Zero single-owner admin control. Every critical parameter update, pause toggle, or ratchet release requires multi-signer approval and a mandatory 48-hour timelock delay before execution.
Move floor ratchet reserve into active vault reserve
Rescue untracked excess USDT (User reserves protected & untouchable)