agent-escrow

use anchor_lang::prelude::*; use crate::{    constants::*,    error::ErrorCode,    state::{AgentProfile, Job, JobStatus},}; #[derive(Accounts)]pub struct Accept<'info> {    pub provider: Signer<'info>,    #[account(mut, has_one = provider @ ErrorCode::Unauthorized)]    pub job: Account<'info, Job>,    /// Only registered agents can take jobs, so every settlement has a profile to update.    #[account(seeds = [AGENT_SEED, provider.key().as_ref()], bump = provider_profile.bump)]    pub provider_profile: Account<'info, AgentProfile>,} pub fn handle_accept(ctx: Context<Accept>) -> Result<()> {    let job = &mut ctx.accounts.job;     require!(job.status == JobStatus::Funded, ErrorCode::InvalidStatus);    require!(        Clock::get()?.unix_timestamp < job.deadline,

1. Line 11 pub provider: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 12 #[account(mut, has_one = provider @ ErrorCode::Unauthorized)]: Checks that a stored pubkey field matches the passed account.
3. Line 15 #[account(seeds = [AGENT_SEED, provider.key().as_ref()], bump = provider_profile.bump)]: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 15 #[account(seeds = [AGENT_SEED, provider.key().as_ref()], bump = provider_profile.bump)]: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 22 require!(job.status == JobStatus::Funded, ErrorCode::InvalidStatus);: An explicit validation that aborts the instruction with an error.
6. Line 24 Clock::get()?.unix_timestamp < job.deadline,: Reads on-chain time from the Clock sysvar.

use anchor_lang::prelude::*; use crate::{constants::*, error::ErrorCode, state::AgentProfile}; #[derive(Accounts)]pub struct RegisterAgent<'info> {    #[account(mut)]    pub authority: Signer<'info>,    #[account(        init_if_needed,        payer = authority,        space = 8 + AgentProfile::INIT_SPACE,        seeds = [AGENT_SEED, authority.key().as_ref()],        bump,    )]    pub profile: Account<'info, AgentProfile>,    pub system_program: Program<'info, System>,} /// Creates the agent profile, or updates its public fields without touching the counters.pub fn handle_register_agent(    ctx: Context<RegisterAgent>,    name: String,    capabilities: String,

1. Line 8 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 10 init_if_needed,: Creates the account only if it doesn't exist. Watch for re-initialisation bugs.
3. Line 13 seeds = [AGENT_SEED, authority.key().as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 14 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.

 /// Accounts for paying the provider: by evaluator approval or by review timeout.#[derive(Accounts)]pub struct Release<'info> {    #[account(mut)]    pub authority: Signer<'info>,    #[account(mut, has_one = client, has_one = provider, has_one = mint)]    pub job: Account<'info, Job>,    /// CHECK: bound to the job by `has_one`; only receives the vault rent it paid.    #[account(mut)]    pub client: UncheckedAccount<'info>,    /// CHECK: bound to the job by `has_one`; only used to derive the accounts below.    pub provider: UncheckedAccount<'info>,    pub mint: InterfaceAccount<'info, Mint>,    #[account(        mut,        seeds = [VAULT_SEED, job.key().as_ref()],        bump = job.vault_bump,        token::token_program = token_program,    )]    pub vault: InterfaceAccount<'info, TokenAccount>,    #[account(        mut,        token::mint = mint,

1. Line 18 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 19 #[account(mut, has_one = client, has_one = provider, has_one = mint)]: Checks that a stored pubkey field matches the passed account.
3. Line 29 seeds = [VAULT_SEED, job.key().as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 30 bump = job.vault_bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.

use anchor_lang::prelude::*;use anchor_spl::token_interface::{Mint, TokenAccount, TokenInterface}; use crate::{    constants::*,    error::ErrorCode,    state::{AgentProfile, Job, JobStatus},    vault::Vault,}; /// Accounts for sending the payment back to the client: rejection, cancellation or expiry.#[derive(Accounts)]pub struct ReturnFunds<'info> {    pub authority: Signer<'info>,    #[account(mut, has_one = client, has_one = mint)]    pub job: Account<'info, Job>,    /// CHECK: bound to the job by `has_one`; only receives the vault rent it paid.    #[account(mut)]    pub client: UncheckedAccount<'info>,    pub mint: InterfaceAccount<'info, Mint>,    #[account(        mut,        seeds = [VAULT_SEED, job.key().as_ref()],        bump = job.vault_bump,

1. Line 14 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 15 #[account(mut, has_one = client, has_one = mint)]: Checks that a stored pubkey field matches the passed account.
3. Line 23 seeds = [VAULT_SEED, job.key().as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 24 bump = job.vault_bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.