + CL8Y as a DEX fee-tier utility token. - [x] `https://bridge.cl8y.com` and `https://dex.cl8y.com` are visible without scrolling on desktop (hero CTAs) and within one screen/action on mobile. - [x] No homepage (or meta) copy presents CL8Y as a memecoin, “expensive” token, GameFi play, or UST1/USTR ecosystem token. - [x] GameFi / PROTOCASS / Karnyx / TigerHunt section is gone from `/`. - [x] Fake buy ticker is gone. - [x] “Buy CL8Y” is not the primary hero CTA. Token path is a secondary `#token` placeholder (issue #2), not a CEX. - [x] Above-fold and section copy is tight; a longer explainer exists in the footer. - [x] Footer still includes a current disclaimer and law-enforcement contact path. - [x] `index.html` title/description/OG/Twitter match the new positioning. - [x] `STYLE_GUIDE.md` tagline/pillars and `PROJECT_GUIDE.md` dual-track / CEX trading notes no longer contradict the site. - [x] `prefers-reduced-motion` still disables non-essential motion (global CSS + no remounted ticker). - [x] Isolated old routes redirect into the new page and do not re-surface the retired narrative. - [x] Typecheck, lint, and build stay clean; `yarn test` covers copy/URL invariants. **Not in this MR (out of scope / follow-up)** - Token address / listings / venues directory (issue #2 — `#token` is a labeled placeholder). - Rewriting `CL8Y_WHITEPAPER.md`. - Setting `X-Frame-Options` / `frame-ancestors` at the Render host (documented in `PROJECT_GUIDE.md`). - Deleting retired source modules (unmounted and excluded from typecheck; do not remount).
PlasticDigits commented 2026-08-25 06:59:42 +00:00 (Migrated from gitlab.com)
Copy link

Merge review (!8) — 2026-08-25

GitLab reports no conflicts (can_be_merged / fast-forward from main at 7f0e26b). Local merge-tree agrees. Merging with --auto-merge=false (not waiting for CI).

Acceptance criteria (issue #1)

Verified against the issue AC + MR test plan:

  • yarn test (9/9), yarn typecheck, yarn lint, yarn build — pass on 6c2098b
  • Playwright (5 workers) against yarn preview at 127.0.0.1:5173:
    • Desktop hero: headline + utility one-liner + Open Bridge / Open DEX above the fold; hrefs exactly https://bridge.cl8y.com and https://dex.cl8y.com with rel="noopener noreferrer"
    • Rendered homepage + index.html meta/OG/Twitter: no GameFi / PROTOCASS / Karnyx / UST1 / USTR / memecoin / AscendEX / “Buy CL8Y”
    • Header/footer chrome, #token placeholder, fee-tier copy without invented percents, trust (cancelers + 5-minute delay + audit), footer explainer + disclaimer + law-enforcement + contact@ceramicliberty.com
    • Legacy /engine /security /tokenomics /community /institutional redirect into the new IA; /cl8y_whitepaper is a historical-doc path
    • Mobile 375×667: CTAs on first screen, 0px horizontal overflow; prefers-reduced-motion: no ticker / looping activity

AC for #1 is met. Token directory remains the labeled #token placeholder (issue #2).

Problems / leftovers (not merge-blocking)

  1. src/data/links.ts still contains AscendEX CEX (ascendex-cex / ascendex.com). It is not rendered on / (Institutional is unmounted), but Community/Footer import linksByCategory so the URL still ships in the main JS chunk. Issue #2 already owns purging CEX from data/UI/PROJECT_GUIDE.md.
  2. Retired modules are unmounted, not deleted (GameFiAI, BuyTicker, Engine, Tokenomics, etc.). Remounting them would restore banned copy. Already noted; do not remount.
  3. Clickjacking headers are not set on Render. render.yaml has no X-Frame-Options / frame-ancestors. Documented in PROJECT_GUIDE.md §15b; this is host config, not #1 scope. Opening a follow-up issue if none exists.
  4. Minor a11y (non-fail): Framer Motion wrappers around hero CTAs also have tabIndex={0} (extra tab stop). Tertiary “Token addresses & markets” is 20px tall on 375px.

