06 · Limits, honestly
- A simulation is a snapshot. It shows the effect at this block, with the sender you gave. Approvals and permits are dangerous later. That is why spenders are profiled, not only the transaction.
- Contracts can lie to simulators. Code can branch on
tx.origin, gas, block parity or on whether a swap really settled. Measured taxes and successful sells are evidence, not proof. - Selectors can be renamed. The capability scan finds
mintwhen the function is called mint. The buy and sell replay exists because names are cheap. - Public RPC has limits. Event scans run in chunks and say partial when a range is refused. Simulation on one endpoint may fail with an internal error; Grub fails over to the next one.
- Blocklists are community lists. They lag behind new kits. Absence from them proves nothing.
- Liquidity on other venues is invisible to the token check: only PancakeSwap V2 and V3 pools against BNB are read.
- Name resolution (.bnb) is not wired in this release: paste the 0x address.
- Unaudited. The tools and the $GRUB contracts have not been audited. Grub gives you a reading. You keep the decision.