01.4 / Solana build

Two programs. Published for review.

PactVerity has published selected Rust source files for an atomic fixed-inventory PVTY-for-SOL sale and a stablecoin service escrow. The prior-brand candidates compiled to Solana SBF and loaded on an isolated Agave validator. The renamed source must be rebuilt and independently audited before any public deployment.

Branded rebuildPendingPrior local runtimePassedIndependent auditPending
Exact boundary:The fixed PVTY mint is live, but the unaudited sale and escrow candidates remain local-validator release candidates—not devnet or mainnet program deployments. Service and escrow volume remains $0, and public sale is disabled.Open machine-readable manifest

01 / Sale program

Atomic SOL in. PVTY out—or everything rolls back.

The sale program never mints. It can release only fixed PVTY inventory deposited into its PDA vault after verifying the selected 50 million supply, 9 decimals and removed token authorities.

Atomic path

One transaction

A successful instruction transfers buyer SOL directly to the immutable treasury and PVTY from the program vault to the buyer. Any later failure reverses the complete transaction.

Buyer limits

Minimum output and caps

Checked integer arithmetic, buyer-selected minimum output, per-wallet limits, a total inventory ceiling and explicit start/end times constrain the release.

Canary1M

Small first allocation

The recommended first inventory is 1,000,000 PVTY, or 2% of supply. The code hard-caps any configured sale at 2,500,000 PVTY. Neither allocation is active today.

02 / Escrow program

A complete agreement state machine, not a marketing diagram.

The escrow candidate isolates each service payment and provider bond in agreement-specific token vaults. It accepts only administrator-allowlisted legacy SPL stablecoin mints.

VaultsPDA

Per-agreement custody

Payment and bond balances are held in separate program-derived token accounts with strict mint, owner and PDA checks.

EvidenceSHA-256

Immutable commitments

Terms, evidence, challenge and resolution digests are committed into ordered states with replay-resistant buyer sequence numbers.

Exits

Timeout-safe outcomes

Funding, activation, service, review and resolver timeouts define deterministic refunds or settlement paths. Pausing new risk does not disable valid exits.

03 / Verification record

Exact identities and artifact hashes.

Reserved identities bind this reviewed snapshot before any network deployment. They are not live addresses on devnet or mainnet.

Local Solana audit-candidate build record
ArtifactReserved identity / SHA-256Observed local result
PVTY mint ceremony8a9P2My6dUhKYJacztYv6bSjKJ1XZwTYY3qz5VwgcGML
Immutable legacy seed
pactlayer-pact-v1
Finalized on Solana mainnet on 4 August 2026: 50,000,000 PVTY, 9 decimals, full supply in the published treasury token account, and mint and freeze authorities removed.
PVTY saleCeMivF2Rn4mNuXDVFu9FRFMLcT4st4QXZsigXFGoQs3V
Renamed source rebuild pending
The prior-brand 378,976-byte SBF candidate passed 16/16 model checks and local-validator purchase and rollback tests. That binary is not represented as the current PactVerity build.
Service escrow94w1hmUSaDyJYNb2EJyA5wGcccEvpF2nfqVqaBAKqiLU
Renamed source rebuild pending
The prior-brand 559,248-byte SBF candidate passed 9/9 state-model checks and loaded locally. The bootstrap account metadata was simulated without a valid owner signature.

Executed test—not transaction volume.

The sale runtime used local test SOL and a local test mint: 0.25 test SOL produced exactly 3,750 test PVTY at the configured rate. A quote one base unit above the deterministic output failed and left both tracked asset balances unchanged. This is functional test evidence, not funds moved, TVL, revenue, a customer or an investor.

04 / Public source

Read the selected audit-candidate files.

Every linked program file is part of the reviewed public snapshot and has a SHA-256 value in the manifest. The links alone are not a reproducible build bundle: compiled binaries, the runtime harness, raw execution logs and deployer or program secret keys are not published.

05 / Remaining gates

Local execution is the start of release engineering.

PactVerity will not relabel this candidate as production merely because it compiled.

  • Deploy the frozen snapshot to Solana devnet and publish Explorer links.
  • Execute the full escrow lifecycle with independent buyer, provider and resolver wallets.
  • Run property, adversarial, access-control and economic-invariant tests.
  • Commission a named independent audit and publish both findings and remediation.
  • Set multisignature program and treasury authorities, transaction caps and incident controls.
  • Deploy to mainnet only after those facts exist and the operator and participation terms are complete.

Current release

Selected source public. Local checks summarised. Mainnet locked.

Review the launch gates