Approved workflow

Release Trickle (ERC-20 symbol TRKL) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Trickle (TRKL), total supply 1,000,000,000 TRKL with 18 decimals, minted once to the deployer. Application contract: ETHStakingRewards. Currency: users stake TRKL and earn ETH. ETHStakingRewards's constructor takes one argument, the TRKL address (constructorArgs ["$token"]); it stores the token immutable, exposes it as token(), and holds no TRKL at deploy and never needs any: users get TRKL by swapping Sepolia ETH in the ETH/TRKL launch pool the factory seeds. stake is approve + SafeERC20.safeTransferFrom; withdraw returns TRKL with safeTransfer and getReward pays ETH with call, always to the caller only, checks-effects-interactions, nonReentrant. TRKL is a plain fixed-supply ERC-20 with no transfer fee, so the amount pulled is the amount credited. ETHStakingRewards has no receive/fallback; ETH enters only through notifyRewardAmount(). No owner, admin, pause or upgrade path. A Sepolia test toy that only moves Sepolia test ETH; it promises no yield or return, and the README and the page say so. Reward accounting is the usual rewardPerToken / userRewardPerTokenPaid pattern, with TRKL staked, ETH paid out and the notify rules below: stake(amount), withdraw(amount), getReward(), exit(), earned(account), rewardPerToken() (scaled 1e18), rewardRate (wei per second while streaming), periodFinish, currentRate() (rewardRate before periodFinish, 0 after it, so the page never shows a finished stream as live), carry(), totalStaked(), stakedOf(account). notifyRewardAmount() payable: anyone, msg.value >= 0.001 ETH; if the period has finished, it starts a new stream: rewardRate = (msg.value + carry) / 7 days and periodFinish = now + 7 days; while a stream is running, msg.value is added to carry instead, so a top-up never changes or slows the running stream. carry also collects rewards that were scheduled while totalStaked was 0 and the remainder of the rate division; the next stream start re-streams it, and restream() (anyone, only after periodFinish, with totalStaked > 0 and carry >= 0.001 ETH) starts a new 7-day stream from carry alone, so carried ETH never has to wait for a new donor. Reward state is updated before every stake, withdraw, claim and notify. getReward zeroes rewards[msg.sender] before the ETH call. Events: Staked, Withdrawn, RewardPaid, RewardAdded(amount, rate, periodFinish). Edge cases: stake or withdraw 0 reverts; withdrawing more than staked reverts; stake and withdraw in one block earns 0; a staker who joins mid-period earns only from then. Tests (Foundry) must cover: stake, withdraw, getReward and exit; a zero-stake stretch whose rewards reach carry and are re-streamed by restream(); a top-up mid-period landing in carry; stake and withdraw in one block; and, fuzzing stakers, amounts and warps, the invariant that ETH paid + sum of earned + carry + still-scheduled rewards never exceeds ETH notified. The independent adversarial review must attack: the reward-conservation invariant, any top-up that changes a running stream, precision loss for small stakes, the zero-stake period, and re-entrancy on ETH payout. Deploy through the project factory, then publish a one-page website to stake, withdraw, claim and exit, showing your stake, earned ETH, currentRate(), time to periodFinish, and the reward stream as ETH per day per 1,000,000 TRKL staked (no price oracle, so no % APR), plus a form to add ETH to the reward stream. The page reads the TRKL address from ETHStakingRewards.token(), shows the connected wallet's TRKL balance and allowance, has a TRKL Approve step before staking, and says TRKL comes from swapping Sepolia ETH in the launch pool (no in-page swap). Everything shown comes from contract views (no backend, no indexer). Keep it to one small page; the static export has index.html in dist/.

Sepolia (11155111) only. GitHub publication and IPFS hosting are approved. Launch token: a separate fixed-supply ERC-20, 18 decimals, no constructor arguments, exactly 1,000,000,000 minted to msg.sender, no mint or admin functions. The factory sends that supply to LP and rewards, so no application contract may need a launch-token balance at deploy. Application contracts are fully configured in nonpayable constructors using only address, uint, bool or bytes32 arguments (no strings, arrays, proxies, delegatecall or selfdestruct); anything else is set at runtime. No owner unless the request names one, and then it is $owner. No external oracles, VRF or keepers: randomness is commit-reveal or a future blockhash read within 256 blocks with a refund path. foundry.toml sets bytecode_hash = "none". The website is a static export with index.html in dist/. Site label lab-staking-rewards.

Build TRKL and ETHStakingRewards (stake TRKL, earn ETH streamed over 7 days, constructorArgs ["$token"]) with Foundry tests and an independent adversarial review, deploy them through the project factory, then build the website against the live deployment.

Stake/withdraw/claim/exit with approve, earned ETH, rate, countdown, ETH per day per 1,000,000 TRKL, add rewards form.