Superteam Academy Dev

Superteam Academy Skill

What this Skill is for

Use this Skill when the user asks for:

• On-chain program development for the Academy platform
• XP token minting (soulbound Token-2022)
• Course registry and enrollment logic
• Lesson completion and bitmap tracking
• Finalize course / award XP flows
• Metaplex Core credential issuance and upgrades (soulbound via PermanentFreezeDelegate)
• Achievement system (create, award, deactivate)
• Minter role management (register, revoke, reward XP)
• Anchor program development, testing, security
• Deployment workflows (devnet → mainnet)

Core Concepts

Account Structure (6 PDAs + Metaplex Core NFTs)

Instructions (16 Total)

Core Learning Loop

ENROLL → COMPLETE LESSONS → FINALIZE COURSE → ISSUE CREDENTIAL → CLOSE ENROLLMENT

1. Enroll: Learner signs, prerequisite check, create Enrollment PDA
2. Complete Lessons: Backend signs, set bitmap bit, mint lesson XP (Token-2022 CPI)
3. Finalize Course: Backend signs, verify all lessons done, mint completion bonus + creator XP
4. Issue Credential: Backend signs, Metaplex Core createV2 CPI (PermanentFreezeDelegate + Attributes plugins)
5. Close Enrollment: Learner signs, reclaim rent (immediate if completed, 24h cooldown if not)

Key Design Decisions

• XP = soulbound Token-2022 token (NonTransferable + PermanentDelegate)
• Credentials = Metaplex Core NFTs — soulbound via PermanentFreezeDelegate, wallet-visible, upgradeable
• Config PDA = update authority of all track collection NFTs
• finalize_course and issue_credential are split — XP awards don't depend on credential CPI
• Completion bonus merged into finalize_course — bonus XP = floor(xp_per_lesson * lesson_count / 2)
• No LearnerProfile PDA — XP balance tracked via Token-2022 ATA
• Rotatable backend signer stored in Config
• Reserved bytes on all accounts for future-proofing without migrations
• revoke_minter closes the MinterRole PDA (not a soft deactivation)

Technology Stack

Compute Budgets

Operating Procedure

1. Classify the task

• Platform setup (Config, authority)
• Course management (create, update, track assignment)
• Enrollment flow (enroll, lessons, finalize, credentials, close)
• Minter roles (register, revoke, reward XP)
• Achievements (create type, award, deactivate)
• Account structure (PDAs, state)
• Access control (backend signer, authority, minter permissions)
• Testing (unit, integration, fuzz)
• Security (audit, attack vectors)
• Deployment (devnet, mainnet)

2. Implementation Checklist

Always verify:

• Account validation (owner, signer, PDA seeds + bump)
• Backend signer matches Config.backend_signer
• Checked arithmetic throughout (checked_add, checked_sub, checked_mul)
• Bitmap operations correct for lesson tracking
• Events emitted for state changes
• Canonical PDA bumps stored (never recalculated)
• Reserved bytes preserved on account modifications
• CPI target program IDs validated

3. Testing Requirements

• Unit test (Mollusk): Each instruction in isolation
• Integration test (LiteSVM): Full enroll → complete lessons → finalize → credential flow
• Fuzz test (Trident): Random amounts, edge cases, bitmap bounds
• Attack test: Unauthorized signer, double completion, supply exhaustion

Progressive Disclosure (read when needed)

Programs & Development

• programs-anchor.md — Anchor patterns, constraints, testing pyramid, IDL generation

Testing & Security

• testing.md — LiteSVM, Mollusk, Trident, CI guidance
• security.md — Vulnerability categories, program checklists

Deployment

• deployment.md — Devnet/mainnet workflows, verifiable builds, multisig

Ecosystem & Reference

• ecosystem.md — Token standards, DeFi protocols
• idl-codegen.md — Codama/Shank client generation
• resources.md — Official documentation links

Task Routing Guide

Canonical Docs

Converted and distributed by TomeVault — claim your Tome and manage your conversions.