Release Desk (ERC-20 symbol DESK) on Sepolia as an evm_project: the fixed-supply launch token plus one application contract.

Token: Desk (DESK), total supply 1,000,000,000 DESK with 18 decimals, minted once to the deployer.

Application contract: OTCBoard, a fixed-price board where makers sell any ERC-20 for Sepolia ETH.

Currency: DESK is the featured token. OTCBoard takes the DESK address as its only constructor argument (constructorArgs ["$token"]), exposes it as featuredToken() for the site's default, and holds no DESK at deploy. No owner, admin, fee or upgrade path; no receive/fallback.

Tokens move with SafeERC20; post, fill, cancel and withdraw follow checks-effects-interactions and are nonReentrant. Orders have ids from 1; a call on an unknown id reverts. post(token, amount, pricePerToken, expiry): amount > 0, pricePerToken > 0 (wei per whole token, i.e. per 10^decimals base units), block.timestamp < expiry <= block.timestamp + 90 days; decimals() is read once and stored, and a token whose decimals() reverts or exceeds 30 is rejected.

The tokens are pulled and the order records the amount actually received (balance delta; zero received reverts; fee-on-transfer tokens are recorded net; rebasing tokens are unsupported, README says so). fill(orderId, amount) payable: the order is not cancelled, block.timestamp < expiry, 0 < amount <= remaining, and the caller is not the maker; cost = Math.mulDiv(amount, pricePerToken, 10^decimals, Rounding.Ceil), so a 1-base-unit fill costs at least 1 wei, and msg.value must equal cost exactly. remaining drops by amount, amount is sent to the taker (a fee-on-transfer token delivers less than amount; the README says so), and cost is credited to the maker's withdrawable ETH (pull, so a maker that rejects ETH cannot block fills). cancel(orderId): maker only, while remaining > 0 and not already cancelled, before or after expiry; the remainder returns to the maker. withdraw() sends the caller's whole ETH credit with call and reverts on zero.

Orders cannot be edited (cancel and repost).

Views: order(id), orderCount(), quote(id, amount), withdrawable(address), featuredToken(). Events (token and maker indexed): Posted(id, maker, token, amount, pricePerToken, expiry), Filled(id, maker, taker, amount, cost), Cancelled(id, maker, remainder), Withdrawn(account, amount).

Tests (Foundry) must cover: partial fills whose cost rounds up, exact msg.value (more or less reverts), expiry at the boundary, cancel after partial fills and after expiry, a 6-decimal token, a fee-on-transfer token, and the invariants: for each token, OTCBoard's balance >= the sum of remainders of orders not cancelled; OTCBoard's ETH == the sum of withdrawable credits.

The independent adversarial review must attack: rounding that gives tokens for free or overcharges, reentrancy through a token with transfer callbacks on fill or cancel, filling a cancelled or expired order, and decimals mismatches between post and fill.

Deploy through the project factory, then publish a one-page website where a connected wallet can view the order book (DESK by default, any token by address), post an order (approve the token first), fill with the exact quoted ETH, cancel its own orders and withdraw ETH proceeds. Lists come from contract views and events only (no backend, no indexer). Keep it to one small page; the static export has index.html in dist/.