security_review/audit/topics/genesis_allocation_boundary.md

# SpaceCash Security Review Topic: genesis_allocation_boundary

- Severity if failed: `high`
- Status: `not_reviewed`
- Reviewer:
- Reviewed at:

## Required Questions

- [ ] Can historical devnet balances, legacy claim tokens, or candidate private keys leak into a mainnet allocation?
- [ ] Does the genesis plan clearly require a fresh reviewed allocation file before launch?
- [ ] Can allocation totals exceed or differ from the approved supply cap?

## Expected Controls

- genesis_plan_hash
- fresh reviewed genesis boundary
- candidate key exclusion
- allocation total review

## Evidence Collected

- Source files reviewed:
- Commands/tests run:
- Artifacts reviewed:

## Findings

- None recorded yet.

## Closure Notes

- Decision: `not_reviewed`
- Notes: