Fix audit 2218802d-0828-4f00-81cf-487b51c12aac. Code only; no deployment, payments, backend or new trust root.

AutoHookJobRequester.sol:

1. commitArtifact requires Delivered and !cancelled. On delivery/commit run _refreshReserveWindow(p): p.windowStartBlock=head(); p.reserveDeadline=max(existing,uint64(block.timestamp)+1 days). Add renewVerdict(bytes32 jobId): requester-only; require Delivered, review=None, !cancelled, reserve>0, current ask.intakeId==0, now>reserveDeadline. Refresh only: no transfer/new ask. Preserve eight-block maturity; no cancelled/NotPassed revival.

2. Remove MAX_ANSWER_AGE. Require askedAt<=issuedAt<=uint256(ask.deadline)+300; issuedAt<=now+300; issuedAt<=expiresAt<=uint256(issuedAt)+86400; now<=expiresAt. Keep exact question/window, native-block freshness, domain/panel/replay checks. Accept valid delayed true AND false answers.

3. At trigger set: a.verification=(uint256(uint160(oracleSigner))<<96)|(uint256(oracleSignerEpoch)<<64);

At callback extract recorded signer/epoch; reject revoked epochs; use ECDSA-first/ERC1271 verification against recorded signer in requester context. Preserve upper bits; OR in uint64(min(issuedAt,now)). Receipt epoch returns 0 before oracleUUID exists, then recorded epoch. Keep finalized revocation and guarded recovery.

4. Fit runtime by composing existing validateOpen/validateBrief/spec hash/jobBody and question/prefix/pin/oracleBody in immutable HookRequestCodec; use msg.sender as consumer. Refresh codec codehash pin, ABIs/fingerprints. SDK/UI: Delivered-before-commit, unsigned renew, reserveDeadline view.

RED/GREEN all four issues; test +1/+300/+301s, 3601s delay, expiry, renewal/refunds, EOA/ERC1271 rotation/revocation. Full Solidity/SDK/UI, vectors, isolated cold gas on both clocks. Keep solc/dependencies, 24576-byte/200000-gas caps, fees, artifact binding. No live-proof claims; document per-chain maxWindowAgeBlocks.