{
  "schemaVersion": 2,
  "releaseLine": "Vaultfire Solana V3",
  "canonical": true,
  "evidenceScope": "source-only",
  "executableEvidenceAvailable": false,
  "deploymentAuthorized": false,
  "allowedDispositions": [
    "supported-candidate",
    "redesign-required",
    "retired"
  ],
  "policy": {
    "supportedCandidateCount": 6,
    "redesignRequiredCount": 4,
    "retiredCount": 5,
    "buildOnlySupportedCandidates": true,
    "generatedIdlsOnlyForSupportedCandidates": true,
    "artifactsOnlyForSupportedCandidates": true,
    "deploymentMapsProhibited": true,
    "crossProgramInvocationProhibited": true,
    "protectedDecisionUseProhibited": true,
    "rehearsalUpgradeAuthority": null,
    "protectedInputClasses": [
      "behavioral",
      "belief",
      "biometric",
      "flourishing",
      "loyalty",
      "profiling",
      "quality",
      "reputation",
      "surveillance"
    ],
    "protectedDecisions": [
      "access",
      "custody",
      "disputes",
      "eligibility",
      "pricing",
      "routing",
      "settlement",
      "slashing",
      "value-transfer"
    ],
    "committedCandidateRequiredForExecutableEvidence": true
  },
  "programs": [
    {
      "name": "ai_accountability_bonds",
      "programId": "7UP91JrXSfLSPkGE6SKLREX6Vm7MmuDbk1m4cUuVr3M7",
      "sourcePath": "programs/ai_accountability_bonds/src/lib.rs",
      "cargoManifestPath": "programs/ai_accountability_bonds/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "objective-non-custodial-policy-with-agent-owned-vault",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": ["initialize", "stake_bond", "slash_bond", "withdraw_bond"],
      "sourceSha256": "70b481f706fb651b9d87173b775c32ec25da439dc1c721d9990b5569771f4044",
      "sourceInterfaceSha256": "d5c2e969c745d565d29288966f206abfa986a1875e1bc675a796490ce0968554",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate source after objective lifecycle and agent-owned withdrawal hardening; not audited or deployed."
    },
    {
      "name": "ai_partnership_bonds",
      "programId": "H95dFPhN4AZZbQPHYU34UfCNiiiw7y8ik4ZFSy9sfxZb",
      "sourcePath": "programs/ai_partnership_bonds/src/lib.rs",
      "cargoManifestPath": "programs/ai_partnership_bonds/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "objective-mutual-consent-record",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": ["initialize", "create_bond", "dissolve_bond"],
      "sourceSha256": "b974e75a6fb0c4037ff72d66f101ebc878cce4a8dd47963b0dc13a706be9d411",
      "sourceInterfaceSha256": "40bf32d7d70e9eb86000761167470bd25c665247e5733e6716ac6b4e68711fd9",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate source limited to canonical participants and mutual consent; not audited or deployed."
    },
    {
      "name": "anti_surveillance",
      "programId": "DGG9vAbddydCSYPgDEA4KeyWBVwbe6hXhhT1i4FqJpqQ",
      "sourcePath": "programs/anti_surveillance/src/lib.rs",
      "cargoManifestPath": "programs/anti_surveillance/Cargo.toml",
      "disposition": "redesign-required",
      "mode": "source-retained-non-release",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Compliance claims lack an objective verifier and require a negative-policy redesign."
    },
    {
      "name": "belief_attestation_verifier",
      "programId": "7qWbfWrNVhGa9poR5DkwYyYwepBm4kQ3uJuDsxF5YMAo",
      "sourcePath": "programs/belief_attestation_verifier/src/lib.rs",
      "cargoManifestPath": "programs/belief_attestation_verifier/Cargo.toml",
      "disposition": "retired",
      "mode": "permanently-excluded",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Belief attestations must not affect routing, custody, eligibility, pricing, access, settlement, slashing, or disputes."
    },
    {
      "name": "dilithium_attestor",
      "programId": "2EeLEM1JQbuZN3DV1Unmi8vsypqvdnzD9p7hS4wqbqAR",
      "sourcePath": "programs/dilithium_attestor/src/lib.rs",
      "cargoManifestPath": "programs/dilithium_attestor/Cargo.toml",
      "disposition": "redesign-required",
      "mode": "source-retained-non-release",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "No objective ML-DSA verification exists in this source; canonical-message verification requires redesign and audit."
    },
    {
      "name": "flourishing_metrics_oracle",
      "programId": "Ed4bbHcGYZJXZAQgzbuGYtKbctbQg59HnsNgsJgqPYMw",
      "sourcePath": "programs/flourishing_metrics_oracle/src/lib.rs",
      "cargoManifestPath": "programs/flourishing_metrics_oracle/Cargo.toml",
      "disposition": "retired",
      "mode": "permanently-excluded",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Subjective flourishing metrics are permanently excluded from V3 routing and protected decisions."
    },
    {
      "name": "identity_registry",
      "programId": "E5e8JogsRqjXAEa3RKxFFVShRfD8TMjoAporRMvMLuYE",
      "sourcePath": "programs/identity_registry/src/lib.rs",
      "cargoManifestPath": "programs/identity_registry/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "objective-self-asserted-identity-record",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": [
        "initialize",
        "register_agent",
        "update_agent",
        "deregister_agent"
      ],
      "sourceSha256": "dd41014303f623851fcd0cca0a2aceb96c11ec47bced3c8c75a07024c9c63990",
      "sourceInterfaceSha256": "95a37f49baf2abdf8aad020b72cbb70b6ea73be4703613aac77a921972e439bf",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate source for signer-controlled identity records only; it conveys no eligibility or reputation."
