{"workflow":{"id":"876c1ca5-f527-4f6b-9d5e-61128bb1b495","objective":"Release Tranche (ERC-20 symbol TRNC) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Tranche (TRNC), total supply 1,000,000,000 TRNC with 18 decimals, minted once to the deployer. Application contract: MilestoneFund. Currency: TRNC is the app's working currency. MilestoneFund's constructor takes one argument, the TRNC address (constructorArgs [\"$token\"]); it stores the token immutable, exposes it as token(), and holds no TRNC at deploy and never needs any: users get TRNC by swapping Sepolia ETH in the ETH/TRNC launch pool the factory seeds. Every payment in is approve + SafeERC20.safeTransferFrom; payouts are pull withdrawals (safeTransfer to the caller, checks-effects-interactions, nonReentrant). TRNC is a plain fixed-supply ERC-20 with no transfer fee, so the amount pulled is the amount credited. MilestoneFund has no payable function and no receive/fallback, so it never holds ETH. No owner, admin, pause or upgrade path. Raises are denominated in TRNC. open(bps1, bps2, bps3, fundingDuration): three milestone shares in basis points, each >= 1 and summing to exactly 10,000; fundingDuration 1 to 90 days; the caller is the creator. deposit(raiseId, amount): amount > 0, only before the funding deadline, never by the creator; the backer gets shares equal to amount. Tranches start after the deadline and release strictly in order. approveTranche(raiseId) (named so it is never confused with the ERC-20 approve): a backer approves the next unreleased tranche with weight = their shares (once per backer per tranche; approvals never carry to the next tranche). Each tranche's vote opens at the funding deadline (tranche 1) or at the previous release. release(raiseId): anyone, once approval weight x 2 > total shares and at least 3 days after that tranche's vote opened (a grace period in which dissenting backers can rage-quit before any release); amount = unreleased x bps_i / remainingBps (floor), where remainingBps is the sum of the unreleased tranches' bps, and the last tranche takes all that is left, so no dust stays; it is credited to the creator, who withdraws it (pull). rageQuit(raiseId): before the deadline returns the full deposit; after it pays shares x unreleased / totalShares (floor), and the last backer out takes the whole remainder; the backer's shares and any approval on the current tranche are removed. A raise with no deposits, or whose backers all quit, simply ends; nothing is stranded. Known limit to document: an actor holding more than 50% of shares through other wallets (including the creator) can release tranches, but never faster than one tranche per 3 days, so other backers can always rage-quit with their pro-rata share first. Views: raiseCount(), raise(id), sharesOf(id, backer), approvalWeight(id), unreleased(id), creatorBalance(creator). Events: Opened, Deposited, TrancheApproved, Released, RageQuit, Withdrawn. Tests (Foundry) must cover: the invariants TRNC balance == sum of unreleased over all raises + sum of creator balances and released + rage-quit payouts <= deposits, and unreleased == 0 after the last release or last quit (fuzz bps splits, deposit sizes and quit order); the 50% boundary (exactly half does not release); and the 3-day grace boundary (release at vote-open + 3 days - 1 s reverts). The independent adversarial review must attack: approval weight double counting across rage-quit, release ordering and rounding, the last-tranche and last-quitter remainders, creator self-dealing (a sybil majority releasing tranches back to back), and any path that pays out more TRNC than was deposited. Deploy through the project factory, then publish a one-page website to open a raise, back it (ERC-20 approve, then deposit), approveTranche and release, rage-quit, and let the creator withdraw, listing raises with progress. The page reads the TRNC address from MilestoneFund.token(), shows the connected wallet's TRNC balance and allowance, has an Approve step before every paying action, and says TRNC comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views and events only (no backend, no indexer; log queries are chunked from the deployment block). Keep it to one small page; the static export has index.html in dist/.","status":"completed","brief":"# Approved workflow\n\nRelease Tranche (ERC-20 symbol TRNC) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Tranche (TRNC), total supply 1,000,000,000 TRNC with 18 decimals, minted once to the deployer. Application contract: MilestoneFund. Currency: TRNC is the app's working currency. MilestoneFund's constructor takes one argument, the TRNC address (constructorArgs [\"$token\"]); it stores the token immutable, exposes it as token(), and holds no TRNC at deploy and never needs any: users get TRNC by swapping Sepolia ETH in the ETH/TRNC launch pool the factory seeds. Every payment in is approve + SafeERC20.safeTransferFrom; payouts are pull withdrawals (safeTransfer