Solana Pay Link + Verify — tip-jar in one link (round 138)

Static client-only submit pack (round 138). Zero backend, zero keys, zero custody. Nothing registered / published / deployed in this round.

Pages (local relative links, no CDN)

Pay — Solana Pay URL generator (copy of paylink_v2/index.html)
Verify — on-chain payment check (copy of verify_v2/index.html)
Monitor — live BTC/EVM balance demo (copy of demo/index.html)
BOLT11 — local Lightning-invoice decoder (copy of bolt11/index.html)

All links relative (./pay.html ./verify.html ./monitor.html ./bolt11.html ./index.html). No CDN, no external CSS/JS. Each subpage links back here + to siblings via top nav.

How to use

Pay: open pay.html → paste recipient wallet (NOT ATA) → amount (SOL ≤9dp, USDC ≤6dp, 0 allowed) → label/message/memo → Generate → Copy / QR-share via X/Discord → payer pays in Phantom/Solflare.
Verify: open verify.html → same recipient + reference(s) from URL + expected amount → Check payment → CONFIRMED / MISMATCH / PENDING [finalized]. Use Re-check after payment, Search deeper for older history (5×20).
Monitor: open monitor.html → Refresh → live BTC (blockstream.info) + EVM (blockcypher.com) balances. Pre-existing demo, disclosed per Colosseum rules.
Local run: python3 -m http.server 8766 --directory hack/app → curl each page → expect 200.

Honest limits

devnet e2e pending — faucet dry. Full cycle "airdrop → 0.05 SOL + USDC-dev with memo → Verify green" NOT passed this round; no solana airdrop executed. Verification = mock harness 30/30 + read-only RPC checkers only.
mainnet not tested. No mainnet sends; mainnet reads only via check_solana.py (balance/signatures/USDC of test addr GBVu...).
Public RPC flakes possible (429 on mainnet-beta) — mitigation: devnet switch, cache, retry. No Anchor/native program by design (rent/deposit 0, audit 0).
Pre-existing code disclosed: demo/, check_solana.py, solana_wallet_gen.py.
Registrations/submits/posts/deploys: zero.

Stack

Static HTML+JS, zero deps. Read-only RPC: getBalance, getSignaturesForAddress, getTransaction/getParsedTransaction, getTokenAccountsByOwner, getAccountInfo. Output only via textContent. Sending happens in user wallet.