[md0x]

Final audit review now follows the original branches: #76 at 71d3df10c659542dc5a92028c62f0586efb6b80d and #78 at 113e6729f9130ac95795e7c4c7f2a667893aacae. All seven fix PRs (#80–#86) are merged into their original bases. Combining those two final branches exactly reproduces this PR’s repository tree. This draft is retained as an unchanged reference; no merge of this PR is needed for that review.

For the reduced final review, see #88: two existing follow-up commits across six files, with the exact same final head as this PR. Its description also links the #84/#80 documentation and interface adjustments already included in the comparison base. This PR remains the complete integration against master.

Integrate #76, #77 and #78 with all six audit fixes (#81–#86) and the callback reserve change (#80) into one branch for final review. The original PR heads are preserved in the merge history. Keep this PR in draft pending final audit review.

Review commit: 7f95d18ae86d4a874953cc951be2606eb1a026da. Tracks FRO-146.

Integration decisions:

• fix: use canonical reporter lifecycle event IDs (L-01) #84 + Reserve gas per reporter callback and combine settlement loops #80: retain canonical lifecycle event IDs and the single callback loop with the 150,000 gas reserve. Resolve the interface conflict by removing ResolutionCallbacksFailed; update the callback/recovery documentation and _canonicalRequestId NatSpec.
• fix: namespace TryMulticall reentrancy storage (L-02) #85 + managed-oracle: add UUPS upgradeability to SignedProposer #78: retain the ERC-7201 batch lock and UUPS deployment. Compiler output places permit2 at slot 0, offset 0. This is the initial proxy layout; the earlier managed-oracle: add UUPS upgradeability to SignedProposer #78 layout used offset 1 and must not be upgraded directly to this build. No migration is included.
• Reporter upgrade script: accept aliases in both registration-log validation and the post-upgrade state comparison. Preserve the full canonical-state snapshot checks. The regression invokes the actual post-upgrade verifier, validates wiring, accepts unchanged canonical/alias state, and rejects mismatched logs and changed request state. It fails with either original alias-equality check.
• fix: bound batch failure revert data (N-01) #86 + managed-oracle: add UUPS upgradeability to SignedProposer #78: adjust the large-revert regression's call budget from 2M to 2.8M to account for the proxy copying returndata before the batching cap. It still fails with unbounded copying, even without the event expectation. Production gas behavior is unchanged by this test adjustment.

Validation with Foundry 1.3.6:

• 221 non-fork tests pass, including reporter settlement gas exhaustion, upgrade state, real Permit2 signatures and all audit regressions.
• 18 Polygon fork tests pass, including production upgrade preservation. Eight optional VNet/Amoy tests skip because their RPCs are not configured.
• Production Managed OO storage-layout validation passes against the pinned reference build.
• forge build --sizes, forge fmt --check and diff checks pass.

[md0x]

Closing this reference PR because its changes are already integrated into master through the original audited branches. The repository tree at this PR head (7f95d18) matches master immediately before PR #79 (886c23b). No additional merge is needed.