Code review · SecurityDropping the policy_hash check removes the only on-chain guarantee that a report was produced under the campaign's recorded policy; evaluation_hash is stored but never verified, so any permitted workflow can pay under any policy.solana/programs/contrib-oracle/src/instructions/on_report.rs:60-63
Code review · CorrectnessPayout's serialized layout changes (score and policy_hash removed) with no migration/versioning, so pre-existing Payout accounts will mis-decode, which is inconsistent with keeping Campaign.policy_hash specifically to preserve layout compatibility.solana/programs/contrib-oracle/src/state.rs:55-62
Code review · CorrectnessShrinking Payout without showing the accompanying account-space/rent update risks new PDAs being allocated with a stale size if the context uses a hard-coded space constant rather than Payout::INIT_SPACE.solana/programs/contrib-oracle/src/state.rs:55-62
Code review · Code qualityAn unrelated `solana program deploy ...` scratch command was appended to the product-design README (and the file still lacks a trailing newline), which is dead churn.README.md:2542-2544
Code review · TestsThe policy-mismatch assertion was deleted without any replacement test for the new trust assumption (unverified evaluation_hash), and the new fit test just re-asserts hard-coded 120/265 constants.solana/tests/tests/e2e.rs:347-352
Issue fit · Issue relevanceThe linked issue #31 is a contentless stub ('test issue'), so there is no requirement the change can be verified against despite the 'fixes #31' claim.
Issue fit · ValueRemoving score and policy_hash from Payout changes the account layout, silently breaking deserialization of existing payout records with no migration path documented.solana/programs/contrib-oracle/src/state.rs:57-63
Issue fit · ScopeAn unrelated solana program-deploy shell command is appended to the end of the design README, unrelated to the report-size change.README.md:2540-2541
Issue fit · ValueDocumentation now states policy_hash is stored but no longer enforced, admitting a functional regression while leaving Campaign.policy_hash as dead state.solana/README.md:49-57