Continue UNLOCK job c2e3a67b-4c59-4773-8d47-bd4fcfeb57e7 from https://github.com/identity-md-launches/launch-1838-uniswap-v4-hook-code commit 18062fc08c2fc3ab47b79316c1d1dea701e36e7f. Preserve newer fixes/history/protected checks/frontend/live launch1560. CODE ONLY: implement/test H-01 mitigations and IMD/USD oracle, UI/docs/release package and supported independent review. No public transactions/deployment/site publication.

DESIGN AUTHORITY: choose justified technical changes needed for these two issues without asking me to pick technical parameters. Preserve standard IMD/Uniswap router compatibility, normal direct-wallet trading, legitimate smart accounts, unrestricted ordinary transfers/native claims, fixed fees and milestones. Do not substitute a custom-router-only launch, tx.origin, EOA-only gate, arbitrary identity assertions, mutable allowlists, admin exemptions or secret backend signer. Name incompatible requirements; future addresses/keys do not block coding. Continue independent work.

H-01 QUOTA POOLING: reproduce the independent segregated-funds shared-executor proof and preserve it as a regression. Distinguish protected direct-wallet E/S from pooled initiator rights. Preserve isolation of direct users' quotas. Minimize deliberate executor pooling without assuming our UI controls public router calls. Evaluate verifiable wallet-scoped execution/settlement designs and compatible, immutable restrictions. Prove the unmodified router exposes each required fact; labels/warnings do not authenticate users. Retain smart accounts; delegation defeats EOA-only identity. Do not add transferable sale rights or token-transfer credits. No silent ledger redefinition.

Implement the strongest justified compatible mitigation; quantify before/after capacity consumed, attacker token/capital/fee requirements, honest-user impact and batching/multihop/cycle/recipient/funding bypasses. Test alternate executors/UIs. If global prevention is impossible with this interface, deliver an executable limit proof and concrete implemented reductions; retain the residual finding and independent severity. Warnings alone are not an on-chain fix. This authorizes mitigation engineering, NOT automatic acceptance/downgrading of High risk or permission to deploy with it.

IMD/USD: existing adapter relies on an inactive v3 venue. Same token is 0xd34a99bc0f67ae1bbd63c660e6d0b0dd03e263b7, chain1; current name is Identity.md/IMD. Verify markets on-chain. V4 IMD/ETH discovery PoolId 0xb07d640fd9e2eb9dc81b953c8e4fd006bdfeaf276010fb5418eb763ca15abfb3; is bytes32, not a pool address. Verify PoolKey/manager/fee/hook/depth/history; listings do not certify safety.

Implement a noncircular, verifiable on-chain IMD/USD source suitable for irreversible unlocks. No assumed built-in v4 TWAP, retrofitted pool hook, invented history or spot-sampling safety claims. First determine available historical observations and how every relevant price interval can be authenticated. Any observer/keeper design must prove manipulation/gap handling; off-chain indexed events are not on-chain proof. Evaluate independently verifiable feeds/venues as alternatives. Do not invent a Chainlink IMD feed, assume a stablecoin peg or use UNLK-derived IMD pricing. If new oracle governance, signer trust, public infrastructure deployment or liquidity funding is necessary, specify it explicitly as a separate release prerequisite, never quietly introduce it or pretend it already exists.

Retain UNLK/IMD2h TWAP and sequential6h tiers/24h final,4m cadence/10m gap; design justified IMD-leg warm-up/freshness/depth/divergence safeguards. Test flash/same-block/sustained/cross-market manipulation, outages/recovery and insufficient history. Quantify gross capital AND net exit cost against unlocked value; longer windows alone prove no safety. Invalid data cannot progress/revoke rights; claims/transfers remain independent. Require real oracle evidence for activation. Never leave the inactive v3 reader as a claimed working solution.

PRESERVE mainnet univ4_hook UNLK/IMD target,1B/18decimals,10/87/3,official1.25% fee,extra75bps IMD vault,fixed beneficiary,protected principal,16 accepted20%-to100%/$50M USD tiers,permanent full bypass,sealed setup/no upgrades/pauses/resets. Update preview with actual mitigation/fee/ledger/oracle limits; keep candidate writes disabled and NFT gallery read-only.

DELIVER published commit,implemented changes,full prior checks/new unit-fuzz-invariants,actual-mainnet recorded-block router/factory/Permit2/Quoter rehearsal,real-versus-synthetic oracle evidence and browser/protected-check skips. Independent review of FINAL changes or explicit pending status. Preserve High findings until genuinely resolved/reassessed. Give readiness matrix,exact blockers and two-stage deployment/postflight package. No fabricated safety,review,oracle history or deployment success.