[XiaoHai67890]

Summary

• Submit executable evidence for the proposed official authorization revision, ethereum/ERCs#2147, without replacing the accepted official mirror or either historical baseline.
• Pin candidate 397426c046049e1a0c3436e543f9731408708fd3 and historical control b9651bc84714e87e6361f4f6c0c8ff39cc265d0a with source SHA-256 digests.
• Fetch and compile the exact candidate with explicit import remapping. Require 36 authorization tests plus two 46-case signature adapters; require precisely the two known AQ-03 failures against old official source.
• Add nine failure-mode unit tests and a read-only CI job that publishes inputs, command records and test logs.
• Refresh Review preparation, decision-table and account-vector handoffs with merged PRs fix(replay): restore upstream pin and publish P0 recovery evidence #33/test(accounts): real 7702 and Safe conformance plus Review handoff #35/test: archive and gate scoped independent Python reproduction #36/test: consume 46 external EOA signature vectors across implementations #37 and actual remaining acceptance boundaries.

Validation

• Gate unit tests: 9 PASS, zero skips.
• Candidate source: 38 PASS, zero skips; each padding fuzz test executes 256 runs.
• Historical control: the two named dirty-padding regressions fail as expected; empty/failed-compilation/skipped output does not count as evidence.
• Baseline guard: 10 pinned artifacts PASS.
• Clean working-tree 9e8dd09c776ef1d27e8b71ea8283d0dd6610ac14: full workspace and all three Golden Vector suites PASS (155 TS tests, 120 Solidity tests, zero Solidity skips).
• Candidate gate also rerun from the clean commit; recorded dirtyCheckout: false. Remote candidate CI PASS; real-account CI PASS.
• All 8 PR checks PASS on the latest head. Workspace/Golden Vector CI and CodeQL PASS. PR CI records GitHub's test merge commit 8b49d4948e4fce3f82cd7509bd01ff98213fedbc, separately from the local branch-head run.

Boundaries

This is maintainer conformance evidence, not a new independent implementation or security attestation. It does not alter runtime code, wire format, deployed contracts, official Draft status, or audit scope. Independent wallet coverage in issue #21 and external current-scope acceptance in issues #11/#22 remain open. A new official baseline waits for the actual upstream merge; a status-only Draft-to-Review request remains separate.

[XiaoHai67890]

Verification and handoff record (2026-11-06)

Branch head: 9e8dd09c776ef1d27e8b71ea8283d0dd6610ac14.
Local source tree clean before and after testing. Node 22.23.2, pnpm 11.7.0, Foundry 1.7.1.

• CONFORMANCE_CLEAN_CHECKOUT=1 pnpm conformance:gate: PASS. Full workspace (155 TS and 120 Solidity tests, zero Solidity skips) plus core TS/minimal TS/Solidity Golden Vector suites pass. v1 SHA-256: 5e04cb9c1181222f483d3ad547e0a9aa301dfab74c7028f3cfa2e5dcd574fc20.
• Candidate gate: 9 runner-unit tests PASS; 38 exact-candidate tests PASS; precisely 2 expected old-source AQ-03 failures. Candidate source 397426c046049e1a0c3436e543f9731408708fd3; report.inputs retains source pins separately from test results.
• Candidate CI/artifacts, real Safe/7702 CI/artifacts, workspace/conformance CI, CodeQL: PASS.
• PR CI uses test merge 8b49d4948e4fce3f82cd7509bd01ff98213fedbc; downloaded candidate/account reports both record dirtyCheckout: false. All 8 current PR checks pass. This PR is still open, not merged by this record.
• pnpm security:rc: FAIL as intended while canonical audits/g4/external/external-review.json is absent. Frozen-scope/handoff checks pass; four post-freeze paths differ. No security-ready claim.

Actual external follow-ups:

• Independent-client/account scope handoff.
• Reviewer-controlled audit supplement request.

Official technical PR: ethereum/ERCs#2147. The old official mirror and baselines are preserved; new baseline creation awaits observed upstream merge. Magicians discussion prose remains a prepared draft, not a claimed publication.