Custody Proof Reviewer Packet

Overview

• project: `PrivateDAO`
• generated at: `2026-04-11T14:36:24.610Z`
• reviewer intent: Explain the current custody truth, show what is externally proven now, and make the missing external ceremony evidence explicit without narrative drift.
• custody status: `pending-external`
• trust decision: `blocked-external-steps`
• production mainnet claim allowed: `false`
• custody completion: `1/25`

Current Truth

• summary: PrivateDAO is devnet-proven and internally hardened, but real-funds mainnet production remains blocked until external audit, custody, monitoring, runtime, settlement-receipt, and release-ceremony items are closed with evidence.
• multisig implementation: `pending-selection`
• multisig address: `pending`
• threshold: `2-of-3`
• configured timelock hours: `pending`
• minimum timelock hours: `48`

What Is Externally Proven Now

• Current deployed program readout (devnet)
• address: `5AhUsbQ4mJ8Xh7QJEomuS85qGgmK9iNvFqzF669Y7Psx`
• explorer: https://explorer.solana.com/address/5AhUsbQ4mJ8Xh7QJEomuS85qGgmK9iNvFqzF669Y7Psx?cluster=devnet
• authority: `4Mm5YTRbJuyA8NcWM85wTnx6ZQMXNph2DSnzCCKLhsMD`
• program data: `CeggEn3sNVbiuJHLKDaCPMH4uLczu1Dr3ZGKKcaKBqeN`
• last deploy slot: `454368825`
• Current DAO anchor readout (devnet)
• address: `FZV9KmpeY1B31XvszQypp5T6nQN5C44JDLM4QWBEDvhx`
• explorer: https://explorer.solana.com/address/FZV9KmpeY1B31XvszQypp5T6nQN5C44JDLM4QWBEDvhx?cluster=devnet
• authority: `pending`
• program data: `pending`
• last deploy slot: `pending`
• Current treasury anchor readout (devnet)
• address: `AZUroiNeGAjNdD84eEHnAKHHFwqAFmkjr2g1eoF7Ek5c`
• explorer: https://explorer.solana.com/address/AZUroiNeGAjNdD84eEHnAKHHFwqAFmkjr2g1eoF7Ek5c?cluster=devnet
• authority: `pending`
• program data: `pending`
• last deploy slot: `pending`

Explorer-linked artifacts:

• No custody ceremony signatures are recorded yet.

Exact Pending Items

• chosen multisig implementation
• multisig public address
• multisig creation signature
• rehearsal signature
• timelock configuration of at least 48 hours
• timelock configuration signature or readout
• signer slot 1 public key
• backup procedure for signer slot 1
• signer slot 2 public key
• backup procedure for signer slot 2
• signer slot 3 public key
• backup procedure for signer slot 3
• program upgrade authority destination authority
• program upgrade authority transfer signature
• program upgrade authority post-transfer readout
• program upgrade authority post-transfer readout reference
• dao authority destination authority
• dao authority transfer signature
• dao authority post-transfer readout
• dao authority post-transfer readout reference
• treasury operator authority destination authority
• treasury operator authority transfer signature
• treasury operator authority post-transfer readout
• treasury operator authority post-transfer readout reference

Exact Mainnet Blocker

• blocker id: `upgrade-authority-multisig`
• severity: `critical`
• status: `pending-external`
• next action: Move production upgrade authority and operational authorities to a documented multisig or governance-owned path and rehearse rotation.

Blocker evidence refs:

• docs/authority-hardening.md
• docs/authority-transfer-runbook.md
• docs/production-custody-ceremony.md
• docs/multisig-setup-intake.json
• docs/multisig-setup-intake.md
• docs/launch-ops-checklist.json
• docs/launch-ops-checklist.md
• docs/mainnet-cutover-runbook.md
• docs/launch-trust-packet.generated.md

Strict Ingestion Route

• Build the public-key and signature packet in https://privatedao.org/custody/
• Save it locally as docs/custody-evidence-intake.json
• Run npm run apply:custody-evidence-intake
• Re-open canonical custody proof, launch trust packet, and the track proof closure surfaces

Judge-First Track Openings

Use these exact opening sequences to keep the first 30 to 45 seconds of the track videos aligned with the judge-first top strip and the reviewer packet.

Frontier Reviewer Packet

• best demo route: `/start`
• What works now: Lead the first 90 seconds from /start into /command-center with a real wallet-first path. Use /proof/?judge=1, trust package, diagnostics, and services as the second-stage proof of maturity. Keep the README, deck, story video, and track center perfectly aligned with the live site.
• What is externally proven: Proof center via /proof and Launch trust packet via /documents/launch-trust-packet.
• Exact blocker: upgrade-authority-multisig. The startup-quality path remains blocked until production multisig, authority transfer signatures, and post-transfer readouts are recorded.
• Best demo route: open /start first. Lead with /start, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.
• voiceover: What works now: Lead the first 90 seconds from /start into /command-center with a real wallet-first path. Use /proof/?judge=1, trust package, diagnostics, and services as the second-stage proof of maturity. Keep the README, deck, story video, and track center perfectly aligned with the live site. What is externally proven: Proof center via /proof and Launch trust packet via /documents/launch-trust-packet. Exact blocker: upgrade-authority-multisig. The startup-quality path remains blocked until production multisig, authority transfer signatures, and post-transfer readouts are recorded. Best demo route: open /start first. Lead with /start, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.

