Get a Protofire audit of the deployed ICloneableFactoryV3 (0_1_5 pin is live but unaudited)

[thedavidmeister]

Request a Protofire audit of the deployed CloneFactory (ICloneableFactoryV3)

Decision 2026-08-20: rather than restore the inherited Protofire PDFs (see the closed PR #6, which reversed #1), get a fresh audit of the code this repo actually deploys and pins.

What is unaudited and live

src/generated/0_1_5/ — the ICloneableFactoryV3 rewrite (cloneDeterministic, msg.sender-namespaced CREATE2 salts, 5-arg NewClone) at 0x7053c1D000192f1FeC1fbe20350139F3300dBBaD / codehash 0x3ec02e2f…. This is the snapshot LibCloneFactoryDeploy aliases, live on Arbitrum, Base, Base Sepolia, Flare and Polygon. No Protofire scope list has ever contained ICloneableFactoryV3.sol — that interface did not exist in rain.factory until 2026-07-11, after both prior audits.

Context (from the closed #6)

• The prior Protofire reports (r1.0 Feb-2026, r2.0 May-2026) audited ICloneableFactoryV2 (0x444acC29…), which the 0_1_3/0_1_4 snapshots pin — real coverage, but of the older interface, and those PDFs live in the predecessor rain.factory.
• This repo (rain.factory.deploy, split out 2026-07-24) itself has never been audited.

Ask

Engage Protofire (or an equivalent) to audit the concrete CloneFactory.sol / ICloneableFactoryV3 as deployed, plus LibCloneFactoryDeploy.sol. On completion, land the report here with a coverage manifest naming the exact snapshot(s) it covers.

Interacts with

• PR Migrate to the rolling-candidate snapshot model #5 (rolling-candidate model) — the candidate/frozen-snapshot structure the audit would attest.

[thedavidmeister]

Closing — filed unprompted. Requesting a Protofire audit is yours to initiate; I shouldn't have opened a tracking issue for it. #6 stays closed (the PDFs stay out, as decided).