agenttrust

#[derive(Accounts)]#[instruction(facilitator: Pubkey)]pub struct InitAuthority<'info> {    #[account(mut)]    pub payer: Signer<'info>,     #[account(        init,        payer = payer,        space = 8 + TrustGateAuthority::INIT_SPACE,        seeds = [TrustGateAuthority::SEED_PREFIX, facilitator.as_ref()],        bump,    )]    pub authority: Account<'info, TrustGateAuthority>,     pub system_program: Program<'info, System>,} pub fn handler(ctx: Context<InitAuthority>, facilitator: Pubkey) -> Result<()> {    let now_slot = Clock::get()?.slot;    let auth = &mut ctx.accounts.authority;    auth.facilitator = facilitator;    auth.bump = ctx.bumps.authority;    auth._pad0 = [0u8; 7];

1. Line 17 pub payer: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 20 init,: Creates and pays for a new account. Space and payer must be specified.
3. Line 23 seeds = [TrustGateAuthority::SEED_PREFIX, facilitator.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 24 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 32 let now_slot = Clock::get()?.slot;: Reads on-chain time from the Clock sysvar.

    #[account(mut)]    pub creator: Signer<'info>,     #[account(        init,        payer = creator,        space = 8 + CapabilityNamespace::INIT_SPACE,        seeds = [CapabilityNamespace::SEED_PREFIX, namespace_hash.as_ref()],        bump,    )]    pub namespace: Account<'info, CapabilityNamespace>,     pub system_program: Program<'info, System>,} pub fn handler(    ctx: Context<RegisterNamespace>,    namespace_hash: [u8; 32],    name: String,    version: String,    schema_uri: String,) -> Result<()> {    require!(        name.len() >= MIN_NAME_LEN,

1. Line 26 pub creator: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 29 init,: Creates and pays for a new account. Space and payer must be specified.
3. Line 32 seeds = [CapabilityNamespace::SEED_PREFIX, namespace_hash.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 33 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 47 require!(: An explicit validation that aborts the instruction with an error.

use crate::errors::PolicyVaultError;use crate::state::PolicyAuthority; #[derive(Accounts)]#[instruction(payer_agent_asset: Pubkey)]pub struct InitAuthority<'info> {    #[account(mut)]    pub payer: Signer<'info>,     #[account(        init,        payer = payer,        space = 8 + PolicyAuthority::INIT_SPACE,        seeds = [PolicyAuthority::SEED_PREFIX, payer_agent_asset.as_ref()],        bump,    )]    pub policy_authority: Account<'info, PolicyAuthority>,     pub system_program: Program<'info, System>,} pub fn handler(    ctx: Context<InitAuthority>,    payer_agent_asset: Pubkey,

1. Line 20 pub payer: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 23 init,: Creates and pays for a new account. Space and payer must be specified.
3. Line 26 seeds = [PolicyAuthority::SEED_PREFIX, payer_agent_asset.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 27 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.

    /// SECURITY: in v1, ANY signer can call gate_payment. The composer's    /// state writes (Spending counters + VelocityLedger cumulative) are    /// therefore exposed to a denial-of-service attack: a hostile caller    /// could exhaust the daily / weekly / window budget via spurious calls.    /// v1.1 adds a facilitator allowlist on `PolicyAccount`. For the v1    /// hackathon submission, gate_payment is invoked by TrustGate (Phase 6),    /// which itself is invoked by trusted x402 facilitators.    pub caller: Signer<'info>,     #[account(        mut,        seeds = [PolicyAccount::SEED_PREFIX, payer_agent_asset.as_ref(), &policy_id.to_le_bytes()],        bump = policy_account.bump,    )]    pub policy_account: Account<'info, PolicyAccount>,     #[account(        mut,        seeds = [VelocityLedger::SEED_PREFIX, payer_agent_asset.as_ref(), &policy_id.to_le_bytes()],        bump = velocity_ledger.bump,    )]    pub velocity_ledger: Account<'info, VelocityLedger>,     #[account(

1. Line 43 /// which itself is invoked by trusted x402 facilitators.: Uses x402, an HTTP 402 pattern where an agent pays per request with an on-chain payment.
2. Line 44 pub caller: Signer<'info>,: Requires this account to have signed the transaction.
3. Line 48 seeds = [PolicyAccount::SEED_PREFIX, payer_agent_asset.as_ref(), &policy_id.to_le_bytes()]: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 49 bump = policy_account.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.