Fuin

use anchor_lang::prelude::*; use crate::state::{Vault, VaultState}; #[derive(Accounts)]#[instruction(nonce: u64)]pub struct FreezeVault<'info> {    pub guardian: Signer<'info>,     #[account(        mut,        seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],        bump = vault.bump,        has_one = guardian,    )]    pub vault: Account<'info, Vault>,} pub fn freeze_vault(ctx: Context<FreezeVault>, _nonce: u64) -> Result<()> {    let clock = Clock::get()?;    let vault = &mut ctx.accounts.vault;    vault.state = VaultState::Frozen;    vault.recovery.last_guardian_activity = clock.unix_timestamp;    msg!("Vault frozen");

1. Line 8 pub guardian: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 12 seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 13 bump = vault.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 14 has_one = guardian,: Checks that a stored pubkey field matches the passed account.
5. Line 20 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.
6. Line 24 msg!("Vault frozen");: Logs to the program log, which is visible in explorers and the test output.

use anchor_lang::prelude::*; use crate::state::{Delegate, Vault}; #[derive(Accounts)]#[instruction(vault_nonce: u64, delegate_nonce: u64)]pub struct IssueDelegate<'info>{    #[account(mut)]    pub guardian: Signer<'info>,     #[account(        mut,        seeds = [            b"vault",            guardian.key().as_ref(),            &vault_nonce.to_le_bytes(),        ],        bump = vault.bump,        has_one = guardian,    )]    pub vault: Account<'info, Vault>,     #[account(        init,

1. Line 9 pub guardian: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 13 seeds = [: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 18 bump = vault.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 19 has_one = guardian,: Checks that a stored pubkey field matches the passed account.
5. Line 24 init,: Creates and pays for a new account. Space and payer must be specified.

        mut,        seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],        bump = vault.bump,        has_one = guardian    )]    pub vault : Account<'info, Vault>,} pub fn update_vault(    ctx: Context<UpdateVault>,    _nonce: u64,    new_daily_cap: Option<u64>,    new_per_tx_cap: Option<u64>,    new_allow_list: Option<Vec<Pubkey>>,    new_deny_list: Option<Vec<Pubkey>>,) -> Result<()> {    let clock = Clock::get()?;    let vault = &mut ctx.accounts.vault;    vault.recovery.last_guardian_activity = clock.unix_timestamp;     if let Some(cap) = new_daily_cap {        vault.policies.spending.daily_cap = cap;        msg!("Vault: Daily cap updated to {}", cap);    }

1. Line 14 seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
2. Line 15 bump = vault.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 16 has_one = guardian: Checks that a stored pubkey field matches the passed account.
4. Line 29 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.
5. Line 35 msg!("Vault: Daily cap updated to {}", cap);: Logs to the program log, which is visible in explorers and the test output.

use anchor_lang::prelude::*; use crate::state::Vault; #[derive(Accounts)]#[instruction(nonce: u64)]pub struct Withdraw<'info>{    #[account(mut)]    pub guardian: Signer<'info>,     #[account(        mut,        seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],        bump = vault.bump,        has_one = guardian,    )]    pub vault: Account<'info, Vault>,     pub system_program: Program<'info, System>,} pub fn withdraw(ctx:Context<Withdraw>, _nonce: u64, amount: u64)->Result<()>{    let clock = Clock::get()?;

1. Line 9 pub guardian: Signer<'info>,: Requires this account to have signed the transaction.
2. Line 13 seeds = [b"vault", guardian.key().as_ref(), &nonce.to_le_bytes()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
3. Line 14 bump = vault.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
4. Line 15 has_one = guardian,: Checks that a stored pubkey field matches the passed account.
5. Line 23 let clock = Clock::get()?;: Reads on-chain time from the Clock sysvar.