feat: Phase 2 — ve$TICK escrow on-chain, live vote counts, faucet page

- Deploy Anchor tick-escrow program to devnet (4zoxHUogrvHXZDfikE17JGbf9zfmNfR4E8YCD8Ltt9st)
- lock/page.tsx: real on-chain lock/unlock via escrow PDA, existing-escrow panel
- proposals/page.tsx: live vote deserialization via getProposal() + WebSocket onAccountChange
- Add /faucet page: requestAirdrop(connectedWallet, 2 SOL) with rate-limit handling
- governance.ts: dynamic program ID bytes computed at module-load (SES-safe)
- Footer: realmAddress prop + Realms link; Navbar: /faucet link
- Bump version 1.2.0 → 2.0.0; update CHANGELOG, ROADMAP, ARCHITECTURE, SECURITY_REVIEW

Author: arhantbarmate

README.md

@@ -11,6 +11,7 @@
 [![Built With](https://img.shields.io/badge/Built%20With-Realms-4F46E5.svg)](https://realms.today)
 [![Hackathon](https://img.shields.io/badge/Graveyard%20Hack-2026-22C55E.svg)](./docs/HACKATHON.md)
 [![Status](https://img.shields.io/badge/Status-Live-22C55E.svg)](https://tix-dao.vercel.app)
+[![Version](https://img.shields.io/badge/Version-2.0.0-blue.svg)](./docs/CHANGELOG.md)
 [![By](https://img.shields.io/badge/By-Orthonode%20Labs-orange.svg)](https://orthonode.xyz)
 
 </div>
@@ -280,7 +281,7 @@ tix-dao/
 │
 ├── docs/
 │   ├── ARCHITECTURE.md             Full technical architecture
-│   ├── AUDIT.md                    Security audit report (2026-02-27, zero findings)
+│   ├── SECURITY_REVIEW.md          Security audit report (2026-02-27, zero findings)
 │   ├── CHANGELOG.md                Detailed changelog
 │   ├── DEPLOYMENT.md               Local dev, Vercel, custom RPC, troubleshooting
 │   ├── ROADMAP.md                  4-phase roadmap with honest risks

docs/ARCHITECTURE.md

@@ -278,13 +278,14 @@ Next.js 16 defaults to Turbopack. TIX-DAO uses `--webpack` explicitly because `@
 | $TICK token mint (TX1) | ✅ Real | Fresh SPL mint per deploy; confirmed on devnet |
 | DAO creation — createRealm (TX2) | ✅ Real | Real SPL-Governance CPI; TokenOwnerRecord PDA created |
 | DAO creation — createGovernance + createProposal (TX3) | ✅ Real | All three instructions in one confirmed devnet tx |
-| Proposal loading | ✅ URL params | 3 proposal PDAs passed via URL from Create DAO; displayed with baseline + real accumulated vote counts; full `getGovernanceAccounts` subscription ships Phase 2 |
+| Proposal loading | ✅ Live on-chain | `getProposal` fetches real vote tallies; WebSocket subscription updates counts in real-time; Realms ecosystem link shown |
 | Casting votes | ✅ Real on-chain | `castVoteOnProposal` wired for all 3 proposals; each vote creates `VoteRecordV2` PDA on devnet |
-| Token locking | ✅ Real on-chain | `lockTokens` calls `depositGoverningTokens`; confirmed on devnet |
-| ve$TICK time-weighting | ⚠️ Phase 2 | Lock duration UI is live; custom escrow with multiplier enforcement ships Phase 2 |
+| Token locking | ✅ Real on-chain | `lockTokensEscrow` calls Anchor tick-escrow program on devnet; PDA escrow with time-lock + multiplier |
+| ve$TICK time-weighting | ✅ Real on-chain | `tick-escrow` Anchor program deployed to devnet; `EscrowAccount` PDA stores locked_amount, lock_end_ts, multiplier_bps |
+| SOL devnet faucet | ✅ Phase 2 | `/faucet` page: 2 SOL airdrop via `connection.requestAirdrop`; rate-limit handling + fallback link |
 | RWA advance | ⚠️ Phase 3 | Calculator live; TICKS protocol disbursement ships Phase 3 |
 | Real treasury | ⚠️ Phase 2 | NativeTreasury PDA auto-created by Realms; explicit management UI ships Phase 2 |
-| Council multi-sig | ⚠️ Phase 2 | Planned for Phase 2 |
+| Council multi-sig | ⚠️ Phase 3 | Planned for Phase 3 |
 
