Security
Trust assumptions, validation, deterministic execution, and known gaps.
#External boundaries
Market responses are schema-validated. RPC responses are checked for chain ID. Wallet providers remain external software controlled by the user.
#Data integrity
Unique indexes, input rejection, component persistence, and audit scripts prevent common fabricated or duplicate state paths.
#Wallet scope
The product reads public balances and optionally verifies a message signature. It does not custody keys or request token approvals.