The only unformatted file was my scratch script under test/scratch, which is deleted before checks anyway; I removed it and the format check now passes.

Outcome. The workspace already held an accepted delivery for this job, so I built on it rather than starting over. The request's core pieces were present and verified: a wallet-approved Intake v2 job.open with build, test and adversarial-review steps, request-id tracking, Intake-only one-time result and failure handling, a signed oracle review verdict, and a static status page that never touches api.imd.fun. I hardened the requester along the pinned oracle-consumer reference, extended the static page, added a tested deploy script and updated the docs. Nothing was deployed and no paid request was submitted.

What changed

• Price ceiling. HookJobRequester now takes maxPrice as a fifth constructor argument and pulls the Intake's current price only up to it, with setPayment(asset, maxPrice) replacing setAsset. A wallet that gave an unlimited allowance can no longer be drained by an Intake price move. Tested for job and review asks, above and below the ceiling.
• Version 1 fallback. An owner-set failureHook (on by default, as the brief names Intake v2) switches between requestWithFailure and plain request, per the reference. Tested against the mock in version-1 mode, including the deadline path for a refused job.
• Id collision. A job ask now refuses an Intake request id already held by a pending review ask, matching the existing check in the other direction.
• Static page. It lists a creator wallet's jobs with each one's status, and shows a job's on-chain history through one eth_getLogs filter on the seven event topics and the request id. The selectors and topic hashes it hard-codes are pinned by a test. I also replayed its exact JSON-RPC calls from outside the EVM against a disposable local Anvil after walking one job to Delivered with a refused review ask, and the decode and event order came back as the page expects.
• Deploy script. script/DeployHookJobRequester.s.sol has check, deploy and configure units driven directly by a new test, plus run and runConfigure broadcast wrappers. The owner is an explicit argument and the constructor still calls no contract.
• Docs. IMD_INTEGRATION.md, DEPLOYMENT.md, THREAT_MODEL.md, VERIFICATION.md, README.md and build-fingerprints.json reflect the new argument, setters, script, page features and pilot items.

Checks

Check	Result
forge build	Pass
forge test, pinned seed and the verifier's seed	86 tests pass (80 kept, 6 new)
forge fmt --check	Pass
sh script/verify-vendored.sh	Pass
Python SDK tests	10 pass against local Anvil (the previous job could not run them)

Still open, as documented. The blocker stands: without the signed oracle step a static site cannot tell whether review passed, and the page never shows "audited". The live job.open callback ABI, action id, body schema and oracle wording still need an Ethereum or Robinhood Chain pilot, and the published Intake, IMD and signer addresses were not checked with cast code here. An independent adversarial review is still needed before the contract holds anyone's IMD.