fittings-treasury-reporting-rate

SUSPICIOUS. The purpose mostly matches the capability, but the trust model is weak: a remote script is fetched from fittings.sh, executed locally, and given a wallet private key to authorize payments, while all data flows through the third-party gateway instead of directly to Treasury. This is disproportionate for a simple exchange-rate lookup and triggers the mandatory unverifiable-dependency plus credential-forwarding risk floor.