Add a handler-driven stateful invariant suite for JackpotHook from launch 186 (src/JackpotHook.sol at this commit; the same hook source is live on Sepolia at 0xd08e759d3d89eed2de3f03006a6e21ae341d4088 as a test toy with no real value), then review it. Tests only: add files under test/, do not change src/, foundry.toml, remappings.txt or lib/.

What the hook does (follow this, nothing else): beforeSwap keeps F = floor(|amountSpecified| / 100) of the specified currency as ERC-6909 claims in a per-pool pot (pots(poolId) returns (eth, ice)); a swap whose F is at least 0.00001 ETH or 1 ICE issues one ticket to the address in 32-byte hookData, else to tx.origin. fillTank(key, pees) adds exactly 10 ICE per pee (1-1000) to the ICE pot and issues no ticket. draw(poolId, ticketId) may be called by anyone, once per ticket, from block B+2 to B+256 (B = the ticket's block), and pays only the recorded player: roll 77 pays floor(90%) of both pots; rolls 20, 40, 60, 80, 100 pay min(20 × ticket fee, floor(pot / 10)) in the ticket's currency; other rolls pay nothing; after B+256 a draw expires with roll 0 and no payout. There are no rounds, owners or admin paths.

Build on test/fixtures/JackpotFixture.sol (real PoolManager, PoolSwapTest router, _hashForRoll with vm.setBlockhash to force rolls). Handler actions: swaps in all four modes (exact-in/exact-out × both directions) with sizes on both sides of the ticket thresholds, from three players via hookData and via tx.origin; fillTank; draw of a random ticket at a random age in {B+1 (must revert TooEarly; catch it with try/catch inside the handler), B+2, B+256, B+257} with forced rolls {77, a multiple of 20, a loser}; vm.roll forward; and the same actions on a second pool that uses this hook with a different mock ERC-20 as currency1. The handler keeps ghost ledgers per pool and currency.

Invariants: (1) for each pool and currency, pot == fees kept + tank fills − payouts in the ghost ledger; (2) for each currency, the sum of every pool's pot == PoolManager.balanceOf(hook, currency id), and the hook holds no native ETH and no ERC-20 balance of its own; (3) actions on one pool never change the other pool's pots or ticket counter; (4) every ticket is drawn at most once and its payout reaches only its recorded player; (5) no draw pays more than floor(90%) of the pre-draw pot in either currency, and a small prize never more than min(20 × fee, floor(pot / 10)); (6) a draw after B+256 always emits roll 0 and pays nothing; (7) nextTicketId only grows, by exactly one per qualifying swap. foundry.toml has no invariant section, so set runs 128 and depth 64 with forge's inline /// forge-config: default.invariant... comments, and never let a revert escape a handler action (bound inputs, skip impossible draws, catch expected reverts). If an invariant fails on the unmodified hook, keep it, write the shrunk call sequence in a comment and do not weaken it: that failure is the finding.