to the caller, checks-effects-interactions, nonReentrant). TRNC is a plain fixed-supply ERC-20 with no transfer fee, so the amount pulled is the amount credited. MilestoneFund has no payable function and no receive/fallback, so it never holds ETH. No owner, admin, pause or upgrade path. Raises are denominated in TRNC. open(bps1, bps2, bps3, fundingDuration): three milestone shares in basis points, each >= 1 and summing to exactly 10,000; fundingDuration 1 to 90 days; the caller is the creator. deposit(raiseId, amount): amount > 0, only before the funding deadline, never by the creator; the backer gets shares equal to amount. Tranches start after the deadline and release strictly in order. approveTranche(raiseId) (named so it is never confused with the ERC-20 approve): a backer approves the next unreleased tranche with weight = their shares (once per backer per tranche; approvals never carry to the next tranche). Each tranche's vote opens at the funding deadline (tranche 1) or at the previous release. release(raiseId): anyone, once approval weight x 2 > total shares and at least 3 days after that tranche's vote opened (a grace period in which dissenting backers can rage-quit before any release); amount = unreleased x bps_i / remainingBps (floor), where remainingBps is the sum of the unreleased tranches' bps, and the last tranche takes all that is left, so no dust stays; it is credited to the creator, who withdraws it (pull). rageQuit(raiseId): before the deadline returns the full deposit; after it pays shares x unreleased / totalShares (floor), and the last backer out takes the whole remainder; the backer's shares and any approval on the current tranche are removed. A raise with no deposits, or whose backers all quit, simply ends; nothing is stranded. Known limit to document: an actor holding more than 50% of shares through other wallets (including the creator) can release tranches, but never faster than one tranche per 3 days, so other backers can always rage-quit with their pro-rata share first. Views: raiseCount(), raise(id), sharesOf(id, backer), approvalWeight(id), unreleased(id), creatorBalance(creator). Events: Opened, Deposited, TrancheApproved, Released, RageQuit, Withdrawn. Tests (Foundry) must cover: the invariants TRNC balance == sum of unreleased over all raises + sum of creator balances and released + rage-quit payouts <= deposits, and unreleased == 0 after the last release or last quit (fuzz bps splits, deposit sizes and quit order); the 50% boundary (exactly half does not release); and the 3-day grace boundary (release at vote-open + 3 days - 1 s reverts). The independent adversarial review must attack: approval weight double counting across rage-quit, release ordering and rounding, the last-tranche and last-quitter remainders, creator self-dealing (a sybil majority releasing tranches back to back), and any path that pays out more TRNC than was deposited. Deploy through the project factory, then publish a one-page website to open a raise, back it (ERC-20 approve, then deposit), approveTranche and release, rage-quit, and let the creator withdraw, listing raises with progress. The page reads the TRNC address from MilestoneFund.token(), shows the connected wallet's TRNC balance and allowance, has an Approve step before every paying action, and says TRNC comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views and events only (no backend, no indexer; log queries are chunked from the deployment block). Keep it to one small page; the static export has index.html in dist/.\n\nSepolia (11155111) only. GitHub publication and IPFS hosting are approved. Launch token: a separate fixed-supply ERC-20, 18 decimals, no constructor arguments, exactly 1,000,000,000 minted to msg.sender, no mint or admin functions. The factory sends that supply to LP and rewards, so no application contract may need a launch-token balance at deploy. Application contracts are fully configured in nonpayable constructors using only address, uint, bool or bytes32 arguments (no strings, arrays, proxies, delegatecall or selfdestruct); anything else is set at runtime. No owner unless the request names one, and then it is $owner. No external oracles, VRF or keepers: randomness is commit-reveal or a future blockhash read within 256 blocks with a refund path. foundry.toml sets bytecode_hash = \"none\". The website is a static export with index.html in dist/. Site label lab-milestone-fund.\n\nBuild TRNC and MilestoneFund (raises, tranche releases and rage-quit all in TRNC, constructorArgs [\"$token\"]) with Foundry tests and an independent adversarial review, deploy them through the project factory, then build the website against the live deployment.