memba_quest_attestation_v1 state

owner

pendingOwner

TransferOwnership

TransferOwnership stages a handoff. Owner only; it takes effect only once newOwner calls AcceptOwnership. Calling it again before acceptance replaces the staged address, which is how a mistyped proposal is corrected.

AcceptOwnership

AcceptOwnership completes the handoff. Only the staged pendingOwner may call it — including against the outgoing owner, so the two steps cannot be collapsed into one by the party giving up the role.

CancelOwnershipTransfer

CancelOwnershipTransfer clears a staged handoff. Owner only, so a proposal can be aborted without the proposed address cooperating.

GetOwner

GetOwner returns the address that currently holds ownership.

GetPendingOwner

GetPendingOwner returns the staged successor ("" when none).

assertOwner

assertOwner is the gate for this file's entrypoints. It rejects a stale/sibling \`cur\` first, then takes the caller from cur.Previous().

MaxAttestXP

── Constants ────────────────────────────────────────────────

pubKeySize

// ed25519 public key length (gno crypto/ed25519 exposes no const)

sigSize

// ed25519 signature length

fieldSep

── Constants ────────────────────────────────────────────────

signerPubKey

── State ────────────────────────────────────────────────────

completions

// addr + ":" + questId -> int64 (block height recorded)

attestedXP

// addr -> int (cumulative attested XP)

usedNonce

// nonce -> true (replay guard)

init.16

canonicalMsg

canonicalMsg is the EXACT byte string the backend signs offline and this realm verifies. It MUST stay byte-identical to the backend signer (ADR Track A / A.3). strconv.Itoa gives a canonical decimal with no leading zeros, so both sides agree for any xp.

completionKey

validXP

validXP bounds the attestable XP (see MaxAttestXP).

fieldsClean

fieldsClean rejects any voucher field containing the separator. This makes the canonical message PROVABLY unambiguous (no field-injection collision) without trusting the backend's nonce charset: with no field able to contain "|", a given canonical byte string maps to exactly one (addr, questId, xp, nonce).

verifyVoucher

verifyVoucher reports whether sigHex is a valid ed25519 signature by pub over the canonical voucher message. Pure (no state) so it is unit-tested directly with offline-generated test vectors.

SetSigner

SetSigner installs/rotates the backend's offline signer PUBLIC key (32-byte hex). The current owner is authenticated using its live crossing frame.

RecordCompletion

RecordCompletion verifies a backend-signed voucher and records the completion + its XP on-chain. Idempotent per (addr, questId); replay-proof per nonce. Panics (reverting the tx) on any invalid/again-used/out-of-range voucher.

GetSigner

GetSigner returns a copied canonical public-key string, or empty before setup.

GetAttestedXP

GetAttestedXP returns addr's cumulative on-chain attested XP (0 if none).

GetRecordedCompletions

GetRecordedCompletions returns addr's attested quest IDs as a comma-separated list (empty string if none), in ascending key order.

Render

Render is the human/gnoweb view; the authoritative reads are the exported Get\* funcs (queried via vm/qeval).

publisherAtLoad