Feedback #10

{
  "chain": {
    "name": "Mantle Mainnet",
    "chainId": 5000
  },
  "report": {
    "id": "2db5e010-eabb-4e84-ab57-168eb9775925",
    "scope": {
      "pragma": "^0.8.24",
      "network": "mantle-mainnet",
      "lineCount": 76,
      "protocols": [
        "mETH",
        "cmETH",
        "USDY",
        "Aave V3",
        "Merchant Moe",
        "Agni"
      ],
      "sourceKind": "paste",
      "aiReasoning": {
        "hits": 4,
        "total": 4,
        "misses": 0,
        "batches": 0,
        "skipped": 0,
        "provider": "openai",
        "timeoutMs": 75000,
        "fallbackCount": 0
      },
      "reducedMode": null,
      "solcVersion": "0.8.24",
      "gasOptimizer": {
        "pricing": {
          "mode": "calibrated-receipts",
          "pricedAt": "2026-06-15T23:07:17.296Z",
          "l2GasPriceWei": "50000100000",
          "deployDataFeeMnt": "0.0068379925147062",
          "deployDataFeeWei": "6837992514706200",
          "calldataZeroBytes": 29,
          "calibrationErrorPct": 0,
          "calldataGasEstimate": 30612,
          "calldataNonZeroBytes": 1906,
          "creationBytecodeBytes": 1935
        },
        "daPricing": {
          "model": {
            "mode": "calibrated-receipts",
            "samples": [
              {
                "txHash": "0x82d99588e5f1bff33d618743025d598445493032637de25844a67aa8e88088ef",
                "l1FeeWei": "699231354481640",
                "l1GasUsed": "2530",
                "zeroBytes": 135,
                "l1GasPrice": "538782662",
                "totalBytes": 228,
                "blobGasUsed": "63200",
                "blockNumber": "96205628",
                "nonZeroBytes": 93,
                "l1BlobBaseFee": "330004069609410902",
                "l1BaseFeeScalar": "169019",
                "operatorFeeScalar": "100000000",
                "calldataGasEstimate": 2028,
                "l1BlobBaseFeeScalar": "0",
                "operatorFeeConstant": "0",
                "daFootprintGasScalar": "400"
              },
              {
                "txHash": "0xb9ce87de86b212b91eb64012bbdab91014373da1f6d960470b340e1991a1a7c5",
                "l1FeeWei": "6874261528561290",
                "l1GasUsed": "22258",
                "zeroBytes": 28,
                "l1GasPrice": "603039864",
                "totalBytes": 1945,
                "blobGasUsed": "556400",
                "blockNumber": "96205472",
                "nonZeroBytes": 1917,
                "l1BlobBaseFee": "321479049246759320",
                "l1BaseFeeScalar": "169019",
                "operatorFeeScalar": "100000000",
                "calldataGasEstimate": 30784,
                "l1BlobBaseFeeScalar": "0",
                "operatorFeeConstant": "0",
                "daFootprintGasScalar": "400"
              }
            ],
            "validation": [
              {
                "txHash": "0x82d99588e5f1bff33d618743025d598445493032637de25844a67aa8e88088ef",
                "errorPct": 0,
                "actualL1FeeWei": "699231354481640",
                "predictedL1FeeWei": "699231354481572"
              },
              {
                "txHash": "0xb9ce87de86b212b91eb64012bbdab91014373da1f6d960470b340e1991a1a7c5",
                "errorPct": 0,
                "actualL1FeeWei": "6874261528561290",
                "predictedL1FeeWei": "6874261528560500"
              }
            ],
            "sampleCount": 2,
            "zeroByteFeeWei": "2736708878864",
            "nonZeroByteFeeWei": "3545974793924",
            "maxValidationErrorPct": 0,
            "meanValidationErrorPct": 0
          },
          "source": "receipt-calibrated",
          "groundTruthField": "l1Fee"
        },
        "sourceHash": "0x78801c654eafcf204306f263ba1e57c57af9e3d4d1ce708d8ab144f068df1f24",
        "measurement": {
          "forge": {
            "ok": false,
            "error": "No safety=safe gas patches available for automatic measurement.",
            "command": null,
            "attempted": false,
            "gasReport": null
          },
          "source": "deterministic-estimate",
          "status": "skipped",
          "patches": [
            {
              "note": "Review-only patch is not auto-applied for measurement.",
              "after": "Use the smallest ABI-safe integer width only when the domain is bounded and documented.",
              "before": "function proofHashAt(uint256 index) external view returns (bytes32) {",
              "ruleId": "calldata-smaller-types",
              "safety": "review",
              "status": "skipped",
              "l2GasDelta": null,
              "l1DaDeltaWei": null
            },
            {
              "note": "Review-only patch is not auto-applied for measurement.",
              "after": "uint256 cached = _proofs[reportHash]; // reuse cached value",
              "before": "_proofs[reportHash] read 4 times",
              "ruleId": "cache-repeated-sload",
              "safety": "review",
              "status": "skipped",
              "l2GasDelta": 300,
              "l1DaDeltaWei": null
            }
          ],
          "version": "archon.gasMeasurement.v1",
          "measuredAt": "2026-06-15T21:22:32.496Z",
