Review Integrity Policy

Last updated: 9 October 2026

Undersigned shows reviews of Solana dApp Store apps that Seeker owners sign on-chain, beside the store's own rating. This page says, in one place, how a review gets in, what is checked, what is counted and what is only shown. Every rule here is in the App's open source and runs the same way in the App, on the website and in the API, so anyone reading the public ledger reaches the same scores.

1. How reviews are collected

Anyone can sign one; signing is free. A review is a memo transaction the reviewer signs in their own wallet. The only cost is the Solana network fee their wallet sets, which goes to the network. Undersigned charges nothing for reviewing.
Nothing is offered for a review. Undersigned never pays, discounts or gives anything for writing a review, for a particular rating, or for changing one, and never asks only satisfied users to review.
Every review is shown, good or bad. Low ratings and critical text are shown exactly like high ones. Nothing is held back for its rating or opinion. The only text that is not shown is described in section 5, and even then the rating still counts.
The author alone can withdraw it. A withdrawal from the same wallet stops the review being counted or shown. Nobody else, including Undersigned, can withdraw someone's review. The on-chain record itself is permanent.

2. What is checked before a review counts

One device, one voice. A review counts only if the signing wallet holds a Seeker Genesis Token, read on-chain. There is one Genesis Token per Seeker.
One review per wallet per app. If a wallet signs several, the newest is the one counted.
No marking your own work. A review signed by a wallet proven to publish the app is shown and labelled, and counted in no score. A publisher is proven by the build the dApp Store serves or by a file on the website the store lists.
Undersigned's own wallets count nowhere. Reviews, flags, clears and helpful votes from the wallets Undersigned's operator controls are shown, labelled "Undersigned operator", and counted in no score, flag or vote. Those wallets are listed in the source code (Operator.WALLETS). Where Undersigned's operator publishes the reviewed app, the app's page says so.
No gifted reviewers. A reviewer holding a Pro seat given by the reviewed app's own publisher has received something of value from that publisher. Their review of that publisher's apps is shown, labelled "Pro from this app's publisher", and counted in no score.

3. How a counted review is weighted

A counted review's weight is its device weight multiplied by its quality. No payment and no token balance is part of either.

Device weight: 1 for every wallet holding a Genesis Token: one device, one voice. No payment and no token balance changes it.
Stake, shown, never weighed: beside each review, the SKR and SOL its wallet had staked, as first read after the review appeared, with the date it was read. It is there so you can judge the reviewer yourself; it never changes a weight, a score, a flag or a vote. Undersigned does not recommend buying, selling or staking any token.
Quality: 0.5 for stars and tags alone; +0.25 when the review carries what the phone saw (how long the app has been installed, or how long it has been used); +0.25 for a written note of six or more words. Halved for a wallet with a review hidden by community consensus. Never below 0.25.
The signed score is the weighted average of counted reviews. For ranking only, a few reviews are pulled toward 3.0 until more Seekers sign, and the page says so.

4. How reviews are shown: five headings

Organic reviews: counted Seeker owners with no tie to Undersigned or to the app's publisher.
Pro members: reviewers who pay Undersigned for the optional Pro licence. Their reviews count at exactly the same weight as everyone's, carry a "Pro member" mark, and also appear in a separately labelled "Pro members" score with its own count. Pro buys tools; it never raises a review's weight or the signed score.
Promoted reviews · paid: reviews their own author paid Undersigned to promote. They count once, at exactly the same weight as everyone's, carry a "Promoted · paid" mark, sit in their own shaded section placed after the organic reviews (never first), and also appear in a separately labelled "Promoted" score with its own count. Only the review's author can promote it, only while holding Pro, and only once per review. Promotion is refused to any wallet proven to publish an app, to Undersigned's own wallets, to holders of a Pro seat gifted by the app's publisher, and on every app Undersigned's operator publishes. The buyer confirms they are not paid by, employed by or acting for the app's publisher or a competitor; a promotion bought on a publisher's behalf breaks this policy and is withdrawn when found.
Related to Undersigned or the publisher: Undersigned's own wallets, and reviewers holding Pro gifted by the app's publisher. Shown, labelled, counted in no score.
Not counted: wallets without a Genesis Token, and a publisher's review of its own app. Folded away by default, still public.

The dApp Store's own star rating is shown beside the signed score, unchanged and labelled as the store's. Undersigned does not edit, filter or re-weight it.

5. Flags, consensus and moderation

Community flags. Any counted Seeker owner can flag a review as spam, abuse, off-topic or misleading, or sign "looks genuine" against a flag. A review is hidden by consensus when at least two different counted wallets flag it (net of "looks genuine" votes; every counted wallet counts once); after the author disputes, at least four. Flags from the app's proven publisher and from Undersigned's own wallets are ignored. Every step can be undone on-chain.
Moderation hides text, never a voice. A moderator can hide a review's or reply's words for four reasons only: illegal content, someone's personal data, abuse or harassment aimed at a person, or impersonating a publisher. The rating, tags and weight still count. Each hide is a public on-chain record with its reason; the author can dispute it and is answered within 7 days. A low rating, a harsh opinion or criticism of an app is never a reason.
Who moderates. Today the only moderator is Undersigned's operator, who also publishes apps in the store. The operator's wallets cannot moderate reviews of any app the operator publishes, on-chain or on the website.
Every hide is public. All moderation records, and anything the website does not serve, are listed with their reason at undersigned.provenby.dev/moderation.

5A. AI suggestions, labelled

Undersigned uses an AI model (Anthropic's Claude) only to help people read: a suggested translation of a review (Pro), a suggested summary of an app's counted reviews (each point with how many reviews mention it, only once there are at least three), suggested paraphrase groups (reviews using near-identical words), a suggested note on what an app update changed, a docs helper for developers, and a private triage suggestion for the moderator. Every output says it is a suggestion made by AI. None of it writes, edits, rates, orders, scores, hides or judges a review: the author's own words stay shown, the moderator decides and signs every hide, and the signed score never reads any of it.

6. Timing facts, not verdicts

Undersigned marks unusual bursts of signed reviews or store ratings, and copy-pasted text across reviews. These are facts about timing and wording, shown for readers to weigh. They never remove a review from a score and are not a finding that any review is fake.

7. Reporting a problem

To report a review you think breaks this policy, flag it in the App, or write to aardappvark@proton.me with the record id. We reply within 7 days. Changes to this policy are dated at the top of this page and released with the App's source.