deposits state

Denom

Denom is the only asset this realm accepts.

MaxFeeBps

MaxFeeBps is the hard protocol-fee cap: 1000 bps = 10%. The fee applies only to the portion AWARDED to the holder, never to a refund.

DepositOpen

// created; the depositor has not funded

DepositFunded

// funded; the term is running or the claim window is open

DepositClaimed

// the holder filed a claim; the depositor may accept or dispute

DepositDisputed

// the depositor disputed; the arbiter decides

DepositSettled

// split credited; both parties pull

DepositCancelled

// never funded; nothing moved

MinDeposit

Input bounds.

MaxDeposit

// 1,000,000 GNOT

MinClaim

Input bounds.

MinTerm

Input bounds.

MaxTerm

Input bounds.

MinWindow

Input bounds.

MaxWindow

Input bounds.

FundWindow

Input bounds.

MaxMemoLen

Input bounds.

MaxReasonLen

Input bounds.

MaxAgreementsPerHolder

Input bounds.

RenderLimit

Input bounds.

agreement

admin

pendingAdmin

feeRecipient

feeBps

// snapshotted into NEW agreements

self

nextID

locked

// Σ amounts of funded/claimed agreements (destination not yet decided by a party)

contested

// Σ amounts of DISPUTED agreements (an arbiter is deciding)

agreements

// padID(id) -> \*agreement

holderNum

// holder.String() -> \*int64, stored agreements

ledger

init.32

OpenAgreement

OpenAgreement offers a deposit agreement. The caller becomes the holder and names the \`depositor\`, the exact \`amount\` they must attach, the \`termBlocks\` the deposit is held for, the \`claimWindow\` the holder has to file a claim after the term ends, the \`disputeWindow\` the depositor has to dispute one (and the arbiter then has to rule), and the \`forfeitCeiling\` — the most the holder may ever claim, in \[MinClaim, amount]. \`arbiter\` may be the zero address, in which case a claim cannot be disputed; it may not be either party. Nothing is held until the depositor Funds, which is how they consent to all of it. The current protocol fee is snapshotted in. Returns the id.

FileClaim

FileClaim claims \`amount\` of the deposit against the ceiling. Holder only, only once, only after the term has ended and before the claim window closes. \`amount\` must be in \[MinClaim, forfeitCeiling]. The depositor may then accept it, dispute it to the arbiter, or let it stand.

Release

Release returns the whole deposit to the depositor early. Holder only, while the agreement is funded and unclaimed. It is the holder waiving the claim they have not yet filed — the one route to settlement that needs no clock.

Fund

Fund attaches the exact deposit and starts the term. The named depositor only; the attached amount must equal the agreement's amount exactly, and the fund deadline must not have passed. Funding IS the depositor's consent to the ceiling, the windows and the arbiter, all of which were readable beforehand.

AcceptClaim

AcceptClaim settles at the claimed amount. Depositor only, while a claim stands. Accepting early is allowed — the dispute window is a deadline for disputing, not a waiting period.

Dispute

Dispute sends a standing claim to the arbiter. Depositor only, before the dispute deadline, and only if an arbiter was named — with no arbiter there is nobody to decide, and the depositor saw that before funding. The deposit moves from \`locked\` into \`contested\`; no coins move.

ResolveDispute

ResolveDispute rules on a disputed claim. Arbiter only. \`awardToHolder\` is in \[0, the claimed amount] — the arbiter may reduce a claim or deny it outright but never award more than was claimed, which is itself capped by the ceiling the depositor consented to. No deadline is enforced here: a late ruling is better than a stranded deposit, and \`LapseDispute\` is the race that bounds it.

ReleaseUnclaimed

ReleaseUnclaimed refunds the whole deposit because the holder never filed a claim before the window closed. Anyone may call it.

SettleUndisputed

SettleUndisputed settles at the claimed amount because the depositor neither accepted nor disputed before the dispute window closed. Anyone may call it.

LapseDispute

LapseDispute refunds the whole deposit because the arbiter did not rule before their deadline. Anyone may call it. The award is 0, not the claim: an unsubstantiated claim fails. The holder chose the arbiter and bears the cost of that choice failing — which is also why a disappeared arbiter can never strand a deposit.

