agentchain-guard-solana

    let intent = &mut ctx.accounts.action_intent;     // Check expiry    require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);     // Update intent status    intent.status = status::APPROVED_READY;     // Write approval record    let record = &mut ctx.accounts.approval_record;    record.intent = intent_key;    record.intent_id = intent_id;    record.approver = ctx.accounts.approver.key();    record.approved_at = clock.unix_timestamp;    record.bump = ctx.bumps.approval_record;     emit!(IntentApproved {        intent_id,        approver: ctx.accounts.approver.key(),        timestamp: clock.unix_timestamp,    });     msg!("Intent approved: {:?}", &intent_id[..8]);

1. Line 52 require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);: An explicit validation that aborts the instruction with an error.
2. Line 52 require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);: Reads on-chain time from the Clock sysvar.
3. Line 63 record.bump = ctx.bumps.approval_record;: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 65 emit!(IntentApproved {: Emits an Anchor event that clients can parse from the logs.
5. Line 71 msg!("Intent approved: {:?}", &intent_id[..8]);: Logs to the program log, which is visible in explorers and the test output.

    )]    pub guard_config: Account<'info, GuardConfig>,     #[account(        mut,        seeds = [INTENT_SEED, action_intent.id.as_ref()],        bump = action_intent.bump,        constraint = action_intent.status == status::PENDING_APPROVAL || action_intent.status == status::PROPOSED            @ GuardError::InvalidApprovalState,    )]    pub action_intent: Account<'info, ActionIntent>,     /// Must be the guard authority or approval_signer    #[account(        constraint = authority.key() == guard_config.authority            || authority.key() == guard_config.approval_signer            @ GuardError::Unauthorized,    )]    pub authority: Signer<'info>,} pub fn handler(ctx: Context<DenyAction>) -> Result<()> {    let clock = Clock::get()?;    let intent = &mut ctx.accounts.action_intent;

1. Line 18 seeds = [INTENT_SEED, action_intent.id.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
2. Line 19 bump = action_intent.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 31 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
4. Line 35 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.

    require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);     // ── Transfer from vault to recipient ──    let mint_key = ctx.accounts.guard_config.treasury_mint;    let vault_bump = ctx.bumps.vault_token_account;    let signer_seeds: &[&[&[u8]]] = &[&[        VAULT_SEED,        mint_key.as_ref(),        &[vault_bump],    ]];     let transfer_ctx = CpiContext::new_with_signer(        ctx.accounts.token_program.to_account_info(),        Transfer {            from: ctx.accounts.vault_token_account.to_account_info(),            to: ctx.accounts.recipient_token_account.to_account_info(),            authority: ctx.accounts.vault_token_account.to_account_info(),        },        signer_seeds,    );    token::transfer(transfer_ctx, intent.amount)?;     // ── Update intent state ──    let intent = &mut ctx.accounts.action_intent;

1. Line 61 require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);: An explicit validation that aborts the instruction with an error.
2. Line 61 require!(clock.unix_timestamp < intent.expires_at, GuardError::ActionExpired);: Reads on-chain time from the Clock sysvar.
3. Line 72 let transfer_ctx = CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.
4. Line 81 token::transfer(transfer_ctx, intent.amount)?;: An SPL token transfer through the Token Program.

    let clock = Clock::get()?;    let intent = &ctx.accounts.action_intent;     // Must actually be expired    require!(        clock.unix_timestamp >= intent.expires_at,        GuardError::ActionNotExpired,    );     // Transition to expired — funds can then be refunded    let intent = &mut ctx.accounts.action_intent;    intent.status = status::EXPIRED;     emit!(IntentExpired {        intent_id: intent.id,        timestamp: clock.unix_timestamp,    });     msg!("Intent expired: {:?}", &intent.id[..8]);     Ok(())}

1. Line 25 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.
2. Line 29 require!(: An explicit validation that aborts the instruction with an error.
3. Line 38 emit!(IntentExpired {: Emits an Anchor event that clients can parse from the logs.
4. Line 43 msg!("Intent expired: {:?}", &intent.id[..8]);: Logs to the program log, which is visible in explorers and the test output.