bounty_panel state

RealmPath

RealmPath is this realm's own path, used to build Render links.

Denom

Denom is the only asset this realm accepts.

MaxFeeBps

MaxFeeBps is the hard protocol-fee cap: 1000 bps = 10%.

StatusOpen

Bounty status values.

StatusAwarded

Bounty status values.

StatusCancelled

Bounty status values.

StatusExpired

Bounty status values.

MaxTitleLen

Input bounds.

MaxDescLen

Input bounds.

MaxURILen

Input bounds.

MaxPanelSize

Input bounds.

MaxSubmissions

Input bounds.

MinDurationBlocks

Input bounds.

MaxDurationBlocks

Input bounds.

ExpiryGraceBlocks

Input bounds.

MaxRenderRows

Input bounds.

submission

bounty

admin

// may set fee, fee recipient, successor admin

feeRecipient

// may withdraw fees and sweep surplus

feeBps

// fee snapshotted into NEW bounties

self

// this realm's address, captured at deploy

nextID

openTotal

// == Σ amount over bounties with status Open

bounties

// padID(id) -> \*bounty

ledger

init.26

rejectStraySend

rejectStraySend aborts when coins are attached to a non-payable call. This realm does hold funds, so a stray send would not be lost outright — it would become sweepable surplus belonging to the fee recipient, silently converting a user's coins into protocol revenue. Aborting reverts the transfer to the sender instead. Guarded on IsUserCall, not IsUser, because a MsgRun ephemeral can consume the OriginSend envelope before forwarding control. SCOPE, precisely: the guard reads the ORIGINATING transaction's envelope, so it only inspects direct EOA calls. For a realm-routed call the -send envelope is delivered to the INTERMEDIARY realm's address, so there is nothing at this realm to reject and the guard deliberately fails open. That is not a hole: an intermediary that separately sends coins to this realm's address is making an ordinary transfer, which no guard in any entrypoint could intercept, and which lands as surplus recoverable through SweepDenom. Coins can only become ESCROW through CreateBounty.

CreateBounty

CreateBounty escrows the attached GNOT as a new open bounty and returns its id. Only direct EOA calls with -send are accepted. panelCSV is a comma-separated list of resolver addresses; threshold is how many of them must name the same submission for it to win. Submissions are accepted for submitBlocks from now, after which the panel has resolveBlocks to decide. The current protocol fee is snapshotted into the bounty and must not exceed maxFeeBps, the ceiling the caller signed for; pass MaxFeeBps to accept any legal fee.

Submit

Submit records (or replaces) the caller's submission to an open bounty before its submission deadline. One submission per address per bounty — re-submitting replaces the caller's own reference only. The funder and every panel member are barred, so no resolver can vote for their own work.

Vote

Vote casts (or changes) the calling resolver's vote for one of the bounty's submissions. Only panel members may vote, and only after the submission window has closed and before the resolution deadline. A resolver holds exactly one live vote, changeable until the threshold is reached. The vote that brings a submission to the threshold awards the bounty in the same transaction: the escrow leaves the open pool and is credited to the winner's claimable balance at the fee snapshotted at creation. Terminal.

award

award moves an Open bounty's escrow into the winner's claimable balance at the snapshotted fee and finalizes the status. The caller has already verified authorization, status and the threshold.

CancelBounty

CancelBounty closes an open bounty and refunds its escrow to the funder, fee-free. Only the funder may cancel, and ONLY while no contributor has submitted: once work exists, the funder cannot unilaterally reclaim the escrow. Terminal.

ExpireBounty

ExpireBounty closes an open bounty whose resolution deadline passed more than ExpiryGraceBlocks ago, refunding the funder fee-free. ANYONE may call it — this is the permissionless valve that guarantees escrow can never be trapped by an inactive or deadlocked panel. Terminal.

refundOpen

refundOpen moves an Open bounty's escrow into the funder's claimable balance fee-free and finalizes the status. Callers have already verified authorization and status.

Claim

Claim sends amount ugnot of the caller's claimable balance (winnings and refunds) back to the caller.

ClaimAll

ClaimAll sends the caller's entire claimable balance back to the caller. Fails if there is nothing to claim.

WithdrawFees

WithdrawFees sends the accrued fee pot to the fee recipient. Only the fee recipient may call it.

SweepDenom

SweepDenom sends the surplus of a single denomination to the fee recipient. For ugnot only the excess over Liabilities() moves; other denoms move wholly. Only the fee recipient may call it.

SetFeeBps

SetFeeBps sets the protocol fee snapshotted into FUTURE bounties at creation. Existing bounties keep the fee they were created under. Admin only; bounded by \[0, MaxFeeBps].

SetFeeRecipient

SetFeeRecipient re-points the fee/surplus role, including the pot accrued so far. Admin only; zero address rejected.

TransferAdmin

TransferAdmin hands the admin role to next. Admin only; zero address rejected. One-step (documented trade-off, matching the siblings).

BountyInfo

BountyInfo returns a bounty's scalar fields by value.

Description

Description returns a bounty's raw description text.

SubmissionOf

SubmissionOf returns addr's content reference, submission height and current vote count for a bounty, with ok reporting whether a submission exists.

IsPanelMember

IsPanelMember reports whether addr may vote on a bounty.

Panel

Panel returns a bounty's resolver addresses as a comma-separated list, in sorted order.

VoteOf

VoteOf returns the submission a resolver currently votes for, with ok reporting whether that resolver has voted at all.

VotesCast

VotesCast returns how many resolvers currently hold a live vote.

Admin

FeeRecipient

FeeBps

FeeBps returns the fee that will be snapshotted into newly created bounties (existing bounties keep their own snapshot).

FeeOn

FeeOn previews the fee and net payout for a bounty of amount at the CURRENT FeeBps.

NumBounties

NumBounties returns how many bounties have ever been created.

OpenTotal

OpenTotal returns the escrow held by open bounties (the B term).

BalanceOf

BalanceOf returns addr's claimable balance (winnings + refunds).

UsersTotal

UsersTotal returns the sum of all claimable balances (the U term).

FeesAccrued

FeesAccrued returns the fee pot (the F term).

Liabilities

Liabilities returns everything this realm owes: openTotal + UsersTotal + FeesAccrued.

Held

Held returns the ugnot actually held at the realm address (H).

Surplus

Surplus returns Held() - Liabilities() (the S term).

Address

Height

Height returns the current chain height (deadline arithmetic aid).

Render

Render shows the board at "" and a bounty detail at "\<id>". Free text (titles are charset-restricted; descriptions and URIs are not) passes through the ecosystem sanitizer before hitting markdown.

renderBounty

assertAdmin

mustGetBounty

assertDuration

parsePanel

parsePanel turns a comma-separated resolver list into a membership tree. Every entry must be a valid, non-empty, non-duplicate bech32 address. Validity is checked here rather than trusted: a mistyped resolver address would silently shrink the effective panel and could make the threshold permanently unreachable, which is a fund-trapping shape even with the expiry valve in place.

assertValidTitle

assertValidTitle bounds length and restricts the charset so titles are list-safe in Render without escaping.

padID

padID renders an id as a fixed-width key so avl iteration order is numeric order.

itoa

checkedAdd