[Audit M-07] Refund/slash allocation changes apply retroactively to existing E3s

[hmzakhalid]

Finding

Severity: Medium

Confirmed against baseline commit d4277510d. Settlement allocation parameters were read from mutable global policy when an E3 settled, so owner changes altered the economics of already-open requests.

Full audit report

Required remediation

Snapshot settlement and allocation policy per E3 at request time and use it for that E3 only.

The dedicated fixing commit and remediation PR will be linked in a follow-up comment.

[hmzakhalid]

Fixed by commit 67ebb4697ea95a781cf5ac79a8f56f5a1b84b998 in PR #1727.

[hmzakhalid]

Supersedes the earlier remediation reference after the cleanup of PR #1727. Fixed by commit 4f0710d (M-07): refund and slash allocation policy is snapshotted per E3.

[hmzakhalid]

Confirmed fixed in final commit 1f5f57a. Failure allocation and treasury policy are snapshotted per E3, preventing later governance changes from applying retroactively.

[hmzakhalid]

Final remediation in PR #1727: 1f5f57a snapshots settlement allocation and treasury policy per E3.