Canonical Custody Proof

canonical-custody-proof.generated.md

Boundary

This route preserves legacy markdown access inside the Next.js surface. The raw repository file remains authoritative.

Open raw file

Canonical Custody Proof

Overview

project: PrivateDAO
generated at: 2026-05-26T03:08:18.185Z
status: ready-for-transfer
production mainnet claim allowed: false
network: testnet
completion: 16/25

Existing Devnet Rehearsal

network: devnet
implementation: spl-token-2022-multisig
rehearsal multisig address: EqbW1xQRABPNmPM4TMkdygp6j94i7A3DSbgFKTpqXvJE
rehearsal multisig creation signature: 4KSyTYQTzeNpBDWou7GFLmvUpAhLgmNKkNdd4PZqndLpCWmUnArffYRQUwe6zrTmQD5uCbBfBR6pakf9Gz8dviRp
rehearsal multisig explorer: https://explorer.solana.com/address/EqbW1xQRABPNmPM4TMkdygp6j94i7A3DSbgFKTpqXvJE?cluster=devnet
rehearsal creation explorer: https://explorer.solana.com/tx/4KSyTYQTzeNpBDWou7GFLmvUpAhLgmNKkNdd4PZqndLpCWmUnArffYRQUwe6zrTmQD5uCbBfBR6pakf9Gz8dviRp?cluster=devnet

Multisig And Timelock

implementation: Squads Protocol
multisig address: thHmF7VYNtxE1MaDzYXbfPCiq13RF6JwuWnjvDZuSmF
threshold: 2-of-3
creation signature: 67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ
rehearsal signature: pending
minimum timelock hours: 48
configured timelock hours: 48
timelock configuration signature: 67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ
timelock configuration reference url: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet

Explorer links:

multisig address explorer: https://explorer.solana.com/address/thHmF7VYNtxE1MaDzYXbfPCiq13RF6JwuWnjvDZuSmF?cluster=testnet
multisig creation explorer: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet
rehearsal explorer: pending
timelock config explorer: https://explorer.solana.com/tx/67S63JAUNvvCED3hE9h6bCXW9iJ3EYzJLARvj8Lki5x2dJEgLnrfES9mp6bAxfsH6vfmor2ocqNaEd68uVN68DNJ?cluster=testnet

Signer Roster

Slot 1 · founder-operator

public key: 4Mm5YTRbJuyA8NcWM85wTnx6ZQMXNph2DSnzCCKLhsMD
storage class: cold-or-hardware
backup documented: true
explorer: https://explorer.solana.com/address/4Mm5YTRbJuyA8NcWM85wTnx6ZQMXNph2DSnzCCKLhsMD?cluster=testnet

Slot 2 · independent-security-or-ops-signer

public key: BBBPcpUnnBi3CWUhcv6vLTqaY9pugAGuhgw2Axjpvcr2
storage class: cold-or-hardware
backup documented: true
explorer: https://explorer.solana.com/address/BBBPcpUnnBi3CWUhcv6vLTqaY9pugAGuhgw2Axjpvcr2?cluster=testnet

Slot 3 · recovery-or-governance-signer

public key: 2KpA69UB55tfWUSkKj5j7Tvebd3eG22hEs9hjXUq7pf5
storage class: cold-or-hardware
backup documented: true
explorer: https://explorer.solana.com/address/2KpA69UB55tfWUSkKj5j7Tvebd3eG22hEs9hjXUq7pf5?cluster=testnet

Authority Transfer Proof

program-upgrade-authority

program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
destination authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv
transfer signature: EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy
post-transfer readout: Program Id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva; ProgramData Address: FKyt5DcmRQcCF8kzMGjCvfGb3ZPHMQnH1SqiG9Mi8xEc; Authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv; Last Deployed In Slot: 405189011
program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
destination explorer: https://explorer.solana.com/address/CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv?cluster=testnet
transfer explorer: https://explorer.solana.com/tx/EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy?cluster=testnet
post-transfer readout reference: https://explorer.solana.com/tx/EzwLLrAchBpj3eLTUFuv1uo9rSLKgKNbQgp1DkCevJycT31Eou9TSJsJsEfMjLt4q87pKwXaZUTqCZ1NduNc1vy?cluster=testnet

dao-authority

program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
destination authority: pending
transfer signature: pending
post-transfer readout: pending
program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
destination explorer: pending
transfer explorer: pending
post-transfer readout reference: pending

treasury-operator-authority

program id: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
destination authority: pending
transfer signature: pending
post-transfer readout: pending
program explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
destination explorer: pending
transfer explorer: pending
post-transfer readout reference: pending

