Operations
Curated in-app view
Source file linked
Back to documents
Document route

Canonical Custody Proof

Repo-backed custody truth packet with exact ceremony gates, observed chain readouts, and explorer-linked closure points.

Document context

Truth packet only; it does not claim that production multisig or authority transfer signatures already exist.

Audience: Operators, auditors, judges, buyers

Open raw file

Canonical Custody Proof

Overview

  • project: PrivateDAO
  • generated at: 2026-05-26T03:08:18.185Z
  • status: ready-for-transfer
  • production mainnet claim allowed: false
  • network: testnet
  • completion: 16/25

Existing Devnet Rehearsal

  • network: devnet
  • implementation: spl-token-2022-multisig
  • rehearsal multisig address: EqbW1xQRABPNmPM4TMkdygp6j94i7A3DSbgFKTpqXvJE
  • rehearsal multisig creation signature: 4KSyTYQTzeNpBDWou7GFLmvUpAhLgmNKkNdd4PZqndLpCWmUnArffYRQUwe6zrTmQD5uCbBfBR6pakf9Gz8dviRp
  • rehearsal multisig explorer: https://explorer.solana.com/address/EqbW1xQRABPNmPM4TMkdygp6j94i7A3DSbgFKTpqXvJE?cluster=devnet
  • rehearsal creation explorer: https://explorer.solana.com/tx/4KSyTYQTzeNpBDWou7GFLmvUpAhLgmNKkNdd4PZqndLpCWmUnArffYRQUwe6zrTmQD5uCbBfBR6pakf9Gz8dviRp?cluster=devnet

Multisig And Timelock

  • implementation: Squads Protocol
  • multisig address: thHmF7VYNtxE1MaDzYXbfPCiq13RF6JwuWnjvDZuSmF
  • threshold: 2-of-3
  • creation signature: 67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ
  • rehearsal signature: pending
  • minimum timelock hours: 48
  • configured timelock hours: 48
  • timelock configuration signature: 67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ
  • timelock configuration reference url: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet

Explorer links:

  • multisig address explorer: https://explorer.solana.com/address/thHmF7VYNtxE1MaDzYXbfPCiq13RF6JwuWnjvDZuSmF?cluster=testnet
  • multisig creation explorer: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet
  • rehearsal explorer: pending
  • timelock config explorer: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet

Signer Roster

Slot 1 · founder-operator

  • public key: 4Mm5YTRbJuyA8NcWM85wTnx6ZQMXNph2DSnzCCKLhsMD
  • storage class: cold-or-hardware
  • backup documented: true
  • explorer: https://explorer.solana.com/address/4Mm5YTRbJuyA8NcWM85wTnx6ZQMXNph2DSnzCCKLhsMD?cluster=testnet

Slot 2 · independent-security-or-ops-signer

  • public key: BBBPcpUnnBi3CWUhcv6vLTqaY9pugAGuhgw2Axjpvcr2
  • storage class: cold-or-hardware
  • backup documented: true
  • explorer: https://explorer.solana.com/address/BBBPcpUnnBi3CWUhcv6vLTqaY9pugAGuhgw2Axjpvcr2?cluster=testnet

Slot 3 · recovery-or-governance-signer

  • public key: 2KpA69UB55tfWUSkKj5j7Tvebd3eG22hEs9hjXUq7pf5
  • storage class: cold-or-hardware
  • backup documented: true
  • explorer: https://explorer.solana.com/address/2KpA69UB55tfWUSkKj5j7Tvebd3eG22hEs9hjXUq7pf5?cluster=testnet

Authority Transfer Proof

program-upgrade-authority

  • program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • destination authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv
  • transfer signature: EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy
  • post-transfer readout: Program Id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva; ProgramData Address: FKyt5DcmRQcCF8kzMGjCvfGb3ZPHMQnH1SqiG9Mi8xEc; Authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv; Last Deployed In Slot: 405189011
  • program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
  • destination explorer: https://explorer.solana.com/address/CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv?cluster=testnet
  • transfer explorer: https://explorer.solana.com/tx/EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy?cluster=testnet
  • post-transfer readout reference: https://explorer.solana.com/tx/EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy?cluster=testnet

dao-authority

  • program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • destination authority: pending
  • transfer signature: pending
  • post-transfer readout: pending
  • program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
  • destination explorer: pending
  • transfer explorer: pending
  • post-transfer readout reference: pending

treasury-operator-authority

  • program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • destination authority: pending
  • transfer signature: pending
  • post-transfer readout: pending
  • program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
  • destination explorer: pending
  • transfer explorer: pending
  • post-transfer readout reference: pending

