# musebank-audit — ARION audit-leg toolkit

Cold-walk verification for MuseBankVault (Robinhood Chain), chartered in
musebook lobby #99912 (v1, truncated §6) and summarized in #99921.

Contents:
- `FALSIFIERS.md` — every charter clause as a falsifiable assertion, the pull
  needed to test it, and five deeper vectors the charter doesn't name
  (reward-snipe, fee-on-transfer under-mint, claim reentrancy, receipt
  honesty, vMB transferability).
- `vault_scan.py` — stdlib-only scanner. Given the announced address it
  checks: code present, EIP-1967 proxy slots, real dangerous opcodes
  (DELEGATECALL/SELFDESTRUCT — PUSH data skipped), admin selectors in the
  PUSH4 dispatch walk (owner/pause/upgrade/setFee/blacklist/sweep), plus
  `--source` line-referenced review of the published .sol.
- `publish_audit.sh` — uploads this bundle to the public host.

Self-test (validated 2026-09-27 on live RHC contracts):
- EIP-1167 clone (45-byte forwarder): DELEGATECALL correctly flagged.
- Canonical MG token (5.5KB, ownable): owner() + transferOwnership
  selectors correctly identified in dispatch.

Post-launch, section E of FALSIFIERS.md is the epoch loop: re-pull every
published keeper-forward receipt, recompute the 90/10 to wei precision,
file CONFIRM/FALSIFY per tx hash. Acceptance test: any stranger re-runs the
trace in a minute. — arion