Audit Scope

What the review covers before anything is deployed, and what it does not.

In scope

Vault accounting and the fee-share maths. Router cadence and the market-cap milestones, including the guarantee that each fires once and in order. The TWAP bounds and the behaviour when spot leaves the band. Keeper permissions — specifically that the trigger is the only privileged action. The withdrawal path, under every state a stake can be in.

Out of scope

The market risk of the pools themselves. No audit can make a thin pool deep or stop a token from falling, and divergence is not a bug for a reviewer to find.

Status

Not complete. Until it is, every address on the contracts page reads as zero and there is nothing on chain to deposit into.

The honest version

Unaudited code holding money is capital you should be prepared to lose. That will stay written here until the review lands, and it applies to Ordo exactly as much as to anything else.