CancelUnfunded

CancelUnfunded abandons an agreement the depositor never funded. Either party may cancel at any time — refusing to fund is the depositor's right and withdrawing the offer is the holder's — and ANYONE may cancel once the fund deadline has passed, so a dead offer cannot hold a slot forever. No coins have ever been held, so nothing moves.

Claim

Claim sends amount ugnot of the caller's claimable balance — refunds and awards from settled agreements — to the caller.

ClaimAll

ClaimAll sends the caller's entire claimable balance to the caller.

SetFeeBps

SetFeeRecipient

SetFeeRecipient names the address that may withdraw the accrued fee pot. It deliberately does NOT enforce disjointness from agreement parties, in contrast to OpenAgreement, which refuses an arbiter equal to either party. The two rules are not comparable, and the asymmetry is the point: - The arbiter rule is per-agreement and checked at the moment the agreement is created, so it is an invariant of that agreement for life. - The fee recipient is one global over an unbounded, growing set of agreements. A check here could only test a snapshot, and the very next OpenAgreement could name the sitting recipient as holder or depositor. A guard that any later transaction can walk through is worse than no guard: it reads as an invariant and is not one. Nothing is at stake in the overlap, which is why the honest answer is a documented omission rather than a decorative check. The fee is derived only from the holder's award inside ledger.MustDeposit, never from the refund, so a recipient who is also a holder collects the same coins by two routes instead of more coins. Solvency is unaffected in either direction: feeledger accounts user credit and the fee pot as separate buckets, both are inside ledger.Liabilities(), and SweepDenom's reserve is locked + contested + ledger.Liabilities() — so an overlapping recipient cannot make the swept surplus overstate what the realm is free to release.

WithdrawFees

SweepDenom

SweepDenom recovers out-of-band coins to the fee recipient. For the ledger denom the reserve is locked + contested + Liabilities() — held deposits, contested deposits, claimable refunds, awards and the fee pot are all structurally unreachable.

TransferAdmin

AcceptAdmin

AgreementInfo

Memo

ClaimReason

DisputeReason

Holder

Depositor

Arbiter

Amount

ForfeitCeiling

FeeBpsOf

Status

ClaimAmount

Award

TermEnd

ClaimDeadline

FundDeadline

DisputeDeadlineOf

DisputeDeadlineOf is the last height at which the depositor may Dispute a standing claim; ArbiterDeadlineOf is the last height at which the arbiter's ruling pre-empts LapseDispute. Both are 0 until the relevant stage is live.

ArbiterDeadlineOf

CreatedHeight

FundedHeight

SettledHeight

Refund

Refund is the amount the depositor gets back, known only once settled.

MaxClaimable

MaxClaimable is the most the holder could still take out of this agreement. It is the ceiling while the deposit is funded, the filed claim once one stands, and 0 once the agreement is terminal.

IsSettled

IsClaimable

IsClaimable reports whether FileClaim would be accepted at this height.

IsDisputable

IsDisputable reports whether Dispute would be accepted at this height.

PendingValve

PendingValve names the permissionless call this agreement is ready for, or "" when none is. It is the one view a keeper needs.

HasAgreement

AgreementsOf

Admin

PendingAdmin

FeeRecipient

FeeBps

NumAgreements

ClaimableOf

FeesAccrued

Liabilities

Locked

Contested

Held

Address

Height

settle

settle credits the split and moves the deposit out of its custody bucket. The caller has already established the route's authority and timing; \`award\` is in \[0, amount] and \`fromContested\` says which bucket the deposit sits in. Conservation, in delta form: Held is unchanged; locked OR contested falls by amount; Liabilities rises by award + (amount-award) == amount. So Held == locked + contested + Liabilities is preserved exactly. The fee is charged ONLY on the award. The refund is deposited at fee 0, so a fully-refunded deposit returns to the depositor in full.

mustAgreement

assertNoSend

counter

addChecked

padID

itoa

addrStr

hasPrefix

Render

renderHome

renderAgreement