update_draft_faqs.py

#!/usr/bin/env python3
"""Append 8 long-tail FAQs to each local markdown draft file."""

import os, re

DRAFTS = "/Users/kamila/Library/CloudStorage/GoogleDrive-kamila@status.im/My Drive/status-squad/content/drafts"

FAQS = {
    "01-what-is-a-gasless-l2": [
        ("How does a gasless L2 pay for transactions if users don't pay gas?", "Execution is funded by native yield generated from bridged capital on L1 — ETH staked through Lido V3 stVault and stablecoins deployed into lending strategies — plus fees from native applications on L2."),
        ("Do I need ETH in my wallet to use a gasless L2?", "No. On a truly gasless L2 like Status Network, you don't need any ETH for transaction fees. You can interact with dApps, swap tokens, and transfer assets without holding ETH for gas."),
        ("Is a gasless L2 less secure than a gas-based L2?", "No. A gasless L2 built as a rollup still posts proofs or data to Ethereum L1 and inherits the same security guarantees. The gas model is about fee structure, not security."),
        ("What happens to a gasless L2 if the yield dries up?", "The dual-source funding model provides resilience. Even if L1 yield decreases, native app fees from the DEX, CDP, launchpad, and privacy layer continue generating revenue for the funding pool."),
        ("Can a gasless L2 handle the same dApps as a regular L2?", "Yes. A gasless L2 built on a zkEVM stack is EVM-compatible, meaning any Solidity smart contract can be deployed and used exactly as on Ethereum or other L2s."),
        ("How does a gasless L2 prevent spam without gas fees?", "Spam is prevented through Rate Limiting Nullifiers (RLN) — a zero-knowledge protocol that enforces per-account transaction quotas based on earned reputation, replacing gas as the spam barrier."),
        ("What is the difference between a gasless L2 and a gas-subsidized L2?", "A gas-subsidized L2 still has gas — someone else pays. A truly gasless L2 removes gas from the protocol entirely. No gas parameter exists in transactions, eliminating metadata leaks and variable pricing."),
        ("Are gasless L2s only for DeFi or can they support NFTs and gaming?", "Gasless L2s support any EVM application — DeFi, NFTs, gaming, social, and more. Zero transaction costs make them especially attractive for high-frequency use cases like gaming and social apps."),
    ],
    "02-how-native-yield-replaces-gas-fees": [
        ("Where does the yield come from on Status Network?", "From two sources: ETH bridged to the network is staked through a Lido V3 stVault for staking yield, and stablecoins are deployed into Morpho lending and savings strategies via Generic Protocol."),
        ("Do users earn yield directly on Status Network?", "Not individually. Yield flows into a shared funding pool that subsidizes gasless execution, liquidity incentives, and builder grants for the entire ecosystem."),
        ("What is a Lido V3 stVault?", "It's a staking vault architecture co-designed by Status Network and implemented by Linea and Lido. Bridged ETH is staked on L1 for yield, while users receive plain ETH on L2 — no stETH is minted."),
        ("Is the yield model sustainable long-term?", "The model scales with adoption. More bridged capital means more L1 yield. More users means more native app fees. Both revenue sources grow with the network rather than extracting from users."),
        ("What happens to the yield generated from my bridged assets?", "All yield flows to the L2 funding pool. It's used to fund gasless execution, liquidity incentives for trading pairs, and grants for developers building on the network."),
        ("How does the yield model differ from traditional L2 gas revenue?", "Traditional L2s profit from the spread between user gas payments and L1 posting costs. The yield model generates revenue from productive capital on L1, aligning incentives with TVL growth instead of user fees."),
        ("Can the funding pool run out of money?", "The pool is continuously replenished by L1 yield and native app fees. It would only deplete if all capital left the network and all apps stopped generating fees simultaneously."),
        ("Who decides how the funding pool is spent?", "Karma holders govern allocation through on-chain voting. Karma is a soulbound reputation token earned through contribution — it can't be bought, so governance reflects genuine participation."),
    ],
    "03-what-is-karma-reputation-system": [
        ("Can I buy Karma tokens on a DEX?", "No. Karma is a soulbound token — it cannot be bought, sold, or transferred. It can only be earned through staking SNT, providing liquidity, using apps, and contributing to the ecosystem."),
        ("How is Karma different from a governance token like UNI or AAVE?", "Governance tokens can be purchased for instant voting power. Karma is non-transferable and earned over time through contribution, making governance capture through capital impossible."),
        ("What happens if I lose my Karma?", "Karma can be slashed if you violate RLN transaction quotas (spam). This permanently reduces your throughput tier and governance weight. Normal usage doesn't risk Karma loss."),
        ("Do I need Karma to use Status Network?", "Every account has a base transaction quota without any Karma. Earning Karma increases your free transaction throughput, governance power, and access to privacy features."),
        ("How long does it take to earn meaningful Karma?", "Karma accrues continuously based on on-chain activity. Active participants — stakers, LPs, app users — accumulate Karma weekly. There's no minimum time lock, but sustained contribution earns more over time."),
        ("Can bots earn Karma the same way as humans?", "Yes. Bots that provide genuine value — liquidity provisioning, market making, liquidation execution — earn Karma on identical terms as human users. Idle or spam bots do not."),
        ("Does Karma expire or decay over time?", "Karma earned remains in your account permanently unless slashed for quota violations. There is no passive decay — your reputation reflects your cumulative contribution history."),
        ("Can I delegate my Karma voting power?", "Karma governance may include delegation mechanisms for voting, but the Karma itself and the transaction throughput it provides remain bound to your account."),
