Across Permit2: actual operator authorization and recipient binding

https://etherscan.io/tx/0xe2ce0c202b3b396660c8ddacd5843ef161ee7f822c1e0038dfde824ad3d09c2e
Ethereum block 26,302,876; executed October 30, 2026, 03:27:35 UTC.

Independent raw decoding, nested EIP-712 hashing and stateless ecrecover return:
0x3f7019221a925537dc20767c38e80a7127fb1ffa
The outer transaction sender d01644b971cbf9f4577894b4f3207b79f301b67a is a
broadcaster, not the recovered Permit2 authorizer. Permit2's nonce is separate
from the source EOA's transaction nonce.

The signed witness commits to 1,526.93 USDT input, 1,526.93 USDC requested
output, Base chain ID 8453, and destination recipient:
0x133243d447026345c2b368d7ffe435dbe3c566eb
It also commits to the recorded fees, spoke pool, depositor, nonce, message,
quote/fill fields and other deposit parameters.

The computed Permit2 domain matches on-chain DOMAIN_SEPARATOR(). Verified
Across Periphery deployed bytecode matches the fixed-block runtime exactly.
Changing one bit of the recipient or destination chain changes the digest
so the original signature no longer recovers 3f701. Both tests are preserved.

Signed digest:
0x84f97ad9526b4b0c90e74240e64d4ba586b4d8b1159ae52e2960f5dd3d193832

This is an actual recovered operator signature. It does not match Car 1f64,
lol 2e6a, E044 or new 7df8. Different keys do not exclude one human holding
several keys; they supply no same-key attribution here.

This proves 3f701 authorized the route. It does not prove control of 1332,
a human identity, a destination fill or the signature's creation time.
Quote/deadline fields are not independent signature clocks. No transaction
or private-key derivation was performed.

Proof: across-permit2-witness-signature-recovered.json
Reproduction: recover_across_permit2_witness.py
Sources: across-verified-SpokePoolPeriphery.sol,
across-verified-PeripherySigningLib.sol,
permit2-official-PermitHash.sol and permit2-official-EIP712.sol.
