Admin & Timelock

Admin operations sit behind a TimelockController owned by a 2-of-3 Safe. The timelock is deployed with a zero delay for one-time launch configuration, and the delay is raised to 24h as the final launch operation, before public launch. Every admin action after that point is subject to the full 24-hour delay. Admin addresses are immutable where the deployed contracts require that pattern.

User exit paths are not meant to be gated by admin actions. Redeem paths remain available by construction, while mint can be paused or capped for risk control.