Parties
| Party | Can | Cannot |
|---|---|---|
| Quadratic Arithmetic Program owner | Transfer ownership | Move your shares; sign on your behalf; deanonymise stealth addresses |
| Arithmetic Circuit owner | Transfer ownership | Redirect the Pons creator fee (fixed at launch); touch program shares |
| Relayer | Delay or refuse to submit | Change a signed operation |
| RPC provider | See your IP and queries | Move funds |
| Sequencer | Censor or delay | Forge transactions |
Upgrades
Contracts are not upgradeable. A change means a new deployment.