Vaultfire Solana corrected-source artifact closure — 2026-08-31

Final retained SBF artifact
- Path: evidence/sbf/vaultfire_v3_successor.so
- SHA-256: b43728ec4e3d14b938583ff9ada5898ff87d9fb994c7cf40e8c4de0fa6e7a92e
- Size: 1,461,112 bytes

Reproducibility
- Two current-source cargo build-sbf builds used isolated /dev/shm target and
  output directories with CARGO_BUILD_JOBS=1 and the locked dependency graph.
- Both builds completed without stack or undefined-behavior diagnostics.
- The two outputs were byte-for-byte identical (cmp exit 0).
- Only the identical corrected-source output was promoted.

Validation
- Real-SBF program_lifecycle: PASS, 5 passed, 0 failed. The harness sets
  BPF_OUT_DIR before ProgramTest::default(), which selects prefer_bpf, and the
  retained ELF is loaded into the upgradeable-program genesis account.
- Locked host tests: PASS, 25 passed, 0 failed (13 library + 12 adversarial).
- cargo fmt --all -- --check: PASS.
- Strict default Clippy with -D warnings: PASS.
- Strict program-test lifecycle-target Clippy with -D warnings: PASS.
- IDL regeneration/exact validation: PASS, 59 instructions and 29 accounts;
  regenerated and retained IDLs are byte-identical.
- Python IDL/release-safety regressions: PASS, 6 passed, 0 failed.
- SOURCE_SHA256SUMS.txt: every listed entry verified.
- Retained ELF checksum file: verified.

Preserved blocker
- Real SP1 proof success remains blocked: PROGRAM_VKEY_HASH is still all zero,
  manifests/mldsa-chain-gate.json remains blocked, verificationKeyPinned and
  independentlyAudited remain false, and all release/deployment/production
  authorization flags remain false.

No commit, push, deployment, signing, broadcast, wallet creation, or payment
activation was performed.
