[0xNeshi]

Proposal

• Refunds: A no-mint refund needs a closed nonce, and a close never overwrites a mint.
• E: The epoch size lives on the nonce registry, which refuses nonces from other epochs.
• Lock record: The nonce registry records each lock's amount and recipient. A re-offer checks both and runs at most once, and a refund checks the amount.
• Trust in br: Section 4.2 says br alone can close a live lock or hold a returned credit.
• Disclosure: br discloses the nonce registry versions and claims it witnesses. ba's backend serves everything else, including the pause state to pa.
• Consistency:
  • ba "submits nothing" now applies only to the payment path.
  • New failure rows for a downed backend and a downed wTOK admin participant.
  • Renames: "no-mint statement", "redemption claim", "request id".
  • Answer to Curtis's partial-release question, and a definition of the split field s.
  • Reward split updated to 65.1/20.6/14.3%.

Prototype

• Registry and gateways: E is on NonceRegistry with its own epoch check, and a LockRecord is carried in the minted and returned states. Re-offer, refund and hold enforce it, and the gateways no longer carry E.
• Tests and README.md: New and updated tests cover these checks, and README.md matches.
• Latest OZ CIP112 Deps: Use the latest OpenZeppelin/canton-contracts CIP112 packages that include one-step mints

[pepebndc]

LGTM