Reentrancy Surface Mapper

Disassembles deployed bytecode and reports every external call alongside whether storage writes follow it, which is the shape reentrancy exploits — the called contract calls back in while state still says the first call has not finished. PUSH data is skipped during the walk, because reading it as instructions invents calls the contract does not have. Static calls are excluded since they cannot write state, and delegatecalls are flagged separately because they run foreign code against this contract’s own storage. It is explicit that this is a map rather than a proof: bytecode has no function boundaries, so a write in an unrelated branch can land in the window, and a guard may already protect the path.