Admin roles
Who can change what, and what nobody can do.
| Role | Can | Cannot |
|---|---|---|
| Owner (timelock, then multisig) | Change fee and haircut parameters, list markets, change keepers and relayers, set the dev fee recipient, reconcile failed deposit sweeps, upgrade contracts. Every action waits 7 days. Because contracts are upgradeable, the owner can in principle do anything. | Act without the 7-day delay. |
| Pause guardian | Retire a market (permanent, freezes its price). Pause all new opens. | Unpause opens (owner only). Move funds. |
| Risk and tier keepers | Post betas, tiers and minimum sizes within contract bounds. | Set the limits directly, move user funds, freeze prices, change fees. |
| Scorer | Post stock floors and account scores within the enforced range and rate limits. | Change the fee on an open position. |
| Corporate-actions keeper | Post dividend and split adjustments, set event-night caps. | Change prices outside a posted corporate action. |
The corporate-actions keeper is a new trust point that Papertrade does not have: a wrong adjustment changes PnL on every open position in that stock. Its posts should be bounded on-chain (for example, a dividend adjustment cannot exceed 10% of price) and published before they apply.
Building your own frontend
Allowed. A third-party frontend produces the same signed orders and sends them through the foundation's relayer. Builder codes (a revenue share for frontends) are not planned for v1.