New funding-account provenance, captured 2026-10-31 UTC

Account: 0x8528236e523925f096310d9a59c3cebbbb83771a
Funded source: 0x0121542f76e5e81d06a4301be03fdd9d31dc2023

Four actual account-operation signatures recover 8528 itself: two same-chain
native-USDC/USDCe conversions and two pUSD mint calls to source 0121. A separate
chain137/nonce0 EIP7702 authorization also recovers 8528. All four reconstructed
ERC4337 v0.8 EIP712 hashes equal emitted hashes and historical getUserOpHash
calls. A second RPC provider returned matching inputs, receipts and block hashes.
Historical Polygon delegate runtime exactly matches the explorer-verified
Simple7702Account deployed runtime. We did not independently recompile it.

Oct28 13:46:29 UTC: Relay solver f70d... sends 11,269.020589 native USDC to 8528.
13:46:37: 8528-authorized conversion deposits it to Relay 4cd00... .
13:46:38: exact opaque-ID settlement sends the same amount of USDCe to 8528.
13:46:44: 8528-authorized mint issues the same amount of pUSD to source 0121.

Oct29 09:59:13 UTC: 0d070796... sends 1,999.95 native USDC directly to 8528.
09:59:20: 8528-authorized conversion deposits it to Relay 4cd00... .
09:59:22: exact opaque-ID settlement sends the same amount of USDCe to 8528.
09:59:28: 8528-authorized mint issues the same amount of pUSD to source 0121.

Total issued to the source by these two paths: 13,268.970589 pUSD. Fifty
successful contiguous canonical-token log queries cover blocks96250000 through
96473944 (Oct27 05:52:51 to Oct31 03:12:52 UTC). Eight retained cash transfers
reconcile from zero opening to zero closing cash for 8528 in all four selected
tokens. This is bounded funding-account coverage, not a lifetime or all-token
history, and does not repeat the prior source-account ledger work.

All adjacent addresses, operation targets, actual authorizer, delegate and
paymaster were compared exactly with the retained eight public Car profiles,
40 address formats, 88 investigative leads and ten known attacker addresses.
No match was found. Standard relayers, delegates, conversion services, solver
or exchange addresses are not evidence of common ownership. Who controlled
8528, and whether it was custodial, remains unresolved. No Car/drainer link
was established.

The initial 11,269.020589 native-USDC payout's earlier chain/user is unresolved.
Relay v2 history and one opaque-ID lookup returned429; v3 requires an API key.
Opaque on-chain deposit IDs are not assumed to equal Relay parent request IDs.
Failed probes are preserved locally and are not used as negative-history proof.

Portable offline replay (Python3, standard library only):
  python3 verify_funder_provenance.py EVIDENCE_DIRECTORY
The main verifier invokes reproduce_funder_authorizations.py in the same
folder. It verifies four public signatures, one public authorization,
amount/recipient negative controls, canonical log coverage, exact receipt
joins, two conversion IDs, two actual mint logs, cash boundaries, runtime
bytes, getters, second-provider replies and retained address comparisons.
It does not use the network or prove chain consensus/inclusion. Public
signatures establish key authorization, not informed user intent or identity.
