| Boundary | Rule or dependency |
|---|---|
| Gabox program | Checks the launch config, prize table, coin amounts, pack fee, market accounts, reservations and the authenticated callback. It has no instruction to withdraw prize coins. |
| Gabox transfer hook | While the coin is on the curve, coins leaving the curve may only enter that coin’s prize pool. Meteora removes the hook at graduation. |
| MagicBlock VRF | Supplies the random bytes. Gabox checks the callback’s signer and the draw’s sequence number. It relies on MagicBlock to generate the bytes fairly and to deliver them. A late draw can expire at its smallest prize. |
| Meteora | Sets trade prices, runs the curve and the pool, collects trading fees and moves the coin at graduation. Gabox does not compare a trade with an outside price. |
| Gift packs | Only the named wallet can open a gift, once, on its own machine. The gift’s USDC can only pay for that one pack. If the opening fails, the gift is unchanged. See Gift packs. |
| Swap route | On a machine not quoted in USDC, the app swaps USDC through Jupiter first. |
| Mega operator | A Gabox server wallet. It pays out Mega Packs to holders. The program checks the amounts, and the published files let anyone check who got what. |
| Irys | Stores the published Mega Pack files. Their fingerprints are on chain, so a changed file is detected. |
| Quote token issuer | Some registered Token-2022 quote tokens, such as stock tokens, let the issuer pause, freeze or move tokens. Gabox refuses transfer fees, live transfer hooks, interest-bearing or rebasing tokens and unknown features. It checks the quote token again at every trade. The issuer can still affect trading and balances. |
| Gabox admin and upgrade authority | The admin registers quote tokens, can stop new machines or purchases on a quote token, sets the Mega Pack settings, and can raise a machine’s prize table. The program checks that the new average payout never goes below the old one, and a pack already bought keeps its old table. The program can be upgraded, and new code could change prize pool and draw rules. |
| App server, RPC and indexer | Help you read machines, offers and events. Check signed transactions and on-chain data when accuracy matters. |
Trust boundaries
What code enforces and which services you rely on
A quote registry change only applies to machines launched after it. The Gabox admin can raise an existing machine’s prize table under the current program, but can never lower its average payout, and an upgrade can still replace that program. See Deployment status.