# Chipworks source — canonical mirror

Served from our own domain so the code under review does not depend on a third party staying
up. **This is a mirror, not the working repository.**

- **Repository:** https://github.com/GeObts/chipworks-contracts
- **Mirrored from tag:** `launch-candidate-14` (`a0d5ea779ad567977190ca09e3ee63e98ccd4f7f`) — docs refreshed at e8c149c (audit-status pass, no src change)
- **Superseded mirrors:** review-1, launch-candidate-4, launch-candidate-9, launch-candidate-10, -11, -12, -13 — this file always names the current one

## What is here

| File | What it is |
|---|---|
| [REVIEW_PACKAGE.md](REVIEW_PACKAGE.md) | **Start here.** The reviewer entry point: build and test commands, contract inventory, invariants, open items, launch caps |
| [AUDIT_BRIEF.md](AUDIT_BRIEF.md) | The deep brief. Contract-by-contract attack guide and design decisions |
| [SITE_LOAN_API.md](SITE_LOAN_API.md) | The loan deadline UX: exact call signatures for the site |
| `flattened/*.flat.sol` | One self-contained file per deployable contract, for automated tooling. Generated with `forge flatten`; verified to compile standalone and produce byte-for-byte identical runtime sizes to the in-repo build |

## What is NOT mirrored here

`REVIEW_PACKAGE.md` and `AUDIT_BRIEF.md` link to several documents that live only in the
repository. Those links will not resolve from this directory — follow them on GitHub:

- [TRIAGE.md](https://github.com/GeObts/chipworks-contracts/blob/launch-candidate-14/TRIAGE.md) — the findings protocol, and the completed static-analysis triage
- [OPEN_ITEMS.md](https://github.com/GeObts/chipworks-contracts/blob/launch-candidate-14/OPEN_ITEMS.md) — everything unresolved or accepted, with reasoning
- [ASSUMPTIONS.md](https://github.com/GeObts/chipworks-contracts/blob/launch-candidate-14/ASSUMPTIONS.md) — every guess about a contract we do not control
- [B20_DOCS.md](https://github.com/GeObts/chipworks-contracts/blob/launch-candidate-14/B20_DOCS.md) — Base's tokenized-stock documentation, verbatim
- [LAUNCH_CONFIG.md](https://github.com/GeObts/chipworks-contracts/blob/launch-candidate-14/LAUNCH_CONFIG.md) — the launch runbook and locked parameters
- The tests. **There is no substitute for running them**; the flattened sources here cannot be tested.

## Verifying this mirror

```bash
git clone https://github.com/GeObts/chipworks-contracts && cd chipworks-contracts
git checkout launch-candidate-9
diff REVIEW_PACKAGE.md <path-to>/public/source/REVIEW_PACKAGE.md
diff AUDIT_BRIEF.md    <path-to>/public/source/AUDIT_BRIEF.md
diff SITE_LOAN_API.md  <path-to>/public/source/SITE_LOAN_API.md
diff -r review/flattened <path-to>/public/source/flattened
```

**Not audited. Not deployed.** Launch caps are in effect until independent review completes.
