upkeep state

Denom

Denom is the only asset this realm accepts.

TaskSubExpire

Task identifiers — the two supported valves.

TaskTimelockExecute

Task identifiers — the two supported valves.

MaxReward

MaxReward is the compile-time ceiling on the per-poke reward: 20,000ugnot (0.02 GNOT). It bounds what any single poke can extract from the pot. For sub\_expire it also defeats farming outright: one manufactured expirable subscription permanently locks a sub-record deposit of ~30,000ugnot at the observed 100ugnot/byte rate — already above the cap before price and gas. For timelock\_execute the farmed Action record is smaller and its deposit can sit below the cap, so there the admin's setting, kept below the measured farm-cycle cost, is what deters farming. Funders trust the cap and the admin's policy together; the pot they fund is an explicit donation either way.

admin

// may set rewards, stage a successor

pendingAdmin

// staged by TransferAdmin, completes via AcceptAdmin

sweeper

// may sweep out-of-band surplus

self

// this realm's address, captured at deploy

pot

// funded, not-yet-awarded ugnot

rewards

ledger

pokes

funded

init.13

Fund

Fund adds the attached coins to the reward pot. Anyone may fund; funding is a donation to ecosystem maintenance and is not refundable.

PokeExpire

PokeExpire triggers subscriptions.Expire(subID) through this realm and credits the caller the sub\_expire reward. The downstream realm decides whether the subscription is expirable; its abort is the authorization. The transaction must attach no coins (the downstream realm checks the origin envelope).

PokeExecute

PokeExecute triggers timelock\_guardian.Execute(actionID) through this realm and credits the caller the timelock\_execute reward. The guardian decides whether the action is executable; its abort is the authorization.

award

award moves reward from the pot to the caller's claimable balance. Callers have already established that the pot covers it.

requireReward

requireReward returns the configured reward for a task, refusing when the task is unknown, unrewarded, or the pot cannot cover it. Refusal on an empty pot is deliberate: both valves remain directly callable on their own realms, so an unrewarded detour through this one is only a gas trap for the caller.

Claim

Claim sends amount ugnot of the caller's earned balance back to the caller.

ClaimAll

ClaimAll sends the caller's entire earned balance back to the caller.

SetReward

SetReward configures the per-poke reward for a task, bounded by MaxReward. Admin only. Zero disables the task.

SweepDenom

SweepDenom recovers out-of-band coins to the sweeper. For the pot denom the reserve is pot + earned balances — both structurally unreachable. Sweeper only.

TransferAdmin

TransferAdmin stages a two-step admin handover.

AcceptAdmin

AcceptAdmin completes the handover; only the staged successor may. The sweeper role moves with the admin.

Admin

PendingAdmin

Pot

RewardFor

BalanceOf

UsersTotal

Pokes

Funded

Address

Held

Render

assertNoSend

assertAdmin

checkedAdd

itoa