Approved workflow

Release Gavel (ERC-20 symbol GAVL) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract. Token: Gavel (GAVL), total supply 1,000,000,000 GAVL with 18 decimals, minted once to the deployer. Application contract: LotAuction. Currency: GAVL is the app's working currency. LotAuction takes the GAVL address as its only constructor argument (constructorArgs ["$token"]), stores it immutable, exposes it as token(), and holds no GAVL at deploy; players get GAVL by swapping Sepolia ETH in the launch pool the factory seeds. Every payment in is approve + SafeERC20.safeTransferFrom (permit not required). LotAuction has no payable function and no receive/fallback, so it never holds ETH. Payouts are pull-based (the recipient calls to collect; nothing is pushed to third parties), follow checks-effects-interactions and are nonReentrant. No owner, admin, pause or upgrade path. English auctions of ERC-20 lots with bids in GAVL. createLot(lotToken, lotAmount, reserve, duration): duration 1 hour to 7 days, reserve >= 1 GAVL; the seller's lotAmount of lotToken is pulled with safeTransferFrom and the lot records the amount actually received (balance delta, so fee-on-transfer tokens are recorded net; rebasing tokens are unsupported and the README says so); zero received reverts. lotToken may be GAVL itself; lot escrow and bid escrow are accounted separately. bid(id, amount): only before end; the first bid must be >= reserve, later bids >= ceil(highest * 105 / 100); the seller and the current highest bidder cannot bid. The previous highest bid is credited to that bidder's withdrawable GAVL. A bid placed when fewer than 10 minutes remain sets end = block.timestamp + 10 minutes. cancel(id): seller only, only before any bid and before end; the lot becomes reclaimable, and a cancelled lot then accepts no bid and cannot be settled (bid, cancel and settle all revert on a cancelled or settled lot). settle(id): anyone, once, at or after end: with a bid, the highest bid is credited to the seller and the lot becomes claimable by the winner; with no bid (reserve not met), the lot becomes reclaimable by the seller. claimLot(id) is callable only by the address the lot is owed to (the winner, or the seller after cancel or a no-bid settle) and pays it once; withdraw() pays credited GAVL. Lots are never pushed, so a lot token that reverts cannot block settlement. Views: lot(id), lotCount(), minNextBid(id), withdrawable(address), token(). Events: LotCreated, Bid(id, bidder, amount, end), Settled, LotClaimed, Withdrawn. Tests (Foundry) must cover: the reserve and ceil(105%) boundaries, the anti-snipe extension at exactly 10 minutes, cancel before and after a bid, settle with and without bids, a fee-on-transfer lot, a lot in GAVL itself, and the invariant that GAVL held >= withdrawable balances + live highest bids + unclaimed GAVL lots. The independent adversarial review must attack: a malicious or reentrant lot token, mixing GAVL lot escrow with GAVL bid escrow, repeated extension griefing, rounding of the 5% step, and settling or claiming twice. Deploy through the project factory, then publish a one-page website to browse open lots with a live countdown, create a lot (approve the lot token), bid, settle and claim. The page reads the GAVL address from LotAuction.token(), shows the connected wallet's GAVL balance, allowance and withdrawable balance, has an Approve step before every paying action and a Withdraw button, and says that GAVL comes from swapping Sepolia ETH in the launch pool (no in-page swap). Lists come from contract views and events only (no backend, no indexer). Keep it to one small page; the static export has index.html in dist/.

Sepolia (11155111) only. GitHub publication and IPFS hosting are approved. Launch token: a separate fixed-supply ERC-20, 18 decimals, no constructor arguments, exactly 1,000,000,000 minted to msg.sender, no mint or admin functions. The factory sends that supply to LP and rewards, so no application contract may need a launch-token balance at deploy. Application contracts are fully configured in nonpayable constructors using only address, uint, bool or bytes32 arguments (no strings, arrays, proxies, delegatecall or selfdestruct); anything else is set at runtime. No owner unless the request names one, and then it is $owner. No external oracles, VRF or keepers: randomness is commit-reveal or a future blockhash read within 256 blocks with a refund path. foundry.toml sets bytecode_hash = "none". The website is a static export with index.html in dist/. Site label lab-lot-auction.

Build GAVL and LotAuction (LotAuction takes constructorArgs ["$token"] and takes bids in GAVL) with Foundry tests and an independent adversarial review, deploy them through the project factory, then build the one-page website against the live deployment.

One static page, no framework beyond what the skill needs, reading the live deployment's ABI and address. Approve GAVL before paying; show GAVL balance and allowance and the withdrawable balance.