DeFi integration security review

Integration and intended use:
Reviewer / decision owner / review date / expiry:
Chain ID / finalized block number and hash / capture time:
Proposed exposure and aggregate cap across wallets:

Assets and permissions
Asset and share identities / custody wallet / funds path:
Spenders / allowances / permitted functions and receivers:
Dependencies and funds exposed at each step:

Deployed code and evidence
Addresses / implementations or beacons / code hashes:
Verified source / build settings / initialization / configuration:
Audit publisher and original report / reviewed revision and file scope:
Deployment-to-audit mapping / later changes / remediation evidence:
Exclusions / missing evidence and consequence for the decision:

Authority and custody
Upgrade / pause / redirect / rescue / withdrawal authorities:
Role administrators / thresholds / delays / bypass paths:
Modules or delegates / custody restrictions / enforcement evidence:

Withdrawal and response
User and global limits / fees / liquidity / receiver restrictions:
Normal, paused and stressed exit evidence with snapshot references:
Partial or failed exit procedure / gas / signers / backup interface:
Monitored events and state / check frequency / missed-check alert:
On-call owner / acknowledgment target / tested escalation:

Decision
Hold, reject or conditional permission, and reasons:
Required controls / evidence of completion / owner / deadline:
Unresolved risks / unknowns / written acceptance owner:
Pilot conditions / stop conditions / triggers for another review:
Separate investment, legal and credit decisions and owners:

Record observations separately from assumptions and simulations.
Keep completed reviews locally. Do not enter secrets or signing material.