ops package

Package ops is the house's till.

WHAT IT IS FOR. The three arcade realms each take a cut -- 5% of a draw ticket, 3% of a duel stake -- and each pushes it to ONE compile-time address, opsVaultAddr, which is the address derived from THIS package's path. Until this realm existed, that address had no code at it: the money left the games and landed somewhere nothing could ever spend from. That is AUDIT-2026-10-07.md RED-2 and the arcade's own source names it, in terms, as "still blocking for deployment ... the owner's address is the missing input".

This realm is that input, and nothing else. It holds wrapped GNOT and lets one address take it out.

WHAT IT DELIBERATELY DOES NOT DO, because every one of these is a way for a till to become a liability:

• NO ACCESS TO ANY PRIZE POT. It cannot reach one. The draws pay winners from their own balances and this realm has no call into them. The owner key cannot touch a player's money because there is no code here that could.
• NO OWNERSHIP TRANSFER. owner is a compile-time constant with no setter, so there is no function an attacker can reach to become the owner, and no function the owner can be tricked into calling. The cost is stated below.
• NO PAUSE, NO UPGRADE, NO ADMIN. Nothing here can be turned off or changed after deployment, by anyone.
• NO NATIVE COIN. chain/banker is not imported. This realm can move wrapped GNOT and nothing else, which is what the games actually send.

THE COST OF A FIXED OWNER, SAID PLAINLY RATHER THAN DISCOVERED LATER: if that key is lost, every coin in this realm is lost with it. There is no recovery path and cannot be one without adding exactly the kind of privileged function the list above refuses. That trade is the owner's and it was made knowingly.