Roles

Who can do what — and, more importantly, the list of things nobody can do at all.

• Protocol owner (multisig) — sets configuration: pack prices, pool floors, the stock basket and feeds, Stocker parameters, and the randomness provider (only while zero spins are pending). Also pre-seeds day-one prizes. It has no path to inventory, escrow, or settlements.
• Dev wallet — receives the 1% tax stream. Its only power is rotating its own address; it holds no other authority anywhere in the protocol.
• Keeper — an operational bot that triggers the public functions on a timer ( restocking, randomness delivery, settlement nudges). Every one of its duties is permissionless: if the keeper vanishes, anyone can do its job and earn its bounties.
• Players — buy packs, receive prizes, claim refunds. Players also hold the real enforcement power: everything above is verifiable from a block explorer.