# Audit batch 10 Oct 20:xx: busy60, fast5, d0fd, h100, h100s (auditor2, items #841-#844)
Scripts: /opt/crew/work/auditor2 v4sim.py (exit-block sell sim), rb.py (price rebuild from PoolManager Swap logs), d1.py (d0fd gate probe), w1.py.

## busy60 (arm A, native unhooked fee-100): sellability PASS, hand rebuild PASS, still short on forward n
- Sell sim at the exit block, fresh address, 6 of 6 trades PASS (4 TP, 2 quiet-zero): 0.1 ETH out ratio 0.996-1.001, 0.25 ETH ratio 0.988-0.997. No gate, no skim.
- Hand rebuild from chain (Swap logs, no feed): 6 trades. TP exits: price entry->exit swap 2.96-3.22x (paper tp 3x x 0.97 = 2.91: consistent, 4/4). Zero (quiet) exits: price ratio 1.03, 1.18, 2.25 and the sim still sells at ~1.0 at that block, so these were NOT pulls; paper counts them 0 = conservative (one pool was 2.25x).
- Replay 1.53x n85 vs control Z 0.98x n1389 (A beats Z by 0.55); forward A 1.66x n7: same direction.
- Open: forward arm A n=7, need 30. Verdict: PASS on all five checks except sample size; verified stays false until n>=30 on-time (auto-recheck).

## fast5 (arm A WETH-quoted unhooked): NOT VERIFIED, wait
- Sample: A n=2 (need 40, ~14 Oct). Native arms below kill line (NA 1.11x, NS 0.70x): kill them at the rule.
- Sellability: token gate PASS (fresh address transfer to PoolManager works on both A tokens at the exit block). Full swap sim on WETH-quote pools still reverts empty inside the router before the swap (my tool, also on unhooked pools; gas 2 kB): so swap-level unproven; no hook, so the risk is low but not closed.
- 5 s latency: paper fills at first-swap price; unproven. No new look-ahead found.

## d0fd: KILL as outsider-tradable (FIX to testmgr2 / analyst2)
- Token 0xb0352e...: transfer to the PoolManager reverts ("salg spaerret") for every fresh address at every block (tried 0x1111.., an address one digit off the real buyer, W).
- The real buyer 0xd368dfe8... (first buyer of the pool, block 84332062) CAN transfer at block 84332061, i.e. BEFORE its buy (balance overridden). So it was on the sale whitelist before buying: buying does not list a wallet. Only an operator-curated list sells.
- Pool shows 2 PM transfers in 90 blocks after creation. Paper 4.7x is unreachable for us. Needs: who writes the list (dataeng) and proof a non-listed wallet can sell. Not worth Ben's $5 until that is known.

## h100 / h100s (WETH, hooked): NOT VERIFIED
- Hand rebuild of 4 v4 fills done earlier (matched). Token gate 24/24.
- Hook gate: hook 0x3d9bfb..0144 (11689 B, no revert strings, acts as its own unlock router) consults registry 0x6f8e52e1..c683630d; 19/19 real traders listed, fresh = 0. The same pattern on 0xcc pools skimmed outsiders 99.99%. eth_call cannot test it (registry reads the swapper, my WETH sim reverts early, and calling beforeSwap as PoolManager hides the origin). Not proven sellable.
- Only proof left: a real buy-then-sell of $5 on a fresh h100 pool (Ben), or dataeng reading the registry write history (who gets listed, does buying list). Until then h100 stays paper-only; exit pnl 2.2x forward 2.04x n20 is real in the tape but not shown to be realizable.