Design commitments

What the Robinhood Chain contracts guarantee in their code, checkable in the verified source. For Solana, see Who can change what.

  • Locked liquidity has no exit. AgiLaunchLocker and AgiV2LaunchLocker have no withdraw, transfer, burn or arbitrary-call function. A position that reaches a locker stays there.
  • Nothing is upgradeable. There are no proxies. A fix means a new deployment at a new address; the old one keeps running unchanged.
  • Launch tokens have no admin. AgiLauncherToken and AgiV2LauncherToken are fixed-supply ERC-20s with no mint, no pause, no blacklist and no owner. V1's temporary wallet and transaction limits end at a set block.
  • A launch's terms are fixed at launch. Its fee, creator tax, phantom reserve, graduation threshold and fee policy are set when it launches. Later changes by the owner apply to new launches only.
  • Fees are pulled, never pushed. In AgiV2FeeEscrow, claim() pays msg.sender and nobody else: no one can claim someone else's fees.
  • The ceilings are constants. Every MAX_* bound under Fee schedule and caps is declared constant; no owner call can move it.
  • Graduation is permissionless. Anyone can send both phases, and the second can be retried until the pool exists, so a failed pool seed never strands the reserves.
  • Model V2's ownership cannot be renounced. renounceOwnership() reverts on AgiV2LaunchFactory, AgiV2MemeHook, AgiV2LaunchLocker and AgiV2BuybackVault, so the powers in Owner powers and trust always have a holder and move only by a two-step transfer. Model V1's factory and locker can be renounced.
What these do not cover

The deployment: the owner key, the launch configurations, the approved quote assets and the fee recipients can be wrong while the contracts work as written. See Owner powers and trust and Risks.