susu-monorepo

    require!(        amount == posted,        SusuError::ContributionAmountMismatch    );     let decimals = ctx.accounts.mint.decimals;    let creator = group.creator;    let gid = group.group_id.to_le_bytes();    let bump_val = group.bump;    let seed_slice: &[&[u8]] = &[        GROUP_SEED,        creator.as_ref(),        &gid,        &[bump_val],    ];    let signer: &[&[&[u8]]] = &[seed_slice];     #[rustfmt::skip]    token::transfer_checked(        CpiContext::new_with_signer(            ctx.accounts.token_program.key(),            TransferChecked {                from: ctx.accounts.vault.to_account_info(),                mint: ctx.accounts.mint.to_account_info(),

1. Line 61 require!(: An explicit validation that aborts the instruction with an error.
2. Line 69 let bump_val = group.bump;: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 79 token::transfer_checked(: A checked token transfer, which also verifies the mint and decimals.
4. Line 79 token::transfer_checked(: An SPL token transfer through the Token Program.
5. Line 80 CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.

     let member_position = &mut ctx.accounts.member_position;    let new_total = member_position        .collateral_posted        .checked_add(amount)        .ok_or(SusuError::CurveOverflow)?;    if new_total < new_required {        return err!(SusuError::InsufficientCollateral);    }     if amount > 0 {        let cpi_accounts = Transfer {            from: ctx.accounts.member_token_account.to_account_info(),            to: ctx.accounts.vault.to_account_info(),            authority: ctx.accounts.member.to_account_info(),        };        let cpi_ctx = CpiContext::new(ctx.accounts.token_program.key(), cpi_accounts);        token::transfer(cpi_ctx, amount)?; // member -> vault (collateral)    }     member_position.collateral_posted = new_total;     msg!(        "collateral_topped_up: member={} additional={} new_total={}",

1. Line 65 .checked_add(amount): Uses checked arithmetic so overflow fails instead of wrapping.
2. Line 68 return err!(SusuError::InsufficientCollateral);: An explicit validation that aborts the instruction with an error.
3. Line 77 let cpi_ctx = CpiContext::new(ctx.accounts.token_program.key(), cpi_accounts);: Makes a cross-program invocation into another program.
4. Line 78 token::transfer(cpi_ctx, amount)?; // member -> vault (collateral): An SPL token transfer through the Token Program.
5. Line 83 msg!(: Logs to the program log, which is visible in explorers and the test output.

        ctx.accounts.group.contribution_amount,        ctx.accounts.mint.decimals,    )?;     let new_total = mp        .collateral_posted        .checked_add(amount)        .ok_or(SusuError::CurveOverflow)?;    require!(new_total >= required, SusuError::InsufficientCollateral);     let decimals = ctx.accounts.mint.decimals;    if amount > 0 {        #[rustfmt::skip]        token::transfer_checked(            CpiContext::new(                ctx.accounts.token_program.key(),                TransferChecked {                    from: ctx.accounts.member_token_account.to_account_info(),                    mint: ctx.accounts.mint.to_account_info(),                    to: ctx.accounts.vault.to_account_info(),                    authority: ctx.accounts.member.to_account_info(),                },            ),            amount,

1. Line 103 .checked_add(amount): Uses checked arithmetic so overflow fails instead of wrapping.
2. Line 105 require!(new_total >= required, SusuError::InsufficientCollateral);: An explicit validation that aborts the instruction with an error.
3. Line 110 token::transfer_checked(: A checked token transfer, which also verifies the mint and decimals.
4. Line 110 token::transfer_checked(: An SPL token transfer through the Token Program.
5. Line 111 CpiContext::new(: Makes a cross-program invocation into another program.

        rotation_index,    )?;    assert_rotation_closed(ctx.accounts.clock.unix_timestamp, close_timestamp)?;    verify_rotation_funded(        ctx.accounts.group.key(),        group,        rotation_index,        ctx.remaining_accounts,    )?;     let amount = calculate_payout_amount(group.n, group.contribution_amount)?;    let decimals = ctx.accounts.mint.decimals;    let creator = group.creator;    let gid = group.group_id.to_le_bytes();    let bump_val = group.bump;    let seed_slice: &[&[u8]] = &[GROUP_SEED, creator.as_ref(), &gid, &[bump_val]];    let signer: &[&[&[u8]]] = &[seed_slice];     #[rustfmt::skip]    token::transfer_checked(        CpiContext::new_with_signer(            ctx.accounts.token_program.key(),            TransferChecked {                from: ctx.accounts.vault.to_account_info(),

1. Line 75 assert_rotation_closed(ctx.accounts.clock.unix_timestamp, close_timestamp)?;: Reads on-chain time from the Clock sysvar.
2. Line 87 let bump_val = group.bump;: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 92 token::transfer_checked(: A checked token transfer, which also verifies the mint and decimals.
4. Line 92 token::transfer_checked(: An SPL token transfer through the Token Program.
5. Line 93 CpiContext::new_with_signer(: Makes a CPI signed by a PDA. The signer seeds prove the program controls that address.