Approved workflow

Release Guild (ERC-20 symbol GILD) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Guild (GILD), total supply 1,000,000,000 GILD with 18 decimals, minted once to the deployer. Application contract: GuildDues. Currency: GILD is the app's working currency; users get it by swapping Sepolia ETH in the ETH/GILD launch pool the factory seeds. A Sepolia test toy: membership carries no off-chain rights or services, and the README and the page say so. Constructor: (token, treasurer), constructorArgs ["$token", "$owner"]; both are stored immutable and exposed as token() and treasurer(). The treasurer ($owner) is only the destination of swept dues and has no other power: no admin, pause or upgrade path. GuildDues holds no GILD at deploy and never needs any. GILD is a plain fixed-supply ERC-20 with no transfer fee, so the amount pulled is the amount credited. GuildDues has no payable function and no receive/fallback, so it never holds ETH. Dues are 10,000 GILD (10,000e18 units) per 30-day period and are non-refundable; a member leaves by letting the membership lapse. pay(periods): periods 1 to 12, pulls periods x 10,000 GILD from the caller with approve + SafeERC20.safeTransferFrom and extends the caller's own membership (no paying for others). expiry[member] = max(block.timestamp, expiry[member]) + periods x 30 days, so a lapsed member restarts from now with no back dues; a new expiry more than 5 years ahead reverts. A member is active while block.timestamp < expiry. A member's first payment appends them to an on-chain roster array (once). Dues accrue in the contract. sweep(): callable by anyone, sends the contract's whole GILD balance to the treasurer with SafeERC20.safeTransfer (checks-effects-interactions, nonReentrant); it is the only way GILD leaves, and the treasurer is the only destination. accrued() returns the contract's GILD balance, so GILD sent directly is swept too and nothing is stranded. Views: memberCount(), members(offset, limit) returning (address, expiry) pairs (limit capped at 100; offset past the end returns empty), isActive(member), expiryOf(member), accrued(), treasurer(), token(). Events: Paid(member, periods, newExpiry), Swept(amount). Tests (Foundry) must show: stacking renewals, the lapse boundary (inactive exactly at expiry), restart after lapse, the 5-year cap, periods 0 and 13, pagination edges, sweep reaching only the treasurer whoever calls it, and that total dues paid minus total swept equals the GILD balance when nothing is sent directly. The independent adversarial review must attack: any way to redirect dues from the treasurer, expiry overflow or free extensions, roster duplication, and constructor arguments granting roles. Deploy through the project factory, then publish a one-page website to join or renew (periods selector), a paginated roster with active/lapsed status and expiry dates, and the accrued dues with a sweep button. The page reads the GILD address from GuildDues.token(), shows the connected wallet's GILD balance and allowance, has an Approve step before paying dues, and says GILD comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views only (no backend, no indexer). Keep it to one small page; the static export has index.html in dist/.

Sepolia (11155111) only. GitHub publication and IPFS hosting are approved. Launch token: a separate fixed-supply ERC-20, 18 decimals, no constructor arguments, exactly 1,000,000,000 minted to msg.sender, no mint or admin functions. The factory sends that supply to LP and rewards, so no application contract may need a launch-token balance at deploy. Application contracts are fully configured in nonpayable constructors using only address, uint, bool or bytes32 arguments (no strings, arrays, proxies, delegatecall or selfdestruct); anything else is set at runtime. No owner unless the request names one, and then it is $owner. No external oracles, VRF or keepers: randomness is commit-reveal or a future blockhash read within 256 blocks with a refund path. foundry.toml sets bytecode_hash = "none". The website is a static export with index.html in dist/. Site label lab-guild-dues.

Build GILD and GuildDues (dues in GILD, constructorArgs ["$token", "$owner"] with $owner only as treasurer) with Foundry tests and an independent adversarial review, deploy them through the project factory, then build the website against the live deployment.

Join/renew with approve, paginated roster from members(offset, limit), accrued dues and sweep.