{
  "schema": "pactverity.solana.audit-candidate.v1",
  "release": "0.1.0-local-validation",
  "date": "2026-08-04",
  "status": {
    "sourcePublished": true,
    "sbfBuildPassed": true,
    "localValidatorDeploymentPassed": true,
    "devnetDeployed": false,
    "mainnetProgramsDeployed": false,
    "independentlyAudited": false,
    "mainnetMintConsoleEnabled": false,
    "pvtyMintCreated": true,
    "metadataMigrationOwnerOnly": true,
    "publicSaleEnabled": false,
    "actualFundsMovedUsd": 0
  },
  "toolchain": {
    "anchor": "0.32.1",
    "agaveValidator": "2.3.0",
    "platformTools": "1.48"
  },
  "fixedSupplyMintCeremony": {
    "owner": "6bEMS52m1Ue4wb3feKx8b8hSnvijracVN2ad1tA5mpck",
    "derivationSeed": "pactlayer-pact-v1",
    "canonicalMint": "8a9P2My6dUhKYJacztYv6bSjKJ1XZwTYY3qz5VwgcGML",
    "tokenProgram": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA",
    "supplyRaw": "50000000000000000",
    "decimals": 9,
    "localChecks": {
      "productionAddressDerivation": "passed against Agave CLI and independent unit derivation",
      "createInitializeMetadata": "passed on isolated validator with an ephemeral test owner",
      "atomicMintAndAuthorityRemoval": "passed; exact fixed supply verified",
      "prefundedAddressRecovery": "passed",
      "duplicateFinalization": "rejected without changing verified supply"
    },
    "mainnetStatus": "Finalized at the canonical mint on 4 August 2026 with exactly 50,000,000 PVTY; the initial supply was delivered to the published treasury token account and mint and freeze authorities are removed.",
    "truthBoundary": "The mint is live on mainnet and current balances are independently visible on-chain. The local-validator checks described here apply to separate, undeployed direct-sale and escrow candidates; current market access uses independent DEX liquidity and is not evidence of customer funds or production settlement."
  },
  "programs": [
    {
      "name": "pactverity-sale",
      "reservedProgramId": "CeMivF2Rn4mNuXDVFu9FRFMLcT4st4QXZsigXFGoQs3V",
      "priorBrandBuildSha256": "183c64239bc58dc6d26a160eaa56a889c40ee5e51e886a97aa7c7de6f4025f93",
      "currentBrandBuildStatus": "rebuild_and_reaudit_required_before_public_deployment",
      "binaryBytes": 378976,
      "source": {
        "Cargo.toml": "0d6bcfa0b31ef7843e6b30d19668426fc5307d830edc58da057b88a63e481b4b",
        "SECURITY.md": "13960abbaecc0d62a1233a12724ab714b72308d0dacbf51eb117b04a71e8a29f",
        "lib.rs": "96f6b7be5b9c0675eb0580cded6e7e8895ad4d0b213ca4cdcb730efe351354d5",
        "math.rs": "8175bb6295eb5109e9ba3a0a309e43192ebc3143375675e61abac873dbff13b6",
        "model.test.mjs": "487b5c5b84447c669ef69c0e54a34e427c3c5bfd70d6473800061f1e581ce95d"
      },
      "limits": {
        "recommendedCanaryPvty": 1000000,
        "hardInventoryCapPvty": 2500000,
        "quoteAsset": "SOL",
        "priceRule": "immutable integer PVTY base units per lamport committed at activation"
      },
      "localChecks": {
        "modelTests": "16/16 passed",
        "fixedSupplyMintAndAuthorityRemoval": "passed",
        "atomicPvtyForSolPurchase": "passed",
        "slippageRollbackWithoutAssetMovement": "passed"
      }
    },
    {
      "name": "pactverity-escrow",
      "reservedProgramId": "94w1hmUSaDyJYNb2EJyA5wGcccEvpF2nfqVqaBAKqiLU",
      "priorBrandBuildSha256": "61cca1a779ce317fd56f7045be7595e6fa7467940ab0afc8a8f171d28f2d49bc",
      "currentBrandBuildStatus": "rebuild_and_reaudit_required_before_public_deployment",
      "binaryBytes": 559248,
      "source": {
        "Cargo.toml": "67f21186100de8b02f5d360449eca3f8b205c343b91d3d07fecfc1082bbcf8a5",
        "THREAT_MODEL.md": "50343937bfca40a1566b3a45ff28347e0ae95f167b4e0bc5d1ec6ac52587a60a",
        "constants.rs": "10009ce19331849ae9328d5af2b68a96dbbca43438063e0130dab7acf1864c90",
        "errors.rs": "7f7e89af96c2317f88627035d6b875af0ef7ea5b89d87a1aa34ff159c256fa7d",
        "events.rs": "22fb7c11f4e83d8998b289b76ae029581fb98dd6db32e8beab4e98b93a06526a",
        "lib.rs": "796720523e8e46a510be53814eb9a73379b85cbc8c501aec946a66706e281eb8",
        "state-machine.spec.mjs": "6bffd52c674161521262318e8f1e8b98665d8ad5471d27bd4855e9c80c15f577",
        "state.rs": "17d45e2bef549296b043d18e049e7b5a2e019e336ce874d738e0631f737d09fd"
      },
      "localChecks": {
        "stateModelTests": "9/9 passed",
        "sbfStackFrameGate": "passed",
        "localValidatorProgramLoad": "passed",
        "bootstrapAccountMetaSimulation": "passed with RPC signature verification disabled; no owner signature exercised"
      }
    }
  ],
  "truthBoundary": "These are public unaudited source files and a published summary of isolated local-validator checks. The SBF binaries, runtime harness and raw logs are not presently public. The escrow bootstrap check used signer account metadata with RPC signature verification disabled and did not exercise an owner signature. Reserved program IDs are not devnet or mainnet deployments; no public buyer funds were used; and no adoption, TVL, revenue or production-security claim is made."
}