Real onchain, four secrets, one build.

The recipe

# 1. In your Lovable project, add four secrets (Settings -> Secrets):
METAMASK_PRIVATE_KEY=0x...
PRIVY_APP_ID=...
PINATA_JWT=eyJhbGciOi...
PLASMA_RPC_URL=https://testnet-rpc.plasma.to   # optional; public RPC works

# 2. Fund the MetaMask account on Plasma Testnet (free XPL):
open https://openfaucet.org/
# or: open https://faucet.quicknode.com/plasma

# 3. Copy a mega-prompt from this repo into Lovable. One paste:
#    - scaffolds the React app
#    - writes the Solidity contract (with hackathon credit in NatSpec)
#    - deploys to Plasma Testnet and verifies on Plasmascan
#    - wires Privy social login + embedded wallet on chain 9746
#    - pins generated assets to IPFS via Pinata
#    - exposes the contract address + Plasmascan link in the UI

# 4. Open the live Plasmascan link. Your demo is provably onchain.

1. The contract — credit baked in

Every Solidity file deployed from a Creative Blockchain prompt MUST carry the hackathon credit in NatSpec, so provenance lives onchain alongside the bytecode.

// contracts/Provenance.sol — every contract carries the hackathon credit in NatSpec
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;

/// @title Provenance
/// @notice Built during the Creative AI & Quantum Hackathon
/// @notice organised by StreetKode Fam during Indian Krump Festival 14
contract Provenance {
    event Logged(address indexed author, string cid, uint256 at);

    function log(string calldata cid) external {
        emit Logged(msg.sender, cid, block.timestamp);
    }
}

2. Deploy + verify on Plasmascan

// scripts/deploy.ts — reads METAMASK_PRIVATE_KEY + PLASMA_RPC_URL from process.env
import { ethers, run } from "hardhat";

async function main() {
  const F = await ethers.getContractFactory("Provenance");
  const c = await F.deploy();
  await c.waitForDeployment();
  const addr = await c.getAddress();
  console.log("deployed:", addr);

  // verify on Plasmascan (Etherscan-compatible API, no key required)
  await run("verify:verify", { address: addr, constructorArguments: [] });
}
main();

3. Pin assets to IPFS via Pinata

// src/lib/pinata.ts — pin a Blob to IPFS via Pinata JWT
export async function pinToIPFS(file: Blob, name = "artifact") {
  const fd = new FormData();
  fd.append("file", file, name);
  const r = await fetch("https://api.pinata.cloud/pinning/pinFileToIPFS", {
    method: "POST",
    headers: { Authorization: `Bearer ${process.env.PINATA_JWT}` },
    body: fd,
  });
  const { IpfsHash } = await r.json();
  return IpfsHash as string; // the CID
}

4. Sign in with Google via Privy

// src/main.tsx — Privy social login on Plasma Testnet
import { PrivyProvider } from "@privy-io/react-auth";
import { defineChain } from "viem";

const plasmaTestnet = defineChain({
  id: 9746,
  name: "Plasma Testnet",
  nativeCurrency: { name: "XPL", symbol: "XPL", decimals: 18 },
  rpcUrls: { default: { http: ["https://testnet-rpc.plasma.to"] } },
  blockExplorers: { default: { name: "Plasmascan", url: "https://testnet.plasmascan.to" } },
});

<PrivyProvider
  appId={import.meta.env.VITE_PRIVY_APP_ID}
  config={{
    loginMethods: ["google", "email"],
    supportedChains: [plasmaTestnet],
    defaultChain: plasmaTestnet,
    embeddedWallets: { ethereum: { createOnLogin: "users-without-wallets" } },
  }}
>
  <App />
</PrivyProvider>