Audit permissioned and compliance-gated tokens — whitelists, blacklists, sanctions lists, KYC gating and transfer hooks. Checks which parties a restriction actually covers, whether sentinel addresses in the list disable core operations, whether restriction blocks exit paths and permanently seizes assets, whether two lists can diverge, whether the protocol itself can be restricted by an integrated token, and which round-trip paths bypass the gate entirely. Use when auditing RWA or securities tokens, wrapped or bridged permissioned assets, allowlisted vaults, invite-gated systems, or any contract with a _beforeTokenTransfer hook.
