NFT purchases

For each funded vault, the keeper:

1. Discovers the collection's assets through DAS getAssetsByGroup (or a Tensor program scan on devnet/localnet).
2. Derives each asset's Tensor list_state PDA and fetches it from chain — listings are never taken from an API at face value.
3. Verifies collection membership from the asset itself, the listing currency, expiry, private taker, cosigner, royalties and total cost.
4. Takes a lock per listing, re-fetches it, simulates, and submits execute_sweep.

The vault must hold at least the purchase's max_price (listing + 2% Tensor taker fee + creator royalties) above its rent-exempt minimum. The keeper's key only pays transaction fees; it never holds user funds.

Destinations

• Protocol NFT Vault — a per-launch PDA (["nft-vault", mint]). V1 has no instruction to move NFTs out of it.
• Creator / DAO Treasury — an address chosen at launch (for example a Squads multisig).
• Giveaway Pool and Community Rewards — disabled on-chain in V1. See Giveaways.