[spalen0]

Batch role grants such as Infinifi's grantRoles(bytes32[],address[]) skipped role-name resolution because the collector only inspected scalar bytes32 parameters. Wrapped grants also lacked target-specific role context, while unrelated salts could inherit role labels resolved elsewhere on the same target.

Resolve scalar, array, and tuple role arguments through supported timelock execution/scheduling wrappers and Yearn Executor scripts. Group mixed-case target addresses before source lookup, and carry each inner target's role names into both the prompt and call-flow report. Annotate only role functions, preserve raw payloads on decoding failures, and leave unknown-target calldata unlabelled. The Infinifi priority-hook batch now identifies MANUAL_REBALANCER for both hooks and FARM_SWAP_CALLER for the long timelock. Scheduled payloads are inspected without changing the execution-only context used by protocol adapters.

Validation:

• 262 tests passed, plus 19 subtests across role resolution, all explainer tests, report rendering, governance wrappers, and protocol context.
• Regression coverage uses real ABI encoding for direct and wrapped grants, nested wrappers, Executor scripts, duplicate payloads with different targets, non-role salts and composite fields, nested role arrays/structs, mixed-case addresses, depth limits, decoding failures, and both public explainer entrypoints.
• Ruff lint and formatting checks passed; ty passed for the changed files.
• Local main matches origin/main; its 109 corresponding tests passed, plus 2 subtests. Reproduced the bug there without modifying the checkout.