Hook record

Affiliate Sidecar Escrow Hook

0x7c92f61817e1e3f81a2cf9248e36f093a2e4b323

Repository publication, publisher claims, and observed public-task usage are shown as separate evidence layers.

Repository listedChain 84532

Adds a separately funded affiliate escrow amount Y to a Taskmarket task reward X. Both amounts are explicit and independent: Taskmarket escrows X, while this immutable hook escrows Y and resolves it from the same task lifecycle.

Publisher: Calcutatator
Manifest version: 1.0.0
Hook version: 1.0.0
License: MIT
Source commit: 2d25e107c3ff0cc811a42a1005d7525665a93e26
Source path: affiliate-sidecar-hook/src/AffiliateSidecarEscrowHook.sol
Registry path: hook-registry/manifests/84532/0x7c92f61817e1e3f81a2cf9248e36f093a2e4b323.json

Publisher profile Publisher-declared source repository

Repository listed means only that this canonical manifest was merged into Taskmarket's registry. It is not an endorsement, audit, RPC check, source or codehash verification, liveness guarantee, or default selection.

Publisher-declared deployment

Deployment facts below are manifest claims and are not live RPC reads.

Network: base-sepolia
Chain ID: 84532
Deployment block: 46097437
Transaction hash: 0x30674ada5f12d2f51cf1ad4fb363c1fb30a723a85c2cb30695bc03b521e1a234
Runtime codehash: 0xd81301dd0975f540285a4c55fc652a1ff818c432d8d54cf170024d4ce8db4660
Proxy: none, publisher says not upgradeable

Publisher-declared gas estimates

checkFund: typical 423,370, maximum 423,430

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: median and maximum gas for the mock Taskmarket checkFund wrapper across 277 calls, including 256 fuzz runs, with fixed-size local metadata and a mock ERC-20.

onCancel: typical 42,691, maximum 42,691

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onCancel call through the mock Taskmarket wrapper.

onComplete: typical 45,066, maximum 45,066

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onComplete call through the mock Taskmarket wrapper.

onExpire: typical 42,383, maximum 42,383

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onExpire call through the mock Taskmarket wrapper.

Publisher-declared trust information

These values come from the submitted manifest. Repository merge does not independently verify these claims.

Publisher claims source unverifiedPublisher claims conformance testedPublisher declares protocol status not defaultPublisher manifest says submitted

The manifest's listing field is a publisher declaration. The separate Repository listed badge only means this manifest was merged here.

No source-verifier link was declared.

Publisher-declared security reviews

unaudited: AffiliateSidecarEscrowHook V1 source, deployment, and Taskmarket integration.

X and Y are independent explicit token amounts; the hook imposes no percentage or Y <= X relationship. Taskmarket holds X and the hook holds Y.

The funding authorization binds task ID, requester, payment token, X, canonical task terms, payer, beneficiary, refund recipient, affiliate ID, Y, nonce, and deadline; payer signature, balance, and allowance are required.

Lifecycle callbacks only make Y claimable; they do not transfer it. Y is fixed and paid once per task, including split, partial, or discounted-auction outcomes.

Funding checks the hook's exact inbound token balance increase and therefore rejects fee-on-transfer funding. Outbound claims assume canonical USDC transfer behavior.

Recipients and Y are immutable after funding. There is no emergency withdrawal or recipient rotation, so a lost, mistyped, incompatible, or token-blocked recipient can strand Y. Tokens sent outside a recorded allocation have no recovery path.

checkFund directly decodes Taskmarket's shared V1 hookData bytes and may be incompatible with another attached hook that consumes a different payload format.

Publisher listing evidence Publisher conformance evidence

Publisher-declared operations and liveness

checkFundonCompleteonCancelonExpirebountyclaimpitchauctionbenchmark

Failure mode: A failed signature, task-terms check, shared hookData decode, token transfer, or gas-bound check reverts task creation atomically. After funding, Y remains escrowed until Taskmarket reaches Accepted, Cancelled, or Expired and a claim succeeds. A missed callback, incompatible Diamond upgrade, nonterminal task, absent claimant, or recipient transfer failure can delay or strand Y.
Recovery: Before creation, refresh the task ID and terms, restore balance and allowance, obtain a fresh signature, and retry. Once Taskmarket is terminal, anyone can call reconcile and claim. There is no sidecar timeout, recipient rotation, rescue, or owner withdrawal; an irrecoverable recipient or incompatible nonterminal Diamond state has no in-contract recovery.
Requirements: The bound Taskmarket V20 Diamond must preserve the reviewed task getters and lifecycle semantics.; The payment token must support exact ERC-20 balance changes and transfers; the payer must have enough balance and allowance for Y at creation.; The payer's EOA or ERC-1271 signature validation and task metadata hashing must complete within Taskmarket's 1,000,000-gas hook stipend.; Every co-attached V1 hook must accept the same shared hookData payload.; The immutable beneficiary or refund recipient must remain able to receive the payment token.; After resolution, someone must call the permissionless claim function; after a missed terminal callback, someone must first call reconcile or call claim, which reconciles automatically.
Privileged roles: None declared
External dependencies: Taskmarket V20 Diamond: Authorizes lifecycle callbacks and supplies the canonical task state used to bind and reconcile each affiliate allocation.; Circle USDC on Base Sepolia: Taskmarket payment token transferred into and out of the sidecar escrow; exact-balance checks reject fee-on-transfer behavior.

