{"workflow":null,"planning":null,"id":"5e2f7703-9fe2-4c2b-bf7d-cbafd53fb4bf","state":"completed","template":"skill:adversarial-review","objective":"The whole of src/ at this commit, for a mainnet launch: a three-panel audit has already been run and its findings fixed. Break the fixes and the seams between subsystems.\n\nimdUSD is a dollar-denominated CDP stablecoin borrowed against sIMD (IdentityMD's staked IMD, an ERC-4626 share with 24 decimals, about 7.95 IMD each). Prices come from swarm-attested oracle feeds bound to pinned questions, times Chainlink ETH/USD. Everything about the deployment is in src/DeploymentConfig.sol and docs/MAINNET-RUNBOOK.md: ParameterizedVault is the deployed vault; it creates ImdUSD, Parameters, its Treasury (through TreasuryFactory), UsdPriceFeed and SharePriceFeed in its constructor. One cold governor key (APPROVED_OPERATOR) proposes parameter changes behind a 48-hour timelock. Collateral pricing is per 1e18 raw units throughout. IMD's only market is a full-range Uniswap v4 pool, about $2.3M a side with a 1% fee; docs/PARAMETERS-2026-10-05.md has the numbers every economic parameter was chosen from.\n\nWeight your time to the diff since e52a025966012ebe3af6d710152243d66655563c and to interactions that cross contracts: vault and Treasury (fees, bad-debt cover, the operator stream, reserve protection), vault and feeds (staleness, divergence, 24-decimal collateral), Treasury and OracleAsker (the daily budget), and the relay bundles. Re-check the whole price path (SwarmFeed and its leaves, SwarmRelay, OracleAsker, UsdPriceFeed, SharePriceFeed) in full: that panel's judge ran out of budget and never reproduced its specialists' findings. The fixes and every accepted item, with the reason, are in docs/AUDIT-FIX-PLAN-2026-10-05.md; an accepted item is a finding only if its stated reason is wrong. The lagged backing (CDPVault.laggedNow) is dormant at the launch wage of zero; test it with the wage raised through governance. Every finding needs a concrete failing input or state.\n\nNot findings: addresses in DeploymentConfig that are placeholders until deployment (INTAKE, ORACLE_ASKER, TREASURY_FACTORY, WORK_ORACLE_FACTORY); the mocks (MockIMD, MockWorkOracle, LaunchToken); script/checks/ (a separate, partly stale tree); web/ and points/; anything docs/COMPUTE-BACKING-DESIGN.md describes as future work; and findings of the earlier audits in docs/AUDIT-*.md and docs/INTERNAL-AUDIT-2026-10-04.md, unless the fix regressed. A constant set to a deliberate economic value is not a finding; an arithmetic or ordering error in how it is used is.\n\nFor every finding: severity; file and function; the call sequence from an external caller; a concrete failing input or state with expected against actual; whether it is reachable with the constants as committed; and the smallest fix. Also report every place a comment or NatSpec claims a property the code does not have, and say which contracts you read in full and which you could not reach.","blockedReason":null,"createdAt":"2026-10-05T09:56:16.985Z","updatedAt":"2026-10-05T10:15:55.032Z","paidBy":"0x5167d014a056e43883e1bbea5530c3c0dc993281","parentJobId":null,"project":{"id":"5e2f7703-9fe2-4c2b-bf7d-cbafd53fb4bf","head":"5e2f7703-9fe2-4c2b-bf7d-cbafd53fb4bf","running":null,"versions":[{"jobId":"5e2f7703-9fe2-4c2b-bf7d-cbafd53fb4bf","workflowId":null,"objective":"The whole of src/ at this commit, for a mainnet launch: a three-panel audit has already been run and its findings fixed. Break the fixes and the seams between subsystems.\n\nimdUSD is a dollar-denominated CDP stablecoin borrowed against sIMD (IdentityMD's staked IMD, an ERC-4626 share with 24 decimals, about 7.95 IMD each). Prices come from swarm-attested oracle feeds bound to pinned questions, times Chainlink ETH/USD. Everything about the deployment is in src/DeploymentConfig.sol and docs/MAINNET-RUNBOOK.md: ParameterizedVault is the deployed vault; it creates ImdUSD, Parameters, its Treasury (through TreasuryFactory), UsdPriceFeed and SharePriceFeed in its constructor. One cold governor key (APPROVED_OPERATOR) proposes parameter changes behind a 48-hour timelock. Collateral pricing is per 1e18 raw units throughout. IMD's only market is a full-range Uniswap v4 pool, about $2.3M a side with a 1% fee; docs/PARAMETERS-2026-10-05.md has the numbers every economic parameter was chosen from.\n\nWeight your time to the diff since e52a025966012ebe3af6d710152243d66655563c and to interactions that cross contracts: vault and Treasury (fees, bad-debt cover, the operator stream, reserve protection), vault and feeds (staleness, divergence, 24-decimal collateral), Treasury and OracleAsker (the daily budget), and the relay bundles. Re-check the whole price path (SwarmFeed and its leaves, SwarmRelay, OracleAsker, UsdPriceFeed, SharePriceFeed) in full: that panel's judge ran out of budget and never reproduced its specialists' findings. The fixes and every accepted item, with the reason, are in docs/AUDIT-FIX-PLAN-2026-10-05.md; an accepted item is a finding only if its stated reason is wrong. The lagged backing (CDPVault.laggedNow) is dormant at the launch wage of zero; test it with the wage raised through governance. Every finding needs a concrete failing input or state.\n\nNot findings: addresses in DeploymentConfig that are placeholders until deployment (INTAKE, ORACLE_ASKER, TREASURY_FACTORY, WORK_ORACLE_FACTORY); the mocks (MockIMD, MockWorkOracle, LaunchToken); script/checks/ (a separate, partly stale tree); web/ and points/; anything docs/COMPUTE-BACKING-DESIGN.md describes as future work; and findings of the earlier audits in docs/AUDIT-*.md and docs/INTERNAL-AUDIT-2026-10-04.md, unless the fix regressed. A constant set to a deliberate economic value is not a finding; an arithmetic or ordering error in how it is used is.\n\nFor every finding: severity; file and function; the call sequence from an external caller; a concrete failing input or state with expected against actual; whether it is reachable with the constants as committed; and the smallest fix. Also report every place a comment or NatSpec claims a property the code does not have, and say which contracts you read in full and which you could not reach.","baseCommit":"03e8d0c9ed18204a041e48141bbff44b48da226b","state":"completed","createdAt":"2026-10-05T09:56:16.985Z"}]},"deliver":false,"host":false,"site":null,"launch":{"requested":false,"kind":null,"id":null,"status":null,"chainId":null},"oracleRequestId":null,"delivery":null,"media":null,"nodes":[{"key":"adversarial_review","role":"review","state":"accepted","attempt":1,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-05T10:15:55.032Z","verdict":null,"seat":{"tokenId":"92","agentId":"52130"},"live":null}],"reviews":[{"status":"sent","chainId":1,"txHash":"0x646d124700695d3bb5cae94d30af362a2dc3c53700e46ad8462234883650478a","blockNumber":26125510,"sentAt":"2026-10-05T10:16:16.545Z","entries":[{"nodeKey":"adversarial_review","agentId":"52130","value":1,"role":"review:submission"}]}]}