Safety model
What no mod can do, and what the platform can and cannot change.
Checked by the program at launch
- Selling can only be limited by four bounded mods: a site-only phase with its kill switch, the dev lock on listed wallets, the same-block anti-sandwich, and a max per sell of at least 0.1% of supply.
- Any site-only phase longer than 7 days, or covering sells, must have a kill switch. If the platform stops sending heartbeats, the phase opens by itself.
- Windows are bounded: opening delay 30 days, sniper cap 24 hours, dev lock 365 days.
- Only the holder of the mint key can attach mods to a token, so nobody can front-run a launch with hostile mods.
What the platform can do after launch
| Action | Effect |
|---|---|
| Heartbeat | Keeps a site-only phase running. Stopping it opens the token. |
| Open now | Ends a site-only phase early. |
| Lift limits | Ends max wallet, size limits, anti-bundle and sniper caps early. |
That is all. There is no instruction to add a mod, extend a window, freeze a holder or touch the dev lock.
Status
Mods runs on Solana devnet. The programs are not audited yet. Before mainnet they will be audited and deployed as immutable.