{
  "tool_id": "art-715-token2022-transfer-fee-reconciler",
  "note": "Spec-pinned fixtures for SOLANA-B1-TRANSFER-FEE-NODE-1 (research/solana/B1-TRANSFER-FEE-BUILD-SPEC-2026-10-01.md section 6, clauses D1-D4 pinned by #2166). F1-F4 reuse the Token-2022 program's own transfer-fee test numbers verbatim (D4: calculate_fee_min, calculate_fee_max, test_transfer_fee_config/epoch_fee, calculate_fee_zero). F5 reproduces the Kora GHSA-725g advisory arithmetic (D5) via PR #378's before/after (D6). F5's maximum fee is a stated assumption: the advisory does not give one (D5), so any cap of 50 or more reproduces it (stated as 1,000,000). output_payload is filled by fill-fixture-payloads.mjs and golden_hash by golden-parity.test.mjs --update; spec_pins carry the hand-derived expected values from the spec and are asserted by the proptest, so the corpus is NOT a round-trip self-test.",
  "vectors": [
    {
      "name": "F1_fee_below_max_amount_1",
      "spec_ref": "spec section 6 F1; D4 calculate_fee_min; D1 ceiling division",
      "spec_pins": {
        "schedule": "newer",
        "fee": "1",
        "net": "0",
        "reconciliation": "MATCH",
        "credited_minus_net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "0"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "1",
        "net": "0",
        "withheld_added": "1",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "0",
        "reconciliation": "MATCH",
        "credited_amount": "0",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "e3e17062aae20c3c7422052a353e71e9f715e7571d9442cb5495de9e96992a9d"
    },
    {
      "name": "F1_fee_below_max_amount_10000",
      "spec_ref": "spec section 6 F1; D4 calculate_fee_min: 10,000 at 1 bp rounds to a 1 unit fee",
      "spec_pins": {
        "schedule": "newer",
        "fee": "1",
        "net": "9999",
        "reconciliation": "MATCH",
        "credited_minus_net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "10000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "9999"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "1",
        "net": "9999",
        "withheld_added": "1",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "10000",
        "reconciliation": "MATCH",
        "credited_amount": "9999",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "a588ec20c1078172850a07c4f63643901ddd77ed1b463b462d783ad5ccdaf65f"
    },
    {
      "name": "F1_fee_below_max_amount_10001",
      "spec_ref": "spec section 6 F1; D4 calculate_fee_min: 10,001 at 1 bp rounds up to a 2 unit fee",
      "spec_pins": {
        "schedule": "newer",
        "fee": "2",
        "net": "9999",
        "reconciliation": "MATCH",
        "credited_minus_net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "10001",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "9999"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "2",
        "net": "9999",
        "withheld_added": "2",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "10000",
        "reconciliation": "MATCH",
        "credited_amount": "9999",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "31b4d9ab5bc3231e95d69aa35665fe5ef470c7a9595df360ce7798979fe76578"
    },
    {
      "name": "F1_fee_below_max_amount_0",
      "spec_ref": "spec section 6 F1; D1: amount 0 -> fee 0",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "0",
        "reconciliation": "MATCH",
        "credited_minus_net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "0",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "0"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "0",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "0",
        "reconciliation": "MATCH",
        "credited_amount": "0",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "5bbdbf0f26adbe464497b16f6555b3e5feb4cf9011be2937aee45f7a693a1401"
    },
    {
      "name": "F2_fee_capped_amount_50000000",
      "spec_ref": "spec section 6 F2; D4 calculate_fee_max: 50,000,000 at 1 bp, max 5,000",
      "spec_pins": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49995000"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "50000000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "49995000"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49995000",
        "withheld_added": "5000",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "50000000",
        "reconciliation": "MATCH",
        "credited_amount": "49995000",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "72d502b710607892c613b7830e704cde55f7ed9b7b6bb8608c4065e9b2ee5fc4"
    },
    {
      "name": "F2_fee_capped_amount_49999999_rounds_up_to_cap",
      "spec_ref": "spec section 6 F2; D4 calculate_fee_max: 49,999,999 rounds up onto the cap",
      "spec_pins": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49994999"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "49999999",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "49994999"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49994999",
