Proof

Receipts, not claims

Nothing on this page is asserted. Every line is an address you can paste into an explorer, a balance read from the chain, or an authority that is revoked or is not. What does not exist yet says so.

Where every SOL goes

The surcharge is split by the program, inside the same transaction, into four accounts. None of them is a wallet a person can empty: the program is the only signer, and no instruction exists that withdraws to a human.

Status

Addresses

Published from a configuration file. An address that is not deployed shows not deployed rather than a plausible value, because a plausible value gets pasted into a wallet.

Authorities

The three that decide whether this is a vault or a promise: whether new passports can still be created, who may write a passport's attributes, and whether the fee configuration can still be changed.

Economics

Ship order

Each line turns green when the chain shows it, not when we say so.

Last movements

Naturalisations and migrations, read from the program's own logs.

How to check this yourself

Open any address above in Solscan. A mint transaction must contain the burn in the same instruction list: if the burn is not there, the supply did not fall, and the passport should not exist. No instruction in the program sends funds to a human wallet, and the tests assert that refusal rather than the success path.