VEYDUCT
SOLANA / TOKEN INFRASTRUCTURE / VERSION 0.5

Launch. Collect.
Route. Execute.

Solana tools for creating tokens, sending payments and checking public data, with custom fee routing and custody still awaiting deployment.

FIVE NATIVE MAINNET TOOLS · NINE CUSTOM PROGRAMS AWAIT DEPLOYMENT
01Product overviewAvailable tools and separate custom-program work
01 / PRODUCT

A token’s operating layer.

VEYDUCT offers wallet-approved token actions and public lookups. Its custom programs are separate: fee routing, compensation, treasury, staking, vesting, claims, token voting, milestone funding and raffles all require verified deployment before public execution.

What the live interface can do

Five native mainnet tools are available: create a token, send tokens, send SOL, remove token permissions and burn tokens. Each requires your wallet approval and real SOL for costs. Public token, wallet and transaction lookups need no wallet connection. Group decisions records wallet-signed proposals and designated members’ votes; these advisory records cannot execute treasury payments. The project workspace remains a devnet tool. All nine custom programs are undeployed and closed.

The separate Pump flow creates a new Token-2022 mint, native SOL market and onchain metadata URI, then activates its precomputed fee router in a second reviewed transaction. It cannot reuse a standalone SPL mint. Both custom-program flows remain gated on public deployment. Metadata hosting and validation are user responsibilities.

02Execution modelProgram accounts, source adapters, and upgrade policy
02 / EXECUTION MODEL

Fixed recipients.
Approved execution.

Project mint + router PDA

        │

        ├─ manual deposit ─────────────┐

        ├─ Pump sweep → collect CPI ──┤ provenance counters

        └─ external receipt → sync ───┘

                                      ↓

                             cumulative 1% fee

                                      ↓

                         fixed net destination shares

                                      ↓

                       owner or scoped executor payouts

The Rust program owns a 504-byte router account derived from creator, mint and nonce. It binds recipients and shares at initialization, keeps obligations backed above rent, and requires the router owner or approved executor to sign settlement to the fixed recipient. The trigger cannot redirect payment. Configuration ownership is not proof of token ownership or creator-fee authority.

Multiple routers may reference one mint. This version is not a canonical one-router-per-token registry. The Pump launch plan records the specific router configured as that market’s creator-fee destination. A saved public plan allows activation to resume without retaining the mint secret.

Stack

Native Rust Solana programs; a pinned browser SDK; exact integer amount calculations; Node 24 Vercel relays; and LiteSVM runtime tests. Native mainnet actions use a separate relay that checks their allowed transaction format and signatures. The original project workspace and custom-program controllers use devnet. Browser receipts help track transactions; chain state remains authoritative.

Immutability

Account terms have no edit instruction. A retained program upgrade authority can still change future execution behavior. Therefore immutable terms are not a claim that the entire deployed system is non-upgradeable. Independent review and an explicit upgrade policy precede mainnet release.

03AccountingExact allocations, reserves, and reconciliation
03 / ACCOUNTING

Reconcile every source.

recognized = manual + Pump-vault receipts + external receipts

fee = floor(recognized × 100 / 10,000)

net = recognized − fee

allocation[i] = floor(net × shareBps[i] / 10,000)

claimable[i] = allocation[i] − paid[i]

dust = net − sum(allocation)

reserved = recognized − sum(all payments)

external surplus = balance − rent reserve − reserved

Floor allocations are monotonic. At most one lamport per destination remains in the rounding reserve and can become allocatable as new funds arrive. Reconciliation cannot count that reserve again. Payout failures roll back; one destination’s failure does not prevent separately settling another.

The fee is 1% of recognized receipts, not a token trading tax. The router creator currently chooses the fixed fee recipient; a global VEYDUCT collector is not enforced. The older capped compensation vault has different economics: 2% of contributor gross.

04What is builtAvailable tools, tested code, and unfinished modules
04 / IMPLEMENTATION

Evidence before labels.

Strategy Studio · planning only

Design fee-budget allocations across proposed wallet, buyback, rewards, liquidity, treasury, staking and raffle modules. Exact SOL calculations and unsigned JSON export are available in the Plan token operations. A saved plan does not deploy or execute these modules; advanced adapters and public-chain validation remain required.