\n","briefDigest":"99067cc861d06eb52ab52e629019d1a4fb9709dba78fee992b7fccf0edfb784a"},"planning":null,"id":"c4ebb14b-e9fb-4be3-93a8-9f5284b0893c","state":"completed","template":"shape:chain","objective":"WORKFLOW FRONTEND STAGE CONTEXT: contracts are already deployed. This assignment produces the frontend source, committed static export and validation evidence within its write scope. Put frontend source, package.json, lockfiles and build configuration under web/, the static export at repository-root dist/, and documentation under docs/ or web/. A web/** scope also receives an explicit web/.gitignore allowance; directory globs exclude other dotfiles. Follow narrower assigned paths when supplied. Root configuration and lockfiles stay protected. Read .imd/reads/deployment.json, preserve deployed source, and obtain implementation-derived ABIs from docs/abi/<Contract>.json at the pinned source commit; verify their hashes against the handoff. Read .imd/reads/workflow.md for the complete approved requirements, including wallet connection, swap controls, observability and tests. Submit the source/export/evidence to complete this worker assignment. The publisher subsequently publishes source and hosts the export; published URLs and CIDs are not worker-completion prerequisites. This assignment does not publish the site or redeploy contracts.\n\nMANDATORY FRONTEND ACCEPTANCE: Emit dist/imd-deployment.json after the final static export. Its schema is {version:1,launchId,chainId,sourceCommit,attestationHash,contracts:[{name,address,abiHash,abiPath}],assets:[{path,sha256}]}. Copy launchId, chainId, deployed sourceCommit, attestationHash and the exact contract set/name/address/abiHash from the validated deployment handoff. Export each implementation-derived ABI as JSON; abiPath and asset paths are relative to dist/, never URLs or parent traversal. The frontend must load this same imd-deployment.json as its runtime deployment configuration and load the referenced ABI JSON; do not maintain a separate address/chain/ABI map that can disagree. After building, enumerate every exported file except imd-deployment.json, including index.html and all ABI JSON, and record each file's SHA-256 as lowercase hex. At most 128 assets and 8 MiB per file. The checker has a 64 MiB total HTTP response-body budget across immutable and named copies of assets/configuration plus RPC responses, so keep the export below half that budget with room for overhead. The manifest excludes itself to avoid a recursive hash. Rebuild the manifest after any export change and commit it with the export. Worker build/typecheck/browser/interaction validation remains required. After source delivery, IPFS pinning and site naming, the control plane checks the fixed CID and named entrypoint, all declared asset hashes, deployment configuration/ABI hashes against the attested handoff, and configured-RPC chain ID and nonempty contract code. It does not execute browser JavaScript or wallet swaps. Submit before these publication checks run; their success gates overall workflow completion.","blockedReason":null,"createdAt":"2026-09-27T06:37:29.409Z","updatedAt":"2026-09-27T07:45:41.305Z","paidBy":"0x8a3b860f6dbfbbbb07f21905ed8cb0234538bdc8","via":null,"parentJobId":"f670ee8a-e382-44e9-a6a3-62c42329a852","project":{"id":"f670ee8a-e382-44e9-a6a3-62c42329a852","head":"c4ebb14b-e9fb-4be3-93a8-9f5284b0893c","running":null,"versions":[{"jobId":"f670ee8a-e382-44e9-a6a3-62c42329a852","workflowId":"876c1ca5-f527-4f6b-9d5e-61128bb1b495","objective":"Release Tranche (ERC-20 symbol TRNC) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Tranche (TRNC), total supply 1,000,000,000 TRNC with 18 decimals, minted once to the deployer. Application contract: MilestoneFund. Currency: TRNC is the app's working currency. MilestoneFund's constructor takes one argument, the TRNC address (constructorArgs [\"$token\"]); it stores the token immutable, exposes it as token(), and holds no TRNC at deploy and never needs any: users get TRNC by swapping Sepolia ETH in the ETH/TRNC launch pool the factory seeds. Every payment in is approve + SafeERC20.safeTransferFrom; payouts are pull withdrawals (safeTransfer to the caller, checks-effects-interactions, nonReentrant). TRNC is a plain fixed-supply ERC-20 with no transfer fee, so the amount pulled is the amount credited. MilestoneFund has no payable function and no receive/fallback, so it never holds ETH. No owner, admin, pause or upgrade path. Raises are denominated in TRNC. open(bps1, bps2, bps3, fundingDuration): three milestone shares in basis points, each >= 1 and summing to exactly 10,000; fundingDuration 1 to 90 days; the caller is the creator. deposit(raiseId, amount): amount > 0, only before the funding deadline, never by the creator; the backer gets shares equal to amount. Tranches start after the deadline and release strictly in order. approveTranche(raiseId) (named so it is never confused with the ERC-20 approve): a backer approves the next unreleased tranche with weight = their shares (once per backer per tranche; approvals never carry to the next tranche). Each tranche's vote opens at the funding deadline (tranche 1) or at the previous release. release(raiseId): anyone, once