Link real-value pilot blockers

Author: FlowMemory HQ Agent

docs/FLOWCHAIN_REAL_VALUE_PILOT.md

@@ -126,8 +126,11 @@ in committed files, or if any document presents the pilot as public readiness.
 - Dedicated real-value wallet/operator gate does not exist.
 - Dedicated real-value control-plane/dashboard gate does not exist.
 - Dedicated real-value ops/installer gate does not exist.
-- Issue #130 must define and be accepted as the release-gate boundary before
+- GitHub issue #130 must define and be accepted as the release-gate boundary before
   any owner pilot work is treated as more than capped validation.
+- GitHub issue #131 must resolve the Slither/static-analysis policy or contract
+  findings before local `flowchain:product-e2e` and `flowchain:l1-e2e`
+  evidence is coherent in Slither-equipped environments.
 
 ## Required PR Evidence
 

docs/agent-runs/real-value-pilot-hq/CHECKLIST.md

@@ -65,6 +65,8 @@ Next action: contracts owner should either address the Slither findings or
 update the accepted static-analysis policy in a contracts-scoped PR. This HQ
 branch does not edit `contracts/`.
 
+GitHub blocker: https://github.com/FlowmemoryAI/FlowMemory/issues/131
+
 Draft PR: https://github.com/FlowmemoryAI/FlowMemory/pull/132
 
 ## Completion Audit

docs/agent-runs/real-value-pilot-hq/COMPLETION_AUDIT.md

@@ -39,9 +39,10 @@ are true on `main`:
 | Keep public-readiness claims out of docs. | `node infra/scripts/check-unsafe-claims.mjs` passed. | Complete for touched docs. |
 | `git diff --check` passes. | Ran after edits and after follow-up updates; only Windows line-ending warnings appeared. | Complete. |
 | New pilot gate in incomplete mode. | `npm run flowchain:real-value-pilot:e2e -- -AllowIncomplete` passed and wrote `devnet/local/real-value-pilot/flowchain-real-value-pilot-e2e-report.json`. | Complete. |
-| Existing `npm run flowchain:product-e2e` remains passing, or failure is documented with owner and next action. | Ran twice. First failed due missing dependencies. After `npm ci`, `npm ci --prefix apps/dashboard`, and `npm ci --prefix crypto`, it failed in `contracts:hardening` because local Slither reported `BaseBridgeLockbox.releaseNative` findings. Owner and next action recorded in `CHECKLIST.md` and PR #132. | Failure documented; not passing locally. |
+| Existing `npm run flowchain:product-e2e` remains passing, or failure is documented with owner and next action. | Ran twice. First failed due missing dependencies. After `npm ci`, `npm ci --prefix apps/dashboard`, and `npm ci --prefix crypto`, it failed in `contracts:hardening` because local Slither reported `BaseBridgeLockbox.releaseNative` findings. Owner and next action recorded in `CHECKLIST.md`, PR #132, and issue #131. | Failure documented; not passing locally. |
 | Open a PR with exact commands run and current blockers. | Draft PR #132 opened: https://github.com/FlowmemoryAI/FlowMemory/pull/132. | Complete. |
 | PR CI state. | `gh pr view 132` showed all CI checks successful and merge state `CLEAN` after push. | Complete for current PR. |
+| GitHub blocker state. | `gh issue view 130`, `gh issue view 131`, and `infra/scripts/status-report.ps1` show issues #130 and #131 open. | Not complete; blockers remain open. |
 | Final success: `flowchain:real-value-pilot:e2e` passes on `main`. | `origin/main` lacks the script; branch gate fails by design because dedicated subsystem proof commands are missing. | Not complete. |
 | Final success: `flowchain:l1-e2e` passes on `main`. | `origin/main` lacks the script; branch alias currently fails locally through `flowchain-full-smoke` because `contracts:hardening` fails under local Slither. | Not complete. |
 
@@ -76,6 +77,14 @@ Result: failed locally inside `npm run contracts:hardening`; Slither reported
 `missing-zero-check` and `low-level-calls` findings for
 `contracts/bridge/BaseBridgeLockbox.sol`.
 
+```powershell
+gh issue view 131 --repo FlowmemoryAI/FlowMemory --json number,title,state,url
+```
+
+Result: issue #131 is open and tracks the required contracts/static-analysis
+decision before local product/L1 E2E evidence is treated as coherent in this
+Slither-equipped environment.
+
 ## In-Flight Worktree Evidence
 
 The following evidence was inspected after PR #132 opened. It is not source of
@@ -93,6 +102,10 @@ truth until the work lands in reviewed PRs and merges to `main`.
 ## Uncovered Or Incomplete Requirements
 