    ],
    "04-what-is-gusd-meta-stablecoin": [
        ("Is GUSD a stablecoin I can buy on exchanges?", "No. You don't buy GUSD on a market. You deposit standard stablecoins (USDC, USDT, or USDS) on L1 and they're automatically converted to GUSD through the vault infrastructure."),
        ("Do I earn interest by holding GUSD?", "Not individually. GUSD yield flows into the network's shared funding pool, which funds gasless execution, liquidity incentives, and builder grants for the entire ecosystem."),
        ("What stablecoins can I deposit to get GUSD?", "USDC, USDT, and USDS are supported. They are automatically deployed into L1 yield strategies and converted to GUSD on the L2."),
        ("Is GUSD safe? What if the yield strategies fail?", "GUSD capital sits in isolated vaults — separate risk pools that prevent cross-contamination between strategies. The smart contracts are audited by Cyfrin and Cantina."),
        ("Can I convert GUSD back to USDC or USDT?", "During the pre-deposit phase, capital is deployed into strategies. At mainnet launch, deposits transition to the Status L2 as GUSD, usable across all native applications."),
        ("How is GUSD different from DAI or USDC?", "USDC is fiat-backed and centralized. DAI is crypto-backed with governance. GUSD is a yield-generating meta-stablecoin whose returns fund the network rather than paying individual holders."),
        ("What is Generic Protocol and how does it relate to GUSD?", "Generic Protocol is the strategy routing layer that deploys GUSD collateral into Morpho lending and savings strategies on L1. It handles optimization and rebalancing of the underlying positions."),
        ("Is GUSD a separate blockchain?", "No. GUSD is a token on the Status Network, which is an Ethereum Layer 2 built on Linea's open-source zkEVM stack. It is not a standalone chain."),
    ],
    "05-how-privacy-works-without-gas-fees": [
        ("Why can't I just use a VPN for blockchain privacy?", "A VPN hides your IP address but doesn't affect on-chain data. Every transaction, balance, and interaction is still publicly visible on the blockchain. On-chain privacy requires protocol-level solutions."),
        ("Does gasless execution make all my transactions private?", "Gasless execution removes the metadata layer (funding trails, gas fingerprinting) that undermines privacy. For full transaction privacy, you also need a privacy layer like Bermuda for shielded balances and confidential transfers."),
        ("Can blockchain analytics firms track me on a gasless L2?", "Without gas payments, the primary data points analytics firms use — funding trails, gas price patterns, timing correlation — don't exist. Combined with Bermuda's privacy features, tracking is structurally harder."),
        ("Is using privacy features on Status Network legal?", "Privacy tools are legal in most jurisdictions. Status Network supports privacy-respecting compliance — users can selectively disclose transaction details when required without revealing their entire history."),
        ("How does Bermuda privacy compare to Tornado Cash?", "Tornado Cash mixes fixed denominations and requires gas (creating new trails). Bermuda provides composable privacy across all apps — private balances, confidential swaps, stealth accounts — with zero gas metadata."),
        ("What is a stealth account and how does it work without gas?", "A stealth account is an ephemeral receiving address that can't be linked to your main account. On gasless chains, stealth accounts work cleanly because they don't need gas funding that would create a linkable trail."),
        ("Can I choose when to be private and when to be public?", "Yes. Privacy on Status Network is optional. You toggle between public and private modes within applications. Public transactions remain available when transparency is preferred."),
        ("Does privacy slow down transactions?", "Privacy features use zero-knowledge proofs which add minimal computation. On a gasless L2, the absence of gas auction mechanics can actually make private transactions faster than public ones on gas-based chains."),
    ],
    "06-firm-protocol-native-cdp-stablecoin": [
        ("What collateral can I use to mint USF on FIRM?", "At launch, FIRM accepts ETH and core ecosystem assets as collateral. Each collateral type operates in its own isolated risk pool to prevent cross-contamination."),
        ("What interest rate do I pay on FIRM?", "FIRM uses Liquity V2's user-set interest rate model. You choose your own rate when opening a position. Lower rates mean your position is redeemed first if USF needs supply reduction."),
        ("Can USF be redeemed at any time?", "Yes. Any USF holder can redeem for the underlying collateral at face value. This hard redemption floor creates a reliable peg without depending on market makers or algorithmic mechanisms."),
        ("How is FIRM different from MakerDAO?", "FIRM is governance-minimized (Liquity V2 fork) with user-set rates and full redemption rights. MakerDAO has extensive governance that controls stability fees, collateral types, and risk parameters."),
        ("Do I pay gas to open a FIRM position?", "No. Status Network is fully gasless. Opening, adjusting, repaying, and closing CDPs costs nothing in transaction fees."),
        ("What happens if my FIRM position gets liquidated?", "Your collateral is sold to cover the minted USF. On a gasless chain, liquidation bots operate at zero cost, ensuring positions are liquidated promptly without gas wars or MEV extraction."),
        ("Is FIRM a fork of Liquity V1 or V2?", "FIRM is built on Liquity V2, which introduced user-set interest rates, multi-collateral support, and improved redemption mechanics. V2 builds on V1's battle-tested, governance-free foundation."),
        ("Where do FIRM's fees go?", "All borrowing fees flow into the Status Network's shared funding pool, governed by Karma holders. This means FIRM revenue funds gasless execution, liquidity incentives, and builder grants."),
    ],
    "07-how-status-network-prevents-spam": [
        ("What is RLN and how does it prevent spam?", "Rate Limiting Nullifiers (RLN) is a zero-knowledge protocol that enforces per-account transaction quotas. Users prove they haven't exceeded their limit without revealing their identity. Violators get their Karma slashed."),
