What these transactions prove
- A program-derived address can be the settlement authority of a Solana Foundation DvP trade, and it settled one on devnet.
- Unregistered trades, revoked credentials and early close attempts are refused on chain.
- Registered, credentialed trades settle, and the rent DvP sweeps is returned to the address the parties chose.
- Anyone can trigger settlement: a fresh key did, and a keeper script found a trade by itself.
- A rejected trade's registration can be closed and its rent returned.
- Plain Token-2022 trades settle too: DvP alone settled one, then a Referee-gated one. Mint extensions are not checked.
- A program can be the credential issuer: a minimal Verifex checked one thing and issued credentials by CPI, and a refused agent got none. It does not yet bind the program to the subject.
- A second Verifex instruction issues a credential only for the executor of a Passed commitment on a devnet-only copy of TrustRail: a wrong subject was refused, the right one traded and settled. TrustRail's Passed is a weak gate and its swap is a stand-in.
Devnet only, unaudited. Credentials are a demonstration, not KYC: the issuer is the author's demo key or the minimal Verifex program.