Manual close only. The round stays active until the deployer deliberately closes it.

Fail-closed. New burn intents stop when the reward wallet is below the configured safety threshold.

Protected owner sweep. After close and after every pending intent or payout is resolved, free SOL can move only to the preconfigured treasury address.

Verify on Solana. Every accepted burn, non-zero reward and owner sweep has a public transaction signature.