        ("Can someone create millions of accounts to spam?", "Each account starts with only a base transaction quota. Meaningful throughput requires earning Karma through staking, providing liquidity, and using apps — which takes time and genuine contribution per account."),
        ("What happens if I accidentally exceed my transaction limit?", "RLN slashing requires a mathematical proof of quota violation — it's provably correct. Normal usage within your Karma-determined tier won't trigger slashing. Only deliberate over-submission is penalized."),
        ("Is RLN the same technology as Tornado Cash?", "No. Both use zero-knowledge proofs, but for different purposes. Tornado Cash breaks transaction links. RLN enforces anonymous rate limiting — proving you're within your quota without revealing who you are."),
        ("Has RLN been tested in production?", "Yes. RLN is already deployed in production across multiple systems including Waku messaging, Railgun privacy protocol, and The Graph's indexer coordination."),
        ("Can bots bypass the spam protection?", "Bots are subject to the same RLN quotas as humans. Their throughput is determined by earned Karma. A bot that spams gets its Karma slashed permanently, reducing future access."),
        ("Why not just use CAPTCHA or proof-of-work for spam prevention?", "CAPTCHAs don't work on-chain and exclude bots that provide genuine value. Proof-of-work wastes energy. RLN is privacy-preserving, cryptographically enforced, and scales with reputation rather than computational resources."),
        ("Can RLN be used for things other than blockchain spam?", "Yes. The same primitive works for private API rate limiting, anonymous LLM inference metering, spam-resistant messaging, and any system that needs anonymous access control with enforceable limits."),
    ],
    "08-orvex-dex-zero-fee-trading": [
        ("Does Orvex charge any trading fees?", "Yes — Orvex charges a trading fee (spread) on swaps, which is the protocol's revenue source. But there is zero gas fee on any transaction. You pay for the trade, not the execution."),
        ("Can I provide liquidity on Orvex?", "Yes. You can add and remove liquidity, adjust ranges, and rebalance positions — all at zero gas cost. LPs also earn yield boosts from the funding pool on top of trading fees."),
        ("How does Orvex compare to Uniswap?", "Orvex offers zero gas per swap (vs $0.01-$50 on Uniswap depending on chain), native privacy via Bermuda, and yield-boosted LP pairs funded by the network's shared pool."),
        ("Can I trade privately on Orvex?", "Yes. Through the Bermuda privacy layer, you can execute confidential swaps with private balances and hidden order sizes. No one can see what you're trading or how much."),
        ("Is Orvex an AMM or orderbook DEX?", "Orvex uses the automated market maker (AMM) model with liquidity pools. The zero-gas environment enables bots to rebalance LP positions every block for tighter spreads."),
        ("Do LP bots on Orvex have an advantage?", "Yes. Zero-cost execution means bots with Karma can rebalance every block, enabling tighter concentration ranges, more productive capital, and significantly less value lost to LVR."),
        ("What tokens can I trade on Orvex?", "Orvex supports any ERC-20 token deployed on Status Network, including ETH, GUSD, USF, and community-created tokens launched through Punk.fun."),
        ("How does Orvex generate revenue for the network?", "Trading fees from Orvex flow into the shared funding pool alongside yield from L1 staking and fees from FIRM, Punk.fun, and Bermuda. Karma holders govern how this pool is allocated."),
    ],
    "09-why-bots-are-first-class-citizens": [
        ("Do bots need ETH to operate on Status Network?", "No. Execution is gasless. Bots need Karma for throughput, which is earned through productive activity like providing liquidity, executing liquidations, and running useful automation."),
        ("Can bots participate in governance on Status Network?", "Yes. Bots with Karma vote on funding pool allocations on the same terms as human users. Governance power is tied to contribution, not to whether you're human or automated."),
        ("What types of bots benefit most from gasless execution?", "LP rebalancing bots, liquidation bots, yield harvesters, arbitrage bots, and solvers all benefit dramatically. Zero execution cost means strategies that were marginally profitable become highly profitable."),
        ("How often can a bot rebalance LP positions?", "Every block. On gas-based chains, rebalancing costs $0.01-$0.50 per transaction. On Status Network it costs nothing, enabling continuous per-block optimization of concentrated liquidity ranges."),
        ("Do malicious bots get penalized?", "Yes. Rate Limiting Nullifiers (RLN) enforce per-account transaction quotas. Bots that exceed their quota get Karma slashed permanently, reducing future throughput. Spam is structurally unprofitable."),
        ("Can bots run private strategies on Status Network?", "Yes. The Bermuda privacy layer enables confidential execution — private balances, hidden order sizes, and no gas fingerprinting. Competitors can't reverse-engineer your bot's strategy."),
        ("Is there a gas estimation SDK for bots?", "No — and that's the point. There's no gas to estimate. Bots submit transactions directly. No gas estimation, no paymaster setup, no price spike handling, no top-up management."),
        ("How do bot earnings compare to gas-based chains?", "Bots keep 100% of their strategy profits because there's no gas cost eating into margins. On gas-based chains, gas can consume 10-50% of bot profits during normal operations and 100%+ during spikes."),
    ],
    "10-funding-pool-how-yield-governs-l2": [
        ("What is the Status Network funding pool?", "A shared treasury on L2 that collects all yield from L1 staked capital and all fees from native applications. Karma holders govern how it's allocated to liquidity providers, builders, and bot operators."),
        ("Where does the funding pool revenue come from?", "Two sources: L1 yield (ETH staking via Lido V3, stablecoins via Generic Protocol) and L2 native app fees (Orvex DEX, FIRM CDP, Punk.fun launchpad, Bermuda privacy layer, and sequencing tips)."),
