Trust model

A contract on Elysium cannot sign a HyperCore action, so a person or a machine has to bid. This page says where that trust sits.

Who can move what

The keeper

The keeper is a service run by the team. It reads the auction, posts the kHYPE rate within its bounds, flushes fees, records ceremony steps and calls release when the condition holds. The deployer account it releases to is published on the site and set in the gauge; changing it goes through the timelock and is impossible once a bid is under way.

The timelock

The gauge and the rate feed are owned by a 48-hour timelock. Every parameter change is public for two days before it runs.