Status: scaffolded
A first enterprise-treasury-style composition of the earlier OpenSilver primitives:
- Ownable admin rotation via
owner/pending_owner - MultiSig signer quorum for protected treasury actions
- TimeLock delayed release via
unlock_time
releaserequires both quorum approval and the beneficiary signature afterunlock_time.releasenow constrains the terminal payout to a single beneficiary P2PK output withinput_value - minerFeeconservation on output 0.extend_lockis quorum-gated and forward-only.reconfigure_signersrequires both owner approval and current-signer quorum.- owner transfer follows a two-step handoff.
- Stateful admin paths now constrain the authenticated continuation output count to one and preserve
input_value - minerFeeon that continuation output. - There is no emergency path yet beyond signer reconfiguration and lock extension.
All stateful admin and configuration paths are intended to remain in one singleton covenant lineage.
init_owner,init_pending_owner: owner admin state.init_threshold,init_pk1,init_pk2,init_pk3: signer quorum configuration.init_unlock_time: earliest release time.init_beneficiary: final release beneficiary.
Use this as the starting point for treasury custody, vesting treasuries, team/community allocation vaults, and reserve-management patterns that need both delayed release and signer governance.
Benchmarking not yet recorded.
Not audited. Compiler-validated scaffold only.
- Do not use this when releases depend on milestones, arbiters, or oracle settlement.
- Do not use this when you need batched outputs or fanout accounting.
- Do not treat this scaffold as production-ready until it has behavior tests, output-shape constraints, and testnet exercise.