        "withheld_added": "5000",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "49999999",
        "reconciliation": "MATCH",
        "credited_amount": "49994999",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "57cb9dabb623ee78be31c4ff42b97f17d72ba09941dad599105b21e0f9334423"
    },
    {
      "name": "F2_fee_capped_amount_50000001",
      "spec_ref": "spec section 6 F2; D4 calculate_fee_max",
      "spec_pins": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49995001"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "50000001",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "49995001"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "5000",
        "net": "49995001",
        "withheld_added": "5000",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "50000001",
        "reconciliation": "MATCH",
        "credited_amount": "49995001",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "09b3f940be1fbd3dea3717e6cb9e55dff83cbfca55633244f3277b6ce24d1fec"
    },
    {
      "name": "F2_fee_capped_amount_u64_max",
      "spec_ref": "spec section 6 F2; D4 calculate_fee_max at u64::MAX",
      "spec_pins": {
        "schedule": "newer",
        "fee": "5000",
        "net": "18446744073709546615"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "18446744073709551615",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "18446744073709546615"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "5000",
        "net": "18446744073709546615",
        "withheld_added": "5000",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "18446744073709551615",
        "reconciliation": "MATCH",
        "credited_amount": "18446744073709546615",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "8ffbec70453f871b9e17043d82bfe7e96e4b612ef337d0d2766004d6fe8b8c81"
    },
    {
      "name": "F3_epoch_100_picks_newer",
      "spec_ref": "spec section 6 F3; D4 test_transfer_fee_config; D2 get_epoch_fee boundary: exactly newer.epoch -> newer",
      "spec_pins": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "1",
          "maximum_fee": "10",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "100",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1000000",
        "execution_epoch": "100",
        "instruction": "TransferChecked",
        "credited_amount": "999900"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900",
        "withheld_added": "100",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000000",
        "reconciliation": "MATCH",
        "credited_amount": "999900",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "100",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "f0d0902e262444a214c04755543a9115c1d91f260b675f1c782642ce6c1330ef"
    },
    {
      "name": "F3_epoch_99_picks_older",
      "spec_ref": "spec section 6 F3; D4 epoch_fee: 99 -> older",
      "spec_pins": {
        "schedule": "older",
        "fee": "10",
        "net": "999990"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "1",
          "maximum_fee": "10",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "100",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1000000",
        "execution_epoch": "99",
        "instruction": "TransferChecked",
        "credited_amount": "999990"
      },
      "output_payload": {
        "schedule": "older",
        "fee": "10",
        "net": "999990",
        "withheld_added": "10",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000000",
        "reconciliation": "MATCH",
        "credited_amount": "999990",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "99",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "4c01b030e4ec1e813d9ed359d2e26490f916454fe9a62e41bf1c1a4d544ad57f"
    },
    {
      "name": "F3_epoch_101_picks_newer",
      "spec_ref": "spec section 6 F3; D4 epoch_fee: 101 -> newer",
      "spec_pins": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "1",
          "maximum_fee": "10",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "100",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1000000",
        "execution_epoch": "101",
        "instruction": "TransferChecked",
        "credited_amount": "999900"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900",
        "withheld_added": "100",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000000",
        "reconciliation": "MATCH",
        "credited_amount": "999900",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "101",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "93adbd41d38294d772606dac25329bb4c93eb53aa11b6a8d22b88a66dac1a839"
    },
    {
      "name": "F3_epoch_u64_max_picks_newer",
      "spec_ref": "spec section 6 F3; D4 epoch_fee: u64::MAX -> newer",
      "spec_pins": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "1",
