docs+status: fix Token-2022 audit findings; Phase 1 live

- TOKEN_CLASSIFICATION.md: ASCII decision-flow diagram updated to match the
  Rev-2 prose (program → extension → lock → empty → non-empty protected → route),
  no longer routes all Token-2022 to UNSUPPORTED.
- CLAUDE.md: removed stale "Token-2022 support" from out-of-scope; documents
  the gated Token-2022 policy + that classifier code still skips it for now.
- status.json: Phase 1 (Wallet Scanner) marked done — app deployed live at
  feedthepyre.com (app at /, tracker at /status, api at /api), scan verified
  end-to-end through the public stack.

Reviewed by a doc-consistency audit agent (verdict after fixes: consistent).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-31 03:59:34 +00:00
parent ae33b6d794
commit 1a556f33a6
4 changed files with 35 additions and 20 deletions

View File

@@ -175,15 +175,20 @@ non-destructive category — **Unknown means skip.**
```
scan account
├─ not classic SPL? ───────────────────────────────► UNSUPPORTED
├─ bad metadata / layout / unhandled extension? ───► UNSUPPORTED
├─ NFT / cNFT / LP / receipt / staked / major /
│ valuable / SOL-WSOL / suspicious / frozen /
│ delegated / over-threshold? ────────────────────► PROTECTED_SKIP
├─ balance == 0? ──────────────────────────────────► EMPTY_CLOSE_ONLY
├─ safe swap route + passes risk checks? ──────────► TRANSMUTABLE
└─ otherwise (burnable junk, no safe route) ───────► INCINERATE_ONLY
├─ unknown/other token program (not SPL or Token-2022)? ─► UNSUPPORTED
├─ Token-2022 unsafe/unknown extension
│ (confidential transfer / withheld fee / unrecognized)? ► UNSUPPORTED
├─ bad metadata / unsupported layout? ───────────────────► UNSUPPORTED
├─ frozen or delegated? (regardless of balance) ────────► PROTECTED_SKIP
├─ balance == 0? (closes regardless of mint identity) ──► EMPTY_CLOSE_ONLY
├─ NON-empty & NFT / cNFT / LP / receipt / staked / major /
│ valuable / SOL-WSOL / suspicious / over-threshold? ───► PROTECTED_SKIP
├─ NON-empty & safe swap route + passes risk checks? ────► TRANSMUTABLE
└─ otherwise (burnable junk, no safe route) ─────────────► INCINERATE_ONLY
```
(Transfer-hook & permanent-delegate Token-2022 mints pass the program/extension
gates — they are cleanable — but are flagged and excluded from swap. See design
doc §7.1.)
---