Security.

The review line, when it exists

When a report is published, this page will state it in one line:

The firm's name and the report link. The line does not appear before the report does.

The invariants

The design states its invariants. The load-bearing ones:

• Non-custodial. No admin path can drain funds or POL. In the deploy build, the buyback share sweeps to a vault. The proposed deploy sets it before any fee accrues. Every later change waits 48 hours in public, sweeps keep paying the current vault during the wait, and the owner can cancel inside it.
• Pause-only emergency power. The guardian can pause new launches for up to 7 days. Existing pools keep trading, and it cannot move value.
• The pool cannot leave the hook. The hook's own position in an opened pool is bound in place.
• Wash volume loses money. Buyback and protocol take 30% of every toll, so farming volume to collect shares costs more than it returns.