# Vaultfire V3 partner-review evidence

This evidence was produced by the read-only `partner-review.sh` workflow.
It does not represent an independent human audit, deployment authorization,
owner authorization, partner acceptance or funds readiness.

## Bound identities

- Website baseline commit:
  `6325dc777d4a7e4fb1e8003f3cb7ba46cf989b25`
- Post-tag tooling commit:
  `b40d8f60a4b58c32e50912307bf52107ab45cb80`
- Source tag: `v3-source-2026-08-27`
- Annotated tag object: `d9757c125d547968f80d4c61bea08f6638b33dd6`
- Source commit: `bf4b97f65b7032c778d137bb52a432afc4615b51`
- Source tree: `a1fd90c26ae676c87a10e7d3e614e84961b2990c`

## Result

- Core partner-review result: pass
- Failed core checks: 0
- PR7: 21 files passed, 136 tests passed
- SDK: 6 suites passed, 68 tests passed
- No-wallet sandbox: 10 tests passed
- Current operational readiness: blocked as required
- Owner delegation: `awaiting_owner_signature`
- Forge/Base heavyweight gates: unrun
- Native Solana/SBF and local-validator gates: unrun
- Base fork gates: unrun

## Published files

- `partner-review-result-b40d8f6.json` is the machine-readable result.
- `vaultfire-v3-partner-review-evidence-b40d8f6.tar.gz` contains the exact
  retained logs, result, summary and its own internal `SHA256SUMS`.
- The directory-level `SHA256SUMS` binds both published files.

## Verify

```bash
sha256sum --check SHA256SUMS
mkdir vaultfire-v3-partner-review-evidence
tar -xzf vaultfire-v3-partner-review-evidence-b40d8f6.tar.gz \
  --strip-components=1 \
  -C vaultfire-v3-partner-review-evidence
(cd vaultfire-v3-partner-review-evidence && sha256sum --check SHA256SUMS)
```

Checksums prove byte equality with the published files. They are not an owner
signature. The owner delegation remains unsigned.