Observed Chain Readouts

Current Testnet deployed program readout after Squads transfer

cluster: testnet
status: observed
address: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
authority: CALHrBqx6jbzcPn2NVcinqSAHeod65v9LcDuTxsdPqBv
owner: BPFLoaderUpgradeab1e11111111111111111111111
program data address: FKyt5DcmRQcCF8kzMGjCvfGb3ZPHMQnH1SqiG9Mi8xEc
last deploy slot: 410689759
balance sol: 10.35334104
explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet
observed at: 2026-05-26T03:08:02.746Z
command: solana program show EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva --url testnet
error: pending
note: Current reviewer-facing Anchor 1.0.1 Testnet program. This is the live custody surface for judging; archived Devnet readouts are no longer the current program baseline.

Current Testnet DAO anchor readout

cluster: testnet
status: observed
address: FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ
authority: pending
owner: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
program data address: pending
last deploy slot: pending
balance sol: 0.00235248
explorer: https://explorer.solana.com/address/FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ?cluster=testnet
observed at: 2026-05-26T03:08:03.512Z
command: solana account FEz2hCLGpDhJ3cdAm5CCWFzrKv8vDDzmmt9UjdF2fApZ --url testnet --output json
error: pending
note: Canonical Testnet DAO PDA used for the post-timelock DAO authority handoff.

Current Testnet treasury PDA readout

cluster: testnet
status: not-found
address: 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
authority: pending
owner: pending
program data address: pending
last deploy slot: pending
balance sol: pending
explorer: https://explorer.solana.com/address/46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3?cluster=testnet
observed at: 2026-05-26T03:08:04.262Z
command: solana account 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3 --url testnet --output json
error: Error: AccountNotFound: pubkey=46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
note: Derived Testnet treasury PDA for the canonical DAO. It may remain uninitialized until the DAO receives a deposit.

Target network program readout

cluster: mainnet-beta
status: not-found
address: EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
authority: pending
owner: pending
program data address: pending
last deploy slot: pending
balance sol: pending
explorer: https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
observed at: 2026-05-26T03:08:04.777Z
command: solana program show EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva --url mainnet-beta
error: Error: Unable to find the account EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva
note: Mainnet is not claimed for the current product. This readout exists only to prove the public packet is Testnet-scoped and does not imply production mainnet deployment.

Target network treasury readout

cluster: mainnet-beta
status: not-found
address: 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
authority: pending
owner: pending
program data address: pending
last deploy slot: pending
balance sol: pending
explorer: https://explorer.solana.com/address/46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
observed at: 2026-05-26T03:08:05.220Z
command: solana account 46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3 --url mainnet-beta --output json
error: Error: AccountNotFound: pubkey=46F4oV4edtepPTGqLBfFJeBKdccgfnkk9e4WK7Z1MZD3
note: Mainnet treasury visibility is intentionally not claimed. Real-funds production readiness requires a separate mainnet cutover packet.

Exact Pending Items

rehearsal signature
dao authority destination authority
dao authority transfer signature
dao authority post-transfer readout
dao authority post-transfer readout reference
treasury operator authority destination authority
treasury operator authority transfer signature
treasury operator authority post-transfer readout
treasury operator authority post-transfer readout reference

Exact Blocker

blocker id: upgrade-authority-multisig
severity: critical
status: pending-external

Next action:

Move production upgrade authority and operational authorities to a documented multisig or governance-owned path and rehearse rotation.

Evidence references:

docs/authority-hardening.md
docs/authority-transfer-runbook.md
docs/production-custody-ceremony.md
docs/multisig-setup-intake.json
docs/multisig-setup-intake.md
docs/launch-ops-checklist.json
docs/launch-ops-checklist.md
docs/mainnet-cutover-runbook.md
docs/launch-trust-packet.generated.md

Canonical Sources

Honest Boundary

This packet is the canonical custody truth surface for PrivateDAO.

It records the real fields, real pending items, and real observed chain readouts available today.

It does not claim that the production multisig, authority transfer signatures, or post-transfer readouts already exist until those values and links are actually recorded.