Modules and boundaries
Eight small contracts, each with one job and a stated limit on what it may touch.
Modules
| Module | Controls | Cannot |
|---|---|---|
| Broker | ERC-721 supply, mint price, license tiers and weight | touch any account or its assets |
| ERC6551Registry | deterministic account deployment | call an account or change a binding |
| BrokerAccount | execution on behalf of the Broker's owner | delegatecall, or act without the Broker |
| Distributor | revenue accrual and claims by weight | move a Broker, or pay anyone but its owner |
| HStock | ERC-20 balances of one listing | mint or burn without the desk |
| StockDesk | listings, quotes, issuance and redemption | touch a Broker, an account or a loan |
| BrokerMarket | fixed-price listings and settlement | reprice or move a listing it does not hold |
| CreditDesk | the lending pool, loans and liquidation | seize a Broker before its term expires |
Addresses
Published on deployment to Robinhood Chain (4663) and read here from
assets/addresses.json.
| Module | Address |
|---|
Parameters
| Parameter | value | Bound |
|---|---|---|
| Broker supply | 5,000 | immutable constant |
| Mint per transaction | 10 | immutable constant |
| License weights | 1 / 3 / 8 / 20 | immutable, pure function |
| Market fee | 2.5% | admin settable, hard cap 5% |
| Desk fee | 1.0% | operator settable, hard cap 5% |
| Credit term | 30 days | immutable constant |
| Credit rate | 12% simple | immutable constant |
| Protocol share of interest | 20% | immutable constant |
Admin surface
Stated plainly, because an unstated admin surface is the interesting part of any protocol. The admin can open or close minting, change the mint price and license prices, move the treasury, set fees within their capped range, set credit limits per tier and pause new borrowing. The StockDesk operator lists hStocks and quotes their prices.
The admin cannot:
- Move a Broker or drive any Broker Account.
- Touch escrowed collateral or seize a loan that is not past due.
- Redirect distributions. Claims always pay
ownerOf(tokenId). - Rewire the Distributor. It is set once, before the first Broker exists, and is immutable after.
- Raise a fee past its cap or change any of the immutable constants above.
The StockDesk quotes hStock prices, which is a real trust assumption and the one to weigh most carefully. Redemptions clear only while the desk holds the cash to pay them.