Only the treasury wallet can launch tokens or mutate platform state. The treasury address is a hardcoded constant — no code path can change it.
Funds can only move to the coin/stock pools, the treasury, or the dead address.
No keeper private key exists in any config; signing happens through Bankr’s managed wallet infrastructure.
Planning leg 06:00 UTC — accounting, splits, lot creation, maturity detection, alerting. Moves no funds. Monitoring heartbeat every 30 minutes, also moves no funds.
Execution leg 06:15 UTC — a scheduled Bankr automation under the treasury wallet: claims fees on all 9 tokens, sells coin-denominated fees to WETH, applies the splits, buys paired stocks and opens lots, buys $BNKRS for the pool, sends the owner bucket to treasury, sells matured lots, buys back and burns — logging every action with its real transaction hash.