Add live money configuration setup

REAL_MONEY_ROADMAP.md

@@ -4,6 +4,17 @@ This app is currently paper trading only. The Live Money tab and `/api/live`
 endpoint are readiness scaffolding: they make the required product and backend
 interfaces visible without moving funds or placing orders.
 
+## What is configured now
+
+- `.env.example` lists the environment variables the production app needs.
+- `/api/live` reports which live-money providers are configured or missing.
+- `/api/live` accepts order intents only as dry-runs and returns an audit event.
+- The Live Money tab shows launch checks, wallet/deposit settings, agent risk
+  limits, a dry-run order console, and an audit preview.
+
+The app still refuses to place live orders. That is intentional until the legal,
+provider, wallet-signing, reconciliation, and monitoring steps below are done.
+
 ## Required before live deposits or trading
 
 1. Legal and eligibility
@@ -42,15 +53,56 @@ interfaces visible without moving funds or placing orders.
 
 ## Environment variables expected by `/api/live`
 
+Copy `.env.example` into your local environment for development, then add the
+same variables in Vercel Project Settings -> Environment Variables for
+production.
+
 - `KYC_PROVIDER`
+- `KYC_API_KEY`
+- `KYC_WEBHOOK_SECRET`
 - `PAYMENTS_PROVIDER`
+- `PAYMENTS_API_KEY`
+- `PAYMENTS_WEBHOOK_SECRET`
 - `WALLET_PROVIDER`
+- `WALLET_PROJECT_ID`
+- `WALLET_API_KEY`
+- `DEPOSIT_WALLET_ADDRESS`
+- `POLYMARKET_SIGNATURE_TYPE=3`
+- `POLYMARKET_CHAIN_ID=137`
+- `SETTLEMENT_ASSET=pUSD`
+- `SETTLEMENT_CHAIN=polygon`
 - `POLYMARKET_CLOB_API_KEY`
 - `POLYMARKET_CLOB_SECRET`
 - `POLYMARKET_CLOB_PASSPHRASE`
 - `AUDIT_LOG_STORE`
-- `LIVE_TRADING_ENABLED=true`
+- `ADMIN_ALERT_EMAIL`
+- `LIVE_TRADING_ENABLED=true` only after final approval and end-to-end testing
 
 Even when all variables are present, live order placement remains intentionally
 unimplemented until wallet signing, compliance approval, and safe order routing
 are completed.
+
+## Polymarket integration notes
+
+Polymarket's public docs describe trading as non-custodial. Orders are signed
+and matched through the CLOB, and new API users generally use the deposit-wallet
+flow with signature type `3`.
+
+Useful official docs:
+
+- Trading overview: https://docs.polymarket.com/trading/overview
+- Trading quickstart: https://docs.polymarket.com/trading/quickstart
+- Deposit wallets: https://docs.polymarket.com/trading/deposit-wallets
+
+## Final setup checklist
+
+1. Choose and contract the KYC / eligibility provider.
+2. Choose the deposit and withdrawal provider.
+3. Choose the wallet or embedded-wallet provider and create a deposit wallet.
+4. Derive or create Polymarket CLOB credentials for the approved signing flow.
+5. Create durable append-only audit storage.
+6. Add all environment variables in Vercel.
+7. Run dry-runs against `/api/live` and verify audit events.
+8. Complete legal review, terms, restricted jurisdiction rules, and support
+   procedures.
+9. Only then set `LIVE_TRADING_ENABLED=true`.