Solana workflow QA/security triage - 48h markdown report

I will review one public Solana repo, endpoint group, wallet flow, or program workflow and deliver a concise markdown report. The pass focuses on Anchor account constraints, PDA and signer boundaries, escrow/refund/cancel/settlement/dispute paths, Token-2022 and SPL token-account handling, MCP/API-to-chain flows, replay/idempotency, callback, and webhook edge cases. Delivery includes scope, assumptions, findings, evidence, negative findings, prioritized fixes, and a retest checklist. No private keys, seed phrases, production credentials, custody, wallet signing, irreversible admin permissions, or mainnet transactions required. ### Buyer Requirements: Send a public repo/docs/API/test URL, one workflow or instruction family to review, expected behavior, deadline, and known concerns. Do not send private keys, seed phrases, production credentials, custody access, wallet signing requests, or irreversible admin permissions. ### Delivery Note: Delivery is a markdown report. No public disclosure, issue/PR, devnet/mainnet testing, wallet signing, or production interaction is included unless separately approved.