Grant progress

Single index of milestone-completion evidence, per grant. Every code claim links a commit-SHA permalink; every deployment claim links a source-verified contract or transaction a reviewer can confirm directly on the explorer.

ENS Public Goods Builder Grant

Milestone 1 — Reference deployment ✅

A self-governed, ENS-named ERC-4626 vault diamond deployed to Sepolia with verified source, which then executed a full governance lifecycle against itself.

This deployment predates the one-transaction LatticeFactory rule: it created and initialized the diamond in two transactions. Every script/base/** recipe now deploys through the factory.

Tag: grant-m1 — created on main when this evidence is promoted from dev.

Milestone 2 — Worked integration example + composition guide ✅

A runnable governance-upgradeable Diamond example and a "Compose your own Diamond" guide, exercised in CI on Anvil and reproduced live on Sepolia, where the example vault upgraded itself through its own Governor + TimelockController.

Tag: grant-m2, commit 4e95664, on main; the repository links above resolve at the tag.

Commit history note. dev and main were rewritten after the milestone was delivered, which re-created the tag on a new commit with the same tree. Commits cited in earlier copies of this page still resolve on GitHub but are no longer on a branch. Each has a tree-identical commit on main:

Demo scope and known issues. The live vault is a testnet demo:

• Governance can be taken over. The deployer holds every vote, but the demo asset's mint is open to anyone, and governance delays are minutes (voting delay 60 s, voting period 600 s, timelock 300 s; quorum 4). Anyone could mint, delegate and outvote the deployer.
• Issues found after delivery. They don't change the M2 flow:
  • #214: ERC-4626 shares are priced on the idle balance. This is latent here, because the vault has no strategy manager.
  • #222: an ERC20Votes ERC-165 constant writes to slot keccak256(0). The write is present in this vault's storage.
  • #255: supportsInterface(0x01ffc9a7) returns false.

Milestone 3 — Docs site + reusable storage-safety Action

Delivered in release v0.5.0. The site and the Action are built and tested in this repository, the docs deploy to GitHub Pages from main, and the Action is released and proven in an external repository.

Tag: grant-m3, commit cca133b (the v0.5.0 release), on main.

Circle Arc Grant (2026 Cohort 2 — application evidence)

Groundwork delivered before application: the CCTPBridgeAdapter (Circle CCTP v2, including depositForBurnWithHook/relayMessageWithHook hooks) proven with live USDC on Arc testnet as the source chain, in both a plain multi-destination transfer and a programmable-USDC hook delivery.

All demo contracts are Sourcify-verified (exact_match) on both chains. The hook, receipt and round-trip demo scripts default to the hook demo's Arc hub and Base diamond above (CANON_* in script/config/cctp-*.sh); keep this table and those defaults in step.

Team1 Builder Grants (Avalanche) — Mini Grant application evidence

Lattice's reference vault diamond is live and source-verified on Avalanche Fuji (chain 43113), with the same evidence as the ENS milestones: a governed vault assembled through LatticeFactory in one transaction, then a shareholder proposal that passes through the vault's own Governor and TimelockController and upgrades it. The deployment is release v0.5.0 (cca133b on main), built with the repository's own settings. Avalanche runs the Cancun EVM. Lattice compiles to identical creation and runtime code for Cancun and for the repository's default target (all 1,204 bytecode objects, compared without the metadata hash), so every facet sits at the address a v0.5.0 release gets on every chain (CreateX CREATE2, salt lattice.<Name>.0.5.0). The 14 facets were the first v0.5.0 facets deployed anywhere; a later DeployRelease on Fuji adopts them.

All 20 contracts in the broadcast are verified on Sourcify, Snowscan (Etherscan V2) and Snowtrace (Routescan). On Sourcify, 18 are exact matches. ERC165Facet and DiamondLoupeFacet from diamond-lib are full matches, because Sourcify had already verified the same bytecode from another source tree. Snowtrace lists the vault as LatticeDiamond, an earlier verified contract with identical bytecode.