Solana settlement real, local validator

One transaction: verify the quorum, write the record, pay

The flight-delay record was settled on a local Solana validator (localnet (solana-test-validator 4.4.0, IQ program cloned from devnet)) on Nov 3, 2026, 7:33 AM PT. Signatures below are from that local ledger; they will not appear on any public explorer.

Step	Result	Detail
settle: Ed25519 precompile verifies all quorum signatures over the record hash, memo, transfer	ok	sig 2Mpk2tBQ7yaSWjcmj6KiuYGZH9TTde8wNH2cDunCDB9d3ChedKr9A9LdrMDN1qzw2ZmkVGP2VKH3MzX4NTK5vnDn · 1142 B
tampered signature (one quorum sig altered): whole tx must fail, no transfer	rejected, as intended	Status: ({"err":{"InstructionError":[0,{"Custom":2}]}}). payee balance unchanged: 5000000 lamports
IQ Labs inscription of compact record	ok	sig 2mNiVh8r2NojDqqHjdeXunRWxtSZ7eMhNzYEJwfUdqiE5LXUKGhdAtGXE9jBfdxGtXv3Uy3NVp1AmnJkFZoTbKuB · 1122 B
IQ read-back round trip	ok	{"filetype":"application/octet-stream","method":0,"filename":"judgment-flight-delay.json","total_chunks":1}

Transaction layout

Ed25519 precompile: 6 signatures over the 32-byte record hash 2a01515d8f14400f…, 14-byte offsets per signature.
Memo with the record hash.
SystemProgram transfer: 500 PLAY stand-in as 5,000,000 lamports to the payee.

All three are atomic: if any signature fails, nothing is paid.

Not verified / design only

design An escrow program that reads the instructions sysvar, checks the quorum keys against a registry, and enforces the caps itself. Today the escrow is a plain keypair that could move funds outside this tx.
not run Devnet: the public faucet returned 410 and faucet.solana.com needs a sign-in. Funding the throwaway payer ARuaEdk94q7GFK94iLEuxN2mwWGngCTTqFaEbrYUttnU with ~1 devnet SOL would let the same script run there.
unverified Per IQ Labs docs, a single inscription tx carries about 700 B inline and ~3,400 B with their chunking; we did not test the limits.
unverified SIMD-0296 (larger transactions) is in Review, so this design assumes today's 1,232-byte limit. Our settle tx is 1,142 B with 6 signatures, which caps the quorum near 6 or 7 signers per tx.

Compact record inscribed via IQ Labs real

{
 "rh": "3pyHkYJZiH9LUq2tXPVBu6Q6VfHAXktucmpaPT1QG2qi",
 "cid": "5v7pDF4BzhngYyX9b8u4n2wZpfs3VpJNvW7NDEcorrV1",
 "cl": "flight_delay_determination",
 "rd": 0,
 "o": "full_payout",
 "pay": [
  [
   "ana_reyes",
   500
  ]
 ],
 "t": "6/6/6",
 "ev": [
  "FiTca3zWUL4SDqZu",
  "CxKbnnmAV2tgF9Rw"
 ],
 "q": [
  [
   "6Kd4p5CUcQHgtfy7UBv38kNWg89oVWgcszKVYtVzCTff",
   "5hiEox4oRpk7Zgrftpa65WBWtSUtxMpwLXSE9aw8qupVKQg5rApgD8JjdrEVNkcL8d3Dxs8BxyeZseV8b2MsnCMJ"
  ],
  [
   "4tBrMFqTeHDLfP52J3tYqCHiGAWzphrgMBrh3rh9V8SE",
   "33Q4rgQuDKUPgUDdWJsWgqJP3FZBceftq7r5f4qhE3tmpQRDzGLT29AqZBZgKTWsMRsgGQficbKiqthR1V77rGcw"
  ],
  [
   "5GtGNetzjnKVjHP3yBm3nKyhZZSNDEqfQXqV68Bi4Q2U",
   "2afGY6RsRk6PUxpwoi6WKUuZCo1DTp3kiADnZNBkDWePropjhLFVCjPANzsJEgjqiG8fgmLq668PXE1H32y7eomp"
  ],
  [
   "DTbtnafPoJLwQEsGdQJp1WRV2xAwdxyowk6KSFSED9E2",
   "58CNr8qqzaSWvboUaqeth1o39HGYGWdwWdB4zAqAQGenryUMWwiF7w6jWjN83JaUqus6oCNxscKsY6qyf4LmamQV"
  ],
  [
   "BXggtDBEgexsVnYEXQi3uX68WfMJqVh229Zx42AJCKsX",
   "5T6JDC3muQ4CrfzsGLQwwn8ftXSSheAH92SdBGCsM6YNKK9LN7Nrdpf42XXvhWxWnZoz39bHvCJBb47fJaDDkgg5"
  ],
  [
   "Hr3HB31rPfv7iN9tQRqtPiFJQio57NxFXRSamqBeAAFW",
   "2otdEo6EwewR6EMjcmhajMyK47PB73fuz9FhxVhbrRNS5PkcVFeKoEN76nHwM6wDhxtoK4tgFEvtVFZbUeTUg1QB"
  ]
 ]
}

svmLLM: side check before settlement

Separately, a model-based SVM simulator (svmLLM) predicts what the settle transaction will do. It is a pre-flight sanity check only; the validator is the source of truth. See the svmLLM line in each demo's escrow panel.