Trust model and addresses.

What is enforced on-chain

• Fee splits, roots payouts, harvests, pool transfers and donation settlement are enforced by the contracts.
• Holder-reward allocation is computed by the keeper, and only its Merkle root is on-chain. Every snapshot is published and checkable on Rings.
• Shielded notes hide the spending graph, not the deposit transaction.

Admin powers

The admin is the owner of the contracts. On mainnet that is a Safe account, which is also the treasury listed under Addresses below.

The admin can: change fee shares within the bounds, set the treasury, pause a coin's roots and send its new roots share to the fixed recovery address, set the keeper, set pool deposit limits, set the launch and cause-registration fees, set the roots cap, and deactivate a cause.

The admin cannot: take roots BNB, change a coin's payee after handover, spend or freeze pool notes, mint tokens, change the 2.00% fee, or upgrade contracts. Nothing is upgradeable.

Addresses