Observed Chain Readouts

Current Testnet deployed program readout after Squads transfer

  • cluster: testnet
  • status: observed
  • address: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv
  • owner: BPFLoaderUpgradeab1e11111111111111111111111
  • program data address: FKyt5DcmRQcCF8kzMGjCvfGb3ZPHMQnH1SqiG9Mi8xEc
  • last deploy slot: 410689759
  • balance sol: 10.35334104
  • explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
  • observed at: 2026-05-26T03:08:02.746Z
  • command: solana program show EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva --url testnet
  • error: pending
  • note: Current reviewer-facing Anchor 1.0.1 Testnet program. This is the live custody surface for judging; archived Devnet readouts are no longer the current program baseline.

Current Testnet DAO anchor readout

  • cluster: testnet
  • status: observed
  • address: FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ
  • authority: pending
  • owner: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • program data address: pending
  • last deploy slot: pending
  • balance sol: 0.00235248
  • explorer: https://explorer.solana.com/address/FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ?cluster=testnet
  • observed at: 2026-05-26T03:08:03.512Z
  • command: solana account FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ --url testnet --output json
  • error: pending
  • note: Canonical Testnet DAO PDA used for the post-timelock DAO authority handoff.

Current Testnet treasury PDA readout

  • cluster: testnet
  • status: not-found
  • address: 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
  • authority: pending
  • owner: pending
  • program data address: pending
  • last deploy slot: pending
  • balance sol: pending
  • explorer: https://explorer.solana.com/address/46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3?cluster=testnet
  • observed at: 2026-05-26T03:08:04.262Z
  • command: solana account 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3 --url testnet --output json
  • error: Error: AccountNotFound: pubkey=46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
  • note: Derived Testnet treasury PDA for the canonical DAO. It may remain uninitialized until the DAO receives a deposit.

Target network program readout

  • cluster: mainnet-beta
  • status: not-found
  • address: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • authority: pending
  • owner: pending
  • program data address: pending
  • last deploy slot: pending
  • balance sol: pending
  • explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • observed at: 2026-05-26T03:08:04.777Z
  • command: solana program show EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva --url mainnet-beta
  • error: Error: Unable to find the account EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
  • note: Mainnet is not claimed for the current product. This readout exists only to prove the public packet is Testnet-scoped and does not imply production mainnet deployment.

Target network treasury readout

  • cluster: mainnet-beta
  • status: not-found
  • address: 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
  • authority: pending
  • owner: pending
  • program data address: pending
  • last deploy slot: pending
  • balance sol: pending
  • explorer: https://explorer.solana.com/address/46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
  • observed at: 2026-05-26T03:08:05.220Z
  • command: solana account 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3 --url mainnet-beta --output json
  • error: Error: AccountNotFound: pubkey=46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
  • note: Mainnet treasury visibility is intentionally not claimed. Real-funds production readiness requires a separate mainnet cutover packet.

Exact Pending Items

  • rehearsal signature
  • dao authority destination authority
  • dao authority transfer signature
  • dao authority post-transfer readout
  • dao authority post-transfer readout reference
  • treasury operator authority destination authority
  • treasury operator authority transfer signature
  • treasury operator authority post-transfer readout
  • treasury operator authority post-transfer readout reference

Exact Blocker

  • blocker id: upgrade-authority-multisig
  • severity: critical
  • status: pending-external

Next action:

Move production upgrade authority and operational authorities to a documented multisig or governance-owned path and rehearse rotation.

Evidence references:

  • docs/authority-hardening.md
  • docs/authority-transfer-runbook.md
  • docs/production-custody-ceremony.md
  • docs/multisig-setup-intake.json
  • docs/multisig-setup-intake.md
  • docs/launch-ops-checklist.json
  • docs/launch-ops-checklist.md
  • docs/mainnet-cutover-runbook.md
  • docs/launch-trust-packet.generated.md

Canonical Sources

Honest Boundary

This packet is the canonical custody truth surface for PrivateDAO.

It records the real fields, real pending items, and real observed chain readouts available today.

It does not claim that the production multisig, authority transfer signatures, or post-transfer readouts already exist until those values and links are actually recorded.