EPIC
EPIC
Security-First Gateway

Security-first upgrade intelligence for Solana programs.

Catch upgrade risk, security gaps, and layout drift before you deploy.

Install EPICView GitHub
epic@solana-upgrade: ~
$ npm install -g @solana-epic/cli
• Fetching package information... Installed.
$ epic audit --binary target/deploy/vault.so
[EPIC] Initializing Upgrade Readiness rules engine...
[EPIC] Running 5 active verification rules...
  [EPIC-SEC-001] Size Boundary Check ............. OK
  [EPIC-SEC-002] Account Owner Constraint ........ OK
  [EPIC-SEC-003] Upgrade Authority Validation .... OK
  [EPIC-SEC-004] Struct Offset Alignment ......... OK
  [EPIC-SEC-005] Slot Constraints Validation ...... OK
[EPIC] SUCCESS: All security and layout checks passed.
Product Capabilities

Designed for Protocol Security

Technical readiness checks targeting the specific structures that trigger Solana program deployment failures.

Upgrade Intelligence

Simulated against mainnet state, before release.

Accuracy100%Pre-flight sandbox
CHECK_ID: EPIC_CAP_01Technical docs

Account Layout Analysis

Catches struct drift before clients break.

CHECK_ID: EPIC_CAP_02

Security Audits

Binary scan against the rule set.

CHECK_ID: EPIC_CAP_03

GitHub Actions PR Gate

Layout shift, caught at the PR.

epic-bot
All 5 rules passed
CHECK_ID: EPIC_CAP_04Technical docs

Native CLI

Runs inside your local build.

epic checkv0.1.0
$ epic check v1.so v2.so
[EPIC] Success: Layout aligned.
CHECK_ID: EPIC_CAP_05Technical docs

CLI Reference Demo

Run Verification Locally

Run it before CI does.

Select CLI Command to Execute
epic@solana-upgrade: ~
$epic check --compare target/deploy/vault_v1.so target/deploy/vault_v2.so
EPIC Upgrade Intelligence CLI v0.1.0Solana Security Gateway

Security Rules Library

EPIC Verification Rules

Active rules verifying upgrade readiness.

EPIC-SEC-001CRITICAL

Account Layout Allocation & Resize Checks

Asserts realloc size boundary checks.

View Rule Specs
EPIC-SEC-002CRITICAL

Missing Struct Discriminant Modification

Protects struct field byte offsets.

View Rule Specs
EPIC-SEC-003HIGH

Unauthorized Program Upgrade Authority Gate

Locks authority to governance multisigs.

View Rule Specs
EPIC-SEC-004MEDIUM

Struct Memory Offset Alignment Verification

Enforces memory structural byte alignment.

View Rule Specs
EPIC-SEC-005HIGH

Slot Dependency Integration Validation

Verifies slot dependency synchronization boundaries.

View Rule Specs
EPIC-SEC-006 & More

Rules database scales automatically as new threats are verified.

Continuous Integration

GitHub Actions PR Gate

Automate upgrade checks in pull request pipelines to intercept backwards-incompatible binaries.

  • Layout Shift InterceptionsVerify structural alignment against live mainnet states.
  • Access ChecksEnforce deployment authority rules targeting governance multisigs.
  • Automated FeedbackPost layout schema reports directly to pull request comments.
Workflow Configuration: .github/workflows/epic-gate.yml
epic-gate.yml
name: EPIC Verification
on:
  pull_request:
    branches: [ main ]

jobs:
  epic-check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3

      - name: Run EPIC CLI Gate
        uses: solana-epic/action@v1
        with:
          binary: target/deploy/vault.so
          expected-authority: ${{ secrets.MULTISIG_PDA }}
Getting Started CLI

Install EPIC Gateway

Install the CLI globally to verify Rust build targets and anchor structures.

npm install -g @solana-epic/cli
Step 01. Verify Installation

Assert CLI version

Confirm that the shell resolves the binary gateway correctly.

$ epic --version
Step 02. Audit Target Binary

Run local safety scans

Audit compiled program binaries against target security rules.

$ epic audit --binary target/deploy/my_program.so

Milestones & Goals

Development Roadmap

Product release pipeline focused on building stable verification primitives.

Shipped
  • •Core compilation auditor package (@solana-epic/cli).
  • •Validation rules for EPIC-SEC-001 through 005.
  • •Reallocation memory bounds analyzer (epic check --space).
STATUS: RELEASED
Active Staging
  • •Pre-flight upgrade simulations on local mainnet forks.
  • •GitHub Actions pipeline validation and comment outputs.
  • •Deterministic upgrade readiness certificate generation.
STATUS: BETA
Planned Roadmap
  • •Squads multisig upgrade verification dashboard.
  • •Upgrade authority PDA lock constraints checks.
  • •Security rules extension covering rent-exemption logic.
STATUS: PLANNED