What is checked

scanner@1.1.0 fails closed on a bad userscript header, wide match patterns, obfuscation, and network calls the header did not declare. Remote scripts have to come from cdn.jsdelivr.net, cdnjs.cloudflare.com, unpkg.com. A sandbox failure or a wallet signing call is rejected by trenchmart-review-v1. The same file hash cannot be published by a second creator.

Amounts are integer lamports. An order settles only when its escrow account on chain holds the quoted total with the buyer, seller, resolver, buckets and fee fields the API asked the buyer to sign. Bond and verification-fee transfers settle only when the amount, memo, sender and vault match. Every transaction is built with you as the only signer and fee payer, carries explicit compute-budget limits, and is simulated on devnet first. The cluster guard refuses a mainnet RPC URL. Wallet sign-in is a Sign-In With Solana message for trenchmart.fun, not a transaction.

Each listing's Security tab has a downloadable JSON report: the file name, size and SHA-256, every static, sandbox and review step with its engine and timestamps, every check with its result, and the review attestation. The report is signed with Ed25519. The signed bytes are the UTF-8 of trenchmart-scan-report:v1, a newline, and the report as JSON with sorted keys and no spaces. The public key is on /verify and at /api/v1/transparency, and /verify can check a report in your browser.

The review step is an AI review (rules@1.0.0+llm): a rules engine (rules@1.0.0) and an LLM (gpt-5.6-luna, reasoning effort medium). The model sees the listing text buyers read (summary, README, install guide), the first 40,000 characters of the file, your note and the check results, all as untrusted data. The stricter verdict wins, so the model can only make a verdict stricter. Each signed report names the engine and model that reviewed the version. The model is skipped when the rules already reject, and if it is unavailable the rules verdict stands; either way the report shows the rules engine alone. Live settings are on /verify.

Downloads require a paid (escrow-confirmed) or released order and a license for that wallet, and pause during a dispute. The signed URL expires after 300 seconds. The session cookie is httpOnly. Download logs store a hash of the IP, not the raw address. Private keys and seed phrases are not collected.

Malware, drainers, wallet stealers, and tools that sign or move funds without the action the listing described are not allowed. An upheld malicious dispute delists the listing and bans the creator.