Z4 // BUILD IN PUBLIC · 25 OCTOBER 2026

Devnet progress, with receipts.

The reviewed Z4 upgrade, Genesis allocation and funded claim paths ran with the original Model T admin and the same Devnet mint. The X accounts and subscription evidence in this rehearsal were synthetic; live X verification still needs an end-to-end test.

A longer runway for community rewards.

The next build releases 125M of the 500M community IAT at Genesis. The remaining 375M stays locked for six calendar months, then releases linearly over 36 months, finishing at month 42. Initially unlocked non-core reserves become 225M IAT.

The candidate passed 98 Node tests, 4 Rust tests and 24 compiled-program tests, including rejection of spending beyond the unlocked community balance. These are local checks. The existing Devnet configuration and network receipts below use the earlier community policy; this revision still needs a fresh Devnet activation rehearsal.

Community vesting candidate and validation · Current allocation and release rules

Weekly rewards keep their reserve records.

The new build rejects a weekly payout if its reserve sources changed after the payout list was prepared. It also saves the exact signed transaction before sending, so recovery can check the same transaction. Local checks passed 87 Node tests, 3 Rust tests and 20 compiled-program scenarios. The narrow source review found no reportable vulnerability; it covered the weekly funding changes, with the scope recorded in its evidence.

The original Model T approved the upgrade on 9 October. All 591,032 deployed bytes match the reviewed build, with the same mint, policy and admin. All 16 program accounts and 11 token accounts stayed unchanged during the upgrade. Its closed buffer returned exactly 3.00328076 test SOL to the publisher. No weekly reward batch has been funded on the public network.

Finalized upgrade and exact deposit return · Completed network checkpoint · Local funding and claim checks · Review scope and result

The first weekly commitment deadline passed on 8 October. That result remains pending under the fixed-randomness rules; we cannot backdate a commitment or choose an already-known draw. Automatic weekly operation and funded claims remain release checks.

A saved claim survives a restart.

The new daily service reserved capacity from immutable, ordered validation records, then activated and paid 20 test IAT in one transaction. A lost network response and a service restart recovered the same finalized signature: one holder signature, one verifier signature and one broadcast. The existing disposable test holder reached 90 test IAT.

Durable daily claim evidence · Earlier atomic browser claim

The earlier Model T upgrade on 6 October added receipt-refund support. Its 15 program accounts and 11 token accounts stayed unchanged. Its temporary buffer closed and returned 3.00015148 test SOL to the publisher.

Upgrade and exact deposit return · Early cleanup rejection test

The receipt deposit returned to its holder.

On 9 October, the paid daily receipt closed after its real 72-hour evidence window. The recorded holder received the full 0.0015748 test SOL deposit. The publisher paid a separate 0.000005-test-SOL cleanup fee; the holder needed no new signature. Every remaining program account, token balance and reserve record stayed unchanged.

A wrong refund recipient was rejected before submission. After cleanup, simulations rejected both repeat cleanup and a replacement reward for the old earning day. The receipt closed once, leaving 15 program accounts and the same 11 token accounts.

Finalized refund, event and replay checks

Active unclaimed rewards stay open until payment or processed expiry. Permanent X bindings and Genesis receipts stay open. This rehearsal used synthetic X evidence; genuine social eligibility, human wallet review and hosted claim operation remain release checks.

Earlier launch rehearsals.

Metadata and fixed supply rehearsed together.

The Model T approved a separate Z4META fixture: 1B test tokens, fungible metadata, then immediate mint and freeze authority revocations in one finalized transaction. An independent decoder verified the supply, metadata and revoked authorities. The existing IAT rehearsal mint was unchanged.

View isolated metadata test · Independent verification

This separate fixture is not the official IAT token. The unsigned Mainnet metadata simulation submitted no transaction and proposes no Mainnet addresses.

Check the transactions.

Every receipt below is on Devnet and uses test IAT or test SOL. Open a receipt to inspect its transaction, accounts and finalized slot.

Four additional simulations rejected Genesis replay, daily replay, a wrong recipient and a Premium regrant for an already-paid regular wallet-day. These checks submitted no transactions. They prove the issued grant could not be reissued; they do not establish real X subscription history.

Download the evidence.

• Rehearsal report · 4 October
• Claim balances, supply reconciliation and rejected simulations · JSON
• Complete transaction receipts and policy history · JSON
• Isolated hardware metadata test · JSON · Unsigned Mainnet metadata simulation
• Current launch specification · immutable snapshot
• Local pre-upgrade checks · 3 Rust, 34 economics, 15 compiled-program scenarios · Scenario output

Local checks and this Devnet claim rehearsal are development evidence. They are not a security audit or a completed Mainnet launch.

What still needs to pass?

Public source repository

The latest rehearsal proofs are available on this page. Their GitHub sync remains pending.