Build on verifiedSolana events.

Inspect the transaction.

Start with a signature and network to discover the available evidence. Candidate program IDs and event bytes remain untrusted.

POST /api/inspect

import { inspectTransaction } from "@eventseal/sdk";

const inspection = await inspectTransaction({
  signature,
  cluster: "devnet",
});

if (inspection.reasonCode === "CANDIDATES_FOUND") {
  // Confirm identity from your trusted source.
}

No verdict. No receipt. Inspection does not verify event identity or persist evidence.

Verify your expected event.

Supply the program ID and event discriminator from your trusted IDL or deployment configuration. Never take these values from inspection candidates.

POST /api/verify

import { verifyEvent } from "@eventseal/sdk";

const result = await verifyEvent({
  signature,
  cluster: "devnet",
  expectedProgramId,
  event: {
    format: "anchor-log",
    discriminator: expectedDiscriminator,
  },
  commitment: "finalized",
});

Trusted identity goes in. The expected discriminator must be eight bytes, encoded as 16 lowercase hexadecimal characters.

Decide from the verdict.

Only verified evidence passes the event checks. Your application still decides whether an action is authorized and whether it has already been processed.

switch (result.verdict) {
  case "verified":
    // Your application checks authorization and replay
    // protection before performing any protected action.
    break;
  case "rejected":
  case "indeterminate":
    return;
}

Missing evidence never passes. Rejected and indeterminate results must not trigger a protected action.