Evidence
What has run, with the numbers, and what each number does and does not show.
The rehearsal, 2026-09-06
On a fork of Arbitrum One, against the real ETH/ARB 0.05% pool, through the CRE CLI with
--broadcast and the mock forwarder:
| Position before | token 202707, [93270, 93470), entirely below tick 94473 |
| Verdict | RECENTER 94370..94570 |
| Position after | a new token, [94370, 94570), containing the price |
| Liquidity retained | 88545095207060353974 of 93889598979339206088, 94.3%, floor 50% |
| Second run | HOLD (cooldown) |
Recipe and raw numbers:
the forwarder-delivery plan.
Reproduce it with apps/cre/rehearse.sh; it forks latest, so the numbers differ each time.
A fork, not the live network. The simulator, not a TEE. A mock forwarder that verifies no signatures. The run proves delivery and execution, not DON authorisation.
Tests, as of 2026-09-06
| Suite | Count |
|---|---|
| contracts, Foundry | 100, of which 11 on a fork of Arbitrum One |
@helico/plugin-cre | 116 |
@helico/plugin-uniswap | 52 |
VaultAttacks.t.sol holds an automated review's findings as regression tests, each written
before the contract could pass it. CI leaves the RPC unset so the fork suite reports SKIP.
Transactions on real networks
The Uniswap package has run the full position lifecycle on Base Sepolia and Robinhood Chain
Testnet, every step status: success, and read pools and quotes on Arbitrum One and Robinhood
Chain. Hashes in the README.
Reviews
Twelve automated reviewers, then six more. The findings that mattered became tests. Not an audit, and never called one.