Approval flow
Quorum approval separates action construction, member authorization, and Solana transaction submission.
State sequence
The operator prepares an action and reviews the target accounts and instruction summary.
A member with initiate permission creates the proposal on-chain.
Eligible members approve or reject by signing canonical preimages.
The proposal has enough total approvals and, if configured, enough post-quantum approvals.
Any timelock has elapsed and required accounts remain valid.
The proposal is executed, cancelled, rejected, or otherwise no longer active.
Canonical preimages
Members do not sign arbitrary UI text. They sign protocol-defined preimages with domain tags and action context. This reduces replay risk and keeps signatures tied to a specific multisig action.
Vote accounting
The program records which member voted and whether that vote counts toward total threshold and post-quantum threshold. Duplicate votes and non-member signatures should not create additional authority.
Read how each signer class verifies.