ModuleCurrent state
Project operations workspaceDevnet workspace for saved projects, public mint and wallet inspection, test operations and exports. Mainnet actions are available in the separate Creator tools directory.
SPL token mintNative mainnet creation is available with wallet approval: fixed classic SPL supply, no freeze authority and permanently removed mint authority. Names and symbols are local labels; public metadata and a trading market are separate. No funded mainnet acceptance transaction is claimed.
Native SOL fee routerCompiled program and SDK; runtime initialization, deposits, payout, reconciliation, rollback and source counters passed.
Pump sweep and collectionComplete market creation, test trade, sweep, collection and payout flow passed against the captured actual Pump executable in LiteSVM. Public-chain execution remains unverified.
Direct SOL transfersSend SOL to up to six wallets in one mainnet transaction, with amount and fee review before wallet approval. The devnet workspace remains available separately.
Capped compensationSeparate compiled, runtime-tested contract; deployment pending.
Buyback/burn, holder rewards, LPManual wallet-approved classic SPL burning is available on mainnet. Automated buybacks and liquidity management are unimplemented. Claim-campaign custody has compiled runtime-tested code but is undeployed; no complete historical holder indexer is implemented.
Pump market launchActual create_v2 and resumed router activation passed in LiteSVM against public configuration snapshots. Two reviewed steps; public deployment pending.
Keeper and governanceThe scoped devnet keeper is implemented but inactive; verified router deployment and a funded approved executor are required. Shared DAO records support advisory wallet-signed proposals and designated-member votes. Token-deposit voting has compiled runtime-tested code but is undeployed, and treasury execution is unavailable.

The router artifact is a remote compatibility build from Solana Playground. Its actual dependency lock and compiler version were not provided. Preserved logs contain dependency stack diagnostics; passing exercised runtime paths is not a reproducible build or a security audit.

05Twelve proposed releasesThe sequence of work and the gate for each release
05 / PROPOSED RELEASE SEQUENCE

A platform-sized roadmap.

Twelve proposed monthly work packages. Release gates determine readiness; these are not promised calendar deadlines.

01 / Token & fee engine

Create exact supply and fixed native SOL payout rules.

  • Atomic SPL mint, ATA and mint-authority revocation
  • Persistent router, source counters and owner-authorized payouts
  • Compiled runtime tests and a usable review console
Release gate

Public devnet deployment and signed end-to-end transactions must pass.

02 / Pump market launch

Connect token creation to a real market and creator-fee destination.

  • Verified Pump create flow and onchain metadata
  • Router-PDA fee destination from market creation
  • Resumable launch steps and actual curve receipts
Release gate

A new market must collect and distribute fees from actual test trades.

03 / Creator-approved automation

Run approved instructions through a revocable executor without changing fixed destinations.

  • Keeper retries and transaction identity
  • Minimum economic batch sizes and fee budgets
  • Owner or approved executor can settle manually when keepers stop
Release gate

Keeper failure cannot rewrite terms or prevent independent execution.

04 / Buyback & burn

Spend a fixed route budget on the project token, then reduce its supply.

  • Pinned mints, venues and program accounts
  • Onchain spend ceiling, output floor and expiry
  • SPL BurnChecked with measured supply reduction
Release gate

Manipulated or stale quotes must fail without spending the budget.

05 / Holder rewards

Distribute accounted assets to an eligible holder set.

  • Historical balance reconstruction and exclusions
  • Published snapshot commitments and challenge policy
  • Replay-proof payments with unpaid amounts carried forward
Release gate

Prove snapshot completeness, eligibility and no duplicate rewards.

06 / Treasury control

Give a project governed control over its treasury destination.

  • Explicit multisig signers and threshold
  • Exact proposal execution and expirations
  • Signer changes and timelocked handoffs
Release gate

No single signer can execute a threshold-controlled action.

07 / Liquidity engine

Use fixed budgets to build positions with explicit custody rules.

  • Pool identity and supported asset checks
  • Slippage and independent price protection
  • Fee recycling and permanent-lock option
Release gate

Demonstrate custody, fee ownership and withdrawal restrictions onchain.

