This is a requirements/next-action audit, not new attribution. The newly observed E4→3dce payment has been cryptographically verified; the exact recipient independently matches a pre-existing Polymarket Asset Recovery Address declaration on Polygon. This does not establish Ethereum control, purpose, negotiation or a Car link; both addresses have no exact26/117 match. Two transactions use nonces0 and1, not three transactions. Full message text remains local and is untrusted evidence. The independent replay reconstructs four typed hashes/signatures, binds headers/receipts, verifies the registry ABI/event/current pointer and current owner getters, and checks ordinary indexes plus a zero-inclusive trace window. Original-registry wide update history and genesis trace attempts failed and remain explicit gaps. Index completeness and historical chain scopes are limited. Prior July,74e9 and Base payer/sweep tests are completed scopes and are not proposed as new progress. If the new public path yields no actual private/control/source edge, authenticated incident client sessions, exact malicious deployment/control, or primary coordination/payment records remain necessary. Goal causation is unproved. This does not assert all public sources are exhausted, set the parent goal status, authorize private access or edit the site.
