vaulx-protocol

        emit!(TrdcMinted {            trdc_state: ctx.accounts.trdc_state.key(),            loan_id: ctx.accounts.trdc_state.loan_id,            asset_id,            leaf_owner: ctx.accounts.borrower.key(),            tree: ctx.accounts.merkle_tree.key(),            num_minted,            ts: Clock::get()?.unix_timestamp,        });         Ok(())    }} #[derive(Accounts)]#[instruction(loan_id: Pubkey)]pub struct InitializeTrdcState<'info> {    #[account(        init,        payer = payer,        space = TRDCState::SIZE,        seeds = [TRDCState::SEED, loan_id.as_ref()],        bump,    )]

1. Line 445 emit!(TrdcMinted {: Emits an Anchor event that clients can parse from the logs.
2. Line 452 ts: Clock::get()?.unix_timestamp,: Reads on-chain time from the Clock sysvar.
3. Line 463 init,: Creates and pays for a new account. Space and payer must be specified.
4. Line 466 seeds = [TRDCState::SEED, loan_id.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
5. Line 467 bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.

    /// increment gate; subsequent bids must beat `high_bid + min_increment`.    pub fn place_bid(ctx: Context<PlaceBid>, amount: u64) -> Result<()> {        let now = Clock::get()?.unix_timestamp;        let a = &ctx.accounts.auction;        require!(a.status == AuctionStatus::Open, AuctionError::NotOpen);        require!(now < a.end_ts, AuctionError::AuctionEnded);        require!(amount >= a.reserve_price, AuctionError::BelowReserve);        if a.high_bid > 0 {            let min_acceptable = a                .high_bid                .checked_add(a.min_increment)                .ok_or(AuctionError::MathOverflow)?;            require!(amount >= min_acceptable, AuctionError::BidTooLow);        }         let previous_high_bid = a.high_bid;        let previous_high_bidder = a.high_bidder;         // 1) bidder -> escrow_ata        token::transfer(            CpiContext::new(                ctx.accounts.token_program.to_account_info(),                Transfer {                    from: ctx.accounts.bidder_ata.to_account_info(),

1. Line 111 let now = Clock::get()?.unix_timestamp;: Reads on-chain time from the Clock sysvar.
2. Line 113 require!(a.status == AuctionStatus::Open, AuctionError::NotOpen);: An explicit validation that aborts the instruction with an error.
3. Line 119 .checked_add(a.min_increment): Uses checked arithmetic so overflow fails instead of wrapping.
4. Line 128 token::transfer(: An SPL token transfer through the Token Program.
5. Line 129 CpiContext::new(: Makes a cross-program invocation into another program.

        seeds = [KycAttestation::SEED, owner.as_ref()],        bump = kyc_attestation.bump,        close = admin,    )]    pub kyc_attestation: Account<'info, KycAttestation>,    #[account(mut)]    pub admin: Signer<'info>,} #[derive(Accounts)]pub struct InitializeVault<'info> {    #[account(        init, payer = payer, space = Vault::SIZE,        seeds = [Vault::SEED, asset_mint.key().as_ref()], bump,    )]    pub vault: Account<'info, Vault>,    pub asset_mint: Account<'info, Mint>,    #[account(        init, payer = payer,        mint::decimals = 6, mint::authority = vault, mint::freeze_authority = vault,    )]    pub share_mint: Account<'info, Mint>,    #[account(mut)] pub payer: Signer<'info>,    pub token_program: Program<'info, Token>,

1. Line 637 seeds = [KycAttestation::SEED, owner.as_ref()],: Declares the PDA seeds. Anchor re-derives the address and rejects the account if it doesn't match.
2. Line 638 bump = kyc_attestation.bump,: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 639 close = admin,: Closes the account at the end of the instruction and refunds its lamports.
4. Line 643 pub admin: Signer<'info>,: Requires this account to have signed the transaction.
5. Line 649 init, payer = payer, space = Vault::SIZE,: Creates and pays for a new account. Space and payer must be specified.

        att.owner = owner;        att.attestor = ctx.accounts.admin.key();        att.attested_at = Clock::get()?.unix_timestamp;        att.jwt_hash = jwt_hash;        att.bump = ctx.bumps.kyc_attestation;        Ok(())    }     /// Admin-only: flip `loan_config.kyc_required` between true and false.    /// Gated on `signer == loan_config.admin`. Mirrors `vault::set_kyc_required`.    pub fn set_kyc_required(ctx: Context<SetKycRequired>, required: bool) -> Result<()> {        // V3 — defense-in-depth init-flag check.        require!(            ctx.accounts.loan_config.initialized,            LoanError::ConfigNotInitialized        );        require_keys_eq!(            ctx.accounts.admin.key(),            ctx.accounts.loan_config.admin,            LoanError::Unauthorized        );        ctx.accounts.loan_config.kyc_required = required;        emit!(KycRequiredChanged {            required,

1. Line 75 att.attested_at = Clock::get()?.unix_timestamp;: Reads on-chain time from the Clock sysvar.
2. Line 77 att.bump = ctx.bumps.kyc_attestation;: Uses the bump seed, the extra byte that pushes the derived address off the ed25519 curve.
3. Line 85 require!(: An explicit validation that aborts the instruction with an error.
4. Line 95 emit!(KycRequiredChanged {: Emits an Anchor event that clients can parse from the logs.