Security
Recovery and emergency controls
What happens when a piece of the system fails.
Failure cases
| If… | Then |
|---|---|
| The relayer is down | Every action can still be called directly from the user's wallet. Credits stay claimable. |
| An automatic payout fails | The amount stays credited. "Send payout again" retries it. |
| A deadline passes with nobody online | Nothing moves until someone opens the booking or presses Expire/Release; the funds are safe in the contract. |
| A recipient's address is frozen by Paxos | Only that recipient's claim fails; others are paid separately. |
| The Setlo contract is frozen or USDG is paused | All payouts are blocked until Paxos lifts it. |
| Something goes wrong with new packages | The owner can pause package creation. Existing bookings carry on. |