Reward custody
Rewards are deposited into the campaign escrow. The factory and escrow are non-upgradeable and do not expose a platform withdrawal key or a platform signer that can spend participant allocations.
Creators control campaign preparation, activation, review, and finalization within the contract’s state and deadline rules. Participants initiate their own claims.
Configuration and allocation commitments
The configuration hash binds the campaign’s escrow parameters. The rules hash identifies the locked offchain rules. Finalization publishes the distribution root and artifact hashes.
Claim proofs bind an allocation to its recipient, token ID, quantity, and index. The contract checks the proof and prevents the same allocation from being claimed twice.
Wallet transaction checks
The interface checks the prepared intent, network, sender, destination, expiry, and decoded function before requesting a wallet transaction. Creation calldata must match the locked configuration commitment.
Approvals name the campaign escrow. ERC-20 approval amounts are bounded by the configured pool, and ERC-721 approvals reference configured inventory. Always verify the transaction shown by your wallet.
Trust boundaries
| Actor or component | Responsibility |
|---|---|
| Creator | Task accuracy, evidence review, eligibility decisions, and allocation publication. |
| Escrow | Funding rules, state transitions, deadlines, committed proofs, and transfers. |
| Backend | Session authorization, evidence access, artifact generation, and verified event indexing. |
| Reward asset | Its own transfer behavior, restrictions, and economic value. |
| Participant | Protect wallet access, verify the campaign, and claim before the deadline. |
Platform moderation
Operators can hide campaign discovery, suspend accounts, and revoke sessions. These controls do not rewrite escrow balances, eligibility commitments, or published allocations.
Existing claim artifacts and contract-enforced claim rights remain separate from listing visibility. Keep an exported proof when you need direct contract access.