THE CONTROL MODEL

Five agents. One narrow mandate.

Inventory can be balanced. Price, volume, and attention cannot be engineered.

Market Observer

Turns Pump and PumpSwap events into candles, inventory, flow and health features.

→ MarketSnapshot

AI Proposal

Sees numeric features only and returns HOLD, BUY, or SELL inside a strict schema.

→ TradeProposal

Risk Agent

Independently applies exposure, freshness, volatility, drawdown and direction limits.

→ RiskDecision

Execution Agent

Rebuilds fresh, simulates, decodes and requests a policy-bound Turnkey signature.

→ Transaction

Reconciliation + Fees

Confirms finality, balances the ledger, cranks fees and detects graduation.

→ AuditEvent

EXPLICIT BOUNDARIES

What the system will and won't do

Permitted

Rebalance toward 80% token / 20% SOL
Sell no more than 20% of the bootstrap reserve
Continue through the PumpSwap adapter after graduation
Pause on stale data, volatility, drawdown, or mismatch

Forbidden

Target a token price, market cap, or floor
Manufacture volume or self-trade
Coordinate two platform wallets
Give an LLM signing tools or raw transaction control

OWNERSHIP & CUSTODY

The creator starts it.
The vault owns the reserve.

The planned launch must reconcile reserve ownership and 100% routing to a dedicated per-coin fee collector. That collector has no trading mandate. PumpMM distributes collected fees using a versioned policy that the admin can change—not a Pump-enforced treasury/agent split.

Creator walletOn-chain creatorView-only after launch0% of creator fees

Per-coin trading vaultPlatform-controlledSeparate from collectorReceives agent allocation

Platform treasurySeparate addressNo trading mandateReceives treasury allocation

PLATFORM-MANAGED FEES

Loading fee policy…

APPEND-ONLY EVIDENCE

A public chain beside the chain.

Every snapshot, AI run, proposal, risk decision, execution, fee distribution, reconciliation, and admin action is hash-linked. A daily digest is designed to be anchored in a Solana Memo transaction.