Security model

The builders are stateless. They have no receive or fallback function, nothing is payable, and a transaction that leaves any token behind reverts.

• No custody. NFTs are minted with you as the recipient. The builder's own Permit2 grant to the V4 PositionManager is created and revoked inside the same call.
• No native value. Arc's V3 WETH9 is a revert stub; every payable path was deleted, not adapted. Deposits are ERC-20 only.
• Hook guard. V4 pools whose hooks can take a delta on add-liquidity are refused with HookTakesDelta().
• Owner powers are bounded. The owner can move the fee between 0 and 100 bps and change the treasury address. Nothing else.
• Simulated first. The app runs every write through eth_call before your wallet ever sees it, and decodes the revert if it fails.