    },
    {
      "name": "mission_enforcement",
      "programId": "95nsDLQteRVijqfn6yNghSW4xakdEWXrztGmeh5YjA35",
      "sourcePath": "programs/mission_enforcement/src/lib.rs",
      "cargoManifestPath": "programs/mission_enforcement/Cargo.toml",
      "disposition": "redesign-required",
      "mode": "source-retained-non-release",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "A mission statement is not objective enforcement; any future form must be a non-custodial negative policy."
    },
    {
      "name": "multisig_governance",
      "programId": "78wgFpYaAnFXJGPLkUCc2xXo9FjwXvkiTCi39EKzovx6",
      "sourcePath": "programs/multisig_governance/src/lib.rs",
      "cargoManifestPath": "programs/multisig_governance/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "objective-threshold-record",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": [
        "initialize",
        "create_proposal",
        "sign_proposal",
        "finalize_proposal",
        "close_expired_proposal"
      ],
      "sourceSha256": "e467e65b48e25826579480ec2f854a16d28c180d2516cacc416dece632262da3",
      "sourceInterfaceSha256": "e601de7f5a512dd16f9afa211a9234058034cb5c6c29fc460c79f798abfa433d",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate source for explicit threshold authorization records; no deployment authority is granted."
    },
    {
      "name": "privacy_guarantees",
      "programId": "9jwLscZsufQERhh4wnc8p5hNYTw6Sz5CrkC3Kejjb1vK",
      "sourcePath": "programs/privacy_guarantees/src/lib.rs",
      "cargoManifestPath": "programs/privacy_guarantees/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "objective-fail-closed-commitment-record",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": [
        "initialize",
        "update_policy",
        "register_commitment",
        "update_compliance",
        "close_commitment"
      ],
      "sourceSha256": "81dc90e6c1624286e505c09fe24c8d4f7bb3f263b82dd738a77cac58f78c18da",
      "sourceInterfaceSha256": "0294b3c53618a77c0313dca86e9aa09fc59d39e772e885095ab51315efe3d3c7",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate source records commitments and fails closed on unverified compliance; no privacy guarantee is evidenced."
    },
    {
      "name": "production_belief_verifier",
      "programId": "4YzN25EqbAb6eFgnXsQTstjyPRmd6QmGwQGXVp6btApg",
      "sourcePath": "programs/production_belief_verifier/src/lib.rs",
      "cargoManifestPath": "programs/production_belief_verifier/Cargo.toml",
      "disposition": "retired",
      "mode": "permanently-excluded",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Belief-derived production decisions are permanently excluded from V3."
    },
    {
      "name": "reputation_registry",
      "programId": "Ayn4pDdoAHmoaRD2edRFxdpsMsmg3faU7rChLHDTaL3T",
      "sourcePath": "programs/reputation_registry/src/lib.rs",
      "cargoManifestPath": "programs/reputation_registry/Cargo.toml",
      "disposition": "retired",
      "mode": "permanently-excluded",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Reputation data is permanently excluded from V3 routing and protected decisions."
    },
    {
      "name": "trust_data_bridge",
      "programId": "CaihzPH42a4J48sc3nQ9votPk4Xj8hQourX38otBAxp7",
      "sourcePath": "programs/trust_data_bridge/src/lib.rs",
      "cargoManifestPath": "programs/trust_data_bridge/Cargo.toml",
      "disposition": "retired",
      "mode": "permanently-excluded",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Unverified cross-domain trust data must not enter V3 routing or protected decisions."
    },
    {
      "name": "validation_registry",
      "programId": "91Q3sPMksUR1SUciotWzpKtZLVF8MLQ8gyNPvsDvVXnL",
      "sourcePath": "programs/validation_registry/src/lib.rs",
      "cargoManifestPath": "programs/validation_registry/Cargo.toml",
      "disposition": "redesign-required",
      "mode": "source-retained-non-release",
      "buildEligible": false,
      "rehearsalEligible": false,
      "protectedDecisionUse": "prohibited",
      "reason": "Open-ended validation semantics require an objective canonical-message redesign."
    },
    {
      "name": "vaultfire_adapter",
      "programId": "6DFwZ6RGdeAS1ZxbmfPvnh61S67V2764dbKe7HzqV45C",
      "sourcePath": "programs/vaultfire_adapter/src/lib.rs",
      "cargoManifestPath": "programs/vaultfire_adapter/Cargo.toml",
      "disposition": "supported-candidate",
      "mode": "passive-unverified-adapter",
      "buildEligible": true,
      "rehearsalEligible": true,
      "allowedInstructions": [
        "initialize",
        "create_profile",
        "update_profile",
        "close_profile",
        "get_agent_profile"
      ],
      "sourceSha256": "9ecac69e367846ed1d79ee2591107080bc6b418a4ae8e480813a269b1232c65c",
      "sourceInterfaceSha256": "97bf019de01defad2249985d2d8f13e36dd6570c0bd176351799b26ad8b97ccd",
      "protectedDecisionUse": "prohibited",
      "reason": "Candidate only as a passive unverified record adapter; it cannot attest truth or drive routing or protected decisions."
    }
  ]
}
