What is deployed, and what it promises

Deployed

SlabrVault is live on Robinhood Chain, chain id 4663, at 0x8479297B85300ec615d3A1288D32595cDA126C14, deployed in block 57768036. No constructor arguments; every address it talks to is a compile-time constant.

It has no owner, no admin, no proxy and no upgrade path. owner() reverts because there is no such function.

Binding

bind(name, symbol, grader, cert, card) reserves a certificate and records the pairing against the coin address pons will mint, derived from getUERC20Address(name, symbol, 18, LAUNCHER, keccak256(creator)) before the coin exists.

• A cert can be bound once. The second attempt reverts with CertTaken.
• A token can be bound once. Re-binding reverts with AlreadyBound.
• An empty cert reverts. The certificate is the only field anyone can independently verify, so a binding without one records nothing useful.
• There is no setter. The row is write-once by construction, not by policy.

cardOf(token) reads it back, and tokenForCert(cert) goes the other way.

Fees

The vault is named as the launch’s creator fee recipient on pons v2. recycle(tokenId) is permissionless and pays the caller nothing. It:

• calls collectFees on the pons fee splitter for that position,
• claims the owed amounts out of the beneficiary vault,
• sends any token side straight to 0x…dEaD,
• and spends the whole ETH side buying the coin on its own v4 pool, taking the output directly to the dead address.

The swap encoding is byte-identical to the one already proven on this chain by the other pons vaults. buildSwap is public so it can be diffed, and a test pins the recipient so a refactor cannot redirect the buys.

What it cannot do

• There is no withdraw, no rescue, no sweep and no owner. ETH enters and the only exit is the router.
• It cannot change a binding, and it cannot bind on your behalf.
• It cannot hold the card. Courtyard is on Polygon.

Known edges

• The launch has to match the bind. Name, symbol and wallet all feed the address derivation. Get one wrong and the fees route to a coin nobody bound. This is the one place an operator can break it.
• The binding is a claim, not custody. It proves which certificate a coin refers to and that nobody changed it. It does not put the slab behind the coin.
• A stale pool reverts the swap. If the launch has no v4 pool at the expected fee and spacing, recycle reverts rather than stranding the ETH. Nothing is lost; it can be called again.
• Unaudited. Read the source. Size your position like the code has a bug in it, because it might.