A pinocchio no_std program cleared its full test harness, then access-violated in production.
An SBF codegen behaviour: a by-value copy of a u128 out of a repr(C, packed) struct.
Every packed state access now routes through addr_of! and read_unaligned with copied scalars; every new instruction clears a real v0-target validation stage on a localnet pinned to mainnet features before it ships.
Standing doctrine across the estate's pinocchio programs: iso-xmm, weavers and SPDR staking, all live on mainnet, and the iso-a hook, since closed.