# Control Surface

Treasury BNB has two authorized uses: fill Firsto part orders, and pay the TapeOut tape-out fee. There is no function that sends BNB to the deployer. Holdings: [Treasury](/treasury).

This page is a control surface, not a governance forum. This launch has no vote, no parameter committee, and no redeem-at-NAV.

```mermaid
%%{init: {"theme":"base","themeVariables":{"primaryColor":"#1a120c","primaryTextColor":"#f5ede4","primaryBorderColor":"#953307","lineColor":"#f46622","secondaryColor":"#221710","tertiaryColor":"#120d09","edgeLabelBackground":"#120d09","noteBkgColor":"#221710","noteTextColor":"#f5ede4","noteBorderColor":"#953307","actorBkg":"#1a120c","actorBorder":"#953307","actorTextColor":"#f5ede4","signalColor":"#f46622","signalTextColor":"#f5ede4","fontFamily":"inherit"}}}%%
flowchart TD
  Trader["Trader"] -->|buy, sell, claimBem| Curve["Curve and dividend ledger"]
  Buyer["kitBuyer"] -->|buyKit, buyKits| Treasury["Treasury BNB: parts and tape-out only"]
  Anyone["Anyone"] -->|tapeout, arm, start, harvest| Treasury
  Owner["Owner"] -->|setKitBuyer| Buyer
  Owner -.-> Limits["Cannot withdraw BNB, change tax, pull LP, stop miners"]
  classDef hot fill:#f46622,stroke:#f46622,color:#120d09
  classDef dim fill:#120d09,stroke:#3a2416,color:#b9a693
  class Treasury hot
  class Limits dim
```

## Treasury holdings

| Asset | Note |
|---|---|
| BNB | Unspent miner-share tax and launch surcharge |
| NAND / LATCH | Parts not yet taped out |
| Circuit NFT | TapeOut result, owned by the treasury |
| Miners | Started on PodMining |
| `$BEM` | Payable not yet claimed |

`$TAPE` is not locked in the treasury. The `$TAPE` you hold decides whether you can claim `$BEM`.

## Who can call

| Role | Can | Cannot |
|---|---|---|
| Trader | Buy, sell, claim own `$BEM` | Spend treasury BNB on parts |
| kitBuyer | Buy parts. Order choice is off-chain | Price is unchecked. Replacing the address needs owner `setKitBuyer` |
| Anyone | Tape-out, arm, start, harvest, claim for others | Stop. `stopMining` reverts |
| Owner | Set kitBuyer, transfer owner | Withdraw BNB, change tax, pull LP, stop miners |

Graduation LP is sent to `0xdead`. The inner book has no team share and no VC allocation.

The 5% trade tax is written at deploy and cannot change. The 1% fee is counted inside that 5% and does not enter the treasury. It accrues to the team and is pulled with `claimFees`. It is not treasury policy, and it is not a product feature.

The contract does not check Firsto fill price. The current script reads the official TapeOut API, picks the lowest Firsto venue ask, and posts those ids. Details: [Risks](/risks).

## Hard no

| Item | Status |
|---|---|
| Owner withdraw of treasury BNB | No function |
| Change trade tax | Immutable after deploy |
| Withdraw graduation LP | Recipient is `0xdead` |
| Stop mining | `stopMining` reverts |
| Transfer circuit NFTs out | No interface in this version |
| Redeem BNB at book | No redeem function |
| Second protocol token | Not provided |

A narrow surface is not the same as no trust assumption. kitBuyer can still fill a rich ask. Owner can still replace kitBuyer. External protocols can still stop paying on the current interface. Those facts live on [Risks](/risks). This page does not dress them up.