{
  "schema": "pactverity.solana.audit-candidate.v1",
  "release": "0.1.0-local-validation",
  "date": "2026-08-04",
  "status": {
    "sourcePublished": true,
    "sbfBuildPassed": true,
    "localValidatorDeploymentPassed": true,
    "devnetDeployed": false,
    "mainnetProgramsDeployed": false,
    "independentlyAudited": false,
    "mainnetMintConsoleEnabled": false,
    "pvtyMintCreated": true,
    "metadataMigrationOwnerOnly": true,
    "publicSaleEnabled": false,
    "actualFundsMovedUsd": 0
  },
  "toolchain": {
    "anchor": "0.32.1",
    "agaveValidator": "2.3.0",
    "platformTools": "1.48"
  },
  "fixedSupplyMintCeremony": {
    "owner": "6bEMS52m1Ue4wb3feKx8b8hSnvijracVN2ad1tA5mpck",
    "derivationSeed": "pactlayer-pact-v1",
    "canonicalMint": "8a9P2My6dUhKYJacztYv6bSjKJ1XZwTYY3qz5VwgcGML",
    "tokenProgram": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA",
    "supplyRaw": "50000000000000000",
    "decimals": 9,
    "localChecks": {
      "productionAddressDerivation": "passed against Agave CLI and independent unit derivation",
      "createInitializeMetadata": "passed on isolated validator with an ephemeral test owner",
      "atomicMintAndAuthorityRemoval": "passed; exact fixed supply verified",
      "prefundedAddressRecovery": "passed",
      "duplicateFinalization": "rejected without changing verified supply"
    },
    "mainnetStatus": "Finalized at the canonical mint on 4 August 2026 with exactly 50,000,000 PVTY; mint and freeze authorities are removed and the full supply remains in the published treasury token account.",
    "truthBoundary": "The mint is live on mainnet. The local-validator checks described here apply to the separate, undeployed sale and escrow candidates; they are not evidence of a live sale, customer funds or production settlement."
  },
  "programs": [
    {
      "name": "pactverity-sale",
      "reservedProgramId": "CeMivF2Rn4mNuXDVFu9FRFMLcT4st4QXZsigXFGoQs3V",
      "priorBrandBuildSha256": "183c64239bc58dc6d26a160eaa56a889c40ee5e51e886a97aa7c7de6f4025f93",
      "currentBrandBuildStatus": "rebuild_and_reaudit_required_before_public_deployment",
      "binaryBytes": 378976,
      "source": {
        "Cargo.toml": "e6db1cc75ec1b124b04bc0386998f50b08d04189fafe811bcd765c63876ea207",
        "SECURITY.md": "f246cc4b34a0c87b5f9645968bdef80d0e52bc8227c3c4c78871385642ee6c04",
        "lib.rs": "1917a1978126f3397062bab032540489e9c4cb36ad0f3c6dbe4ef02721e59c73",
        "math.rs": "ede970713fb2e567b70924c594c2f47bcb336144d2c406c3933693c67dd27804",
        "model.test.mjs": "abc8673c92c08f4b9c386d5c6cfd33d9e4c204ed9c70992bacdb16d2998920fa"
      },
      "limits": {
        "recommendedCanaryPvty": 1000000,
        "hardInventoryCapPvty": 2500000,
        "quoteAsset": "SOL",
        "priceRule": "immutable integer PVTY base units per lamport committed at activation"
      },
      "localChecks": {
        "modelTests": "16/16 passed",
        "fixedSupplyMintAndAuthorityRemoval": "passed",
        "atomicPvtyForSolPurchase": "passed",
        "slippageRollbackWithoutAssetMovement": "passed"
      }
    },
    {
      "name": "pactverity-escrow",
      "reservedProgramId": "94w1hmUSaDyJYNb2EJyA5wGcccEvpF2nfqVqaBAKqiLU",
      "priorBrandBuildSha256": "61cca1a779ce317fd56f7045be7595e6fa7467940ab0afc8a8f171d28f2d49bc",
      "currentBrandBuildStatus": "rebuild_and_reaudit_required_before_public_deployment",
      "binaryBytes": 559248,
      "source": {
        "Cargo.toml": "126bfa513e2999dc9ec842a14aae0ccee7cfafbe41d82c144ff351cff6521f1b",
        "THREAT_MODEL.md": "2b72c6650239a2abd176f8edda9ceaa11d85a07f09a07264796bb0d11bcdabc9",
        "constants.rs": "eeeef40413d2685c4b8a22dbfa2709433f069051e340022a04671206f509691a",
        "errors.rs": "77b8797a14993f3c55b47c2936243465deceb6763271b81fa07284b57eeb810b",
        "events.rs": "701ed959ea670da39a865d2613d8fa1986f97380d38c60cf832ddb99940955a8",
        "lib.rs": "bcd3cb7fdad05f514356c139405274c4db9c6e7e9bd31ca9085c0ac83098fbfe",
        "state-machine.spec.mjs": "852e4824d26314ebc71d593ee6860ebe8656cafea557fbb06234f986c0d8081a",
        "state.rs": "a6b7624f17f9fdb20ca766aaa9efa6cefd04dfb40343b23d3ea0a1c9485ac4c6"
      },
      "localChecks": {
        "stateModelTests": "9/9 passed",
        "sbfStackFrameGate": "passed",
        "localValidatorProgramLoad": "passed",
        "bootstrapAccountMetaSimulation": "passed with RPC signature verification disabled; no owner signature exercised"
      }
    }
  ],
  "truthBoundary": "These are public unaudited source files and a published summary of isolated local-validator checks. The SBF binaries, runtime harness and raw logs are not presently public. The escrow bootstrap check used signer account metadata with RPC signature verification disabled and did not exercise an owner signature. Reserved program IDs are not devnet or mainnet deployments; no public buyer funds were used; and no adoption, TVL, revenue or production-security claim is made."
}