        ("Who controls how the funding pool is spent?", "Karma holders vote on allocations. Since Karma is soulbound and earned through contribution, governance reflects genuine participation — not capital. No one can buy voting power."),
        ("Can the funding pool pay for things other than gas?", "Yes. The pool funds liquidity incentives, builder grants, bot rewards, and network parameter decisions. Gasless execution is one output — ecosystem growth is the broader goal."),
        ("How is this different from a DAO treasury?", "Most DAO treasuries are governed by tradeable tokens, making them vulnerable to governance attacks. The funding pool is governed by non-transferable Karma, so allocation decisions can't be bought."),
        ("What happens if more capital leaves than enters?", "Lower TVL means less L1 yield, but native app fees continue generating revenue. The dual-source model provides resilience. The pool adjusts to available revenue rather than collapsing."),
        ("Are funding pool allocations transparent?", "Yes. All governance votes and pool allocations happen on-chain. Anyone can verify how funds are distributed, who voted, and what the outcomes were."),
        ("How does the funding pool create a flywheel?", "More capital → more yield → more funding for LPs and builders → better apps and liquidity → more users → more capital. The pool creates a self-reinforcing growth loop tied to network adoption."),
    ],
    "11-gasless-l2-vs-paymasters": [
        ("What is a paymaster in crypto?", "A paymaster is an ERC-4337 smart contract that pays gas on behalf of users. The user doesn't see the gas fee, but someone — the dApp, a sponsor, or the user via another token — still pays it."),
        ("Is Status Network using ERC-4337 account abstraction?", "No. Status Network is natively gasless at the protocol level. There's no gas to abstract away, so account abstraction paymasters aren't needed."),
        ("Are paymasters sustainable long-term?", "Paymasters shift gas costs to sponsors — often dApps using VC subsidies. When the sponsor stops paying, the gasless experience disappears. Yield-funded execution is structurally sustainable."),
        ("Do paymasters protect my privacy?", "No. Paymasters create a new privacy leak — all sponsored users are linked through the paymaster's on-chain activity. Gas metadata still exists. Truly gasless execution eliminates gas metadata entirely."),
        ("Can I use both paymasters and gasless L2s?", "On a gasless L2, paymasters aren't needed because there's no gas. On gas-based L2s, paymasters are a useful UX layer but don't solve the underlying structural issues of gas-based economics."),
        ("Which is cheaper: paymaster-sponsored gas or no gas?", "No gas is always cheaper for the user — it's free. Paymaster-sponsored transactions still consume gas (someone pays), and during congestion the sponsor may cap spending or reject operations."),
        ("Do paymasters work for bots?", "Technically yes, but bots must integrate paymaster SDKs, handle budget limits, and manage sponsor relationships. On a gasless L2, bots just submit transactions — no gas layer to manage at all."),
        ("Will paymasters become obsolete?", "On gas-based chains, paymasters remain useful for UX. But as gasless L2s mature, the problems paymasters solve — ETH requirements, gas complexity, onboarding friction — simply won't exist."),
    ],
    "12-what-is-bermuda-composable-privacy": [
        ("Is Bermuda a separate blockchain?", "No. Bermuda is a native privacy layer embedded in the Status Network, which is an Ethereum Layer 2 built on Linea's open-source zkEVM stack."),
        ("Can I use Bermuda with any token?", "Yes. Any token deployed on Status Network can use Bermuda's privacy primitives — private balances, confidential transfers, and stealth accounts."),
        ("Is Bermuda privacy mandatory or optional?", "Optional. Users choose when to interact privately. Public transactions remain available for transparency when needed. You toggle between modes within each application."),
        ("How does Bermuda handle regulatory compliance?", "Bermuda supports privacy-respecting compliance — users can selectively disclose specific transaction details when required without revealing their entire history."),
        ("What is a stealth account in Bermuda?", "An ephemeral receiving address generated uniquely for each transaction. It can't be linked to your main account, breaking correlation between incoming transfers."),
        ("Does Bermuda slow down transactions?", "Minimal impact. ZK proof generation adds a small amount of computation, but the absence of gas auction mechanics means private transactions can execute as fast or faster than public ones on gas-based chains."),
        ("How does cover traffic improve privacy?", "Users with Karma generate background transactions at zero cost that blend with real activity. This expands anonymity sets and makes timing analysis much harder. More Karma = more cover traffic = stronger privacy for everyone."),
        ("Can developers add Bermuda privacy to their own dApps?", "Yes. Bermuda is composable — developers call its API to add private balances, confidential transfers, or stealth addresses to any smart contract deployed on Status Network."),
    ],
    "13-why-gas-fees-are-bad-for-privacy": [
        ("How do gas fees reveal my identity?", "Gas payments create funding trails linking transactions to a source of funds. Gas price choices fingerprint your wallet across sessions. Timing of gas top-ups correlates your accounts."),
        ("Can I avoid gas-based privacy leaks by using a mixer?", "Partially. Mixers break the main transaction link, but your withdrawal address still needs gas funding from somewhere — creating a new trail that analysts can trace."),
        ("Do low gas fees on L2s solve the privacy problem?", "No. Low gas isn't zero gas. Even a $0.01 fee creates a funding trail, a price data point, and a timing signal. Privacy requires zero metadata, not low metadata."),
        ("What is gas price fingerprinting?", "Different wallets and wallet software produce slightly different gas price patterns. Over hundreds of transactions, these patterns create a behavioral fingerprint that can identify your wallet across addresses."),
