Fix the four actionable findings in audit ef1f6915-b9df-441d-b2e5-db5e9d9e9b35 against commit cb6ca724441c9aebf9a38cb4d7426218e0712723.

Eliminate the expireReview front-running path that discards a late, valid NotPassed one-shot callback; test both transaction orders and retries. Provide an honest recovery path when a retained receipt’s UUID was consumed or reserved by another ask. Prevent an old terminal reservation from burning a retry’s sole callback. Tighten discardReviewReceipt so a same-UUID field typo or invalid/used “true context” cannot silently erase a genuine verdict.

Run the report’s proofs as regression tests, preserve cross-request binding and replay protection, recheck the 200k-gas callback with a realistic ERC-1271 signer, and rerun the existing listing/ad escrow tests. Do not claim the owner-supplied mapping is independently authenticated onchain; document any remaining owner-trust or live-Intake blocker plainly. Code only—no deployment or paid Intake request.