          "rulesetHash": "172d5d3d47c7b252894d436b044232fd95cbbc4ab46b3b1ac4ec1ee0560e2bf1",
          "contractHash": "78801c654eafcf204306f263ba1e57c57af9e3d4d1ce708d8ab144f068df1f24"
        },
        "opportunities": [
          {
            "id": "calldata-smaller-types",
            "file": "ArchonProofRegistry.sol",
            "after": "Use the smallest ABI-safe integer width only when the domain is bounded and documented.",
            "patch": {
              "newText": "    function proofHashAt(uint256 index) external view returns (bytes32) { // REVIEW: bounded calldata params may be packable/smaller in structs or encoded batches",
              "oldText": "    function proofHashAt(uint256 index) external view returns (bytes32) {"
            },
            "title": "Review calldata parameter width",
            "where": "ArchonProofRegistry.sol:73",
            "before": "function proofHashAt(uint256 index) external view returns (bytes32) {",
            "safety": "review",
            "newText": "    function proofHashAt(uint256 index) external view returns (bytes32) { // REVIEW: bounded calldata params may be packable/smaller in structs or encoded batches",
            "oldText": "    function proofHashAt(uint256 index) external view returns (bytes32) {",
            "category": "calldata",
            "severity": "low",
            "lineStart": 73,
            "rationale": "For individual ABI params uint256 still occupies a full word, but bounded types help packed structs/batches and prevent redundant calldata.",
            "confidence": 0.55,
            "estL1Delta": 16,
            "estL2Delta": null,
            "annualizedBasis": "Receipt-calibrated DA estimate for calldata/data bytes; exact deltas require V2.1.2 harness measurement.",
            "estimatedGasSaved": null,
            "estimatedDataBytesSaved": 16
          },
          {
            "id": "cache-repeated-sload",
            "file": "ArchonProofRegistry.sol",
            "after": "uint256 cached = _proofs[reportHash]; // reuse cached value",
            "patch": {
              "newText": "_proofs[reportHash]",
              "oldText": "_proofs[reportHash]"
            },
            "title": "Cache repeated storage read",
            "where": "ArchonProofRegistry.sol:44",
            "before": "_proofs[reportHash] read 4 times",
            "safety": "review",
            "newText": "_proofs[reportHash]",
            "oldText": "_proofs[reportHash]",
            "category": "storage",
            "severity": "info",
            "lineStart": 44,
            "rationale": "Repeated SLOADs should be cached in stack/memory when state cannot change between reads.",
            "confidence": 0.7,
            "estL1Delta": null,
            "estL2Delta": 300,
            "annualizedBasis": "Static deterministic estimate. Exact runtime deltas require queued Foundry snapshots with representative inputs.",
            "estimatedGasSaved": 300,
            "estimatedDataBytesSaved": null
          }
        ]
      }
    },
    "scanId": "0cff2253-be8f-496d-8314-38adab98d144",
    "createdAt": "2026-06-15T23:07:18.745Z",
    "riskScore": 25,
    "contractName": "ArchonProofRegistry",
    "severityCounts": {
      "low": 3,
      "high": 0,
      "info": 1,
      "medium": 0,
      "critical": 0
    },
    "executiveSummary": "Archon completed a read-only Mantle Mainnet audit of ArchonProofRegistry and found 4 deterministic findings. The highest-priority issue is Timestamp, with risk score 25/100 based on severity-weighted findings. The contract uses block timestamps for proof anchoring, which can be manipulated by miners. Review the recommended fixes and run regression tests before deployment."
  },
  "schema": "archon.proof.metadata.v1",
  "erc8004": {
    "verifiedConfig": true,
    "agentIdentityRef": "eip155:5000:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432:97",
    "identityRegistry": "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
    "reputationRegistry": "0x8004BAa17C55a88189AE136b182e5fdA19dE9b63",
    "validationRegistry": null
  },
  "product": "Archon",
  "findings": [
    {
      "id": "76006289-d40f-4766-9019-2b3b53941292",
      "title": "Timestamp",
      "category": "timestamp",
      "location": {
        "file": "ArchonProofRegistry.sol",
        "lineEnd": 59,
        "lineStart": 37
      },
      "severity": "low"
    },
    {
      "id": "f67f72f4-df03-4a93-878b-60d74979f7a4",
      "title": "Timestamp",
      "category": "timestamp",
      "location": {
        "file": "ArchonProofRegistry.sol",
        "lineEnd": 67,
        "lineStart": 65
      },
      "severity": "low"
    },
    {
      "id": "a6c2e56d-57f4-47af-8a3d-d44e6a9c51d7",
      "title": "Review calldata parameter width",
      "category": "mantle-gas-optimizer/calldata/calldata-smaller-types",
      "location": {
        "file": "ArchonProofRegistry.sol",
        "lineEnd": 73,
        "lineStart": 73
      },
      "severity": "low"
    },
    {
      "id": "decb76f1-99a2-461e-8d3c-9198f2620aff",
      "title": "Cache repeated storage read",
      "category": "mantle-gas-optimizer/storage/cache-repeated-sload",
      "location": {
        "file": "ArchonProofRegistry.sol",
        "lineEnd": 44,
        "lineStart": 44
      },
      "severity": "info"
    }
  ]
}