Token name: Work

Token symbol: WORK

Robinhood Chain 4663. Builders address B = 0xc9EAFE33A510a3a3d95A94c4f85AdaF6a3EA12a0 (EOA). Owner = requester wallet. Contracts: WorkHook (Uniswap v4 hook on the WORK/IMD pool) and WorkersNFT. IMD on this chain = 0x5f7bb59365ce557c26dbcaa4ee9d39a4b95b7127. All owner changes are bounded and emit events; every parameter has a view.

1. WorkHook: takes its fee in the swap callbacks (beforeSwap/afterSwap) on every buy and sell, default 0.75% (2% total with the launch's 1.25%), owner may set 0 to 8.75% max. While the NFT mint runs, hook fees go 100% to B. After the mint ends (sold out or endMint): stakerShareBps (default 10000, owner may set 9000-10000, so B gets at most 10%) goes to WorkersNFT for stakers, the rest to B; if nothing is staked, all to B.

2. WorkersNFT (ERC-721, max 3,333). Owner levers (UNICRED lesson): setCap(newCap) lowers the cap to any value >= minted, never raises; endMint() stops minting forever (cap = minted) and starts the post-mint phase; pause()/unpause() halts minting and WORK earning in an emergency; each pause auto-expires after 24 h, and a new pause needs at least 24 h unpaused since the last one ended.

• Mint by proof of work: keccak256(abi.encode(DOMAIN, chainid, this, keccak256(abi.encode(anchorHash, prevWork)), msg.sender, nonce)) < target; anchorHash = blockhash at most 250 blocks old; one mint per block; retarget every 8 mints toward 10 s; target doubles after 300 s idle; 9 epochs of 370 (+3), min difficulty +1 bit per epoch; owner may move the floor +-2 bits.
• Paid in IMD (transferFrom, permit if supported, no ETH): price per epoch [0.25,0.5,0.75,1.25,1.75,2.5,3.25,4,5] IMD, never above 5; owner may scale prices 0.5x-1x.
• Token id = pool[hash % remaining] (swap-and-pop, no reveal, no reserved ids, no team mint).
• Overclocked if the hash beats target by >= 4 extra bits: tokenURI = baseURI + "oc/" + id + ".json", else baseURI + id + ".json". Initial baseURI = ipfs://bafybeibmkvtnptsqztdvsm5sh3avormdnfyarbxpgdlcj6bmg37qchhqve/ (owner may update it).
• Everyone mints on equal terms: no allowlist, no free mints, no difficulty discounts.

3. Money (automatic, in IMD):

• Each mint: 65% stakers, 25% buyback balance, 10% to B.
• Marketplaces: activated (earning) workers stay in the holder's wallet and transfer/list normally (activation and unclaimed WORK move with the token); never block transfers of unstaked workers. Staked workers are held by the contract, so they cannot be listed while staked (no fake floor); unstaking returns them. Stake and unstake are real ERC-721 transfers that emit Transfer, so marketplaces update ownership on their own. Implement ERC-4906 (supportsInterface 0x49064906): emit BatchMetadataUpdate when baseURI changes and MetadataUpdate when a token's metadata changes.
• Staking: escrow the NFT for 7/14/30 days = weight 1x/2x/4x, no early exit; stakers claim mint IMD and hook rewards pro-rata by weight; mint share with no stakers goes to buyback.
• buyback(): anyone, max 100 IMD per call, once per 60 s, swaps IMD to WORK in the WORK/IMD pool and burns it.
• WORK supply: 10% swarm, 70% pool, 20% to B (5% B's own, then B deposits 100M as the mining pool and 50M as the burn pool).

4. After the mint ends:

• activate(tokenId): one time, fee to B, default 0.15 IMD, owner may set 0-0.5 IMD; stays with the token on transfer.
• Workers keep working passively (no hashing, no device online): activated, unburned workers earn WORK from the mining pool every second. 8 eras from mint end: era k (0..7) lasts 7*2^k days and emits 12.5M WORK, split equally among all activated workers (reward-per-worker accumulator, updated on activate, burn and claim). claimWork(tokenIds) pays the holder or staker; unclaimed WORK stays with the token on transfer. WORK scheduled while paused or while no worker is activated is never lost: carry it (emissionCarry) and release it to activated workers at the next unpaused update. After all eras end, releaseMiningRemainder() (owner, not while paused) sends what is left in the mining pool to B.
• Burn: any holder may burn an unstaked worker for burnPool / workers minted (fixed at mint end, ~15,000 WORK); burned workers stop mining.

Safety: sweep(token) to B for anything sent by mistake (incl. WETH, ETH) but never staker IMD, the buyback balance, the mining pool or the burn pool. ERC-2981 royalty 5% to B, max 10%. Not upgradeable. No minting outside proof of work, no owner path to user funds.

Build rules (a previous attempt failed deployment on these): no deployed contract may have linked libraries (forge linkReferences must be empty), so every library function is internal; ship foundry.toml with optimizer = true, via_ir = true, bytecode_hash = "none"; WorkersNFT and WorkHook runtime < 24,576 bytes; tests read time with vm.getBlockTimestamp()/vm.getBlockNumber() so they pass under via_ir. src/ contains only WorkersNFT.sol and WorkHook.sol; any test token lives in test/ (the launch token is IMD's, never deploy a second one). Deploy wiring: WorkersNFT takes the launch token address; WorkHook is deployed at the required flag address; the hook must be bound to WorkersNFT before pool initialization (e.g. WorkersNFT.bindHook() called by the hook in beforeInitialize, allowed only when tx.origin is the account that deployed WorkersNFT; the owner can also bind with setHook). Pool fee and tickSpacing must match the launch policy.

Tests: Foundry incl. fuzz on work checks, retargets, id picking, splits, staking escrow, hook split, activation, passive accrual per era, burn reward, sweep limits; then an adversarial security review.