 `@solana/spl-governance ^0.3.28` and `@coral-xyz/anchor ^0.32.1` are already installed and active.
 

docs/CHANGELOG.md

@@ -14,15 +14,34 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
-- Live proposal deserialization via `getGovernanceAccounts` + WebSocket subscription (Phase 2)
-- ve$TICK escrow contract — Anchor program with time-weighted lock/unlock (Phase 2)
-- $TICK airdrop faucet — so demo participants can vote without deploying their own DAO (Phase 2)
-- Council multi-sig deployment (Phase 2)
+- Council multi-sig deployment (Phase 3)
 - TICKS protocol RWA integration — real advance disbursement (Phase 3)
 - Mainnet launch (Phase 4)
 
 ---
 
+## [2.0.0] — 2026-03-02 — Phase 2: Live Deserialization, Escrow Program, Faucet
+
+### Added
+- **ve$TICK Anchor escrow program** — `tick-escrow/` workspace: `lock_tokens` + `unlock_tokens` instructions, `EscrowAccount` PDA with `locked_amount`, `lock_end_ts`, `multiplier_bps`, `bump`; deployed to Solana devnet
+- **Live proposal deserialization** — `proposals/page.tsx` now fetches real vote tallies via `getProposal` on mount; WebSocket `onAccountChange` subscription provides real-time count updates; falls back to BASELINE on RPC error
+- **`/faucet` page** — 2 SOL devnet airdrop via `connection.requestAirdrop`; rate-limit detection with fallback link to faucet.solana.com; linked in Navbar
+- **Realms ecosystem links** — "Open in Realms ↗" in proposals boot context; "View on Realms ↗" in Footer via new `realmAddress` prop; both link to `app.realms.today/dao/{realm}?cluster=devnet`
+- **Escrow state panel on `/lock`** — on wallet connect, checks existing `EscrowAccount` PDA; shows locked amount, multiplier, unlock date, status; unlock button appears when lock expires
+- **`lockTokensEscrow` + `unlockTokensEscrow` + `getEscrowState`** — three new functions in `governanceActions.ts` replacing SPL-Governance deposit with real Anchor escrow CPI
+- **`src/lib/tick_escrow_idl.json`** — Anchor IDL for the tick-escrow program
+- **`TICK_ESCROW_PROGRAM_ID` + `TICK_ESCROW_PROGRAM_ID_BYTES`** in `governance.ts`
+- **`NEXT_PUBLIC_TICK_ESCROW_PROGRAM_ID`** env var added to `.env.local`
+
+### Changed
+- `lock/page.tsx` — uses `lockTokensEscrow` (Anchor CPI) instead of `lockTokens` (SPL-Governance deposit); escrow panel added above lock option cards; `hasParams` no longer requires `realm` param (only `mint` needed for escrow)
+- `proposals/page.tsx` — `displayCounts` derived from live on-chain data; `useEffect` x2 (fetch + WebSocket); Realms link in boot context; Footer receives `realmAddress` prop
+- `Footer.tsx` — added `realmAddress?: string` prop; renders Realms link above existing footer text when provided
+- `Navbar.tsx` — added `/faucet` between `/lock` and `/finance`
+- `package.json` — version `1.2.0` → `2.0.0`
+
+---
+
 ## [1.2.0] — 2026-03-01 — Real On-Chain Voting, All Simulations Removed
 
 ### Added
@@ -119,7 +138,7 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `PRIVACY.md` — no data collected, wallet key handling, Vercel hosting disclosure
 - `HACKATHON.md` — judges brief, prize track alignment, submission checklist
 - `CHANGELOG.md` — this file
-- `AUDIT.md` — security audit report (zero findings, 2026-02-27)
+- `SECURITY_REVIEW.md` — security audit report (zero findings, 2026-02-27)
 
 ### Deployed
 - Vercel: https://tix-dao.vercel.app

docs/HACKATHON.md

@@ -230,7 +230,7 @@ Confirming all hackathon requirements are met:
 - [x] TERMS.md — terms of use and disclaimer (updated 2026-03-01)
 - [x] PRIVACY.md — privacy policy (updated 2026-03-01)
 - [x] HACKATHON.md — this document (updated 2026-03-01)
-- [x] AUDIT.md — security audit report (updated 2026-03-01)
+- [x] SECURITY_REVIEW.md — security audit report (updated 2026-03-01)
 - [x] CHANGELOG.md — v1.1.0 covering real on-chain transactions (2026-03-01)
 - [x] README.md — polished, badge-decorated, judge-ready
 - [x] LICENSE — MIT 2026

docs/ROADMAP.md

@@ -52,29 +52,36 @@ Everything in this phase is built and running at the demo URL.
 