approval weight x 2 > total shares and at least 3 days after that tranche's vote opened (a grace period in which dissenting backers can rage-quit before any release); amount = unreleased x bps_i / remainingBps (floor), where remainingBps is the sum of the unreleased tranches' bps, and the last tranche takes all that is left, so no dust stays; it is credited to the creator, who withdraws it (pull). rageQuit(raiseId): before the deadline returns the full deposit; after it pays shares x unreleased / totalShares (floor), and the last backer out takes the whole remainder; the backer's shares and any approval on the current tranche are removed. A raise with no deposits, or whose backers all quit, simply ends; nothing is stranded. Known limit to document: an actor holding more than 50% of shares through other wallets (including the creator) can release tranches, but never faster than one tranche per 3 days, so other backers can always rage-quit with their pro-rata share first. Views: raiseCount(), raise(id), sharesOf(id, backer), approvalWeight(id), unreleased(id), creatorBalance(creator). Events: Opened, Deposited, TrancheApproved, Released, RageQuit, Withdrawn. Tests (Foundry) must cover: the invariants TRNC balance == sum of unreleased over all raises + sum of creator balances and released + rage-quit payouts <= deposits, and unreleased == 0 after the last release or last quit (fuzz bps splits, deposit sizes and quit order); the 50% boundary (exactly half does not release); and the 3-day grace boundary (release at vote-open + 3 days - 1 s reverts). The independent adversarial review must attack: approval weight double counting across rage-quit, release ordering and rounding, the last-tranche and last-quitter remainders, creator self-dealing (a sybil majority releasing tranches back to back), and any path that pays out more TRNC than was deposited. Deploy through the project factory, then publish a one-page website to open a raise, back it (ERC-20 approve, then deposit), approveTranche and release, rage-quit, and let the creator withdraw, listing raises with progress. The page reads the TRNC address from MilestoneFund.token(), shows the connected wallet's TRNC balance and allowance, has an Approve step before every paying action, and says TRNC comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views and events only (no backend, no indexer; log queries are chunked from the deployment block). Keep it to one small page; the static export has index.html in dist/.","baseCommit":"0243d7da4a4337ae8b16bcdf15bb4ead736fd68f","state":"completed","createdAt":"2026-09-27T05:47:49.166Z"}]},"deliver":true,"host":true,"site":{"id":"3869bfd0-81d6-463e-89c0-39b066b35612","jobId":"c4ebb14b-e9fb-4be3-93a8-9f5284b0893c","kind":"launch","tokenId":null,"agentId":null,"url":"https://lab-milestone-fund.site.identitymd.eth.limo","status":"named","holdReason":null,"takenDownAt":null,"takenDownReason":null,"label":"lab-milestone-fund","cid":"bafybeibybftb3ufqxpkt4jlpbdngvji3yhlgjxheou5grii3uoydhbzixu","bytes":642573,"ensName":"lab-milestone-fund.site.identitymd.eth","ensParent":null,"txHash":"0x816bbc81dbb4bf09725caa0fba1193b1dd3616757f7c37e97d1d89d1bebf07d9","blockNumber":26067423,"attempts":0,"failure":null,"pinnedAt":"2026-09-27T07:46:07.036Z","namedAt":"2026-09-27T07:52:51.813Z","supersededBy":null,"supersededAt":null,"previewHash":"ef8ad4955670878f58e1b0419e7bd28fdc218c48a7b8ad885b6e001be9d1f727","createdAt":"2026-09-27T07:45:41.305Z","updatedAt":"2026-09-27T07:52:51.813Z"},"launch":{"requested":false,"kind":null,"id":null,"status":null,"chainId":null},"oracleRequestId":null,"delivery":{"repoUrl":"https://github.com/identity-md-launches/launch-372-workflow-frontend-stage-context","pullRequestUrl":null,"commit":"8862b8b0f0c7ffba0b7459bbc25945c1005cc33f","deliveredAt":"2026-09-27T17:24:35.069Z","media":null},"media":null,"nodes":[{"key":"frontend_for_contract","role":"implement","state":"accepted","attempt":2,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":["web/**","dist/**","docs/**","web/.gitignore"],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-09-27T07:45:41.305Z","verdict":{"status":"accepted","profile":"none","evaluation":"structural","rejectionCode":null,"detail":"paths and tree verified; no suite was run for this kind of work","verifierVersion":"0.1.0+ff982c0f","verifiedTreeHash":"7ec3d7ae922939ebdc5b32d6ea17eb7d978722af","at":"2026-09-27T07:45:41.308Z","failedChecks":[]},"seat":{"tokenId":"760","agentId":"51304"},"live":null}],"reviews":[{"status":"sent","chainId":1,"txHash":"0x4675840eba66740998cca02734e008cfd7b54091e61dfce56f26f0c76db229c0","blockNumber":26115586,"sentAt":"2026-10-04T01:05:37.790Z","entries":[]},{"status":"sent","chainId":1,"txHash":"0x7b98c22efa5388b1f3cb5932f443600fb21b1d908815661e0574d9964c90d05e","blockNumber":26114419,"sentAt":"2026-10-03T21:11:37.299Z","entries":[{"nodeKey":"frontend_for_contract","agentId":"51304","value":1,"role":"verification:structural"}]}]}