> For the complete documentation index, see [llms.txt](https://docs.bextree.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bextree.com/developers/program-registry.md).

# Program Registry

How Bextree's on-chain programs are publicly identifiable and verifiable.

## Status

| Artifact                       | Status                                                                                                                                      |
| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------- |
| **Program IDs**                | ✅ Published — see [Program IDs](/security/program-ids.md), verifiable on Solscan                                                            |
| **Multisig upgrade authority** | ✅ Live — Squads vault, verifiable on each program's Solscan page                                                                            |
| **Verified builds**            | ⏳ In progress — reproducible builds via the standard `solana-verify` flow, so explorers can confirm deployed bytecode matches public source |
| **On-chain IDLs**              | ⏳ Pending publication                                                                                                                       |
| **On-chain security.txt**      | ⏳ Ships with the next program build                                                                                                         |
| **Explorer naming**            | ⏳ Solscan name registration pending verified builds                                                                                         |

## How to verify us

1. Get the program ID from [Program IDs](/security/program-ids.md) — never from a third party.
2. Open it on Solscan and confirm it is an executable program.
3. Confirm the upgrade authority matches the published Squads vault — see [Upgrade Authority](/security/upgrade-authority.md).

If any check fails for an address claiming to be Bextree, treat it as hostile and [report it](/security/responsible-disclosure.md).