ClearWatch

use anchor_lang::prelude::*;use crate::state::RiskEntry;use crate::error::ClearWatchError; #[derive(Accounts)]#[instruction(flagged_address: Pubkey)]pub struct SlashReporter<'info> {    #[account(mut)]    pub authority: Signer<'info>,     #[account(        mut,        close = authority,        seeds = [b"risk_entry", flagged_address.as_ref()],        bump,    )]    pub risk_entry: Account<'info, RiskEntry>,     /// CHECK: The vault PDA that holds staked SOL — slashed to authority    #[account(        mut,        seeds = [b"stake_vault", flagged_address.as_ref()],        bump,    )]

1. Line 9 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 13 close = authority,: Closes the account at the end of the instruction and refunds its lamports.
3. Line 14 seeds = [b"risk_entry", flagged_address.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 15 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 19 /// CHECK: The vault PDA that holds staked SOL — slashed to authority: Touches staking state: the amount locked and when it was locked.

use anchor_lang::prelude::*;use anchor_lang::system_program;use crate::state::RiskEntry;use crate::error::ClearWatchError; #[derive(Accounts)]#[instruction(flagged_address: Pubkey, incident_type: String)]pub struct ReportAddress<'info> {    #[account(mut)]    pub reporter: Signer<'info>,     #[account(        init,        payer = reporter,        space = RiskEntry::SPACE,        seeds = [b"risk_entry", flagged_address.as_ref()],        bump,    )]    pub risk_entry: Account<'info, RiskEntry>,     /// CHECK: The vault PDA that holds staked SOL    #[account(        mut,        seeds = [b"stake_vault", flagged_address.as_ref()],

1. Line 10 pub reporter: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 13 init,: Creates and pays for a new account. Space and payer must be specified.
3. Line 16 seeds = [b"risk_entry", flagged_address.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 17 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 21 /// CHECK: The vault PDA that holds staked SOL: Touches staking state: the amount locked and when it was locked.

use anchor_lang::prelude::*;use crate::state::{RiskEntry, InnocenceProof, evaluate_risk};use crate::error::ClearWatchError; #[derive(Accounts)]#[instruction(counterparty: Pubkey, amount: u64, purpose: String)]pub struct CheckAndProve<'info> {    #[account(mut)]    pub agent: Signer<'info>,     /// Risk entry for the counterparty (optional — may not exist)    #[account(        seeds = [b"risk_entry", counterparty.as_ref()],        bump,    )]    pub risk_entry: Option<Account<'info, RiskEntry>>,     #[account(        init,        payer = agent,        space = InnocenceProof::SPACE,        seeds = [b"innocence_proof", agent.key().as_ref(), counterparty.as_ref()],        bump,    )]

1. Line 9 pub agent: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 13 seeds = [b"risk_entry", counterparty.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 14 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 19 init,: Creates and pays for a new account. Space and payer must be specified.

use anchor_lang::prelude::*;use crate::state::{RiskEntry, evaluate_risk}; /// Read-only risk gate: returns (is_clear, risk_score, risk_tier_at_check)/// without writing an InnocenceProof PDA. Designed for high-throughput/// callers (DEX aggregators, bridges) that pay compute units per swap and/// don't need a per-transaction audit trail.#[derive(Accounts)]#[instruction(counterparty: Pubkey)]pub struct CheckOnly<'info> {    pub caller: Signer<'info>,     #[account(        seeds = [b"risk_entry", counterparty.as_ref()],        bump,    )]    pub risk_entry: Option<Account<'info, RiskEntry>>,} #[derive(AnchorSerialize, AnchorDeserialize, Clone, Debug)]pub struct CheckOnlyResult {    pub is_clear: bool,    pub risk_score: u8,    pub risk_tier_at_check: u8,

1. Line 11 pub caller: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 14 seeds = [b"risk_entry", counterparty.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 15 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.