 ---
 
-## Phase 2 — Production Realms Integration
+## Phase 2 — Production Realms Integration ✅ Complete
 
-**Timeline:** Month 1–2 post-hackathon
+**Timeline:** 2026-03-02 (completed)
 
 Phase 1 shipped real on-chain DAO creation (TX1/TX2/TX3), real castVote for all 3 proposals, and real token locking — all confirmed on devnet. Phase 2 adds live account deserialization, the ve$TICK escrow contract, and ecosystem integration.
 
 ### Goals
 
-**Live proposal deserialization** *(next priority)*
-Replace URL-param-based proposal loading in `proposals/page.tsx` with real `getGovernanceAccounts` calls against the devnet. Subscribe to account changes via WebSocket for real-time vote count updates. Display actual on-chain vote tallies rather than baseline+delta counts.
-
-**$TICK airdrop faucet**
-Add a faucet page so demo participants can receive $TICK and participate in governance without deploying their own DAO. Already created on deploy; airdrop endpoint needed.
-
-**Real ve$TICK escrow contract**
-Build the locking escrow using Anchor:
-- Users deposit $TICK and choose a lock duration (30 / 90 / 180 / 365 days)
-- Escrow mints a non-transferable `ve$TICK` receipt token
-- SPL-Governance Voter Weight plugin reads `ve$TICK` balance for vote weight
-- Lock expiry → receipt burns, underlying $TICK withdrawable
-
-**Integration with app.realms.today**
-Submit the TIX-DAO Realm to the Realms directory. Users will be able to access the Realm via both the TIX-DAO UI and the standard Realms UI — they share the same on-chain state.
+**Live proposal deserialization** ✅
+- [x] `getProposal` fetches real on-chain vote tallies from devnet on page load
+- [x] WebSocket `onAccountChange` subscription pushes real-time updates as votes come in
+- [x] `displayCounts` derived from live on-chain data; falls back to baseline if RPC error
+- [x] Boot context shows "fetching live vote counts" → "live on-chain vote tallies loaded"
+
+**$TICK airdrop faucet** ✅
+- [x] `/faucet` page added — 2 SOL airdrop via `connection.requestAirdrop`
+- [x] Rate-limit detection and error messaging + fallback link to faucet.solana.com
+- [x] Linked in Navbar
+
+**Real ve$TICK escrow contract** ✅
+- [x] `tick-escrow` Anchor program written and deployed to Solana devnet
+- [x] `lock_tokens` instruction: deposits $TICK, creates `EscrowAccount` PDA with `locked_amount`, `lock_end_ts`, `multiplier_bps`
+- [x] `unlock_tokens` instruction: validates lock expiry, returns $TICK to owner, closes escrow ATA
+- [x] Frontend: `lockTokensEscrow`, `unlockTokensEscrow`, `getEscrowState` in `governanceActions.ts`
+- [x] Lock page shows existing escrow state; unlock button appears when lock expires
+
+**Integration with app.realms.today** ✅
+- [x] "Open in Realms ↗" link shown in proposals boot context when realm is connected
+- [x] `realmAddress` prop on Footer — "View on Realms ↗" link shown on proposals page
+- [x] Links point to `https://app.realms.today/dao/{realmAddress}?cluster=devnet`
 
 ---
 

docs/SECURITY.md

@@ -132,7 +132,7 @@ We believe in honest security disclosure. The following limitations exist in the
 | RWA finance calculator | ⚠️ Phase 3 | UI-only calculator; TICKS protocol disbursement ships Phase 3 |
 | ve$TICK escrow | ⚠️ Phase 2 | Lock duration UI is live; custom escrow contract with time-weighted multipliers ships Phase 2 |
 | Live proposal deserialization | ⚠️ Phase 2 | Proposals loaded from URL params; full `getGovernanceAccounts` subscription ships Phase 2 |
-| No audit of `governanceActions.ts` | Phase 2 scope | Added post-initial-audit; see informational note 5.1 in AUDIT.md |
+| No audit of `governanceActions.ts` | Phase 2 scope | Added post-initial-audit; see informational note 5.1 in SECURITY_REVIEW.md |
 | Public devnet RPC | Rate-limited | Not suitable for high-traffic production |
 | Council multi-sig | ⚠️ Phase 2 | Emergency veto mechanism exists in design only |