ENRG

    );    producer.state = DeviceState::Provisioned;     let clock = Clock::get()?;    emit!(DeviceProvisioned {        device_id: producer.device_id,        owner: producer.authority,        timestamp: clock.unix_timestamp,    });    msg!("Device provisioned: {}", producer.device_id);    Ok(())} #[derive(Accounts)]pub struct ActivateDevice<'info> {    pub authority: Signer<'info>,    #[account(        mut,        seeds = [b"producer", producer.device_id.as_ref()],        bump,        has_one = authority @ ErrorCode::Unauthorized,        constraint = producer.device_id != Pubkey::default() @ ErrorCode::InvalidParameter    )]    pub producer: Account<'info, EnergyProducer>,

1. Line 316 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.
2. Line 317 emit!(DeviceProvisioned {: Emits an Anchor event that clients can parse from the logs.
3. Line 322 msg!("Device provisioned: {}", producer.device_id);: Logs to the program log, which is visible in explorers and the test output.
4. Line 328 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
5. Line 331 seeds = [b"producer", producer.device_id.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
6. Line 332 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
7. Line 333 has_one = authority @ ErrorCode::Unauthorized,: Checks that a stored pubkey field matches the passed account.

    /// Authority to manage oracle access    pub authority: Signer<'info>,} #[derive(Accounts)]pub struct SetOracleAuthority<'info> {    #[account(        mut,        seeds = [b"manifest-registry"],        bump,        has_one = authority    )]    pub registry: Account<'info, ManifestRegistry>,     pub authority: Signer<'info>,} pub fn initialize_manifest_registry(ctx: Context<InitializeManifestRegistry>) -> Result<()> {    let registry = &mut ctx.accounts.registry;    let clock = Clock::get()?;     // Guard: initialization fields are written ONLY at first creation.    // Otherwise any caller could re-run init_if_needed to overwrite    // authority and oracle_authority and take over the registry.

1. Line 38 pub authority: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 45 seeds = [b"manifest-registry"],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 46 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 47 has_one = authority: Checks that a stored pubkey field matches the passed account.
5. Line 56 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.
6. Line 59 // Otherwise any caller could re-run init_if_needed to overwrite: Creates the account only if it doesn't exist. Watch for re-initialisation bugs.

    pub oracle_signer: Signer<'info>,     pub system_program: Program<'info, System>,} pub fn stake_oracle(ctx: Context<StakeOracle>, lamports: u64) -> Result<()> {    require!(lamports >= 1_000_000, ErrorCode::InsufficientStake); // ≥ 0.001 SOL    let stake_info = ctx.accounts.oracle_stake.to_account_info();    let signer_info = ctx.accounts.oracle_signer.to_account_info();    let stake = &mut ctx.accounts.oracle_stake;    if stake.oracle == Pubkey::default() {        stake.oracle = ctx.accounts.oracle_signer.key();        stake.joined_at = Clock::get()?.unix_timestamp;    }    stake.lamports = stake        .lamports        .checked_add(lamports)        .ok_or(ErrorCode::ArithmeticOverflow)?;     anchor_lang::system_program::transfer(        CpiContext::new(            ctx.accounts.system_program.to_account_info(),            anchor_lang::system_program::Transfer {                from: signer_info,

1. Line 181 pub oracle_signer: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 187 require!(lamports >= 1_000_000, ErrorCode::InsufficientStake); // ≥ 0.001 SOL: An explicit validation that aborts the instruction with an error.
3. Line 190 let stake = &mut ctx.accounts.oracle_stake;: Touches staking state: the amount locked and when it was locked.
4. Line 193 stake.joined_at = Clock::get()?.unix_timestamp;: Reads on-chain time from the Clock sysvar.
5. Line 197 .checked_add(lamports): Uses checked arithmetic so overflow fails instead of wrapping.
6. Line 201 CpiContext::new(: Makes a cross-program invocation into another program.

/// 1. **Genesis/pre-seed** (localnet `solana-test-validator --account`,///    file `tests/genesis/founder-vesting.json`): the account already exists at///    `findProgramAddress([b"founder-vesting"])` and belongs to the program —///    `init_if_needed` skips initialization and the fields are overwritten./// 2. **On-chain bootstrap** (Devnet/mainnet): the account is absent — `init_if_needed`///    creates it via the program with the same seed (payer = founder); the handler///    then fills the fields. No external genesis injection is required.#[derive(Accounts)]pub struct InitializeFounderVesting<'info> {    #[account(        init_if_needed,        payer = authority,        space = 8 + FounderVesting::LEN,        seeds = [b"founder-vesting"],        bump,    )]    pub vesting: Account<'info, FounderVesting>,     #[account(mut)]    pub authority: Signer<'info>,     pub system_program: Program<'info, System>,}

1. Line 15 /// `findProgramAddress([b"founder-vesting"])` and belongs to the program —: Derives a PDA from seeds and the program ID and returns the address with its canonical bump.
2. Line 16 /// `init_if_needed` skips initialization and the fields are overwritten.: Creates the account only if it doesn't exist. Watch for re-initialisation bugs.
3. Line 26 seeds = [b"founder-vesting"],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
4. Line 27 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
5. Line 32 pub authority: Signer<'info>,: Requires this account to have signed the transaction.