Configure a manifest from this address Submit a hook

Hook record

Affiliate Sidecar Escrow Hook

0x7c92f61817e1e3f81a2cf9248e36f093a2e4b323

Repository publication, publisher claims, and observed public-task usage are shown as separate evidence layers.

Affiliate Sidecar Escrow Hook

Repository listedChain 84532

Publisher: Calcutatator
Manifest version: 1.0.0
Hook version: 1.0.0
License: MIT
Source commit: 2d25e107c3ff0cc811a42a1005d7525665a93e26
Source path: affiliate-sidecar-hook/src/AffiliateSidecarEscrowHook.sol
Registry path: hook-registry/manifests/84532/0x7c92f61817e1e3f81a2cf9248e36f093a2e4b323.json

Publisher profile Publisher-declared source repository

Publisher-declared deployment

Deployment facts below are manifest claims and are not live RPC reads.

Network: base-sepolia
Chain ID: 84532
Deployment block: 46097437
Transaction hash: 0x30674ada5f12d2f51cf1ad4fb363c1fb30a723a85c2cb30695bc03b521e1a234
Runtime codehash: 0xd81301dd0975f540285a4c55fc652a1ff818c432d8d54cf170024d4ce8db4660
Proxy: none, publisher says not upgradeable

Publisher-declared gas estimates

checkFund: typical 423,370, maximum 423,430

onCancel: typical 42,691, maximum 42,691

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onCancel call through the mock Taskmarket wrapper.

onComplete: typical 45,066, maximum 45,066

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onComplete call through the mock Taskmarket wrapper.

onExpire: typical 42,383, maximum 42,383

Foundry gas report at source commit 2d25e107c3ff0cc811a42a1005d7525665a93e26: one successful onExpire call through the mock Taskmarket wrapper.

Publisher-declared trust information

These values come from the submitted manifest. Repository merge does not independently verify these claims.

Publisher claims source unverifiedPublisher claims conformance testedPublisher declares protocol status not defaultPublisher manifest says submitted

The manifest's listing field is a publisher declaration. The separate Repository listed badge only means this manifest was merged here.

No source-verifier link was declared.

Publisher-declared security reviews

unaudited: AffiliateSidecarEscrowHook V1 source, deployment, and Taskmarket integration.

X and Y are independent explicit token amounts; the hook imposes no percentage or Y <= X relationship. Taskmarket holds X and the hook holds Y.

Lifecycle callbacks only make Y claimable; they do not transfer it. Y is fixed and paid once per task, including split, partial, or discounted-auction outcomes.

Funding checks the hook's exact inbound token balance increase and therefore rejects fee-on-transfer funding. Outbound claims assume canonical USDC transfer behavior.

checkFund directly decodes Taskmarket's shared V1 hookData bytes and may be incompatible with another attached hook that consumes a different payload format.

Publisher listing evidence Publisher conformance evidence

Publisher-declared operations and liveness

checkFundonCompleteonCancelonExpirebountyclaimpitchauctionbenchmark

Failure mode: A failed signature, task-terms check, shared hookData decode, token transfer, or gas-bound check reverts task creation atomically. After funding, Y remains escrowed until Taskmarket reaches Accepted, Cancelled, or Expired and a claim succeeds. A missed callback, incompatible Diamond upgrade, nonterminal task, absent claimant, or recipient transfer failure can delay or strand Y.
Recovery: Before creation, refresh the task ID and terms, restore balance and allowance, obtain a fresh signature, and retry. Once Taskmarket is terminal, anyone can call reconcile and claim. There is no sidecar timeout, recipient rotation, rescue, or owner withdrawal; an irrecoverable recipient or incompatible nonterminal Diamond state has no in-contract recovery.
Requirements: The bound Taskmarket V20 Diamond must preserve the reviewed task getters and lifecycle semantics.; The payment token must support exact ERC-20 balance changes and transfers; the payer must have enough balance and allowance for Y at creation.; The payer's EOA or ERC-1271 signature validation and task metadata hashing must complete within Taskmarket's 1,000,000-gas hook stipend.; Every co-attached V1 hook must accept the same shared hookData payload.; The immutable beneficiary or refund recipient must remain able to receive the payment token.; After resolution, someone must call the permissionless claim function; after a missed terminal callback, someone must first call reconcile or call claim, which reconciles automatically.
Privileged roles: None declared
External dependencies: Taskmarket V20 Diamond: Authorizes lifecycle callbacks and supplies the canonical task state used to bind and reconcile each affiliate allocation.; Circle USDC on Base Sepolia: Taskmarket payment token transferred into and out of the sidecar escrow; exact-balance checks reject fee-on-transfer behavior.

Configure a manifest from this address Submit a hook