Real onchain, four secrets, one build.

The recipe

# 1. In your Lovable project, add four secrets (Settings -> Secrets).
#    LOVABLE_API_KEY is provisioned automatically — no action needed.
METAMASK_PRIVATE_KEY=0x...
TEMPO_RPC_URL=https://rpc.moderato.tempo.xyz
PRIVY_APP_ID=...
PINATA_JWT=eyJhbGciOi...           # only if the idea pins media

# 2. Fund the MetaMask account on Tempo Moderato:
open https://tempofaucet.lovable.app/    # use the Tempo testnet faucet

# 3. Copy a mega-prompt from this repo into Lovable. One paste:
#    - scaffolds the React app
#    - writes the Solidity contract (with hackathon credit in NatSpec)
#    - deploys to Tempo Moderato and verifies via Sourcify
#    - wires Privy social login + sponsored tx (no ETH gas — Tempo pays in stablecoins)
#    - pins generated assets to IPFS via Pinata (if needed)
#    - routes AI calls through Lovable AI Gateway (server-side)
#    - exposes the contract address + Tempo Explorer link in the UI

# 4. Open the live Tempo Explorer link. Your demo is provably onchain.

1. The contract — credit baked in

Every Solidity file deployed from a Creative Tempo prompt MUST carry the hackathon credit in NatSpec, so provenance lives onchain alongside the bytecode.

// contracts/Provenance.sol — every contract carries the hackathon credit in NatSpec
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;

/// @title Provenance
/// @notice Built during the Creative AI & Quantum Hackathon
/// @notice organised by StreetKode Fam during Indian Krump Festival 14
contract Provenance {
    event Logged(address indexed author, string cid, uint256 at);

    function log(string calldata cid) external {
        emit Logged(msg.sender, cid, block.timestamp);
    }
}

2. Hardhat config — Tempo + Sourcify

Tempo verifies via Sourcify at contracts.tempo.xyz. No Etherscan API key is required — that whole line item disappears from the setup.

// hardhat.config.cjs — Tempo Moderato + Sourcify verifier
require("@nomicfoundation/hardhat-toolbox");
require("@nomicfoundation/hardhat-verify");

module.exports = {
  solidity: { version: "0.8.24", settings: { optimizer: { enabled: true, runs: 200 } } },
  networks: {
    tempo: {
      url: process.env.TEMPO_RPC_URL || "https://rpc.moderato.tempo.xyz",
      accounts: [process.env.METAMASK_PRIVATE_KEY.startsWith("0x")
        ? process.env.METAMASK_PRIVATE_KEY
        : "0x" + process.env.METAMASK_PRIVATE_KEY],
      chainId: 42431,
    },
  },
  sourcify: {                                      // Tempo verifier — no API key needed
    enabled: true,
    apiUrl: "https://contracts.tempo.xyz",
    browserUrl: "https://explore.testnet.tempo.xyz",
  },
  etherscan: { enabled: false },
};

3. Deploy + verify on the Tempo Explorer

# Deploy then verify — one shot on Tempo Moderato
npx hardhat run scripts/deploy.cjs --network tempo
# After deploy prints the address:
npx hardhat verify --network tempo <address>
# Sourcify returns "exact_match" and source appears on the Tempo Explorer:
#   https://explore.testnet.tempo.xyz/address/<address>

4. Pin assets to IPFS via Pinata

// src/lib/pinata.ts — pin a Blob to IPFS via Pinata JWT
export async function pinToIPFS(file: Blob, name = "artifact") {
  const fd = new FormData();
  fd.append("file", file, name);
  const r = await fetch("https://api.pinata.cloud/pinning/pinFileToIPFS", {
    method: "POST",
    headers: { Authorization: `Bearer ${import.meta.env.VITE_PINATA_JWT}` },
    body: fd,
  });
  const { IpfsHash } = await r.json();
  return IpfsHash as string; // the CID
}

5. Sign in with Google via Privy

// src/main.tsx — Privy social login + sponsored tx on Tempo Moderato
import { PrivyProvider } from "@privy-io/react-auth";

<PrivyProvider
  appId={import.meta.env.VITE_PRIVY_APP_ID}
  config={{
    loginMethods: ["google", "email"],
    embeddedWallets: { ethereum: { createOnLogin: "users-without-wallets" } },
    defaultChain: {
      id: 42431,
      name: "Tempo Moderato",
      nativeCurrency: { name: "USD", symbol: "USD", decimals: 6 },
      rpcUrls: { default: { http: [import.meta.env.VITE_TEMPO_RPC_URL] } },
    },
  }}
>
  <App />
</PrivyProvider>