08 / Stablecoin routes

Add settlement assets with separate accounting per mint.

  • Exact decimals and supported token extensions
  • Measured token receipts and transfer-fee treatment
  • USDC routes and asset-specific limits
Release gate

Every liability must reconcile to actual asset balances.

09 / Staking & governance

Allow opted-in projects to govern through durable voting checkpoints.

  • Deposit and withdrawal accounting
  • Reward-per-share and checkpointed voting power
  • Quorum, voting periods and exact timelocked actions
Release gate

Prevent double voting and rewards around deposit/withdrawal boundaries.

10 / Funding bands

Sell reserved inventory under predetermined market conditions.

  • Bounded inventory and fixed proceeds destinations
  • Price observation and settlement windows
  • Recoverable expired orders and partial fills
Release gate

Inventory conservation and manipulation resistance pass adversarial tests.

11 / Additional launchpads

Add market adapters only after source authority is proven.

  • PumpSwap post-migration collection
  • Meteora creator or partner PDA authority
  • Versioned adapter and pool compatibility registry
Release gate

Each venue completes its own launch-to-collect-to-settle test.

12 / Protocol distribution

Package the proven platform for projects and integrators.

  • Documented SDK and independently runnable keeper
  • Verified project directory and accounting exports
  • Optional platform-token utility decision
Release gate

Demonstrate recurring usage and choose utility before issuing a platform coin.

06Adapters and integrationsSupported fee sources and integration boundaries
06 / ADAPTER BOUNDARIES

Verify the source authority.

Pump integration validates the canonical curve, program, creator vault and event authority. The curve must identify the router as its creator destination and use native SOL. A sweep precedes collection for the current curve fee flow. Post-graduation PumpSwap requires a separate adapter.

Pump creator vaults aggregate by creator, not token, and can receive donations. “Received through Pump” is a transport fact, not proof of trading revenue from one mint. Direct collections made by other callers arrive as external receipts and can be reconciled under the same fixed rules.

Meteora, swaps and LP require separate authority and account validation. An API quote does not authorize arbitrary transaction instructions. A future buyback module must enforce input budget, destination mint, output floor, expiry and venue inside its program, then use SPL BurnChecked for supply reduction.

Holder rewards require a specified snapshot authority or verifiable reconstruction and replay protection. Raffles require independently verifiable randomness and eligibility rules; they are not included in this release.

07Platform coinCurrent status and the requirements for utility
07 / OPTIONAL PLATFORM COIN

Utility must be implemented.

The platform can operate without a proprietary coin. No VEYDUCT coin, sale, staking mechanism or holder fee entitlement has been launched. A project token created through the studio is separate from a platform token.

Potential future utility includes paying optional service fees or participating in narrowly scoped governance. Token ownership must never grant permission to rewrite existing recipients or withdraw project funds. Choose and implement the actual mechanism before publishing tokenomics or launching a coin.

08Release gatesRemaining gates for custom programs
Inspect the complete feature inventory

Tool availability identifies available tools, isolated runtime tests, and unimplemented modules. Plan token operations calculates proposed budgets; it does not execute them.

08 / RELEASE GATES

What custom programs still need.

  • All nine custom programs remain undeployed. Fund the deployment wallet and verify the exact deployed bytes for each program before enabling it.
  • Create a compatible market with the router as its real fee destination.
  • Exercise trades, fee collection, deposits, withdrawals and recipient payments on the intended public network for each supported program.
  • Test supported wallet extensions, rejected approvals, expired transactions and retry recovery.
  • Complete the intended modules and their adversarial runtime tests.
  • Produce a reproducible pinned build, independent review, explicit upgrade policy and production infrastructure before enabling custom mainnet custody or routing.

The five native mainnet tools use existing Solana programs and do not depend on these custom deployments. Local signed-transaction tests check their safeguards; funded mainnet acceptance remains unverified. Public RPC limits can interrupt reads or submissions. The interface never substitutes invented balances or successful receipts.

09Research and sourcesPrimary references and implementation provenance
09 / PRIMARY REFERENCES

Research and provenance.