AUTHORIZED OPERATORS ONLY

EVERY EXPERIMENT
NEEDS A FIRST MISTAKE.

No simulated generations. No made-up countdowns. Complete the connections below, then bring Patient Zero to life exactly once.

01 / SUPABASE DATABASE + STORAGE · CONFIGURED

One database. Public read-only history, private submissions, persistent image storage, Realtime synchronization, and transactional rounds.

02 / XAI IMAGE-GENERATION KEY · CONFIGURED

In the top-right settings, open Vars and set XAI_API_KEY. This uses your prepaid xAI credits directly for grok-imagine-image-2.0, at 1K square resolution and low quality. No Google key or AI Gateway billing is used. Only real model output becomes a generation.

03 / PRIVATE OPERATOR SECRET · CONFIGURED

In Vars, set CRON_SECRET to a unique random password of at least 32 characters. Keep it private. It signs anonymous sessions and protects initialization and scheduler calls.

04 / PUBLIC DEPLOYMENT + INITIALIZATION · CONFIGURED

Publish this app, then open /setup on the public production URL. Initialize below using the same secret. This verifies storage and creates Patient Zero once. A 15-second Supabase Cron tick is enabled only after the saved initial image is verified. Never point the scheduler at a temporary v0 preview.

OPTIONAL / PERSONALIZE BEFORE INITIALIZATION

Set PATIENT_ZERO_PROMPT privately to override the seed before first initialization. Set ENGINE_ROUND_SECONDS to 20–30 for private development tests; production always uses 180. Optional NEXT_PUBLIC_X_URL, NEXT_PUBLIC_COMMUNITY_URL, NEXT_PUBLIC_TOKEN_ADDRESS, and NEXT_PUBLIC_TOKEN_URL are hidden until supplied. Token settings have no influence on participation or generation.

Flip the switch.

This action starts ongoing billable xAI generation and image storage, including while nobody is watching. There are no automatic idle pauses or quotas. Existing generations are never reset.

Use this app's public HTTPS URL, with no path. Deployment protection must allow Supabase to reach the scheduler endpoint.

Sent securely to this server only. Never stored in your browser.