Who can do what?
All local roles use a disposable unlocked Anvil account. No production signers or timelock delays have been chosen. Timelocked governance and separate emergency pausing are proposals.
Failure and pause behavior
Pausing relevant registry, GEM, reserve or rewards modules can revert the entire trading path. This is not an isolated reward suspension. Exhausting lifetime issuance is different: swaps and fees can continue without new GEM. LP withdrawal remains subject to its own immutable unlock time. A game pause blocks entries but permits existing requests to fulfill. There is no game timeout or automatic refund if the operator stops responding.What local checks cover
Launch and swap boundaries
Launch and swap boundaries
Authorized initialization, registered pool identity, immutable schedules,
actual caller binding, exact-input settlement, deadlines, minimum output,
maximum fee, partial fills and atomic rollback.
GEM and reserve accounting
GEM and reserve accounting
Nontransferability, bounded issuance, replay protection, consent, donation
immunity, funding maturation, reference ceilings and lifetime-cap behavior.
Prize delivery
Prize delivery
Worst-case inventory locks, insufficient inventory rollback, authorized
single fulfillment, token transfers and fulfillment during pause.