        ("Do paymasters fix gas-based privacy leaks?", "No. Paymasters shift payment but create a new leak — all sponsored users are linked through the paymaster's on-chain activity. Analysts can cluster all sponsored users together."),
        ("Is this a theoretical attack or is it used in practice?", "It's actively used. Blockchain analytics firms use funding trail analysis and gas pattern correlation in production. These techniques have been cited in law enforcement proceedings and Tornado Cash deanonymization."),
        ("How does gasless execution fix all of this?", "No gas parameter exists in transactions. No funding trails, no price fingerprints, no timing correlation from top-ups, no paymaster clustering. The entire metadata attack surface disappears."),
        ("Does gasless execution alone guarantee privacy?", "No. Gasless execution removes metadata leaks but you also need a privacy layer (like Bermuda) for confidential transaction contents. Together they provide structural end-to-end privacy."),
    ],
    "14-what-is-a-soulbound-token": [
        ("What does soulbound mean in blockchain?", "A soulbound token (SBT) is permanently bound to a single account. It cannot be sent, sold, or transferred to another wallet. It represents identity, reputation, or credentials rather than tradeable assets."),
        ("Who invented soulbound tokens?", "The concept was formalized by Vitalik Buterin, Glen Weyl, and Puja Ohlhaver in their 2022 paper 'Decentralized Society: Finding Web3's Soul.'"),
        ("Can soulbound tokens be used for things other than governance?", "Yes. SBTs can represent credentials (degrees, certifications), access rights (membership), reputation scores, achievement badges, and identity attestations — all non-transferable."),
        ("What if I lose access to my wallet with Karma?", "Soulbound tokens are bound to the account. Social recovery mechanisms can help restore wallet access, but Karma cannot be transferred to a new address."),
        ("Can I have Karma on multiple wallets?", "Each wallet earns Karma independently. There's no way to consolidate Karma across accounts because it's non-transferable. This prevents Sybil attacks on the reputation system."),
        ("Is Karma the only soulbound token on Status Network?", "Karma is the primary soulbound reputation primitive. Other SBTs for credentials, achievements, or app-specific reputation could be built using the same infrastructure."),
        ("How is a soulbound token different from a non-transferable NFT?", "Functionally similar — both are non-transferable. The distinction is conceptual: SBTs represent reputation and identity, while NFTs typically represent ownership of unique digital assets."),
        ("Can a DAO revoke my soulbound token?", "On Status Network, Karma can be slashed for RLN violations but cannot be arbitrarily revoked by governance. The slashing requires a mathematical proof of quota violation — no human judgment involved."),
    ],
    "15-snt-staking-karma-spam-protection": [
        ("What is the minimum amount of SNT I can stake?", "The staking contract accepts any amount of SNT. There is no minimum threshold to begin earning Karma."),
        ("Can I unstake my SNT at any time?", "Yes. Withdrawal is always available. Your SNT is never permanently locked. You can exit whenever you choose."),
        ("Do I keep my Karma if I unstake?", "Yes. Karma already earned remains in your account permanently because it's soulbound. But you stop earning new staking Karma once you unstake."),
        ("What percentage of Karma comes from staking?", "SNT staking accounts for 35% of weekly Karma minting at launch. The remaining 65% comes from providing liquidity and using apps (60%) and sequencer tips/donations (5%)."),
        ("Is the staking contract upgradeable?", "No. The SNT staking system uses an immutable Vault/StakeManager architecture. No admin keys can drain funds, modify parameters, or upgrade the contract without community consensus."),
        ("Has the staking contract been audited?", "Yes. The staking infrastructure has been audited by both Cyfrin and Cantina, two leading smart contract security firms."),
        ("How often is Karma distributed to stakers?", "Karma minting follows a weekly cycle. The staking contract snapshots all positions, calculates proportional shares, and mints soulbound Karma to each staker's account."),
        ("Is SNT staking the same as ETH staking?", "No. ETH staking validates the Ethereum network and earns ETH rewards. SNT staking earns Karma reputation on Status Network — non-transferable governance and throughput weight, not tradeable tokens."),
    ],
    "16-what-is-a-layer-2": [
        ("What is the simplest explanation of a Layer 2?", "A Layer 2 is a separate blockchain that runs on top of Ethereum. It processes transactions faster and cheaper, then sends a summary back to Ethereum for security."),
        ("Do I need to trust a Layer 2 with my funds?", "On true rollups, no. Your funds are secured by Ethereum smart contracts. Even if the L2 operator disappears, you can withdraw through the L1 contract. Sidechains don't have this guarantee."),
        ("What is the difference between optimistic and ZK rollups?", "Optimistic rollups assume transactions are correct and allow challenges within 7 days. ZK rollups generate mathematical proofs of correctness — no trust assumptions, and withdrawals can be near-instant."),
        ("Why are there so many different Layer 2s?", "Different teams optimize for different tradeoffs — speed, cost, privacy, developer experience, decentralization level. The market is still determining which approaches win long-term."),
        ("Can I move my tokens between Layer 2s?", "Yes, using bridges. Official L2 bridges lock assets on one chain and mint equivalents on another. Third-party bridges offer faster transfers but add trust assumptions."),
        ("Are Layer 2s decentralized?", "Most L2s currently run a single centralized sequencer (the team). Decentralizing sequencers is an active area of development — shared sequencers, based rollups, and distributed networks are emerging."),
        ("Do Layer 2s pay Ethereum?", "Yes. L2s pay Ethereum L1 for data posting (calldata or blob data). This is the L2's primary cost. The difference between L2 gas collected and L1 posting costs is the sequencer's revenue."),
