Solana On-Chain Protocol · SIRM Invariant Enforcement · SPL Token Layer
Part of the UltraCore RFT execution platform
| Audience | Document | What You Will Learn |
|---|---|---|
| 🎯 First-time visitor | This README | What Rift Network is and how it fits into UltraCore |
| 🔬 Protocol engineer | SPEC.md | Full engineering specification: invariants, accounts, instructions |
| 🏗️ Solana developer | programs/ | Anchor implementation of core + token programs |
| 🛡️ Security researcher | Audit & Verification | 14 findings addressed, invariant enforcement model |
One-sentence summary: Rift Network is a Solana protocol that enforces deterministic economic invariants on-chain through a separated core/token architecture — the on-chain implementation of the UltraCore execution platform.
flowchart TB
subgraph CORE["Core Layer (ultra_core_rift)"]
I1["I1: Supply Conservation"]
I2["I2: Mint/Burn Accounting"]
I3["I3: Dust Bound"]
I4["I4: Debt Limit"]
end
subgraph TOKEN["Token Layer (rift_token)"]
SPL["SPL Token Mint"]
FEE["Protocol Fee ≤ 0.10%"]
REBASE["Field-Pressure Minting"]
end
subgraph VERIFY["Verification"]
AUDIT["14 Security Findings\nAddressed"]
FUZZ["2.5B+ Fuzz Runs"]
end
CORE --> TOKEN
CORE --> VERIFY
TOKEN --> VERIFY
| Metric | Value |
|---|---|
| Security Audit Findings | 14 addressed |
| Fuzz Runs | 2.5B+ |
| Protocol Fee Cap | 10 bps (0.10%) |
| Genesis Founder Share | 3.14% |
| License | Apache 2.0 |
| Framework | Anchor |
Rift Network is the on-chain institutional layer of the UltraCore RFT execution platform. It is not a standalone token project. It is a deterministic economic protocol deployed on Solana that enforces the same SIRM invariants as the standalone Rift L1 Blockchain — but adapted for the Solana Virtual Machine and SPL token standard.
The architecture separates mathematical state from economic interface:
flowchart TB
subgraph L1["Layer 1: Core State Machine"]
CS["ultra_core_rift\nInvariant Enforcement\nGate Authority\nPause Mechanism"]
end
subgraph L2["Layer 2: Token Interface"]
TS["rift_token\nSPL Mint\nField-Pressure Issuance\nFee Collection"]
end
subgraph L3["Layer 3: Shared Primitives"]
CM["rift-common\nConstants · Errors · Types"]
end
L3 --> L1
L3 --> L2
L1 -->|"reads only"| L2
Key principle: The token layer never writes to CoreState. It reads global_field and paused, but all invariant logic lives in the core program. This separation means the SPL token interface cannot corrupt the mathematical model — by construction.
All RFT-SIRM systems share a single mathematical foundation. Rift Network implements it as a Solana program:
I1: total_supply = total_base_sum + global_field × p
I2: total_supply = total_minted − total_burned
I3: dust_accumulator < p (when p > 0)
I4: effective_balance[i] ≥ −(total_supply / 10p)
Where effective_balance[i] = base_balance[i] + global_field.
Standard Solana token distribution:
for each participant:
balance[i] += reward / N ← O(N) CPI calls, O(N) rent
Rift approach:
global_field += reward / p ← O(1), one account update, all participants
At 1,000,000 participants on Solana:
- Standard: 1,000,000 account writes, 1,000,000 CPI calls, prohibitive rent
- Rift: 1 account write, 0 CPI calls
This is not an optimization. It is a different mathematical model that makes large-scale distribution economically viable on Solana.
