This is a digital assets problem we approach through our Platform to Platform service line.
A platform has more than an on-chain contract
Our NFT ecosystem work spans the user application, an administrative application, backend services and on-chain programs. The backend includes wallet, minting, marketplace and transaction-confirmation workflows. The settlement program includes order creation and cancellation, escrow, settlement and administrative controls.
These are implemented components visible in the codebase. Their presence does not establish that every feature is available in a deployed release or that an independent security audit has been completed.
Keep application status connected to transaction status
A user action and its on-chain result are separate steps. An interface needs to show whether an operation is requested, submitted, confirmed or requires review. The backend must reconcile the result rather than treating a successful HTTP response as the final business outcome.
This is why transaction confirmation and administrative workflows are part of the platform scope, alongside the wallet and marketplace screens.
Make operational authority explicit
The implemented settlement program has separate instructions for order actions, settlement and administration, including pause and authority-management operations. A release review must establish who can invoke those operations in the deployed configuration and how that authority is managed.
An instruction existing in source does not prove that production keys, permissions or recovery procedures have been configured correctly.
Review the complete release
Before a production rollout, the review should connect four kinds of evidence:
- Application workflow: demonstrate the user journey and how pending or failed transactions appear to the user and the operations team.
- Integration behaviour: exercise duplicate notifications, delayed confirmation and interrupted requests against the actual services used by the release.
- Contract and authority configuration: verify the deployed program version, permitted actions and signing arrangements, supported by an appropriate security review.
- Operations: agree monitoring, reconciliation, incident ownership and recovery procedures, including what can be paused and what cannot be reversed.
The value of this work is in connecting those layers. A wallet screen, a backend endpoint and a settlement instruction need to describe the same business action.