          "maximum_fee": "10",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "100",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1000000",
        "execution_epoch": "18446744073709551615",
        "instruction": "TransferChecked",
        "credited_amount": "999900"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900",
        "withheld_added": "100",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000000",
        "reconciliation": "MATCH",
        "credited_amount": "999900",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "18446744073709551615",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "41b25e701c1832c7517647641da7d4a1d816734f1fcb7a5852c1aef5c870542c"
    },
    {
      "name": "F4_zero_fee_bps_0_amount_0",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero; D1: bps 0 -> fee 0",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "amount": "0",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "0"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "0",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "0",
        "reconciliation": "MATCH",
        "credited_amount": "0",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "8f0b088fc3cb3320424b6e5a761eb8fef2f7256c0b33ba10e20d42b950a19c24"
    },
    {
      "name": "F4_zero_fee_bps_0_amount_1",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "1"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "amount": "1",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "1"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "1",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1",
        "reconciliation": "MATCH",
        "credited_amount": "1",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "dbbcc724e720aa025092e6a01396676bd2565b429ff357876b38719b9358655e"
    },
    {
      "name": "F4_zero_fee_bps_0_amount_10000",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "10000"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "amount": "10000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "10000"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "10000",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "10000",
        "reconciliation": "MATCH",
        "credited_amount": "10000",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "2963a09e7a911ccef7f9b8e1a9518562d5cbfb965d212ca78e4d7c8aa3398031"
    },
    {
      "name": "F4_zero_fee_bps_0_amount_u64_max",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero at u64::MAX",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "18446744073709551615"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "0"
        },
        "amount": "18446744073709551615",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "18446744073709551615"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "18446744073709551615",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "18446744073709551615",
        "reconciliation": "MATCH",
        "credited_amount": "18446744073709551615",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "8eca534effe0df9b8d436b5af2c7a474d46923a2d606e7cc56f6579ef251d128"
    },
    {
      "name": "F4_zero_fee_bps_10000_max_0_amount_0",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero: bps 10,000 with maximum_fee 0 -> fee 0; D1: cap at 0",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "amount": "0",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "0"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "0",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "0",
        "reconciliation": "MATCH",
        "credited_amount": "0",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "148570b93d68bac366a924f82b2ab0e39b0d310e71ad4df6ee5681e94af0e69b"
    },
    {
      "name": "F4_zero_fee_bps_10000_max_0_amount_1",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "1"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "amount": "1",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "1"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "1",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1",
        "reconciliation": "MATCH",
        "credited_amount": "1",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "561057ce7797899c97db7b896818768befac7c04141273315fbe034b27d5df82"
    },
    {
      "name": "F4_zero_fee_bps_10000_max_0_amount_10000",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "10000"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "amount": "10000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "10000"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "10000",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "10000",
        "reconciliation": "MATCH",
        "credited_amount": "10000",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "ec021fe21b57d50dceff6c928d185eedca7bf06e24c22fb79d16a07a1876dd6d"
    },
    {
      "name": "F4_zero_fee_bps_10000_max_0_amount_u64_max",
      "spec_ref": "spec section 6 F4; D4 calculate_fee_zero at u64::MAX",
