diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
new file mode 100644
index 0000000..519b1bf
--- /dev/null
+++ b/.github/workflows/deny.yml
@@ -0,0 +1,27 @@
+# Runs `cargo-deny` when modifying `Cargo.lock`.
+
+name: deny
+
+on:
+ push:
+ branches: [main]
+ paths: [Cargo.lock]
+ pull_request:
+ branches: [main]
+ paths: [Cargo.lock]
+ merge_group:
+
+env:
+ CARGO_TERM_COLOR: always
+
+concurrency: deny-${{ github.head_ref || github.run_id }}
+
+jobs:
+ deny:
+ name: deny
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - uses: EmbarkStudios/cargo-deny-action@v1
+ with:
+ command: check all
diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
new file mode 100644
index 0000000..6471e33
--- /dev/null
+++ b/.github/workflows/dependencies.yml
@@ -0,0 +1,61 @@
+# Runs `cargo update` periodically.
+
+name: Update Dependencies
+
+on:
+ schedule:
+ # Run weekly
+ - cron: "0 0 * * SUN"
+ workflow_dispatch:
+ # Needed so we can run it manually
+
+env:
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+ BRANCH: cargo-update
+ TITLE: "chore(deps): weekly `cargo update`"
+ BODY: |
+ Automation to keep dependencies in `Cargo.lock` current.
+
+ cargo update log
+
+
+ ```log
+ $cargo_update_log
+ ```
+
+
+
+
+
+Unless you explicitly state otherwise, any contribution intentionally submitted
+for inclusion in these crates by you, as defined in the Apache-2.0 license,
+shall be dual licensed as above, without any additional terms or conditions.
+
+
+[crates-badge]: https://img.shields.io/crates/v/alphanet.svg
+[crates-io]: https://crates.io/crates/alphanet
+[downloads-badge]: https://img.shields.io/crates/d/alphanet
+[mit-badge]: https://img.shields.io/badge/license-MIT-blue.svg
+[apache-badge]: https://img.shields.io/badge/license-Apache--2.0-blue.svg
+[mit-url]: LICENSE-MIT
+[apache-url]: LICENSE-APACHE
+[actions-badge]: https://github.com/paradigmxyz/alphanet/workflows/CI/badge.svg
+[actions-url]: https://github.com/paradigmxyz/alphanet/actions?query=workflow%3ACI+branch%3Amain
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..5260d52
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Contact georgios at paradigm.xyz.
diff --git a/bin/alphanet/Cargo.toml b/bin/alphanet/Cargo.toml
new file mode 100644
index 0000000..aef6017
--- /dev/null
+++ b/bin/alphanet/Cargo.toml
@@ -0,0 +1,35 @@
+[package]
+name = "alphanet"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "Reth AlphaNet is a testnet OP Stack rollup aimed at enabling experimentation of bleeding edge Ethereum Research."
+default-run = "alphanet"
+
+[lints]
+workspace = true
+
+[dependencies]
+tracing = { workspace = true, optional = true }
+
+[target.'cfg(not(windows))'.dependencies]
+tikv-jemallocator = { version = "0.5.0", optional = true }
+
+[features]
+default = ["jemalloc"]
+# asm-keccak = ["reth-primitives/asm-keccak"]
+
+jemalloc = ["dep:tikv-jemallocator"]
+jemalloc-prof = ["jemalloc", "tikv-jemallocator?/profiling"]
+
+min-error-logs = ["tracing/release_max_level_error"]
+min-warn-logs = ["tracing/release_max_level_warn"]
+min-info-logs = ["tracing/release_max_level_info"]
+min-debug-logs = ["tracing/release_max_level_debug"]
+min-trace-logs = ["tracing/release_max_level_trace"]
+
+[[bin]]
+name = "alphanet"
+path = "src/main.rs"
diff --git a/bin/alphanet/src/main.rs b/bin/alphanet/src/main.rs
new file mode 100644
index 0000000..2ca8a1a
--- /dev/null
+++ b/bin/alphanet/src/main.rs
@@ -0,0 +1,15 @@
+#![allow(missing_docs)]
+
+// We use jemalloc for performance reasons.
+#[cfg(all(feature = "jemalloc", unix))]
+#[global_allocator]
+static ALLOC: tikv_jemallocator::Jemalloc = tikv_jemallocator::Jemalloc;
+
+fn main() {
+ println!("Hello, world!");
+
+ // Enable backtraces unless a RUST_BACKTRACE value has already been explicitly provided.
+ if std::env::var_os("RUST_BACKTRACE").is_none() {
+ std::env::set_var("RUST_BACKTRACE", "1");
+ }
+}
diff --git a/clippy.toml b/clippy.toml
new file mode 100644
index 0000000..f968eb6
--- /dev/null
+++ b/clippy.toml
@@ -0,0 +1,2 @@
+msrv = "1.76"
+allow-dbg-in-tests = true
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..8d7bf3e
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,54 @@
+[advisories]
+vulnerability = "deny"
+unmaintained = "warn"
+unsound = "warn"
+yanked = "warn"
+notice = "warn"
+
+[bans]
+multiple-versions = "warn"
+wildcards = "deny"
+highlight = "all"
+
+[licenses]
+unlicensed = "deny"
+confidence-threshold = 0.9
+# copyleft = "deny"
+
+allow = [
+ "MIT",
+ "MIT-0",
+ "Apache-2.0",
+ "Apache-2.0 WITH LLVM-exception",
+ "BSD-2-Clause",
+ "BSD-3-Clause",
+ "ISC",
+ "Unicode-DFS-2016",
+ "Unlicense",
+ "MPL-2.0",
+ # https://github.com/briansmith/ring/issues/902
+ "LicenseRef-ring",
+ # https://github.com/briansmith/webpki/issues/148
+ "LicenseRef-webpki",
+]
+
+exceptions = [
+ # CC0 is a permissive license but somewhat unclear status for source code
+ # so we prefer to not have dependencies using it
+ # https://tldrlegal.com/license/creative-commons-cc0-1.0-universal
+ { allow = ["CC0-1.0"], name = "tiny-keccak" },
+]
+
+[[licenses.clarify]]
+name = "ring"
+expression = "LicenseRef-ring"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
+
+[[licenses.clarify]]
+name = "webpki"
+expression = "LicenseRef-webpki"
+license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
diff --git a/rustfmt.toml b/rustfmt.toml
new file mode 100644
index 0000000..e331a19
--- /dev/null
+++ b/rustfmt.toml
@@ -0,0 +1,13 @@
+merge_derives = false
+reorder_imports = true
+use_field_init_shorthand = true
+use_small_heuristics = "Max"
+
+# Nightly
+max_width = 100
+comment_width = 100
+imports_granularity = "Crate"
+wrap_comments = true
+format_code_in_doc_comments = true
+doc_comment_code_block_width = 100
+format_macro_matchers = true