Skip to content

docs(readme): reflect implemented system, audit status, and open items - #24

Merged
jayeshy14 merged 1 commit into
mainfrom
docs/readme-current-state
Jul 21, 2026
Merged

docs(readme): reflect implemented system, audit status, and open items#24
jayeshy14 merged 1 commit into
mainfrom
docs/readme-current-state

Conversation

@jayeshy14

Copy link
Copy Markdown
Owner

The README was stale on three counts and overclaimed on a fourth:

Changes

  • Status line: implemented + self-audited/remediated, not independently audited, not deployed.
  • Architecture: the math core stays; the vault, both legs, PT adapter, execution module and oracle hub move from "in progress" to implemented, each with an accurate one-line description, plus the shareholderNav = totalNav - pending - reserved accounting identity called out.
  • Testing: 151 tests (verified on this branch); describes the full ERC-7540 lifecycle, execution/oracle, crash-replay, and invariant coverage.
  • New Security section (honest): the self-audit + adversarial re-verification, the two robustness bugs the re-check caught (buffer payout not actually oracle-independent; settlement lock on NAV collapse) now fixed, and the open partial remediations: emergency-exit minOut still oracle-anchored (M4/H6/L8), performance-fee basis overcharging mid-term depositors (H1, keep performanceFeeBps = 0 until fixed), and fee mints not health-gated (L5). States plainly that an external audit is required and it is not deployed.

No code changes; docs only.

The README described the vault/legs/execution/oracle as spec'd-but-not-implemented
and claimed "unaudited" with 37 tests and an "atomic by design" emergency path.
All of that is stale: the full system is built and tested (151 tests), it has
been self-audited (21 findings) and remediated across PRs #10-#23, and the
emergency path is best-effort-within-bound, not atomic (per the audit).

- Status line: implemented + self-audited/remediated, not independently audited,
  not deployed.
- Architecture: move the vault, both legs, PT adapter, execution module and
  oracle hub from "in progress" to implemented, with accurate per-contract notes
  and the shareholderNav accounting identity.
- Testing: 151 tests; describe the full lifecycle/crash/invariant coverage.
- New Security section: honest audit + adversarial re-verification summary, the
  two robustness bugs it caught (now fixed), and the open partial remediations
  (M4/H6/L8 emergency anchoring, H1 fee basis, L5 health-gating).
@jayeshy14
jayeshy14 merged commit ed334a8 into main Jul 21, 2026
3 checks passed
@jayeshy14
jayeshy14 deleted the docs/readme-current-state branch July 21, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant