Skip to content

ANCHOR_HANDOFF.md

Latest commit

 

History

History
86 lines (67 loc) · 3.39 KB

ANCHOR_HANDOFF.md

File metadata and controls

86 lines (67 loc) · 3.39 KB
Raw

Devnet anchor handoff

The validated Telegram checkpoint was finalized on Solana devnet on 2026-08-04. This document preserves the operator review procedure and the public proof. Never provide a private key, seed phrase, keystore, wallet export, or signing token to ClawLedger, ZeroClaw, an agent, or a submission form.

The published transaction was broadcast by a disposable devnet signer for chain verification. It is not presented as evidence of a Phantom UI approval. The steps below remain the required operator procedure for reproducing the wallet-review flow.

Fixed checkpoint

event_count = 200
root        = df25687ed19a6ec87a4ee025ce8d0d9b03e4809d6257a215865e0f17a4447e29
memo        = clawledger:v1:df25687ed19a6ec87a4ee025ce8d0d9b03e4809d6257a215865e0f17a4447e29:200
cluster     = devnet

Finalized proof

signature = N3mzTr1YAWw84b2irzd9Cr4cmPd9JHZSmZaUq3PPTr9xYPLfbJZZEqCMP417164U6exTiBA9kjXZ7pf4PHSQviU
slot      = 481112918
block time = 2026-08-04T08:35:24Z
verifier  = valid: true, reason: ok

Open the finalized transaction in Solana Explorer. The machine-readable public record is in docs/FINALIZED_ANCHOR.json.

The local manifest was independently verified before the Action was served. If any of these values differ in the wallet preview, reject the transaction.

Wallet review gate

  1. Use a disposable wallet set to Solana devnet with devnet SOL only.
  2. Open the local /anchor signer in a browser with Phantom, or open /api/actions/anchor through a compatible Action client. Phantom must be installed and unlocked in the same Chrome profile that opens the signer, with permission to read and change site data. Phantom officially supports provider injection on localhost and 127.0.0.1; if the signer still reports that Phantom is unavailable, quit and reopen Chrome before retrying. Never paste a recovery phrase into the signer page.
  3. Confirm the transaction has exactly one instruction for Solana's Memo program.
  4. Confirm the instruction data is the exact Memo above.
  5. Confirm there is no SOL transfer, token transfer, account creation, extra signer, or additional instruction.
  6. Only then approve signing and broadcasting in the wallet.

ClawLedger constructs the unsigned transaction but cannot sign or broadcast it. The wallet remains the sole signer.

Phantom references:

Finalized verification

Copy only the public devnet transaction signature and run:

$env:PYTHONPATH = "src"
python -m clawledger verify-anchor `
  --manifest <LOCAL_200_EVENT_MANIFEST> `
  --signature <DEVNET_SIGNATURE> `
  --rpc https://api.devnet.solana.com `
  --write-signature

--write-signature is allowed only when the command first reports "valid": true. The public explorer URL is:

https://explorer.solana.com/tx/<DEVNET_SIGNATURE>?cluster=devnet

If recording a separate Phantom reproduction, capture the wallet preview, success state, verifier output, and Explorer page. Do not show the wallet recovery phrase, browser extension vault, Telegram token, model authentication, or raw audit trace.