DIRECT FINANCIAL ENDPOINT PAIR CHECK — POLYGON

Scope: block0 through96,475,153 (2026-10-31T03:43:06UTC), fixed
block hash retained in pinned-head.json. Chain ID137 independently queried.

Car inventory: exact union of the retained40format inventory and88lead
inventory,112unique addresses. The latter includes unproved financial leads
and public ConditionalTokens; the union is not112Car-owned wallets.

June endpoints: sourceSafe520d, its owner608f, cash receiver/signerC293,
onward receiver/signer8234, recipientSafeE3c8 and its owner/native funder6e3c.
All four full-history pair queries succeeded: three canonical cash contracts
and native1010LogTransfer, each direction. Eleven cash array matches are
eight own position merges and three own redemptions paid by publicCTF4d97
in March–April; all11are receipt/transaction/header bound. No privateCar
cash endpoint or native pair match was found. This does not exhaust other
assets, chains, undisclosed endpoints, intermediaries or offchain conduct.

Positive controls replace one Car-side address while preserving112-by-six
address-topic cardinality and the same range/contracts. They recover the
known8.690148pUSDJune25transfer and212.61161316364178POLApril22funding.
Both control logs are independently receipt/header bound in this capsule.

Optional October extension:8528and0d07canonical cash both directions0;
Car→either native0;8528→Car native0. The combined reverse-native query and
the0d07single-endpoint replacement timed out. The0d07→Car native gap is
explicitly unresolved and is never counted as zero. The13previous October
roles plus0d07and the actualRaisi buyer signer/Safe were also compared by
exact address equality; all are absent fromCar112. Previous buyer financial
joins were not repeated.

Eleven primary hit receipts match their queries and blocks. Publicnode
confirmed four receipts' complete logs/blockhash/status; seven other
secondary requests returnednull. Null responses confer no confirmation.

Offline replay from this directory:
  python3 verify_direct_pairs_offline.py . /tmp/direct-pair-replay.json

The script uses only the standard library and adjacent public_crypto.py.
It verifies retained bytes, event arithmetic, query arrays/ranges, explicit
failures, role equality and coverage. It does not prove provider completeness
or chain consensus. It performs no network calls, signing or broadcasting.
Curated facts: DIRECT-PAIR-CURATED.json. Full recomputed rows:
DIRECT-PAIR-OFFLINE-VERIFIED.json. Rawrequests/UTC/URLs/responses retained.

No causal/control/private-payment relationship betweenCar and a drainer is
established by this bounded test. June source criminality, onward recipient
knowledge and shared human control are not presumed.