Out of scope (already tracked)

  • Token addresses / listings / DEX-only venues — #2
  • Rewriting CL8Y_WHITEPAPER.md
## Merge review (!8) — 2026-08-25 GitLab reports **no conflicts** (`can_be_merged` / fast-forward from `main` at `7f0e26b`). Local `merge-tree` agrees. Merging with `--auto-merge=false` (not waiting for CI). ### Acceptance criteria (issue #1) Verified against the issue AC + MR test plan: - `yarn test` (9/9), `yarn typecheck`, `yarn lint`, `yarn build` — pass on `6c2098b` - Playwright (5 workers) against `yarn preview` at `127.0.0.1:5173`: - Desktop hero: headline + utility one-liner + **Open Bridge** / **Open DEX** above the fold; hrefs exactly `https://bridge.cl8y.com` and `https://dex.cl8y.com` with `rel="noopener noreferrer"` - Rendered homepage + `index.html` meta/OG/Twitter: no GameFi / PROTOCASS / Karnyx / UST1 / USTR / memecoin / AscendEX / “Buy CL8Y” - Header/footer chrome, `#token` placeholder, fee-tier copy without invented percents, trust (cancelers + 5-minute delay + audit), footer explainer + disclaimer + law-enforcement + `contact@ceramicliberty.com` - Legacy `/engine` `/security` `/tokenomics` `/community` `/institutional` redirect into the new IA; `/cl8y_whitepaper` is a historical-doc path - Mobile 375×667: CTAs on first screen, 0px horizontal overflow; `prefers-reduced-motion`: no ticker / looping activity AC for #1 is met. Token directory remains the labeled `#token` placeholder (issue #2). ### Problems / leftovers (not merge-blocking) 1. **`src/data/links.ts` still contains AscendEX CEX** (`ascendex-cex` / `ascendex.com`). It is **not rendered** on `/` (Institutional is unmounted), but Community/Footer import `linksByCategory` so the URL still ships in the main JS chunk. Issue **#2** already owns purging CEX from data/UI/`PROJECT_GUIDE.md`. 2. **Retired modules are unmounted, not deleted** (`GameFiAI`, `BuyTicker`, Engine, Tokenomics, etc.). Remounting them would restore banned copy. Already noted; do not remount. 3. **Clickjacking headers are not set on Render.** `render.yaml` has no `X-Frame-Options` / `frame-ancestors`. Documented in `PROJECT_GUIDE.md` §15b; this is host config, not #1 scope. Opening a follow-up issue if none exists. 4. **Minor a11y (non-fail):** Framer Motion wrappers around hero CTAs also have `tabIndex={0}` (extra tab stop). Tertiary “Token addresses & markets” is 20px tall on 375px. ### Out of scope (already tracked) - Token addresses / listings / DEX-only venues — **#2** - Rewriting `CL8Y_WHITEPAPER.md`
PlasticDigits commented 2026-08-25 06:59:46 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in commit d2e875701d

mentioned in commit d2e875701d017a056314fdef09e90cf81d2056a1
PlasticDigits (Migrated from gitlab.com) closed this issue 2026-08-25 06:59:47 +00:00
PlasticDigits commented 2026-08-25 07:00:10 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in issue #3

mentioned in issue #3
PlasticDigits commented 2026-08-25 07:00:11 +00:00 (Migrated from gitlab.com)
Copy link

marked as related to #3

marked as related to #3
PlasticDigits commented 2026-08-25 07:00:16 +00:00 (Migrated from gitlab.com)
Copy link

Follow-up filed: #3 — Set clickjacking headers on Render (X-Frame-Options / frame-ancestors). Token directory + AscendEX purge remain #2.

Follow-up filed: **#3** — Set clickjacking headers on Render (`X-Frame-Options` / `frame-ancestors`). Token directory + AscendEX purge remain **#2**.
PlasticDigits commented 2026-08-25 13:31:57 +00:00 (Migrated from gitlab.com)
Copy link

mentioned in issue #4

mentioned in issue #4
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
issue/12
issue/34
issue/14
renovate/configure
No results found.
Labels
Clear labels   
agent:implement

   
agent:ready

   
bug

   
documentation

   
duplicate

   
enhancement

   
good first issue

   
help wanted

   
invalid

   
question

   
ready

   
wontfix
No labels
agent:implement
agent:ready
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
ready
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
code/CL8Y-web#1
No description provided.