X: https://x.com/imdplace

Goblin Gold v3.3: fix every high, medium and low finding of audit 930ea061 (commit 8b769ee), plus info 7 and 8, and add getHookPermissions. Keep the design. Add each auditor proof as a test that now passes.

1. HIGH concentrated liquidity (TwapOracle.sol:236): give GoldHook BEFORE_ADD_LIQUIDITY and revert in beforeAddLiquidity unless tickLower == -887220 && tickUpper == 887220 (full range only). REQUIRED_FLAGS 0x30CC -> 0x38CC; update launch.json hook permissions. ConcentratedDepth tests: the narrow add is refused.
2. HIGH POL floor (POLManager.sol:122): add TwapOracle.polTokensForEth returning Math.max(short, long) for GOLD (v3.1 behaviour) and use it in POLManager._minOut. GenesisVault keeps Math.min. PolFloorInverted test reverts Slippage.
3. MEDIUM regular v3 tokens (TwapOracle.sol:261): bound liquidity by min(pool.liquidity(), harmonic-mean active liquidity over 30 min from observe's secondsPerLiquidityCumulativeX128), and bound the ETH side by what that liquidity actually releases within a fixed band around the price (e.g. 10%), scaled to its full-range equivalent, never by the raw WETH balance. Tests: a JIT position in one tx does not move payoutCap; out-of-range WETH does not pass MIN_LIQUIDITY.
4. MEDIUM spot price (TwapOracle.sol:228): value genesis depth and cap at max(sqrtPrice, sqrtPriceAtTick(longTick)) so the ETH figure can only go down, and also bound L by liquidityAt(4h). seal() refuses the genesis token: GOLD only goes through the Genesis lane. Tests from the audit reproduction (4h pump cap, same-tx gate) pass.
5. MEDIUM bind lock-out (GoldHook.sol:289): add view bindCheck(address gacha) returns (bytes4 reason), zero when every bindGacha precondition except the review timer passes. Info 7: bindGacha (and bindCheck) also require TwapOracle(gacha.oracle()).goldHook() == address(this), genesisToken() == token, and POLManager(gacha.polManager()).oracle()/hook()/token() to match. Runbook: launch 2 is built only with the launch profile (via_ir = false, bytecode_hash = none); before setLaunchTargets, require bindCheck == 0 and on-chain extcodehash(BagGacha) == GACHA_RUNTIME_CODE_HASH. Document post-bind retarget by the NFT owner as a trust assumption.
6. LOW cancel race (BagGacha.sol:668): rawFulfillRandomWords ignores a fulfilment once block.timestamp >= requestedAt + CANCEL_DELAY.
7. Info 8: use path A. The launch remainder goes to the paying wallet; the runbook has that wallet transfer exactly genesisSupply to GenesisVault and verify balanceOf(vault) == genesisSupply before setLaunchTargets.
8. IMD v4 hook template: add getHookPermissions() public pure to GoldHook returning v4-core Hooks.Permissions (same field order and ABI) matching REQUIRED_FLAGS exactly; test it against the flags.
9. Re-pin GACHA_RUNTIME_CODE_HASH under the launch profile (FOUNDRY_VIA_IR=false FOUNDRY_BYTECODE_HASH=none). All tests and v4 fork tests pass under that profile;