Every account this vault owns, what created it, and the complete list of instructions that can move its money. Then a panel where you can try to drain it and watch the program refuse.
| Instruction | Signer | Where SOL goes |
|---|---|---|
| trade | roster signer | a whitelisted AMM pool, output back to vault accounts |
| deposit | the depositor | into vault custody |
| withdraw | that depositor | their own recorded wallet |
| settle | anyone | queue → shares, no new destination |
| crystallize | anyone | nowhere — moves shares, not SOL |
Pick an instruction a malicious leader would reach for. The verdict is the check the program actually runs, in the order it runs them.