 - The new gates are not on `main`; PR #132 is still draft and unmerged.
+- GitHub issue #130 is still open, so the accepted release-gate boundary is not
+  complete.
+- GitHub issue #131 is still open, so local product/L1 E2E evidence remains
+  blocked in Slither-equipped environments.
 - `flowchain:real-value-pilot:e2e` does not pass without `-AllowIncomplete`.
 - Dedicated subsystem proof commands do not exist yet:
   `flowchain:real-value-pilot:contracts`,
@@ -108,9 +121,11 @@ truth until the work lands in reviewed PRs and merges to `main`.
 ## Next Concrete Actions
 
 1. Keep PR #132 open as the HQ gate/documentation branch until reviewed.
-2. Have contracts/static-analysis owner resolve or explicitly accept the local
-   Slither findings before relying on local `flowchain:l1-e2e` evidence.
-3. Merge or rebase the richer ops `flowchain:l1-e2e` wrapper when ready.
-4. Have each subsystem agent add its dedicated pilot proof command.
-5. Rerun `npm run flowchain:real-value-pilot:e2e` without
+2. Close issue #130 by accepting the capped owner-pilot release boundary.
+3. Close issue #131 by having the contracts/static-analysis owner resolve or
+   explicitly accept the local Slither findings before relying on local
+   `flowchain:l1-e2e` evidence.
+4. Merge or rebase the richer ops `flowchain:l1-e2e` wrapper when ready.
+5. Have each subsystem agent add its dedicated pilot proof command.
+6. Rerun `npm run flowchain:real-value-pilot:e2e` without
    `-AllowIncomplete` only after all dedicated proof commands exist.

docs/agent-runs/real-value-pilot-hq/EXPERIMENTS.md

@@ -31,6 +31,10 @@ Last updated: 2026-05-14.
 | `npm run flowchain:l1-e2e` | Failed locally | Alias invoked full smoke and stopped in `contracts:hardening` because local Slither reported the same `BaseBridgeLockbox.releaseNative` findings. |
 | Live pilot worktree inspection | Passed | Inspected `flowmemory-live-contracts`, `flowmemory-live-bridge`, `flowmemory-live-chain`, `flowmemory-live-wallet`, `flowmemory-live-control-dashboard`, and `flowmemory-live-ops` statuses, package scripts, and run notes. |
 | Requested original worktree inspection refresh | Passed | Rechecked `flowmemory-chain`, `flowmemory-bridge-full`, `flowmemory-contracts`, `flowmemory-crypto`, `flowmemory-indexer`, `flowmemory-dashboard`, `flowmemory-review`, and `flowmemory-hq-review-loop` statuses and relevant package scripts. |
+| `gh issue view 130 --repo FlowmemoryAI/FlowMemory --json ...` | Passed | Confirmed release-gate issue #130 remains open and is the accepted-boundary blocker. |
+| `gh issue view 131 --repo FlowmemoryAI/FlowMemory --json ...` | Passed | Confirmed Slither/static-analysis issue #131 remains open and blocks coherent local product/L1 E2E evidence. |
+| `powershell -NoProfile -ExecutionPolicy Bypass -File infra/scripts/status-report.ps1` | Passed | Confirmed PR #132 is the only open real-value pilot implementation PR, many sibling worktrees are dirty, and issues #130/#131 are open. |
+| Post blocker-link docs checks | Passed | `node infra/scripts/check-unsafe-claims.mjs`, `git diff --check`, and `npm run flowchain:real-value-pilot:e2e -- -AllowIncomplete` passed after linking issues #130/#131. |
 
 ## Product E2E Failure Assignment
 
@@ -40,6 +44,8 @@ Next action: contracts owner should address the Slither findings or update the
 accepted static-analysis policy in a contracts-scoped PR. This HQ branch is not
 allowed to edit `contracts/`.
 
+GitHub blocker: https://github.com/FlowmemoryAI/FlowMemory/issues/131
+
 Observed Slither findings:
 
 - `missing-zero-check` for `BaseBridgeLockbox.releaseNative(...).recipient`.

docs/agent-runs/real-value-pilot-hq/NOTES.md

@@ -13,6 +13,8 @@ Last updated: 2026-05-14.
   useful context, not merged source of truth.
 - Issue #130 is the active gate issue for defining release boundaries before
   public-network pilot work.
+- Issue #131 is the active contracts/static-analysis issue for reconciling
+  local Slither findings that block product and L1 E2E evidence.
 
 ## Reusable Work
 
@@ -67,6 +69,8 @@ Last updated: 2026-05-14.
   existing findings in `contracts/bridge/BaseBridgeLockbox.sol`.
 - The product E2E failure is not caused by the HQ docs/script changes in this
   branch; the next action belongs to the contracts/static-analysis owner.
+- GitHub issue #131 tracks the required Slither/static-analysis decision or
+  contract fix before local product/L1 E2E evidence should be treated as green.
 - Draft PR opened: https://github.com/FlowmemoryAI/FlowMemory/pull/132.
 - Completion audit result: not complete. PR #132 is not merged, `origin/main`
   lacks both new scripts, the default pilot gate fails with missing subsystem