Python tests pass from the root (34 OK), protected paths are untouched, and nothing is blocked. The work is complete.

Outcome. Audit 031c93c4 finding 1 is fixed in src/SwarmDesk.sol using path 1, the on-chain launch record. The live LaunchFactory exposes positionOf(uint64), the position that claimFees collects from and setRequester edits. It returns eight static words (PoolKey, tick range, requester), names the exact token and hook of recorded launches 1316, 1300 and 1015, and reads zeros for unrecorded numbers. bind now takes an eighth argument, the L2 launch number, and reverts unless that record names the registry's token as currency1 of an ETH-paired pool and the registry's market as the hook. Path 2 (hook self-reports plus an extsload price) was not used because the record exists.

Verification.

Tests added in test/AuditV315.t.sol: a market echoing desk, token and hash reverts under the genuine launch number, an unrecorded number, and zero; an attacker's own record and a record naming another hook or pair currency are refused; a genuine V4Market recorded by the fixture binds once. The rehearsal also checks the real record and refuses launch 1316's record for the honest registry.

Docs. docs/accepted-v315.md is new and copied into all four runbook objectives. The runbook's deploy-gate sentence now names the JSON plan, and the L1 and L3 objectives, wiring step 3, the M-2 trust note, the keeper README and report.md describe the new signature, the path used and the residual risk.

Three things to flag.

• Beyond src/SwarmDesk.sol, docs and tests, I had to touch script/Deploy.s.sol (the test fixture that calls bind, plus a local LaunchFactory stand-in) and keeper/keeper.mjs (the bind-desk step now passes wiring.tokenLaunch), since both would otherwise send a seven-argument bind to a Desk that no longer accepts it.
• Only the numbers of info 5 and info 6 were given to this job, so their two lines in the accepted list are placeholders. Replace them with the audit's text before pasting the objectives.
• Residual risk: the positionOf ABI is recovered from bytecode and live reads, not verified source. A factory upgrade that changed its layout would make the Desk unbindable, so the runbook has the keeper read the record with cast before binding. The matching-twin griefing in the M-2 note remains accepted.