com_r35157_nenjim-hubd-impl_ref/openspec/changes/archive/2026-09-04-84-validate-jup-signer-on-wallet-construction/tasks.md

1. Wallet Construction Validation

• 1.1 Validate the wallet address, signer key name, and blockchain dependency before invoking jup.
• 1.2 Execute jup --version during construction and fail unless it reports exactly 0.10.1.
• 1.3 Decode jup -f json keys list, require the configured signer, and require its public address to match the wallet address.
• 1.4 Report process, version, key, and address failures without exposing private key data, and preserve interruption status.
• 1.5 Retain signer-address validation in the transaction-signing response flow.

2. Verification

• 2.1 Compile main and test source sets and run the existing test suite without adding or modifying automated tests.
• 2.2 Run strict OpenSpec validation and git diff --check.
• 2.3 Review the implementation and artifacts for exact-version failure, signer identity validation, safe diagnostics, and no generated-source edits.