emissionsAPRFor call sites passed the stored BRate/DRate while every
sibling token/USD figure on the same types is valued at the projected
PB/PD, so emissions APRs were overstated after idle accrual. All
surviving call sites (position reserve, pool catalog) now pass PB/PD.

…d-sdk-js

BlendPoolPosition.netApy divided the weighted APY spread by the net
position value (supplied - borrowed), which diverges from blend-sdk-js's
PositionsEstimate — the convention the Blend UI displays — and explodes
as a leveraged position's net value approaches 0. Now
(Σ suppliedUsd·supplyApy − Σ borrowedUsd·borrowApy) / Σ suppliedUsd, with
the SDK's supply-less rule: exactly 0 (debt is forgiven as bad debt).

…eams

Blend runs two independent emission streams per reserve; the single
emissionsApr picked the bToken side whenever supply/collateral existed,
silently dropping the borrow-stream APR for both-sides positions.
BlendReservePosition now mirrors BlendReserve with emissionsSupplyApr +
emissionsBorrowApr, each the stream's pool-wide APR at projected rates.

Earn discovery is a downstream composition concern: blendPools already
carries every field the asset-first view derived (status gating,
reserve enabled, supplyApy, emissionsSupplyApr, suppliedUsd ordering,
token metadata), so consumers assemble it themselves. Drops the query,
its BlendEarnOption/BlendEarnPoolOption types, resolver, complexity
entry, and the now-unused ReserveModel.GetAll reader.

…te accrual

Adversarial audit vs blend-contracts-v2 @ ba22b487 found two edge-state
deviations in ProjectRates:

- util==0: the contract bumps last_time and skips the rate update when
  nobody borrows; the projection grew dRate by irMod*rBase. Masked today
  (every pD consumer multiplies a zero dToken amount) but a landmine.
- bad debt (liabilities >= supply): the contract grows bRate by
  accrued*(1-bstop)/totalSupply — the UNCLAMPED liabilities/supply
  ratio — while the reduction reused the clamped utilization, so
  suppliers' bRate growth was understated (~0.5% over 30 idle days).

ProjectRates now takes bSupply/dSupply, derives the raw ratio itself,
and mirrors the contract's on-load guards (zero bSupply / zero
liabilities). New vectors: util==0, zero bSupply, bad-debt raw ratio.

…ry/Account

BlendPool.status becomes a BlendPoolStatus enum (ADMIN_ACTIVE..SETUP,
matching the BlendAuctionType precedent); null until ingested and for
any unrecognized on-chain value. The blend entry points move off
'extend type' blocks into the base Query (queries.graphqls) and Account
(account.graphqls) definitions so each type reads complete in one place;
blend.graphqls keeps all Blend object/enum types.

Nested blend lists were priced once under a single outer multiplier, so
a full blendPools selection cost ~29 units per pool instead of pools x
reserves. Every list level now carries its own bound: catalog x50,
per-account pools/backstop/activeAuctions x10 (documented assumption),
reserves and auction bid/lot x30 (MAX_RESERVES), q4w x20 (MAX_Q4W_SIZE);
Account.blendPositions drops back to default pricing so cardinality is
not double-charged. Full-selection worst cases are now blendPools=26150
and blendPositions=7572 - above the current 6000 deployment limit by
design; admitting full selections needs a deployment-side limit raise.
Existing non-blend entries (freighter budget) untouched.

…ct guard

The distributor advances the stream index before any user write and
traps on a negative delta via require_nonnegative; off-chain a negative
delta can only mean an ingestion gap between the stream row and the
user row. ClaimableEmissions now returns the accrued balance alone in
that state instead of a negative claimable.

GetBackstopLPPrices inferred the protocol-wide BLND/LP price group from
a self-priced-row join, but a self-priced row does not uniquely identify
the configured Comet: pools are permissionless, so any pool whose oracle
is also one of its reserve assets produces the same shape, and a stale
formerly-configured Comet's rows linger until they age out.
BLEND_BACKSTOP_LP_CONTRACT_ID - the same pin the snapshot writer
targets - now flows into serve (cmd/serve.go -> Configs -> resolver) and
scopes the query to exactly that oracle; findBackstopPrices reduces to
picking the self-priced LP row and its BLND sibling within the pinned
group. An unset pin returns no rows, so backstop USD fields resolve to
null. Deploy note: the api deployment needs BLEND_BACKSTOP_LP_CONTRACT_ID
in its env (ingest already has it).

…ping, backstop-pool relationship

- interestEarned/interestPaid: lifetime cost-basis semantics on the
  schema (token-denominated, survives full exit, liquidation fills
  adjust the cost basis, may go slightly negative).
- LendingChange: per-reason population table for tokenId/amount/poolId,
  verified against the event decoder (events.go) - which reasons carry
  the reserve asset vs the BLND SAC vs null, share- vs LP- vs
  underlying-denominated amounts, and the backstop CLAIM's null poolId.
- BlendBackstopPosition: the backstop is one protocol-wide contract
  holding per-pool first-loss capital - one entry per backed pool.
- buildBackstopPosition godoc: un-ingested backstop pool row displays
  lpTokens 0 (under-reports, never over-reports).
- Utilization godoc: the contract descales with ceil/floor then ceils
  the 7-decimal ratio; the exact rational here is <= that, by <1e-7 for
  funded reserves.

…helpers

…lders

…claim

…or tables

Read blend_pool_claimed/blend_backstop_claimed via the new GetByAccount readers
after phase-2 live ingestion and assert the supplier's pool claim and whale's
backstop claim folded positive totals. Guard that phase-1 (no claims) leaves both
accumulator tables empty.

…s survive

The canonical-backstop pin resolves to empty on the standalone network,
which made the processor drop every backstop-shaped entry and event as a
non-canonical impostor — BlendMigrationTestSuite failed on the whale's
missing blend_backstop_positions row.

The suite deploys the backstop from the master account (keypair.Root of
the passphrase) with a fixed salt, so its address is a deterministic
function of the passphrase alone. Pin it in canonicalBackstopAddress the
same way blndTokenAddress pins the standalone BLND SAC: unit test + a
deploy-time assertion in SetupBlendStack.

Absorbs the review-round API changes on blend/pr5-graphql: drops the
GetBlendEarnOptions client method, query, and types (the query was
removed - earn discovery composes from blendPools); BlendPool.status
becomes the BlendPoolStatus enum string; BlendReservePosition's single
emissionsApr splits into emissionsSupplyApr/emissionsBorrowApr.
Claimable-emission assertions were already sign-based, so the
projected-to-now claimable math needs no test changes.