| Account | Size | Description |
|---|---|---|
CoreState |
145 bytes | Global protocol state (not a PDA) |
UserAccount |
56 bytes | Per-participant balance; PDA ["user", authority] |
EdgeAccount |
24 bytes | Directed edge weight; PDA ["edge", from, to] |
| Instruction | Authority | Description |
|---|---|---|
initialize |
payer | Creates CoreState with zero state |
set_paused |
gate | Halts all transfers |
register |
gate | Adds participant; preserves I1 |
unregister |
gate | Removes participant; burns positive balance |
transfer |
from_owner | P2P transfer |
transfer_with_edge |
from_owner | Transfer with directed burn/mint cost |
set_edge |
gate | Creates or updates edge weight |
redistribute |
gate | Increases global_field; mints supply |
apply_neg_entropy |
gate | Deflationary tick; adjusts total_base_sum |
| Account | Size | Description |
|---|---|---|
RiftTokenState |
132 bytes | Token config; PDA ["rift_token_state"] |
| SPL Mint | — | Standard SPL mint; authority = PDA ["rift_mint_authority"] |
| Instruction | Authority | Description |
|---|---|---|
initialize |
gate | Creates state; mints 3.14% founder share |
issue_rift |
user (pays SOL) | Mints RIFT shares based on field pressure |
rebase |
gate | Updates cached rift_multiplier |
field_pressure = max(|global_field|, MIN_FIELD_PRESSURE)
mint_multiplier = 1_000_000_000_000_000 / field_pressure
shares_to_mint = (base_amount − fee) × mint_multiplier / 1_000_000_000_000
MIN_FIELD_PRESSURE = 10^6 caps the multiplier at 10^9. Higher field pressure → fewer shares per unit. The formula is monotonically decreasing in |global_field|.
Independent security audit completed. 14 findings identified and addressed. Full report available to partners under NDA. Summary of addressed categories:
| Category | Count | Status |
|---|---|---|
| Access control gaps | 3 | Fixed |
| Arithmetic edge cases | 4 | Fixed |
| PDA validation | 2 | Fixed |
| State isolation | 2 | Fixed |
| Error handling | 3 | Fixed |
- Hard constraints:
check_invariant()runs after every state-mutating instruction - Checked arithmetic: All ops use
checked_add,checked_sub,checked_mul,checked_div - Gate authority: All privileged ops require gate signer; enforced via Anchor
has_one - Pause coverage: When
paused = true, all transfers and issuance are rejected - CoreState binding:
RiftTokenStatestores the boundCoreStateaddress; every token instruction verifies it
The token program is a read-only consumer of core state. It:
- Reads
global_fieldandpaused - Calls
CoreState.check_invariant() - Never writes to
CoreState
This means even a fully compromised token program cannot violate the core invariant — the architecture prevents it structurally.
| Layer | Method | Evidence |
|---|---|---|
| L1 — Static | Clippy, rustfmt, cargo-audit | Every push |
| L2 — Unit | Workspace tests (excluding Anchor programs) | cargo test --workspace |
| L3 — Fuzzing | 2.5B+ runs across protocol modes | 0 invariant violations |
| L4 — Audit | Independent security review | 14 findings addressed |
- Rust toolchain
- Solana CLI
- Anchor CLI
cargo build --workspace# Workspace tests (excludes Anchor programs)
cargo test --workspace --exclude ultra_core_rift --exclude rift_tokencargo fmt --all
cargo clippy --workspace --exclude ultra_core_rift --exclude rift_token --all-targets --all-features -- -D warnings -A unexpected-cfgsflowchart TB
subgraph ULTRA["UltraCore RFT Laboratory"]
EP["Execution Platform"]
end
subgraph L1["Standalone Core"]
RLB["Rift-L1-Blockchain\nRust · 1T+ ops fuzzed"]
end
subgraph ONCHAIN["On-Chain Implementation"]
RN["Rift Network\nSolana · Anchor · SPL"]
end
subgraph RESEARCH["Runtime Research"]
MEM["ABIv2 Memory Contexts\n(PoC / Research)"]
SCHED["Scheduler\nagave#14274"]
end
ULTRA --> L1
ULTRA --> ONCHAIN
ULTRA --> RESEARCH
L1 -.->|"same invariants"| ONCHAIN
| Repository | Role | Relation to Rift Network |
|---|---|---|
| UltraCore-RFT | Central laboratory & documentation | Parent organization |
| Rift-L1-Blockchain | Standalone Rust validator core | Same invariants, different runtime |
| agave-abiv2-memory-contexts | SVM memory isolation research (PoC) | Complementary runtime research |
| agave-rift-scheduler | Conflict-aware scheduling | Complementary runtime research |
Built in Rust · Verified by Mathematics · Zero Compromises
Part of the UltraCore RFT Execution Platform · © 2026 Eugeny (RFT-SIRM)