# SDK async audit — 13 October 2026

Static inventory. Test file presence is not a passing test or coverage measurement.

| Repository | Source files | Manifests | Async functions | Review candidates |
|---|---:|---:|---:|---:|
| yeti3-engine | 2311 | 168 | 66 | 1031 |
| licenserust-v4-backend | 1180 | 4 | 772 | 1597 |
| onec-rust | 63 | 3 | 108 | 9 |

## P0 runtime candidates

Deployment scripts are excluded from this shortlist. Existing thread/worker boundaries must be checked before migration.

### yeti3-engine

- `packages/yeti3-network-observer/integrations/gochain_service.py`: 4 calls for review (urllib.request.urlopen).
- `catalog/modules/gpu-pool/client.py`: 2 calls for review (time.sleep).
- `packages/yeti3-gpu-pool/src/yeti3_gpu_pool/client.py`: 2 calls for review (time.sleep).

### licenserust-v4-backend

- `network/scripts/site-chain-collector.py`: 9 calls for review (subprocess.check_output, subprocess.run).
- `network/network_observer/gochain_service.py`: 6 calls for review (urllib.request.urlopen).
- `network/international_identity/service.py`: 4 calls for review (urllib.request.urlopen).
- `network/network_agent/codex_worker.py`: 4 calls for review (subprocess.Popen, subprocess.run, time.sleep).
- `network/network_agent/gpu_model.py`: 4 calls for review (subprocess.Popen, time.sleep, urllib.request.urlopen).

### onec-rust

- `packages/yeti3-bus-sdk/src/yeti3_bus/__init__.py`: 1 calls for review (time.sleep).

## Evidence and gaps

- BUS 0.3.0: 26 passing Rust tests, 13 passing Python client tests, 5 passing audit tests.
- Engine and GoChain were inventoried; their complete test suites and production modules have not all been migrated or verified in this release.
- Constructor operation contract is documented; UI integration needs its own tested release.
- Maximum deployment policy is three replicas; this release starts one.
- Full machine-readable findings remain in the local audit artifact, without production credentials.