Trust assumptions

Tokens are plain ERC20s with no owner and no mint function except through the bridge. The protocol owner can pause launches and bridging, change fee parameters within hard caps, enable quote assets, and set LayerZero peers. Use a multisig and timelock for the owner on mainnet. Contracts are new and unaudited.