attention-oracle-program

                &proof,                &ctx.accounts.config.comp_merkle_root,            ),            RailsError::CompensationInvalidProof        );        require!(            ctx.accounts.comp_vault.amount >= amount,            RailsError::CompensationUnavailable        );         let slot = Clock::get()?.slot;        let config_ai = ctx.accounts.config.to_account_info();        let signer_seeds: &[&[&[u8]]] = &[&[CONFIG_SEED, &[ctx.accounts.config.bump]]];        let transfer_ctx = CpiContext::new_with_signer(            ctx.accounts.token_2022_program.to_account_info(),            TransferChecked {                from: ctx.accounts.comp_vault.to_account_info(),                mint: ctx.accounts.ccm_mint.to_account_info(),                to: ctx.accounts.user_ccm.to_account_info(),                authority: config_ai,            },            signer_seeds,        );        token_interface::transfer_checked(transfer_ctx, amount, ctx.accounts.ccm_mint.decimals)?;

1. Line 1014 require!(: An explicit validation that aborts the instruction with an error.
2. Line 1019 let slot = Clock::get()?.slot;: Reads on-chain time from the Clock sysvar.
3. Line 1021 let signer_seeds: &[&[&[u8]]] = &[&[CONFIG_SEED, &[ctx.accounts.config.bump]]];: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 1022 let transfer_ctx = CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.
5. Line 1023 ctx.accounts.token_2022_program.to_account_info(),: Targets the Token-2022 program instead of the original Token Program.
6. Line 1024 TransferChecked {: A checked token transfer, which also verifies the mint and decimals.

        .checked_mul(10_000)        .ok_or(OracleError::MathOverflow)?        .checked_div(effective_nav)        .ok_or(OracleError::MathOverflow)?;    require!(shares_to_mint > 0, OracleError::InvalidInputLength);     // 3. Mint vLOFI (shares_to_mint) to user (ProtocolState PDA as mint authority)    let protocol_bump = ctx.accounts.protocol_state.bump;    let protocol_seeds = &[b"protocol_state".as_ref(), &[protocol_bump]];    let signer = &[&protocol_seeds[..]];     let mint_accounts = MintTo {        mint: ctx.accounts.vlofi_mint.to_account_info(),        to: ctx.accounts.user_vlofi_ata.to_account_info(),        authority: ctx.accounts.protocol_state.to_account_info(),    };    mint_to(        CpiContext::new_with_signer(            ctx.accounts.token_program.to_account_info(),            mint_accounts,            signer,        ),        shares_to_mint,    )?;

1. Line 289 .checked_mul(10_000): Uses checked arithmetic so overflow fails instead of wrapping.
2. Line 293 require!(shares_to_mint > 0, OracleError::InvalidInputLength);: An explicit validation that aborts the instruction with an error.
3. Line 296 let protocol_bump = ctx.accounts.protocol_state.bump;: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 297 let protocol_seeds = &[b"protocol_state".as_ref(), &[protocol_bump]];: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
5. Line 300 let mint_accounts = MintTo {: Mints new tokens. The mint authority must sign.
6. Line 306 CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.

     require!(!protocol_state.paused, OracleError::ProtocolPaused);    require!(amount > 0, OracleError::InvalidInputLength);    require!(min_reserve > 0, OracleError::InvalidInputLength);     let treasury_balance = ctx.accounts.treasury_ata.amount;    let balance_after = treasury_balance        .checked_sub(amount)        .ok_or(OracleError::InsufficientTreasuryBalance)?;    require!(        balance_after >= min_reserve,        OracleError::InsufficientTreasuryBalance    );     let seeds: &[&[u8]] = &[PROTOCOL_SEED, mint_key.as_ref(), &[protocol_state.bump]];    let signer_seeds = &[seeds];     transfer_checked(        CpiContext::new_with_signer(            ctx.accounts.token_program.to_account_info(),            TransferChecked {                from: ctx.accounts.treasury_ata.to_account_info(),                mint: ctx.accounts.mint.to_account_info(),                to: ctx.accounts.destination_ata.to_account_info(),

1. Line 410 require!(!protocol_state.paused, OracleError::ProtocolPaused);: An explicit validation that aborts the instruction with an error.
2. Line 416 .checked_sub(amount): Uses checked arithmetic so overflow fails instead of wrapping.
3. Line 423 let seeds: &[&[u8]] = &[PROTOCOL_SEED, mint_key.as_ref(), &[protocol_state.bump]];: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 424 let signer_seeds = &[seeds];: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
5. Line 426 transfer_checked(: A checked token transfer, which also verifies the mint and decimals.
6. Line 427 CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.

    #[account(address = TOKEN_2022_PROGRAM_ID @ MarketsError::InvalidMarketState)]    pub outcome_token_program: Program<'info, Token2022>,    /// Token program backing the USDC mint (standard SPL or Token-2022).    pub usdc_token_program: Interface<'info, TokenInterface>,    pub system_program: Program<'info, System>,    pub rent: Sysvar<'info, Rent>,} /// Accounts for `mint_complete_set` (Phase 1).////// Deposit N USDC → mint N YES + N NO (the fixed-par rail). The mint-authority/// PDA signs the two `mint_to` CPIs; the depositor signs the USDC transfer-in.#[derive(Accounts)]pub struct MintCompleteSet<'info> {    #[account(mut)]    pub depositor: Signer<'info>,     #[account(        seeds = [MARKET_SEED, &market.market_id.to_le_bytes()],        bump = market.bump,    )]    pub market: Account<'info, Market>,     #[account(

1. Line 2209 #[account(address = TOKEN_2022_PROGRAM_ID @ MarketsError::InvalidMarketState)]: Targets the Token-2022 program instead of the original Token Program.
2. Line 2220 /// PDA signs the two `mint_to` CPIs; the depositor signs the USDC transfer-in.: Mints new tokens. The mint authority must sign.
3. Line 2224 pub depositor: Signer<'info>,: Requires this account to have signed the transaction.
4. Line 2227 seeds = [MARKET_SEED, &market.market_id.to_le_bytes()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
5. Line 2228 bump = market.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.