Sameca protocol

Trust model

Narrow owner. No token admin. No locker escape. No proxies. Pre-created pools are handled, not ignored.

  • Token: no mint, pause, blacklist, upgrade.
  • Locker: no withdraw, decrease, burn, or transfer-out.
  • Factory / locker / relay: not proxies. Next version = new addresses.
  • Owner: launch fee, future curve params, future protocol share, LZ peer / relay. Cannot retarget an already-set locker.
  • Fee split and tax for a book are immutable after launch.

This removes several rug paths. It does not remove compiler bugs, DEX bugs, sequencer risk, or the risk that a memecoin does not trade.