鏈上投票：代幣權重、法定門檻與時間鎖

// OpenZeppelin v5 — a token whose balances can become votes.
import {ERC20} from "@openzeppelin/contracts/token/ERC20/ERC20.sol";
import {ERC20Permit} from "@openzeppelin/contracts/token/ERC20/extensions/ERC20Permit.sol";
import {ERC20Votes} from "@openzeppelin/contracts/token/ERC20/extensions/ERC20Votes.sol";

contract GovToken is ERC20, ERC20Permit, ERC20Votes {
    constructor() ERC20("Gov", "GOV") ERC20Permit("Gov") {
        _mint(msg.sender, 1_000_000e18);
    }
    // ...required v5 _update / nonces overrides omitted for brevity...
}

// A balance counts as ZERO votes until it is delegated -- even to yourself:
//   token.delegate(myself);           // activate my own weight
//   token.delegate(trustedDelegate);  // lend my weight, keep custody
//   token.delegateBySig(...);         // do it gaslessly, with a signature

// Every transfer writes a checkpoint, so the chain can answer later:
//   token.getPastVotes(account, pastBlock)   // my votes at a past block
//   token.getPastTotalSupply(pastBlock)      // total votes back then

// GP-12: "send 100,000 GOV from the treasury to the audit team"
address[] memory targets   = new address[](1);
uint256[] memory values    = new uint256[](1);
bytes[]   memory calldatas = new bytes[](1);

targets[0]   = address(govToken);   // the call is made TO the token contract,
values[0]    = 0;                    // with no ETH attached,
calldatas[0] = abi.encodeCall(IERC20.transfer, (grantee, 100_000e18));
string memory description = "GP-12: fund the security audit grant";

uint256 id = governor.propose(targets, values, calldatas, description);

// The id is a deterministic hash of the EXACT actions plus the description:
//   keccak256(abi.encode(targets, values, calldatas, keccak256(bytes(description))))
// The funds live in the timelock, so the transfer is ultimately made BY the timelock.

// GovernorCountingSimple encodes each ballot as:
//   support = 0 (Against) | 1 (For) | 2 (Abstain)

// When voting closes, TWO independent gates are checked:
quorumReached = (forVotes + abstainVotes) >= quorum(snapshotBlock);
voteSucceeded = (forVotes > againstVotes);

passes = quorumReached && voteSucceeded;   // BOTH must hold

// The asymmetry that trips people up:
//   Abstain  -> counts toward QUORUM, but NOT toward For-beats-Against
//   For      -> counts toward both
//   Against  -> counts toward NEITHER quorum nor success

// The Timelock -- not the Governor -- holds the treasury and admin keys.
TimelockController timelock = new TimelockController(
    2 days,     // minDelay: nothing executes until 2 days after queuing
    proposers,  // [address(governor)] -> only the Governor may schedule
    executors,  // [address(0)]        -> after the delay, ANYONE may execute
    admin       // wires the roles; ideally renounced once set up
);

// Lifecycle of a winning proposal:
//   governor.queue(...)   -> timelock.schedule(...)  // start the 2-day clock
//   ...wait minDelay...                              // the public safety window
//   governor.execute(...) -> timelock.execute(...)   // the calls finally fire

// A complete, standard Governor, assembled from OpenZeppelin v5 mixins.
contract MyGovernor is
    Governor, GovernorSettings, GovernorCountingSimple,
    GovernorVotes, GovernorVotesQuorumFraction, GovernorTimelockControl
{
    constructor(IVotes token, TimelockController timelock)
        Governor("MyGovernor")
        GovernorSettings(
            7200,    // votingDelay:  ~1 day  (blocks until the snapshot)
            50400,   // votingPeriod: ~1 week (blocks the poll stays open)
            100e18   // proposalThreshold: votes needed to OPEN a proposal
        )
        GovernorVotes(token)               // weight = token.getPastVotes(...)
        GovernorVotesQuorumFraction(4)     // quorum = 4% of past total supply
        GovernorTimelockControl(timelock)  // execution routes THROUGH the timelock
    {}
    // The mixins supply votingDelay(), votingPeriod(), quorum(timepoint),
    // proposalThreshold(), state(), propose(), castVote(), queue(), execute().
    // (Several v5 override stubs are elided here for brevity.)
}