        ("Will Layer 2s replace Ethereum?", "No. L2s extend Ethereum by handling execution while Ethereum remains the security and settlement layer. They're complementary — L2s need Ethereum for security, Ethereum needs L2s for scale."),
    ],
    "17-how-do-layer-2s-make-money": [
        ("How much money do L2s make per year?", "Major L2s generate $10M-$100M+ annually from the gas fee spread. Revenue varies with on-chain activity — more transactions and higher gas prices mean more profit."),
        ("Is L2 revenue transparent?", "Partially. On-chain gas collection is transparent, but sequencer-specific costs and MEV revenue are often opaque. Some L2s publish revenue dashboards, others don't disclose details."),
        ("What is the gas fee spread?", "The difference between total gas fees collected from L2 users and the cost of posting transaction data to Ethereum L1. This spread is the primary revenue source for most L2 operators."),
        ("Do L2s make money from MEV?", "Many do. The centralized sequencer can reorder transactions for profit — sandwich attacks, arbitrage capture, and liquidation priority. This is essentially a hidden tax on users."),
        ("Can L2s be profitable without gas fees?", "Yes. Gasless L2s generate revenue from L1 yield on bridged capital and fees from native applications. Revenue aligns with TVL growth rather than user transaction volume."),
        ("Why don't L2s just make gas free for everyone?", "Because gas fees are their revenue model. Removing gas removes the business model unless there's an alternative revenue source like native yield from productive capital."),
        ("What did EIP-4844 change for L2 economics?", "EIP-4844 introduced blob data, dramatically reducing L1 posting costs for L2s. This widened profit margins — some L2s passed savings to users, others kept the extra revenue."),
        ("Which L2 revenue model is most sustainable?", "Gas-based models are proven but misalign with user interests. Yield-based models align incentives with TVL growth. The market is still determining which model wins long-term."),
    ],
    "18-what-is-mev-explained": [
        ("Am I losing money to MEV when I trade on Uniswap?", "Almost certainly yes. Sandwich attacks are the most common MEV form and affect swaps of all sizes on transparent DEXs. Your slippage tolerance is essentially your MEV budget."),
        ("How much MEV is extracted from users annually?", "Over $600M was extracted on Ethereum alone in 2023 via sandwich attacks, arbitrage, and liquidations. The true figure including L2s and cross-chain MEV is likely higher."),
        ("What is a sandwich attack in simple terms?", "A bot sees your pending swap, buys the token before you (pushing the price up), lets your trade execute at the higher price, then sells after you — pocketing the difference."),
        ("Can I protect myself from MEV today?", "Use intent-based DEXs (CoW Swap), private transaction submission (Flashbots Protect), and set tight slippage tolerances. These reduce but don't completely eliminate MEV."),
        ("Do L2s have less MEV than Ethereum?", "L2 MEV is often less transparent, not less. A single centralized sequencer controls all ordering with no competitive pressure, potentially extracting more value with less visibility."),
        ("What is the difference between good MEV and bad MEV?", "Arbitrage (equalizing prices across pools) and liquidations (keeping lending protocols solvent) are useful. Sandwich attacks and front-running are purely extractive — they only hurt users."),
        ("Can MEV be eliminated entirely?", "Not while transaction ordering has value. But gasless execution combined with confidential transactions removes the infrastructure searchers depend on — no gas priority auction, no visible transaction contents."),
        ("What is Flashbots and does it solve MEV?", "Flashbots created MEV-Share and SUAVE to redistribute MEV more fairly. They reduce sandwich attacks through private transaction submission but don't eliminate all MEV vectors."),
    ],
    "19-stablecoin-types-explained": [
        ("Which stablecoin is the safest?", "There's no single safest option. Fiat-backed (USDC) has deep liquidity but centralization risk. Governance-minimized CDPs (LUSD) are most censorship-resistant. Choose based on your priority: liquidity, decentralization, or yield."),
        ("Can stablecoins lose their dollar peg?", "Yes. USDC briefly depegged during the SVB bank crisis (2023). UST collapsed entirely (2022). Even well-designed stablecoins can face temporary depegs during extreme market stress."),
        ("What is a CDP stablecoin?", "A Collateralized Debt Position stablecoin is minted by locking crypto as collateral in a smart contract. You deposit $1,500 of ETH to mint $1,000 of stablecoins, keeping a safety buffer."),
        ("Why did UST/Luna collapse?", "UST maintained its peg through an algorithmic mint/burn mechanism with LUNA, without full collateral backing. When confidence broke, a death spiral destroyed over $40 billion in value in days."),
        ("What is a yield-bearing stablecoin?", "A stablecoin whose backing is deployed into productive strategies — lending, staking, or liquidity provision. Returns either go to individual holders (like sDAI) or to a network treasury."),
        ("Are algorithmic stablecoins dead?", "Pure algorithmic stablecoins without backing are largely discredited after UST. Hybrid models with partial or full collateral still exist, but market trust has significantly decreased."),
        ("Can stablecoins be frozen or censored?", "Fiat-backed stablecoins (USDC, USDT) can be frozen by the issuer on regulatory request. CDP stablecoins with no governance (LUSD, USF) cannot be frozen by any single entity."),
        ("What is the difference between USDC and USDT?", "Both are fiat-backed. USDC (Circle) holds primarily US Treasuries with regular attestations. USDT (Tether) has a larger market cap but historically less transparent reserves and periodic controversies."),
    ],
    "20-what-is-impermanent-loss": [
        ("Can I lose all my money from impermanent loss?", "Not all, but significant amounts. A 5x price change causes 25.5% IL. Combined with low trading fees, you could net less than simply holding. Concentrated liquidity amplifies both gains and losses."),
