{"snapshot":{"projectId":"nosana","status":"ready","checkedAt":"2026-10-27T17:30:55.222Z","expiresAt":"2026-10-27T17:35:55.222Z","market":{"status":"ready","observedAt":"2026-10-27T17:30:53.691Z","pairAddress":"3GkFzURGWNWyErnjQvnkZpgcLnNocjnRwvMYXiVDiVQk","url":"https://dexscreener.com/solana/3GkFzURGWNWyErnjQvnkZpgcLnNocjnRwvMYXiVDiVQk","dex":"raydium","priceUsd":"0.4346","liquidityUsd":603907.41,"volume24hUsd":38688.1,"change24hPercent":-2.51,"pairCount":15,"message":"Highest reported-liquidity pair among the validated returned Solana pairs with this exact base mint. Values are provider observations, not consolidated token metrics or a price history."},"repository":{"status":"ready","observedAt":"2026-10-27T17:30:55.222Z","fullName":"nosana-ci/nosana-programs","url":"https://github.com/nosana-ci/nosana-programs","commit":"c804e58043e6fd8a3667e5a16e440e8315acbd0e","commitUrl":"https://github.com/nosana-ci/nosana-programs/commit/c804e58043e6fd8a3667e5a16e440e8315acbd0e","committedAt":"2026-10-27T06:07:15.000Z","archived":false,"license":"MIT","language":"TypeScript","filesObserved":166,"filesRead":4,"truncated":false,"manifests":["Cargo.toml","common/Cargo.toml","package.json","programs/nosana-jobs/Cargo.toml","programs/nosana-nodes/Cargo.toml","programs/nosana-pools/Cargo.toml","programs/nosana-rewards/Cargo.toml","programs/nosana-staking/Cargo.toml"],"implementation":["common/src/constants.rs","common/src/errors.rs","common/src/id.rs","common/src/lib.rs","common/src/macros.rs","common/src/pda.rs","common/src/utils.rs","common/src/writer.rs","programs/nosana-jobs/src/errors.rs","programs/nosana-jobs/src/instructions/assign.rs","programs/nosana-jobs/src/instructions/clean.rs","programs/nosana-jobs/src/instructions/clean_admin.rs"],"tests":["tests/contstants.ts","tests/suites/1-initialization-tests.ts","tests/suites/2-nosana-staking-init-tests.ts","tests/suites/2-nosana-staking-tests.ts","tests/suites/3-nosana-rewards-init-tests.ts","tests/suites/3-nosana-rewards-tests.ts","tests/suites/4-nosana-pools-tests.ts","tests/suites/5-nosana-jobs-tests.ts"],"workflows":[],"policies":["SECURITY.md"],"inspected":[{"path":"Cargo.toml","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/Cargo.toml","kind":"manifest"},{"path":"programs/nosana-jobs/src/instructions/finish.rs","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/programs/nosana-jobs/src/instructions/finish.rs","kind":"implementation"},{"path":"programs/nosana-staking/src/instructions/stake.rs","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/programs/nosana-staking/src/instructions/stake.rs","kind":"implementation"},{"path":"README.md","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/README.md","kind":"documentation"}],"stack":["Rust"],"observations":["Cargo.toml: Rust manifest inspected. TOML dependencies are identified by bounded text patterns, not a full TOML resolver.","Lockfile paths present: Cargo.lock, package-lock.json. Lockfile contents and vulnerability databases were not inspected.","Test-like paths are present. Test correctness, coverage, and passing status are not verified.","Rust program directories suggest on-chain program components; deployed bytecode equivalence is not checked."],"findings":[{"title":"Authorization-check patterns observed","detail":"Checks appear in sampled source. Their presence does not prove that every sensitive path is protected or that the checks are correct.","evidence":["programs/nosana-jobs/src/instructions/finish.rs:11 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:12 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:13 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:19 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:20 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:21 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:24 — Signer or authorization-check pattern","programs/nosana-jobs/src/instructions/finish.rs:31 — Signer or authorization-check pattern"]},{"title":"Authorization-check patterns observed","detail":"Checks appear in sampled source. Their presence does not prove that every sensitive path is protected or that the checks are correct.","evidence":["programs/nosana-staking/src/instructions/stake.rs:28 — Signer or authorization-check pattern"]},{"title":"Bounded source review, not a security audit","detail":"Only selected text files at one Git snapshot were inspected. No code ran, no dependencies were installed, and no active target was probed.","evidence":["Sampled text files: 4","Observed file paths: 166"]}],"message":"Bounded source evidence from one pinned commit. This source sample does not prove that a deployed system matches this repository."