Clarify Pyth guardian set verification in documentation

basics/pyth/anchor-v1/programs/pythexample/src/lib.rs

@@ -84,10 +84,10 @@ pub struct ReadPriceAccountConstraints<'info> {
 
 #[derive(AnchorSerialize, AnchorDeserialize, Clone, Debug, PartialEq, Eq)]
 pub enum VerificationLevel {
-    /// Partially verified: only `num_signatures` of the Wormhole guardians
-    /// were checked against the price update.
+    /// Partially verified: only `num_signatures` of the Pyth guardian set's
+    /// signatures were checked, fewer than its quorum of three of five.
     Partial { num_signatures: u8 },
-    /// Fully verified against the full guardian set.
+    /// Verified against a quorum of the guardian set.
     Full,
 }
 

basics/pyth/anchor/programs/pythexample/src/lib.rs

@@ -71,10 +71,10 @@ pub struct ReadPriceAccountConstraints {
 
 #[derive(Clone, Debug, PartialEq, Eq, wincode::SchemaRead, wincode::SchemaWrite)]
 pub enum VerificationLevel {
-    /// Partially verified: only `num_signatures` of the Wormhole guardians
-    /// were checked against the price update.
+    /// Partially verified: only `num_signatures` of the Pyth guardian set's
+    /// signatures were checked, fewer than its quorum of three of five.
     Partial { num_signatures: u8 },
-    /// Fully verified against the full guardian set.
+    /// Verified against a quorum of the guardian set.
     Full,
 }
 

finance/perpetual-futures/anchor-v1/programs/perpetual-futures/src/state/oracle.rs

@@ -14,7 +14,7 @@ use crate::errors::PerpError;
 // account as a `PriceUpdateV2` instead of reading offsets: from the
 // `pyth-solana-receiver-sdk` crate, or the vendored copy in `basics/pyth` on
 // Anchor 2. The Pyth Receiver program writes that account only after checking
-// the Wormhole guardian signatures over the update, and the account type's
+// the Pyth guardian set's signatures over the update, and the account type's
 // owner check rejects any account that program does not own. Map
 // `price_message.price`, `exponent` (the scale is its negation), `conf`, and
 // `publish_time` or `posted_slot` onto the checks below, and also check

finance/perpetual-futures/anchor/programs/perpetual-futures/src/state/oracle.rs

@@ -14,7 +14,7 @@ use crate::errors::PerpError;
 // account as a `PriceUpdateV2` instead of reading offsets: from the
 // `pyth-solana-receiver-sdk` crate, or the vendored copy in `basics/pyth` on
 // Anchor 2. The Pyth Receiver program writes that account only after checking
-// the Wormhole guardian signatures over the update, and the account type's
+// the Pyth guardian set's signatures over the update, and the account type's
 // owner check rejects any account that program does not own. Map
 // `price_message.price`, `exponent` (the scale is its negation), `conf`, and
 // `publish_time` or `posted_slot` onto the checks below, and also check

finance/prop-amm/anchor-v1/programs/prop-amm/src/state/oracle.rs

@@ -14,7 +14,7 @@ use crate::errors::PropAmmError;
 // account as a `PriceUpdateV2` instead of reading offsets: from the
 // `pyth-solana-receiver-sdk` crate, or the vendored copy in `basics/pyth` on
 // Anchor 2. The Pyth Receiver program writes that account only after checking
-// the Wormhole guardian signatures over the update, and the account type's
+// the Pyth guardian set's signatures over the update, and the account type's
 // owner check rejects any account that program does not own. Map
 // `price_message.price`, `exponent` (the scale is its negation), `conf`, and
 // `publish_time` or `posted_slot` onto the checks below, and also check

finance/prop-amm/anchor/programs/prop-amm/src/state/oracle.rs

@@ -14,7 +14,7 @@ use crate::errors::PropAmmError;
 // account as a `PriceUpdateV2` instead of reading offsets: from the
 // `pyth-solana-receiver-sdk` crate, or the vendored copy in `basics/pyth` on
 // Anchor 2. The Pyth Receiver program writes that account only after checking
-// the Wormhole guardian signatures over the update, and the account type's
+// the Pyth guardian set's signatures over the update, and the account type's
 // owner check rejects any account that program does not own. Map
 // `price_message.price`, `exponent` (the scale is its negation), `conf`, and
 // `publish_time` or `posted_slot` onto the checks below, and also check