What started here
F7 was cycle one. April 2026. The same tool-using agent pipeline that — at Year-1 exit on this funded-state plan — runs continuously across 27 protocols was, then, dispatched against a single target: Percolator's mainnet engine. It identified a self-dealing insurance-siphon class — the use_insurance_buffer helper shrinks the insurance counter without debiting the vault, letting the haircut residual grow by exactly the absorbed amount. In a self-trade scenario with bilateral attacker-controlled legs, the K/F-winning side IS the attacker — the grown residual is claimed through the attacker's own winning leg.
What landed
The maintainer closed PR #39 without merging the proposed vault-debit fix. The chosen defense path uses the engine's existing protections — bounded dt, bounded price movement, exact solvency-envelope validation, and the A1 regression suite. On April 28, the disclosure was formally mapped to existing test coverage: tests/test_a1_siphon_regression.rs was relabeled "A1 / PR39-F7 self-dealing insurance-siphon regression tests" and committed to main as a1afd2e. Maintainer verification: 4/4 wrapper paths pass with insurance_drop = 0; Kani harness proof_junior_profit_backing satisfies 2/2 cover properties.
What this becomes (funded Year 1)
F7 was the inaugural cycle. At Year-1 exit on the funded plan, the same loop runs across 27 protocols continuously — 184 disclosures cumulative, 8,420 attestations on mainnet — and the closed-loop fix-bundle pillar that grew out of F7's contested-disclosure friction ships every PR with a Kani-proven fix that demonstrates it preserves every other invariant before the maintainer ever sees it. (Today: 1 protocol monitored, 125-hyp library, 3 autonomous PoCs — see top of page.)
The permanent record
F7 stays on the disclosure ledger as a featured row. Cycle one. Same loop. Different scale.