      "spec_pins": {
        "schedule": "newer",
        "fee": "0",
        "net": "18446744073709551615"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "0",
          "transfer_fee_basis_points": "10000"
        },
        "amount": "18446744073709551615",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "18446744073709551615"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "0",
        "net": "18446744073709551615",
        "withheld_added": "0",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "18446744073709551615",
        "reconciliation": "MATCH",
        "credited_amount": "18446744073709551615",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "ad78ce3666420bf13fc6f3960864f7a8ce22a5ef293434d8511625c5ed24995c"
    },
    {
      "name": "F5_kora_reproduction_credited_gross_over_credited",
      "spec_ref": "spec section 6 F5; D5 Arithmetic Demonstration; D6 BEFORE L649-L655 vs AFTER L710-L743. Stated assumption kept per the 7F review condition: F5's maximum fee is a stated assumption (the advisory does not give one), so any cap of 50 or more reproduces it; stated here as 1,000,000.",
      "spec_pins": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "reconciliation": "OVER_CREDITED",
        "credited_minus_net": "50"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "amount": "1000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "1000"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "withheld_added": "50",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000",
        "reconciliation": "OVER_CREDITED",
        "credited_amount": "1000",
        "credited_minus_net": "50",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "d5725506a3b54fba15d3b5934e881d7c279b38dae57b5836164d885b5a0e12b3"
    },
    {
      "name": "F5_kora_fixed_verifier_credited_net_match",
      "spec_ref": "spec section 6 F5; D6 AFTER: the fixed verifier values the fee and credits the net -> MATCH",
      "spec_pins": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "reconciliation": "MATCH",
        "credited_minus_net": "0"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "amount": "1000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "950"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "withheld_added": "50",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000",
        "reconciliation": "MATCH",
        "credited_amount": "950",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "fcf2c0c8d3531c59c0c132a7fe676c4447a4d05f027827f616aa40c68bcd1995"
    },
    {
      "name": "F6_epoch_race_verifier_99_exec_100",
      "spec_ref": "spec section 6 F6; D6 AFTER L721-L733; D3 L395; D2 schedule pick. Verifier used the older schedule (fee capped at 10), execution uses the newer (fee 100) -> EPOCH_SCHEDULE_DIVERGENCE",
      "spec_pins": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900",
        "epoch_race": "EPOCH_SCHEDULE_DIVERGENCE",
        "reconciliation": "MATCH"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "1",
          "maximum_fee": "10",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "100",
          "maximum_fee": "5000",
          "transfer_fee_basis_points": "1"
        },
        "amount": "1000000",
        "execution_epoch": "100",
        "instruction": "TransferChecked",
        "credited_amount": "999900",
        "verifier_epoch": "99"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "100",
        "net": "999900",
        "withheld_added": "100",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000000",
        "reconciliation": "MATCH",
        "credited_amount": "999900",
        "credited_minus_net": "0",
        "epoch_race": "EPOCH_SCHEDULE_DIVERGENCE",
        "execution_epoch": "100",
        "verifier_epoch": "99",
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "3302decc53bc328db48e934969c7a86f39e872e43e8042b799a632631ce32651"
    },
    {
      "name": "F7_declared_fee_mismatch_49_vs_50",
      "spec_ref": "spec section 6 F7; D3 L442-L447: declared_fee != computed fee fails with FeeMismatch",
      "spec_pins": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "fee_mismatch": "FeeMismatch"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "amount": "1000",
        "execution_epoch": "0",
        "instruction": "TransferCheckedWithFee",
        "declared_fee": "49",
        "credited_amount": "950"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "50",
        "net": "950",
        "withheld_added": "50",
        "fee_mismatch": "FeeMismatch",
        "declared_fee": "49",
        "min_pre_fee_for_net": "1000",
        "reconciliation": "MATCH",
        "credited_amount": "950",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "67f73a4430ddf31058f462807533233f565c1ab314d0258fc4d4a31fa13854a6"
    },
    {
      "name": "F8_inverse_tie_break_net_9_pre_10",
