CenturionClaimGatekeeper¶
Source: CenturionClaimGatekeeper.sol
Purpose¶
Pure and stateful claim-policy gate for:
- risk/dust/claim-state derivation
- claim period and executor period enforcement
- pending claim authorization lifecycle
- receipt classification across reward/repair/recovery/holdback buckets
Deployment Role¶
Transparent proxy target controlled by controller.
Key State¶
controllerclaimExecutorsPaused- per-vault pending claim state
- per-vault and per-executor period usage state
- executor grants by vault/executor
Key Functions¶
- grants and pause:
setClaimExecutorGrant,setClaimExecutorsPaused,revokeClaimExecutorGrant - policy derivation:
classifyReceipt,deriveRiskState,classifyDustState,deriveClaimMode,deriveClaimState - claim checks:
authorizeAndCheckClaim,initiatePendingClaim,finalizePendingClaim,cancelPendingClaim
Access Control¶
All mutating functions are onlyController.
Invariants¶
- executor grants require valid scope mask and future expiry.
- claim period caps enforce rolling usage windows.
- stale, quarantined, conflicting, stop-loss, or exit states fail closed for normal reward claims.
- executor cannot redirect payout destination; controller uses beneficiary destination.
Risks¶
- incorrect grant scope can allow unauthorized operational sponsorship.
- mis-set caps can disable benign claims or allow excessive throughput.
- controller compromise bypasses operational intent because gatekeeper trusts controller caller.