Confidential Governance Reviewer Packet

• best demo route: `/story`
• What works now: Use the comprehensive story video as the first-pass demo for judges. Lead the click path from /security to the ZK matrix, confidence engine, and V3 proof packet. Keep the pitch deck anchored around private governance, confidential payouts, and honest launch boundaries.
• What is externally proven: Live Proof V3 via /documents/live-proof-v3 and ZK capability matrix via /documents/zk-capability-matrix.
• Exact blocker: magicblock-refhe-source-receipts. Privacy launch remains blocked until settlement receipts or verifier-grade source proof replace the current integration boundary.
• Best demo route: open /story first. Lead with /story, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.
• voiceover: What works now: Use the comprehensive story video as the first-pass demo for judges. Lead the click path from /security to the ZK matrix, confidence engine, and V3 proof packet. Keep the pitch deck anchored around private governance, confidential payouts, and honest launch boundaries. What is externally proven: Live Proof V3 via /documents/live-proof-v3 and ZK capability matrix via /documents/zk-capability-matrix. Exact blocker: magicblock-refhe-source-receipts. Privacy launch remains blocked until settlement receipts or verifier-grade source proof replace the current integration boundary. Best demo route: open /story first. Lead with /story, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.

Runtime Infrastructure Reviewer Packet

• best demo route: `/services`
• What works now: Show diagnostics, runtime evidence, and hosted read/API packaging in one buyer-friendly path. Use the service catalog, SLA, pricing, and trust package as the commercial proof layer. Keep the Fast RPC role explicit in video, deck, README, and services UI.
• What is externally proven: Diagnostics via /diagnostics and Frontier integrations via /documents/frontier-integrations.
• Exact blocker: production-monitoring-alerts. RPC and hosted-read mainnet claims remain blocked until live monitoring, alert delivery, and tested operator ownership are recorded.
• Best demo route: open /services first. Lead with /services, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.
• voiceover: What works now: Show diagnostics, runtime evidence, and hosted read/API packaging in one buyer-friendly path. Use the service catalog, SLA, pricing, and trust package as the commercial proof layer. Keep the Fast RPC role explicit in video, deck, README, and services UI. What is externally proven: Diagnostics via /diagnostics and Frontier integrations via /documents/frontier-integrations. Exact blocker: production-monitoring-alerts. RPC and hosted-read mainnet claims remain blocked until live monitoring, alert delivery, and tested operator ownership are recorded. Best demo route: open /services first. Lead with /services, then keep proof, custody truth, and the blocker in the same judge flow instead of splitting the story across routes.

Required External Inputs

• 3 production signer public keys
• chosen multisig implementation and address
• 48+ hour timelock configuration evidence
• authority transfer signatures, explorer links, and readouts
• real-device wallet captures
• external audit report or signed memo
• first pilot DAO target and operator contact

Live Routes

• https://privatedao.org/custody/
• https://privatedao.org/security/
• https://privatedao.org/documents/launch-trust-packet/
• https://privatedao.org/documents/canonical-custody-proof/

Linked Docs

• `docs/canonical-custody-proof.generated.md`
• `docs/track-judge-first-openings.generated.md`
• `docs/launch-trust-packet.generated.md`
• `docs/production-custody-ceremony.md`
• `docs/multisig-setup-intake.md`
• `docs/multisig-setup-intake.json`
• `docs/mainnet-blockers.md`
• `docs/custody-proof-reviewer-packet.generated.md`
• `docs/custody-observed-readouts.json`
• `docs/authority-transfer-runbook.md`
• `docs/external-audit-engagement.md`
• `docs/audit-handoff.md`
• `docs/governance-hardening-v3.md`
• `docs/settlement-hardening-v3.md`
• `docs/test-wallet-live-proof-v3.generated.md`
• `docs/runtime/real-device.md`
• `docs/pilot-onboarding-playbook.md`
• `docs/pilot-program.md`
• `docs/trust-package.md`

Canonical Commands

• `npm run build:custody-proof-reviewer-packet`
• `npm run verify:custody-proof-reviewer-packet`
• `npm run build:track-judge-first-openings`
• `npm run verify:track-judge-first-openings`
• `npm run apply:custody-evidence-intake`
• `npm run build:launch-trust-packet`
• `npm run verify:launch-trust-packet`
• `npm run verify:multisig-intake`
• `npm run verify:launch-ops`
• `npm run verify:mainnet-blockers`
• `npm run verify:real-device-runtime`
• `npm run check:mainnet`

Honest Boundary

This reviewer packet proves the current observed custody state, the exact missing ceremony evidence, and the strict repo-safe ingestion path.

It does not claim that production multisig, signer closure, authority transfer, or post-transfer readouts already exist until those exact public artifacts are recorded.