{ "tool_id": "art-735-solana-dvp-prefund-verifier", "note": "Conformance vectors for the DvP pre-funding checklist recompute. Every independent_oracle derives its expectation from the pinned SOLANA-DVP-* clause snapshots (registry: chaingraph/standard/clause-snapshot-registry.json, digests cited per vector); output_payload is the full golden master stamped from the kernel (art-637 shape).", "vectors": [ { "name": "F1_clean_record_all_checks_pass", "spec_ref": "README Notes line 33 checklist over an honest record", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes); solana-foundation/dvp lib.rs lines 10-15 (declare_id pin) + docs Program ID table pin; solana-foundation/dvp swap_dvp.rs lines 28-82 (struct SwapDvp, LEN = 458)", "source_digest": "sha256:29bf23a76e9aa8b4dd02d74508583d40304334221f2bd699282d651913a34724", "derivation": "The record names the pinned program id as owner, carries exactly the pinned struct LEN (458 bytes: 1 + 32*7 + 8*4 + 64 + 32*2 + 32*2 + 1 + 8), matches the funder terms on every README-listed field, earliest is None, expiry is inside the one-year cap and in the future at the supplied cluster time, no extensions are present, and hook extras are 0 <= 32.", "expect": { "prefund_check": "PASS", "owner_matches": true, "length_matches": true, "terms_match": true, "expiry_in_future": true, "no_blocked_extensions": true, "hook_extras_within_cap": true } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "PASS", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "c9fc03587713c6ce0e1460e6796f58c3e40af29afd8ba1d897b48b5727b362f3" }, { "name": "F2_forged_destination_fails_terms", "spec_ref": "README Notes lines 18/31/33: a forged create with attacker destinations", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes)", "source_digest": "sha256:29bf23a76e9aa8b4dd02d74508583d40304334221f2bd699282d651913a34724", "derivation": "Notes line 33 requires checking user_a_settlement_destination/user_b_settlement_destination against the agreed deal because a forged create would redirect proceeds. The pasted destination_b differs from the expected one, so terms_match is false and the pre-funding check fails regardless of every other check passing.", "expect": { "prefund_check": "FAIL", "terms_match": false, "owner_matches": true, "length_matches": true, "terms_mismatches": [ "destination_b" ] } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "AttackErDestination1111111111111111111111111", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": false, "terms_mismatches": [ "destination_b" ], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [ "terms" ], "trust_flags": [], "warnings": [ "Terms differ on: destination_b. A forged CreateDvp with attacker destinations would fail exactly this check (README Notes: verify stored terms before depositing).", "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "AttackErDestination1111111111111111111111111", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "495c8919ce88f469e9fdcc7148e2cc203e6d7d2b63cfcc9ed1f1b7921ee7047e" }, { "name": "F3_lookalike_account_wrong_owner_and_length", "spec_ref": "README Notes line 33: verify owner + exact SwapDvp::LEN 458", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes); solana-foundation/dvp swap_dvp.rs lines 28-82 (struct SwapDvp, LEN = 458)", "source_digest": "sha256:c11d0b4395e229521eaf8b1d25d49b3e5ad0333e17fe72d790c755692fa25896", "derivation": "A wallet-owned look-alike account with serialized look-alike terms is not a SwapDvp: owner differs from the pinned program id and the byte length differs from the pinned LEN 458, so both the owner and length checks fail.", "expect": { "prefund_check": "FAIL", "owner_matches": false, "length_matches": false } }, "policy_parameters": { "owner_program_id": "WalletOwned111111111111111111111111111111111", "byte_length": "342", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": false, "length_matches": false, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [ "owner", "length" ], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "WalletOwned111111111111111111111111111111111", "byte_length": "342", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "04835e481bb4b621bfbd22557902aa80a51481f09088a22dc656cf05b2f7dbd2" }, { "name": "F4_transfer_fee_mint_blocked", "spec_ref": "blocked-ext pin: TransferFeeConfig -> BlockedMintExtension", "independent_oracle": { "source": "solana-foundation/dvp token_utils.rs lines 275-350 (blocked extensions -> BlockedMintExtension)", "source_digest": "sha256:854e2664ff9838ca5610f8328c4163e8f72ae61ef7994df037e36698c60e63f9", "derivation": "validate_mint_extensions rejects a Token-2022 mint carrying TransferFeeConfig with BlockedMintExtension, so a record naming it on leg A cannot pass the pre-funding checklist.", "expect": { "prefund_check": "FAIL", "no_blocked_extensions": false, "blocked_extensions_found": [ "mint_a:TransferFeeConfig" ] } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [ "TransferFeeConfig" ], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": false, "blocked_extensions_found": [ "mint_a:TransferFeeConfig" ], "hook_extras_within_cap": true, "failed_checks": [ "blocked_extension" ], "trust_flags": [], "warnings": [ "Blocked mint extension(s) present: mint_a:TransferFeeConfig. The program rejects these with BlockedMintExtension; funding such a leg strands both legs.", "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "ee7b229a391ef9d6cc0988f8c383302e4724540a0c2b2bff7232c52bac6f05e5" }, { "name": "F5_hook_extras_at_cap_passes_over_cap_fails", "spec_ref": "hook-cap pin: MAX_HOOK_REMAINING_ACCOUNTS = 32 per leg", "independent_oracle": { "source": "solana-foundation/dvp token_utils.rs lines 352-366 (MAX_HOOK_REMAINING_ACCOUNTS = 32)", "source_digest": "sha256:bd2a1b480dee40ec18035c64fc30bd6c3470044274f21d9faf354490fabefaea", "derivation": "Two vectors: leg counts at exactly 32/32 pass (32 is within the cap), and leg A at 33 fails hook_extras_within_cap (the CPI account arrays are stack-allocated at 32 per leg).", "expect": { "boundary": "PASS at 32/32", "over_cap": "FAIL with hook_extras_within_cap=false" } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "32", "leg_b_extras_count": "32", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "PASS", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "32", "leg_b_extras_count": "32" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "d611062ffcf38deb4cc85ce8ca74128225341ac4fab2868ca06ee7b9df656995" }, { "name": "F5b_hook_extras_leg_a_33_over_cap", "spec_ref": "hook-cap pin: over 32 per leg", "independent_oracle": { "source": "solana-foundation/dvp token_utils.rs lines 352-366 (MAX_HOOK_REMAINING_ACCOUNTS = 32)", "source_digest": "sha256:bd2a1b480dee40ec18035c64fc30bd6c3470044274f21d9faf354490fabefaea", "derivation": "leg_a_extras_count = 33 exceeds MAX_HOOK_REMAINING_ACCOUNTS = 32, so the check fails and the record cannot pass.", "expect": { "prefund_check": "FAIL", "hook_extras_within_cap": false } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "33", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": false, "failed_checks": [ "hook_extras_over_cap" ], "trust_flags": [], "warnings": [ "Hook extras exceed the 32-per-leg cap; the terminal TransferChecked CPI cannot carry them.", "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "33", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "e214aac24a23c09c88ab5aa4860812affc80397ab0430bef78e96df5c5b57a96" }, { "name": "F6_expired_record_not_fundable", "spec_ref": "README Notes line 24: only Settle rejects after expiry_timestamp", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes)", "source_digest": "sha256:29bf23a76e9aa8b4dd02d74508583d40304334221f2bd699282d651913a34724", "derivation": "With the supplied cluster time strictly past expiry_timestamp, settlement would already reject; funding it is outside the checklist, so expiry_in_future is false and the check fails.", "expect": { "prefund_check": "FAIL", "expiry_in_future": false } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1769990000", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1769990000", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": false, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [ "expiry_not_in_future" ], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1769990000", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "f09f0382004d090223cb6598702eb4e0e994d7fddbd2aa3fd596bb56c737ae89" }, { "name": "F7_earliest_after_expiry_rejected", "spec_ref": "README Notes line 26: earliest must be <= expiry", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes)", "source_digest": "sha256:29bf23a76e9aa8b4dd02d74508583d40304334221f2bd699282d651913a34724", "derivation": "earliest_settlement_timestamp inherits the expiry cap because it must be <= expiry; a record with earliest (1770200000) after expiry (1770086400) fails earliest_within_expiry.", "expect": { "prefund_check": "FAIL", "earliest_within_expiry": false } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": "1770200000", "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": "1770200000", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": false, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [ "earliest_after_expiry" ], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": "1770200000", "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "ad358e80f77d94c9c727039a5f5a37f451ed5c0842b597e60f48af021c9a1e30" }, { "name": "F8_expiry_over_one_year_cap", "spec_ref": "README Notes line 26: expiry capped at one year past creation", "independent_oracle": { "source": "solana-foundation/dvp README lines 68-105 (Instructions + Notes)", "source_digest": "sha256:29bf23a76e9aa8b4dd02d74508583d40304334221f2bd699282d651913a34724", "derivation": "CreateDvp rejects an expiry more than one year past creation. With creation 1769900000 and expiry 1769900000 + 31536000 + 1 = 1801436001, the expiry exceeds creation + 31,536,000 by one second and expiry_within_one_year is false.", "expect": { "prefund_check": "FAIL", "expiry_within_one_year": false } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1801436001", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": false, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": false, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1801436001", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "FAIL", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": false, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [ "expiry_over_one_year" ], "trust_flags": [], "warnings": [ "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1801436001", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "bd7d4184f9b38690eae9f4e9282bc9bc13ee67a6b89d9eea27f74b29a7210159" }, { "name": "F9_trusted_authority_flags_pass_with_flags", "spec_ref": "README Notes lines 34-35 + blocked-ext residual-risk block: accepted as-is, surfaced only", "independent_oracle": { "source": "solana-foundation/dvp token_utils.rs lines 275-350 (blocked extensions -> BlockedMintExtension); solana-foundation/dvp README lines 68-105 (Instructions + Notes)", "source_digest": "sha256:854e2664ff9838ca5610f8328c4163e8f72ae61ef7994df037e36698c60e63f9", "derivation": "PermanentDelegate, Pausable, MintCloseAuthority, TransferHook, ConfidentialTransfer and DefaultAccountState/freeze authority are accepted as-is by the program (only the four deny-listed extensions are rejected); the checklist still passes but each trusted-authority risk is surfaced as a trust flag.", "expect": { "prefund_check": "PASS", "trust_flag_count": 6 } }, "policy_parameters": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "mint_a_extensions": [], "mint_b_extensions": [ "PermanentDelegate", "Pausable", "MintCloseAuthority", "TransferHook", "ConfidentialTransfer", "DefaultAccountState" ], "mint_a_frozen_by_default": false, "mint_b_frozen_by_default": true, "mint_a_freeze_authority_set": false, "mint_b_freeze_authority_set": true, "leg_a_extras_count": "0", "leg_b_extras_count": "0", "now": "1770000000", "expected": { "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo" } }, "output_payload": { "prefund_check": "PASS", "owner_matches": true, "length_matches": true, "terms_match": true, "terms_mismatches": [], "earliest_within_expiry": null, "expiry_within_one_year": true, "expiry_in_future": true, "no_blocked_extensions": true, "blocked_extensions_found": [], "hook_extras_within_cap": true, "failed_checks": [], "trust_flags": [ "TRUST_PERMANENT_DELEGATE_MINT_B", "TRUST_PAUSABLE_MINT_B", "TRUST_MINT_CLOSE_AUTHORITY_MINT_B", "TRUST_MUTABLE_TRANSFER_HOOK_MINT_B", "TRUST_CONFIDENTIAL_TRANSFER_MINT_B", "TRUST_FROZEN_BY_DEFAULT_OR_FREEZE_AUTHORITY_MINT_B" ], "warnings": [ "Trusted-authority risks accepted as-is by the program: TRUST_PERMANENT_DELEGATE_MINT_B, TRUST_PAUSABLE_MINT_B, TRUST_MINT_CLOSE_AUTHORITY_MINT_B, TRUST_MUTABLE_TRANSFER_HOOK_MINT_B, TRUST_CONFIDENTIAL_TRANSFER_MINT_B, TRUST_FROZEN_BY_DEFAULT_OR_FREEZE_AUTHORITY_MINT_B. Surface these in settlement UIs rather than presenting such mints as ordinary tokens.", "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "The one-year expiry cap is recomputed against a fixed 365-day year (31,536,000 seconds) from the creation timestamp you supply.", "Cluster time lag: the cluster clock is a validator-vote median that lags real time ~10-30s and can jump; budget ~60s of drift around expiry and earliest boundaries." ], "record": { "owner_program_id": "dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq", "byte_length": "458", "user_a": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU", "user_b": "Gf8cMJ3yRMLpponGJtdfkzX67BhTReLh4m1uPjYz6Ugk", "mint_a": "3p9W2vGhTdMQp7sKdDXhcHmgRcxpaB3ZuXYxU8k2FhQN", "mint_b": "8kQFfPJ1FwDkZUsxBernCLzexFAZpQvH4fpRS8TwEGXi", "token_program_a": "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb", "token_program_b": "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA", "settlement_authority": "BfIwS1B8f7RC1ZY8NbZLBuJSQP9fM2tzL8t8XnJ9c8kX", "destination_a": "Ck8x2E9S8DcVJ3cJnd6oFfEqBMDdhzWY9zKLzye4LYBw", "destination_b": "Dq8pgDk1ZdLcPdMxyvRQ2NLhEu9XvPia8Gn2LtzY9dKo", "mint_a_authority": "Eq2vH9GeNcqLQobYm5YoFbLpaKMPTZhMKAqcBf41LxNh", "mint_b_authority": "Fq9kxRfM4PqNZeSVh3pLRLn9vbcEKmZAxnZqdZ4SPrBG", "amount_a": "1500000000", "amount_b": "250000000", "expiry_timestamp": "1770086400", "earliest_settlement_timestamp": null, "creation_timestamp": "1769900000", "nonce": "7284759301947385401", "now": "1770000000", "leg_a_extras_count": "0", "leg_b_extras_count": "0" }, "expected_terms_note": "Verification is only as good as the expected terms supplied: they come from the funder's record of the agreed deal, and supplying the forged record's own values as \"expected\" makes the check circular.", "disclaimer": "Values-only recompute over pasted data: NOT legal finality and NOT proof of agreement. CreateDvp is permissionless — a record is not proof of agreement (README Notes: the economic terms are not part of the PDA seeds).", "audit_scope_note": "The Cantina audit scope mapping for this program commit is UNVERIFIED (the report lists a different repository); this output never cites the audit as coverage.", "error_direction": "conservative_toward_finding" }, "golden_hash": "25f583f7a037fde9bb94bb745f65600be4d7a25d54e15f9ffa775f4a2b4f93ce" } ] }