[cryptskii]

Fixes from the 2026-10-01 three-phone rig run, plus CORE's receiver-check branch, in one PR.

The run (proven on real Android devices)

• A created RIGT and sent B 5,000 RIGT. A and B each opened an ERA/RIGT vault (2,000 RIGT / 40 ERA).
• C, set up with neither vault, swapped 80 ERA with a minimum out of 1,990 RIGT. The search split it 40.11 / 39.89 across the two vaults, and C received 1,996.99 RIGT. One vault alone gives about 1,332 RIGT, so the minimum needed both.
• Both owners saw their vaults at generation 1, each moved by its own leg.
• C paid A 100 RIGT, and A accepted it over C's conditional positions (A8 / P15-9).

Fixed

1. A split's quote showed one leg as the total, and seeded the minimum out with it.
   • sofi.findRoute now reports the route's shape and what it takes and gives as one operation (SofiFindRouteResponse fields 3–7), by Core's endpoint rule: movement_shape, used by route_endpoints.
   • The SoFi screen shows those figures.
2. A quote took 1.5–2.5 min. A request read each vault's genesis four times, each a locator scan plus a walk of the owner's lineage.
   • A request's verifiers now share the geneses they accept (AcceptedGeneses), so each is read from the network once per request.
3. ERA shown in base units. The faucet message and the token wizard's fee and holding now show ERA at its decimals, rendered by Rust (TokenFeeScheduleResponse fields 4–5).
4. A split trade's history row named one vault. It names every vault the route went through.

Tests (release, Postgres node fleet)

• SDK node and handler suites. dsm_sdk node_e2e, sender_admission, token_create, faucet_flow, realized_records and sofi_flow: 54 passed, 0 failed.
  • New: a_request_reads_each_vaults_genesis_once, which counts live reads.
  • Extended: the split and chain quotes' shape and totals, the split's history row, and the fee schedule's display strings.
• Core. dsm sofi::: 236 passed, 0 failed, including movement_shape cases.
• Static checks. make lint exit 0. real_code_guard clean. conformance_evidence: 805 rows.
• Mutation controls, each red, then restored byte for byte:
  • the genesis memo bypassed: (4, 4) reads against (1, 1);
  • the total taken from the last hop: the quote reports (2, 31, 236) against (2, 60, 460);
  • the row naming only the first vault.
• Frontend. tsc clean; the SoFi screen, token-creation dialog and policies tests pass.

Removed tests (frontend)

• Removed: two SoFi screen quote-and-trade tests, and the fee query's success test.
• Why: they stubbed findRoute with a hop list and the fee schedule with a boolean, on lines recorded in the real-code guard's baseline. Adapting them to the new shapes would edit recorded lines.
• What still covers it: the route's shape and totals are tested through the SDK on the node fleet.
• What has no test now: the screen choosing sofi.trade for one hop and sofi.route for several.

Not fixed here

• The trade took 13 m 50 s. Per STORAGE, the fleet runs the 09-27 node build, whose mirror sync is unbounded. The bound is on main; the fleet needs the owner's redeploy.
• Owner vault walks took about 9 min, on the same fleet.
• A stale "contacts refresh stalled" banner on the trader's phone.

Also included: CORE's receiver-check branch

fix/dsm-core-receiver-checks-and-node-clock-row (3 commits, CORE §6.55):

• a token the receiver never adopted is held before any register read (MR-DSM-0029 evidence);
• MR-DSM-0055 → Met;
• A8 peer-walk start and validation log lines.

Records

• CONFORMANCE §6.56.
• Rows MR-SOFI-0349, 0353, 0357 and 0359 updated.
• VERIFICATION_MATRIX rows; INTENT_MANIFEST rows for movement_shape and route_ends.
• INTENT_PINS will be repinned once from this PR's Code map.