escrow_v3 state

admin

feeFallback

pendingAdmin

TransferOwnership

TransferOwnership stages a handoff to newAdmin. Admin only. The transfer does not take effect until newAdmin calls AcceptOwnership, so admin is never moved to an address that has not demonstrated it can transact. Calling it again before acceptance replaces the staged address, which is how a mistyped proposal is corrected.

AcceptOwnership

AcceptOwnership completes the handoff. Only the staged pendingAdmin may call it — including against the outgoing admin, so the two steps cannot be collapsed into one by the party giving up the role.

CancelOwnershipTransfer

CancelOwnershipTransfer clears a staged handoff. Admin only — the outgoing admin must be able to abort a proposal it no longer wants, without needing the proposed address to cooperate.

GetAdmin

GetAdmin returns the address that currently holds admin.

GetPendingAdmin

GetPendingAdmin returns the staged successor ("" when none is in flight).

assertAdmin

assertAdmin is the authorization gate for this file's entrypoints. It rejects a stale/sibling \`cur\` first, then takes the caller from cur.Previous().

laneService

laneService is this engine's lane key into the DAO fee spine (memba\_market\_config). Seeded there at 200 bps (2.0%) — see memba\_market\_config/config.gno's init(), which explicitly documents "service" as escrow's release fee lane.

PlatformFeePct

// 2% fallback only

CancelFeePct

// 5% cancellation fee — escrow-internal, NOT on the fee spine

AutoRefundBlks

// ~30 days at 3s/block

AutoResolveBlks

// ~28 days at 3s/block

MaxTitleLen

MaxDescLen

MaxMilestones

MaxContracts

MinMilestoneAmount

// 0.001 GNOT — prevents fee evasion via truncation

ContractStatus

StatusActive

StatusCompleted

StatusDisputed

StatusCancelled

MilestoneStatus

MsPending

MsFunded

MsCompleted

MsReleased

MsDisputed

MsRefunded

Contract

Milestone

contracts

// id -> \*Contract

nextID

paused

totalLiable

// NF-2: ugnot owed to funded/disputed milestones — see getters.gno

init.37

resolveFee

assertNotPaused

Pause

Pause halts all write operations. Admin only.

Unpause

Unpause resumes normal operations. Admin only.

IsPaused

IsPaused returns the current pause state.

CreateContract

CreateContract creates a new escrow contract with milestones. Milestones format: "title1:amount1,title2:amount2"

FundMilestone

FundMilestone deposits funds for a specific milestone. Client only.

CompleteMilestone

CompleteMilestone marks a milestone as completed. Freelancer only.

ReleaseFunds

ReleaseFunds releases funds to freelancer after client approves. Client or Admin.

RaiseDispute

RaiseDispute escalates a milestone to admin arbitration. Client or Freelancer.

ResolveDispute

ResolveDispute resolves a dispute. Admin only. refundClient=true refunds to client, false pays freelancer.

CancelContract

CancelContract cancels an active contract. Client only. Funded milestones are refunded minus cancellation fee.

ClaimRefund

ClaimRefund refunds a funded milestone that has timed out. Anyone can call — permissionless, prevents fund locking.

ClaimDisputeTimeout

ClaimDisputeTimeout auto-resolves a dispute that admin hasn't acted on after AutoResolveBlks (~28 days). Resolution follows the pre-dispute status: - If the milestone was MsCompleted (freelancer delivered work) before dispute, funds go to freelancer (minus platform fee). This prevents griefing where a client disputes after delivery and simply waits out the clock. - If the milestone was MsFunded (work not yet delivered) before dispute, funds are refunded to client. Anyone can call (permissionless safety valve).

Render

renderHome

renderContract

renderStats

getContract

allMilestonesReleased

allMilestonesTerminal

allMilestonesTerminal returns true if every milestone is in a final state (released, refunded, or pending — pending with no funds is terminal).

parseMilestones

parseMilestones parses "title1:amount1,title2:amount2" into Milestone slice. Invalid entries cause a panic (not silently skipped).

truncAddr

sanitizeMilestoneTitle

sanitizeMilestoneTitle strips markdown special characters to prevent injection in gnoweb Render output.

basisPointsFee

basisPointsFee computes floor(amount\*bps/10000) without overflowing the intermediate product. For nonnegative amount and bps \<= 10000, the quotient product and final sum are \<= amount; the remainder product is \< 100000000. Callers retain their existing configured rates, recipients and rounding.

TotalLiabilities

TotalLiabilities returns the total ugnot the realm owes across all funded and disputed milestones (funds that have arrived but not yet left the realm).

RealmAddress

RealmAddress is the NF-2 canonical name for the realm's own address (the solvency monitor pairs it with TotalLiabilities).

GovernanceMilestone

Value-only copies: no Contract pointer or persistent milestone slice escapes.

GovernanceContract

GetGovernanceContract

GovernanceFeeTerms

GetGovernanceFeeTerms

escrowMetadataField

publisherAtLoad