EVANGEL DOCUMENTATION / 13

Program reference

Solana custody is separate from trading and key management.

Program and clients

solana/program/src/lib.rs implements custody and milestone state transitions. fees.rs fixes the four allocations; governance.rs validates Squads; fees.rs also implements daily surplus and invoice-bound reimbursement. lib/solana/program.mjs is the matching client codec. lib/solana/squads.mjs builds a narrow subset of official Squads v4 instructions, tested against the deployed immutable binary.

Production separation

The deployable build rejects custom-curve launch and swap actions. A separate test-fixtures build exercises supply and release invariants. The old negotiated buy/burn opcode rejects execution in both builds. No general CPI router or emergency sweep exists.

Reviewable actions

Milestones bind amounts, criteria, recipients, evidence and revisions. Governed actions carry an onchain expiration and require the verified Squads vault signature. Foundation and expense claims are fixed-recipient and cannot use other budgets. Repository-owner SOL payroll is explicit and evidence-reviewed.