Skip to main content
The local protocol has unit, integration, fuzz, invariant and transaction smoke coverage. Those checks establish local behavior, not an external audit or production readiness.

Who can do what?

A malicious approved benefit service can consume allowances granted to it. A malicious administrator can assign a different burner. Consent checks in the legitimate reserve do not remove these trust assumptions.
All local roles use a disposable unlocked Anvil account. No production signers or timelock delays have been chosen. Timelocked governance and separate emergency pausing are proposals.

Failure and pause behavior

Pausing relevant registry, GEM, reserve or rewards modules can revert the entire trading path. This is not an isolated reward suspension. Exhausting lifetime issuance is different: swaps and fees can continue without new GEM. LP withdrawal remains subject to its own immutable unlock time. A game pause blocks entries but permits existing requests to fulfill. There is no game timeout or automatic refund if the operator stops responding.

What local checks cover

Authorized initialization, registered pool identity, immutable schedules, actual caller binding, exact-input settlement, deadlines, minimum output, maximum fee, partial fills and atomic rollback.
Nontransferability, bounded issuance, replay protection, consent, donation immunity, funding maturation, reference ceilings and lifetime-cap behavior.
Worst-case inventory locks, insufficient inventory rollback, authorized single fulfillment, token transfers and fulfillment during pause.
Fees and caps do not solve wash trading or Sybil activity. A bounded direct GEM reference benefit says nothing about promotional prize profitability. No anti-scam guarantee follows from fixed supply or removing a bonding curve.

Before public deployment

Public operation requires approved registration and economic policies, secure randomness and recovery, governance, chain-specific checks, adversarial token testing, gas bounds, static analysis, expanded fork testing, independent audit, monitoring and incident procedures. See supported chains for the network evidence required.