01
Trust boundary
Trust boundary: roadmap status is not a promise of price, financial upside, or assured decentralization. It is an operational map of what has shipped, what is active, and what remains research.
- Gameplay mutation remains in USK/Postgres unless explicitly settled.
- On-chain state is used for ownership, receipts, governance execution, or proof.
- Public copy must describe the boundary honestly, including what is not decentralized yet.
02
Contract surfaces
Contract surfaces over time: SEEDOS token, Seed NFT, marketplace, staking, LP controller, governor, timelock, treasury, anchor registry.
- Every surface should emit enough events for analytics and incident reconstruction.
- Privileged functions should be role-gated, timelocked, or emergency-scoped depending on blast radius.
- Batch, nonce, and root identifiers must remain replay-resistant across upgrades.
03
Operational assumptions
Operational assumption: security, invariant tests, deploy rehearsals, and incident response come before feature expansion.
- Failure modes must degrade visibly rather than pretending the world is healthy.
- Security posture takes priority over feature velocity when settlement or treasury risk is involved.
- Docs, tests, and live proof widgets should evolve together with contract changes.