},"score":{"value":90,"maximum":100,"label":"Technical evidence","version":"1.0","checks":[{"id":"public-source","label":"Public repository identity","possible":10,"points":10,"status":"observed","detail":"The fixed repository was returned as public with the expected canonical owner/name. This does not prove deployed-code equivalence.","sources":[{"label":"nosana-ci/nosana-programs","url":"https://github.com/nosana-ci/nosana-programs"}]},{"id":"pinned-commit","label":"Immutable source snapshot","possible":20,"points":20,"status":"observed","detail":"The default branch resolved to a commit and matching Git tree. Source references below use that exact commit.","sources":[{"label":"Source snapshot","url":"https://github.com/nosana-ci/nosana-programs/commit/c804e58043e6fd8a3667e5a16e440e8315acbd0e"}]},{"id":"manifest-read","label":"Build manifest inspected","possible":20,"points":20,"status":"observed","detail":"A supported build/dependency manifest was downloaded within the text budget. Dependencies were not installed or audited.","sources":[{"label":"Cargo.toml","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/Cargo.toml"}]},{"id":"implementation-read","label":"Implementation text inspected","possible":20,"points":20,"status":"observed","detail":"At least one selected implementation file was read. This is bounded source evidence, not a test of runtime behavior or code originality.","sources":[{"label":"programs/nosana-jobs/src/instructions/finish.rs","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/programs/nosana-jobs/src/instructions/finish.rs"},{"label":"programs/nosana-staking/src/instructions/stake.rs","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/programs/nosana-staking/src/instructions/stake.rs"}]},{"id":"test-paths","label":"Test definitions present","possible":10,"points":10,"status":"observed","detail":"Test-like file paths occur in the pinned inventory. Tests were not run; correctness, coverage, and passing status remain unknown.","sources":[{"label":"tests/contstants.ts","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/tests/contstants.ts"},{"label":"tests/suites/1-initialization-tests.ts","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/tests/suites/1-initialization-tests.ts"},{"label":"tests/suites/2-nosana-staking-init-tests.ts","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/tests/suites/2-nosana-staking-init-tests.ts"}]},{"id":"ci-paths","label":"Automation definitions present","possible":10,"points":0,"status":"not_observed","detail":"Workflow file paths occur in the pinned inventory. A passing pipeline, protected branch, or secure workflow configuration was not verified.","sources":[]},{"id":"review-policy","label":"License and security policy","possible":10,"points":10,"status":"observed","detail":"Five points for a recognized declared SPDX license and five for a security-policy path. Policy existence does not prove policy quality or an independent audit.","sources":[{"label":"SECURITY.md","url":"https://github.com/nosana-ci/nosana-programs/blob/c804e58043e6fd8a3667e5a16e440e8315acbd0e/SECURITY.md"}]}],"unavailablePoints":0,"meaning":"GudTek’s transparent evidence-availability rubric. Points measure observed public artifacts only. A score of 100 is not a security audit, proof of original technology, endorsement, investment rating, or an external Larpcheck result. Missing or unavailable evidence earns no points."},"events":[{"at":"2026-10-27T17:30:53.665Z","source":"catalog","status":"observed","message":"Selected the fixed NOS mint and component repository from the source-linked research catalogue. Official-source review is separate from this live provider observation."},{"at":"2026-10-27T17:30:53.692Z","source":"dexscreener","status":"observed","message":"Validated 15 returned Solana pairs against the exact base mint."},{"at":"2026-10-27T17:30:54.016Z","source":"github","status":"observed","message":"Confirmed the public repository identity: nosana-ci/nosana-programs."},{"at":"2026-10-27T17:30:54.615Z","source":"github","status":"observed","message":"Pinned commit c804e58043e6 and inventoried 166 supported file paths."},{"at":"2026-10-27T17:30:55.222Z","source":"github","status":"observed","message":"Read 4 selected text files; 0 selected files were unavailable. No repository code was executed."},{"at":"2026-10-27T17:30:55.222Z","source":"rubric","status":"observed","message":"Recorded 90 of 100 available technical-evidence points using rubric version 1.0. This is not an external Larpcheck score."}],"limitations":["Curated Solana technology examples, not endorsements or a catalogue of every memecoin.","Official mint and component-repository sources were reviewed for the catalogue; they are not scraped again on each live observation.","DEX Screener values refer to one selected returned base-token pair. No historical price series, all-pool coverage, beneficial ownership, liquidity lock, or financial forecast is claimed.","At most 4,000 Git tree entries and four selected text files of 48 KB each are inspected. Unsupported, oversized, symlink, dependency, generated, and credential-like files are skipped.","Tests and workflows are inventoried, not executed. No dependencies are installed, wallet is connected, transaction is signed, or live target is probed.","No deployed-bytecode comparison, exhaustive security audit, originality verification, or independent Larpcheck review is performed."]},"cached":false}