        ("Is impermanent loss the same as losing money?", "Not exactly. IL measures the difference between LPing and holding. You may still profit in dollar terms even with IL — if trading fees earned exceed the impermanent loss."),
        ("Do stablecoin pools have impermanent loss?", "Minimal. If both tokens maintain their $1 peg, the price ratio doesn't change. Minor depegs (like USDC during SVB) can cause small IL in stablecoin-stablecoin pools."),
        ("What is LVR and how is it different from IL?", "LVR (Loss Versus Rebalancing) measures the ongoing value leaked to arbitrageurs from stale AMM prices. Unlike IL which reverses if prices return, LVR accumulates permanently."),
        ("How do concentrated liquidity positions affect IL?", "Narrower ranges earn more fees when price stays in range but suffer amplified IL when price moves out. A position that goes fully out of range holds 100% of the losing token."),
        ("Can rebalancing bots eliminate impermanent loss?", "They significantly reduce it. Per-block rebalancing keeps positions tight and responsive to price changes, minimizing the window where arbitrageurs extract value from stale prices."),
        ("Why is zero-cost rebalancing important for LPs?", "On gas-based chains, every rebalance costs $0.01-$50. This creates a breakeven threshold — you only rebalance when the benefit exceeds the gas cost. Zero-cost rebalancing removes this constraint entirely."),
        ("What is the best strategy to minimize impermanent loss?", "Choose correlated pairs, use active rebalancing (ideally on a gasless chain), factor in fee earnings versus IL, and consider yield incentives. For passive LPs, wider ranges reduce IL but also reduce capital efficiency."),
    ],
    "21-token-voting-is-broken": [
        ("Why is token voting considered broken?", "When 1 token = 1 vote, governance power equals wealth. Whales buy tokens to pass self-serving proposals. Voter participation averages 2-5%. The 'majority' often represents a tiny fraction of holders."),
        ("What is a governance attack?", "When someone accumulates enough governance tokens (by buying or flash-loaning them) to pass a proposal that benefits them at the expense of the protocol or its users."),
        ("Has a governance attack actually happened?", "Yes. Beanstalk lost $182M to a flash loan governance attack. Compound has faced multiple governance manipulation attempts. These are real, not theoretical, threats."),
        ("What is reputation-based governance?", "Governance where voting power comes from non-transferable reputation earned through contribution — staking, building, using the protocol — not from holding tradeable tokens."),
        ("What is quadratic voting?", "A system where the cost of additional votes increases quadratically. 1 vote costs 1 token, 2 votes cost 4, 10 votes cost 100. This amplifies broad community support over whale dominance."),
        ("What is conviction voting?", "A time-weighted governance mechanism where tokens are staked toward proposals continuously. Longer commitment builds more 'conviction.' This prevents drive-by voting and flash loan attacks."),
        ("Can governance models be changed after a protocol launches?", "Yes, but it requires the existing governance to vote for the change — meaning current beneficiaries must vote to reduce their own power. This bootstrapping problem makes transitions difficult."),
        ("Which governance model is most resistant to attacks?", "Reputation-based governance is hardest to attack because reputation can't be bought, borrowed, or flash-loaned. But it's also the most complex to implement correctly."),
    ],
    "22-dex-vs-cex": [
        ("Is it safer to keep crypto on a DEX or CEX?", "On a DEX, you always control your keys — funds can't be lost to exchange insolvency. On a CEX, the exchange holds your funds, which carries counterparty risk (as FTX proved with $8B in losses)."),
        ("Are DEX fees higher than CEX fees?", "On Ethereum L1, yes — gas makes small trades expensive. On gasless L2s, DEX trading fees are comparable to or lower than CEX maker/taker fees, with no hidden withdrawal fees."),
        ("Can I buy crypto with a credit card on a DEX?", "Not directly. DEXs operate on-chain and don't handle fiat currency. You need to buy crypto on a CEX or use a fiat on-ramp service first, then bridge to the DEX."),
        ("Do DEXs have orderbooks like CEXs?", "Some do (dYdX, Hyperliquid). Most use automated market makers (AMMs) or intent-based systems. The result is similar for the user — you get a price quote and execute the trade."),
        ("Can a DEX freeze my account?", "No. DEXs are smart contracts without account management. No entity can freeze, restrict, or close your account. You trade directly from your own wallet."),
        ("Why do some DEXs have better prices than CEXs?", "DEX aggregators route across dozens of liquidity sources to find optimal prices. For standard trade sizes, aggregated DEX pricing now matches or beats CEX spreads on many pairs."),
        ("Are DEXs regulated?", "DEX smart contracts are generally not regulated as exchanges in most jurisdictions. However, the regulatory landscape is evolving — some front-ends have added geofencing or sanctions compliance."),
        ("What is the biggest risk of using a DEX?", "Smart contract risk — bugs in the DEX code could lead to fund loss. Always use audited, battle-tested protocols and verify the contract address before approving token access."),
    ],
    "23-zero-knowledge-proofs-explained": [
        ("What is a zero-knowledge proof in simple terms?", "A way to prove something is true without revealing the underlying data. Like proving you're old enough to enter a bar without showing your actual birthdate or ID."),
        ("What is the difference between ZK-SNARK and ZK-STARK?", "SNARKs produce smaller proofs and are cheaper to verify on-chain but may need a trusted setup. STARKs are quantum-resistant and transparent (no setup) but produce larger proofs."),
        ("Are zero-knowledge proofs actually used in production?", "Yes. ZK rollups (zkSync, Scroll, Linea, StarkNet) process millions of transactions. Zcash uses ZK for private transactions. RLN uses ZK for anonymous rate limiting in messaging and blockchain."),
