Three interoperable layers with strict interfaces. Choose proof-only modes where needed.
Deterministic nonces, expiry, refunds, and executor allow-lists with gas caps.
Per-asset vaults, per-route caps, oracle-aware fees, and MEV-guarded swaps.
Permissionless relayers with bonds, QoS scoring, and slashing for faults.
Automated circuit breakers triggered by anomaly detectors.