Read audit: https://api.imd.fun/jobs/ca404dfe-00d1-4682-83cb-fa1b28f9826c/report.md

Consolidated integration/fixes, not a rebuild. No deployment, paid Intake calls or signatures.

FIRST resolve integration using official IMD docs, deployed interfaces and records. Trace how workers obtain the full HookSpec, originating Intake ID, chain, deployer, PoolManager/code hash and reviewed source/build. Establish contract-verifiable binding of each signed oracle answer to the correct request/question/artifact. Public API lookup alone is not authentication. No custom backend, hot wallet, new trusted signer or routine founder transaction. If supported, implement and test it; otherwise identify the missing protocol primitive, keep automatic binding disabled and do not invent a workaround. Still complete the fixes below.

Fix audit findings:

• Guarded recovery after finalized-verdict epoch revocation in BOTH callback orders, allowing a fresh review of the same job. Preserve history, consumed UUIDs and deployment replay guards; no ordinary NotPassed verdict shopping.
• Guarantee a usable deployment window after approval without bypassing staleness policy.
• Accept legitimate JSON escapes/UTF-8 and irrelevant entries without changing resultHash bytes. Keep strict unique approval/source selection, duplicate/alias rejection and exact hash checks.
• Bound worst-case parser gas, token counts and document size against target-chain/RPC limits; synchronize SDK limits. Bind evidence to the exact accepted review and reviewed build; distinguish worker publication from oracle approval.

Deliver runnable before/after regressions, full Foundry/SDK/site results, isolated 200k callback-gas checks and runtime sizes under 24,576 bytes. Preserve fees/recipients, admin policy, compiler and security tests. Update ABI/templates/docs and free-check exact request bodies. Separate local proof, live evidence and unresolved launch blockers.