Contract map
Protection creation
Expiry settlement and exit path
Username payment and receipt flow
Trust boundaries
Important boundaries:- Backend cannot sign user transactions.
- AI cannot move funds.
- Oracle observations must be valid for entry quotes and expiry settlement.
- Admin policy must be hardened before mainnet scale.
- Reserve accounting prevents provider withdrawals from using locked liabilities or reserved claims.