What is checked
Uploads are scanned before they go live, downloads are watermarked, and the API cannot spend the vault.
Uploads
scanner@1.1.0 fails closed on a bad userscript header, wide match patterns, obfuscation, and network calls the header did not declare. Remote scripts have to come from cdn.jsdelivr.net, cdnjs.cloudflare.com, unpkg.com. A sandbox failure or a wallet signing call is rejected by trenchmart-ai-v1. The same file hash cannot be published by a second creator.
Payments
Amounts are integer lamports. A payment settles only when the transfer matches the order total, the memo, the buyer, and the vault, inside the expiry plus 5 minutes of grace. The cluster guard refuses a mainnet RPC URL. Wallet sign-in is a message signature, not a transaction.
Downloads and sessions
Downloads require a released order and a license for that wallet. The signed URL expires after 300 seconds. The session cookie is httpOnly. Download logs store a hash of the IP, not the raw address. Private keys and seed phrases are not collected.
Prohibited tools
Malware, drainers, wallet stealers, and tools that sign or move funds without the action the listing described are not allowed. An upheld malicious dispute delists the listing and bans the creator.