Approved workflow

Release Kickoff (ERC-20 symbol KICK) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Kickoff (KICK), total supply 1,000,000,000 KICK with 18 decimals, minted once to the deployer. Application contract: CrowdfundCampaigns. Currency: KICK is the app's working currency. CrowdfundCampaigns takes the KICK address as its only constructor argument (constructorArgs ["$token"]), stores it immutable, exposes it as token(), and holds no KICK at deploy; backers get KICK by swapping Sepolia ETH in the launch pool the factory seeds. Every payment in is approve + SafeERC20.safeTransferFrom (permit not required). CrowdfundCampaigns has no payable function and no receive/fallback, so it never holds ETH. Payouts go only to the entitled party (claim to the creator, refund to the calling backer), follow checks-effects-interactions and are nonReentrant. No owner, admin, pause or upgrade path. A Sepolia test toy: a campaign is a test-KICK pledge game that promises backers nothing off-chain, and the README and the page say so. All-or-nothing crowdfunding in KICK, many campaigns by id (starting at 1). create(goal, deadline, bytes32 title): goal >= 1 KICK, deadline between block.timestamp + 1 hour and + 90 days; the caller is the creator. pledge(id, amount): amount > 0, only while block.timestamp < deadline; pledges keep counting after the goal is met (over-funding allowed). unpledge(id, amount): a backer takes back up to their pledge, only before the deadline and only while total < goal; once total >= goal the campaign is locked and unpledge reverts. claim(id): anyone may call it, only when block.timestamp >= deadline and total >= goal, only once; it transfers the whole total to the creator, so a funded campaign never waits on the creator. refund(id): at or after the deadline with total < goal, each backer takes back their full pledge once. A campaign with no pledges simply expires with nothing to move. States: Open (before the deadline) accepts pledge, and unpledge while total < goal; Funded (at or after the deadline, total >= goal) accepts only the single claim; Failed (at or after the deadline, total < goal) accepts only refunds; any other call reverts. The creator may pledge to their own campaign like anyone else (the README says this lets a creator top up to their own goal). Views: campaign(id), campaignCount(), pledgeOf(id, backer), token(). Events: Created(id, creator, goal, deadline, title), Pledged, Unpledged, Claimed, Refunded. Tests (Foundry) must cover: deadline boundaries (a pledge at the deadline reverts, claim/refund at the deadline work), the unpledge lock at the goal, double claim and double refund, over-funding, a campaign with no pledges, and the invariant that KICK held >= the sum over campaigns of pledges not yet claimed or refunded. The independent adversarial review must attack: claim and refund both paying on one campaign, pledges or refunds leaking across campaign ids, the goal lock racing an unpledge in the same block, rounding-free accounting with fuzzed amounts, and reentrancy. Deploy through the project factory, then publish a one-page website to list campaigns with progress bars and deadlines, create one, pledge, unpledge, refund and claim. The page reads the KICK address from CrowdfundCampaigns.token(), shows the connected wallet's KICK balance and allowance, has an Approve step before every paying action, and says that KICK comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views and events only (no backend, no indexer). Keep it to one small page; the static export has index.html in dist/.

Sepolia (11155111) only. GitHub publication and IPFS hosting are approved. Launch token: a separate fixed-supply ERC-20, 18 decimals, no constructor arguments, exactly 1,000,000,000 minted to msg.sender, no mint or admin functions. The factory sends that supply to LP and rewards, so no application contract may need a launch-token balance at deploy. Application contracts are fully configured in nonpayable constructors using only address, uint, bool or bytes32 arguments (no strings, arrays, proxies, delegatecall or selfdestruct); anything else is set at runtime. No owner unless the request names one, and then it is $owner. No external oracles, VRF or keepers: randomness is commit-reveal or a future blockhash read within 256 blocks with a refund path. foundry.toml sets bytecode_hash = "none". The website is a static export with index.html in dist/. Site label lab-crowdfund.

Build KICK and CrowdfundCampaigns (CrowdfundCampaigns takes constructorArgs ["$token"] and escrows KICK pledges) with Foundry tests and an independent adversarial review, deploy them through the project factory, then build the one-page website against the live deployment.

One static page, no framework beyond what the skill needs, reading the live deployment's ABI and address. Approve KICK before paying; show KICK balance and allowance.