Trust Assumptions

You are trusting

• the deployed contract code — unaudited
• Uniswap v4 core and its hook mechanism
• the quote token you selected, and its issuer
• the Chainlink feed mapped to that quote
• Robinhood Chain: its sequencer, its bridge, its liveness
• the correctness of Limits.sol as the ceiling on every fee

You are trusting an administrator for

• which assets become quotable, and with what staleness bounds
• the default protocol fee applied to new launches
• whether new launches are enabled at all
• whether the experimental modules are enabled
• the treasury address protocol fees sweep to
• future protocol versions, which would be separate deployments
• the availability of the frontend and the indexer

You are not trusting an administrator for

Ownership hygiene

The deploy script requires the owner and treasury to be set explicitly, asserts the full wiring before the broadcast is accepted, and prints the owner-only calls for a multisig to execute when the owner is not the broadcaster. The Mainnet Checklist requires a multisig rather than an EOA.