        ("Can zero-knowledge proofs be hacked?", "The math is sound — proofs can't be forged. But implementation bugs, side-channel attacks, and incorrect circuit design can introduce vulnerabilities. Auditing is critical."),
        ("Do I need to understand the math to use ZK technology?", "No. As a user, ZK proofs work transparently in the background — faster L2 withdrawals, private transactions, spam protection. Only protocol developers need to work with the underlying cryptography."),
        ("What is a trusted setup ceremony?", "A one-time process where secret parameters are generated for older ZK-SNARK systems. The parameters must be destroyed afterward. If anyone keeps them, they could forge proofs. Newer systems avoid this."),
        ("Can quantum computers break zero-knowledge proofs?", "ZK-SNARKs based on elliptic curves are vulnerable to quantum attacks. ZK-STARKs are quantum-resistant by design. Post-quantum SNARK constructions are in active research."),
        ("What new applications are ZK proofs enabling?", "Cross-chain bridges without trust assumptions, private AI inference verification, anonymous credential systems, ZK coprocessors for complex off-chain computation, and client-side proof generation on mobile devices."),
    ],
    "24-best-privacy-solutions-defi-2026": [
        ("What is the best privacy solution for DeFi right now?", "It depends on your needs. For basic unlinking: Railgun. For MEV protection only: Flashbots Protect. For comprehensive DeFi privacy: privacy-native L2s. For maximum privacy: Monero (but no smart contracts)."),
        ("Is Tornado Cash still usable?", "Tornado Cash was sanctioned by OFAC in 2022, making interaction potentially illegal for US persons. The smart contracts still exist on-chain, but usage carries significant legal risk."),
        ("Can I have privacy on Ethereum L1?", "Limited. Shielded pool protocols like Railgun offer transaction privacy, but gas payments still create metadata leaks. Full structural privacy requires a gasless execution environment."),
        ("Do encrypted mempools provide real privacy?", "Only pre-execution privacy. They prevent front-running by hiding transaction contents before block building, but after execution all details become public. Balance and history privacy require additional solutions."),
        ("Why is Monero more private than Ethereum?", "Monero uses mandatory privacy — ring signatures, stealth addresses, and confidential transactions on every transaction. Ethereum is transparent by default with optional privacy tools that leak gas metadata."),
        ("Are privacy tools legal to use?", "Using privacy tools is legal in most jurisdictions. However, specific sanctioned protocols (Tornado Cash) may be illegal for certain users. Always check local regulations before using privacy services."),
        ("What is an anonymity set and why does it matter?", "The pool of users whose transactions are indistinguishable from yours. Larger sets mean stronger privacy. If only 5 people use a privacy tool, narrowing down who did what is easier."),
        ("Will regulators ban all privacy tools?", "Unlikely. Privacy is a legitimate need for personal security, competitive business operations, and human rights. Regulators are more likely to target specific protocols than ban the concept of privacy."),
    ],
    "25-cdp-vs-lending-protocol": [
        ("Should I use a CDP or a lending protocol to borrow?", "Use a CDP if you want censorship-resistant stablecoins with minimal governance risk. Use a lending protocol if you need to borrow non-stablecoin assets or want flexible multi-collateral options."),
        ("What is the risk of liquidation on a CDP?", "If your collateral value drops below the minimum ratio (typically 110-150%), your position is liquidated — collateral is sold to cover the debt. Maintain a safety buffer above the minimum."),
        ("Which is cheaper: CDP or lending?", "CDPs with one-time borrowing fees (Liquity V1 model) are cheapest for long-term positions. Lending protocols with variable rates can be cheaper for short-term borrows when utilization is low."),
        ("What is governance risk in DeFi borrowing?", "The risk that governance token holders change protocol parameters in ways that harm borrowers — adjusting collateral ratios, adding risky assets, or modifying liquidation rules."),
        ("Can I borrow ETH from a CDP?", "No. CDPs mint stablecoins — you borrow by creating new stablecoin supply against collateral. To borrow ETH or other tokens, use a lending protocol like Aave or Morpho."),
        ("What is an isolated vault in lending?", "A lending market where each collateral-asset pair operates in its own risk pool. A failure in one vault doesn't affect others — unlike pooled lending where all markets share risk."),
        ("Do gas fees matter for CDP and lending?", "Yes. On gas-based chains, every interaction — opening, adjusting, repaying, liquidating — costs gas. On gasless chains, these operations are free, making position management and liquidation more efficient."),
        ("What is the safest way to borrow in DeFi?", "Use an immutable or minimal-governance CDP with conservative collateral ratios (200%+) on a chain where liquidations are fast and cheap. Monitor your position actively and maintain a health buffer."),
    ],
}

def main():
    for filename, faqs in FAQS.items():
        path = os.path.join(DRAFTS, f"{filename}.md")
        if not os.path.exists(path):
            print(f"  ? File not found: {path}")
            continue

        with open(path, "r") as f:
            content = f.read()

        existing_faq = re.search(r'\n---\n\n## Frequently Asked Questions.*', content, re.DOTALL)
        if existing_faq:
            content = content[:existing_faq.start()]
        else:
            old_faq = re.search(r'\n## (FAQs?|Frequently Asked Questions).*', content, re.DOTALL)
            if old_faq:
                content = content[:old_faq.start()]

        content = content.rstrip() + "\n"

        faq_section = "\n---\n\n## Frequently Asked Questions\n\n"
        for q, a in faqs:
            faq_section += f"**{q}**\n{a}\n\n"

        content += faq_section.rstrip() + "\n"

        with open(path, "w") as f:
            f.write(content)

        print(f"  + {filename}.md (8 FAQs)")

    print(f"\nUpdated {len(FAQS)} draft files")

if __name__ == "__main__":
    main()