From 01afda5c28e0f55069e1890e63041f8115817181 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 25 Jul 2026 19:17:57 +0000 Subject: [PATCH 1/2] anchor audit PDFs under audit/protofire/ Both Protofire reports sat loose at the audit/ top level with names that encode no audited ref. The org health scanner reads audit/protofire/ only, and dates an audit from the commit anchor in the filename, so cyclo.sol published "externalAudit": "never" despite two real audits. Each PDF now sits under audit/protofire/ and carries the commit of this repo the report states it reviewed: - Protofire v1.0 (November 2024, through Report Update 3) reviewed 2ee2b15fa8daa81e6eb432822f570f363c111415. - Protofire December 2025 reviewed 63d11553006bf24421c033b19f6dab0ba1bc4573. Co-Authored-By: Claude Opus 4.8 --- README.md | 13 +++++++++++++ ...fa8daa81e6eb432822f570f363c111415.nov-2024.pdf} | Bin ...3006bf24421c033b19f6dab0ba1bc4573.dec-2025.pdf} | Bin 3 files changed, 13 insertions(+) rename audit/{Cyclo audit report dev v.1.0.pdf => protofire/cyclo.sol.2ee2b15fa8daa81e6eb432822f570f363c111415.nov-2024.pdf} (100%) rename audit/{report-cyclo-dec-2025-1.2.pdf => protofire/cyclo.sol.63d11553006bf24421c033b19f6dab0ba1bc4573.dec-2025.pdf} (100%) diff --git a/README.md b/README.md index be8401a..2a8a77c 100644 --- a/README.md +++ b/README.md @@ -17,6 +17,19 @@ as git submodules here. See the Cyclo website, and rep dependencies for in depth documentation. +## Audits + +External audit reports live under `audit//`, named +`cyclo.sol..-.pdf` so each report names the exact +commit of this repo that was reviewed. + +- `audit/protofire/cyclo.sol.2ee2b15fa8daa81e6eb432822f570f363c111415.nov-2024.pdf` + — Protofire, report version 1.0 dated November 2024, reviewed through commit + `2ee2b15fa8daa81e6eb432822f570f363c111415` (the report's third update). +- `audit/protofire/cyclo.sol.63d11553006bf24421c033b19f6dab0ba1bc4573.dec-2025.pdf` + — Protofire, December 2025, reviewed at commit + `63d11553006bf24421c033b19f6dab0ba1bc4573`. + ## Immutability Note that Cyclo once deployed has no admin keys and so is immutable onchain. diff --git a/audit/Cyclo audit report dev v.1.0.pdf b/audit/protofire/cyclo.sol.2ee2b15fa8daa81e6eb432822f570f363c111415.nov-2024.pdf similarity index 100% rename from audit/Cyclo audit report dev v.1.0.pdf rename to audit/protofire/cyclo.sol.2ee2b15fa8daa81e6eb432822f570f363c111415.nov-2024.pdf diff --git a/audit/report-cyclo-dec-2025-1.2.pdf b/audit/protofire/cyclo.sol.63d11553006bf24421c033b19f6dab0ba1bc4573.dec-2025.pdf similarity index 100% rename from audit/report-cyclo-dec-2025-1.2.pdf rename to audit/protofire/cyclo.sol.63d11553006bf24421c033b19f6dab0ba1bc4573.dec-2025.pdf From 18e66bcdb5b0df631fbc483708cb4815c3e52934 Mon Sep 17 00:00:00 2001 From: David Meister Date: Sat, 25 Jul 2026 19:35:48 +0000 Subject: [PATCH 2/2] ci: retrigger after arbitrum RPC variable change Co-Authored-By: Claude Opus 4.8