      "spec_ref": "spec section 6 F8; D1 L80-L83: non-unique preimage, smaller amount chosen (10 over 11 at a 10% fee, net 9)",
      "spec_pins": {
        "schedule": "newer",
        "fee": "1",
        "net": "9",
        "min_pre_fee_for_net": "10"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "1000"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "18446744073709551615",
          "transfer_fee_basis_points": "1000"
        },
        "amount": "10",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "9"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "1",
        "net": "9",
        "withheld_added": "1",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "10",
        "reconciliation": "MATCH",
        "credited_amount": "9",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": null,
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "4d55e1ad24b343a2d7907b199071bac178222e47c5b752176b4573ff0127aafa"
    },
    {
      "name": "F10_consumer_path_divergence_gross_accept_net_reject",
      "spec_ref": "spec section 6 F10; D9 scheme.ts L1104 (gross exact match accepts) vs smartWalletVerification.ts L786/L827 (net >= required rejects); D8 L182, L187, L305",
      "spec_pins": {
        "schedule": "newer",
        "fee": "10",
        "net": "990",
        "reconciliation": "MATCH",
        "consumer_view.x402_static_path_accept": true,
        "consumer_view.x402_balance_delta_path_accept": false,
        "consumer_view.consumer_path_divergence": true
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "100"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "100"
        },
        "amount": "1000",
        "execution_epoch": "0",
        "instruction": "TransferChecked",
        "credited_amount": "990",
        "required_amount": "1000"
      },
      "output_payload": {
        "schedule": "newer",
        "fee": "10",
        "net": "990",
        "withheld_added": "10",
        "fee_mismatch": null,
        "declared_fee": null,
        "min_pre_fee_for_net": "1000",
        "reconciliation": "MATCH",
        "credited_amount": "990",
        "credited_minus_net": "0",
        "epoch_race": null,
        "execution_epoch": "0",
        "verifier_epoch": null,
        "consumer_view": {
          "required_amount": "1000",
          "x402_static_path_accept": true,
          "x402_balance_delta_path_accept": false,
          "consumer_path_divergence": true,
          "note": "The x402 SVM exact scheme compares the gross TransferChecked amount, while a balance-delta verification sees the post-fee net; the spec text tolerates overpayment (net >= required) and never mentions transfer fees."
        },
        "note": "Fee arithmetic ports the Token-2022 transfer-fee extension: ceiling(amount * bps / 10,000) capped at maximum_fee, computed in 128-bit intermediates, with the newer schedule applying from its epoch on. The Kora GHSA-725g defect class is a verifier crediting the pre-fee amount; OVER_CREDITED with credited_minus_net = fee reproduces it."
      },
      "golden_hash": "344620f3aad89946c52f98f53eda6a1ced57b5d2cbb12257f63d2ca2e0ff3724"
    },
    {
      "name": "F11_unchecked_transfer_refused_mint_required",
      "spec_ref": "spec section 6 F11; D3 L425-L432: a plain Transfer from an account carrying the fee extension fails with MintRequiredForTransfer; the node refuses naming the program error",
      "spec_pins": {
        "error": "mint_required_for_transfer",
        "detail_contains": "MintRequiredForTransfer"
      },
      "policy_parameters": {
        "older_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "newer_transfer_fee": {
          "epoch": "0",
          "maximum_fee": "1000000",
          "transfer_fee_basis_points": "500"
        },
        "amount": "1000",
        "execution_epoch": "0",
        "instruction": "Transfer",
        "credited_amount": "1000"
      },
      "output_payload": {
        "error": "mint_required_for_transfer",
        "detail": "instruction must be 'TransferChecked' or 'TransferCheckedWithFee': a plain \"Transfer\" from an account carrying the transfer-fee extension fails with MintRequiredForTransfer because the fee extension requires the mint to compute the fee.",
        "domain_errors": [
          {
            "code": "MINT_REQUIRED_FOR_TRANSFER",
            "text": "instruction must be 'TransferChecked' or 'TransferCheckedWithFee': a plain \"Transfer\" from an account carrying the transfer-fee extension fails with MintRequiredForTransfer because the fee extension requires the mint to compute the fee."
          }
        ],
        "schedule": null,
        "fee": null,
        "net": null,
        "withheld_added": null,
        "min_pre_fee_for_net": null,
        "reconciliation": null,
        "credited_minus_net": null,
        "epoch_race": null,
        "consumer_view": null
      },
      "golden_hash": "634b8f0808197cb41ea0938df4edfe094639ba84b2160e82f68023e2aaac72bd"
    }
  ]
}