| Connect / switch network | Selected EIP-1193 wallet provider | Account access follows an explicit browser-wallet or WalletConnect choice. Injected-wallet switching/addition targets PulseChain 0x171; WalletConnect requests eip155:369. |
| Watch EOA positions | PulseChain read RPC only | A checksum-normalized EOA is read at one pinned block. NFT enumeration and fee collection simulation use public eth_call requests; no wallet, signer, approval, signature, or transaction is requested. |
| Swap approval | Selected token → verified aggregator | Exact required amount is the default in each allowance editor. Custom total allowances (including zero to revoke) and acknowledged unlimited approvals are available per token and spender; nonzero-to-nonzero changes use a separately reviewed reset first. Runtime/manifest, spender, calldata, nonce, chain, and confirmed canonical transaction are checked. |
| Main swap | Verified dual-V3 aggregator | The best evaluated single route is compared with atomic cross-venue splits on the sampled allocation grid. Recipient is the connected account; native PLS value goes directly to the aggregator, which wraps or unwraps only for WPLS endpoints. |
| Create pool / mint LP | Fixed position manager | The connected account is the LP NFT recipient. A new starting price is shown and reviewed before initialization. |
| Increase liquidity | Selected tokens → fixed position manager | NFT ownership, balances, allowances, range ratio, minimum amounts, and deadline are rechecked. |
| Collect fees | Fixed position manager | Collection recipient is the connected NFT owner. The claimable amounts are refreshed before submission. |
| Decrease / withdraw | Fixed position manager multicall | Protected decrease and collection settle to the connected owner. Ownership is checked before review and again before prompt. |
| Claim & compound | Fixed manager + optional fixed router | Fees first enter the user's wallet; an optional reviewed balancing swap may follow before a reviewed liquidity increase. Recovery state prevents silent duplicate progression. |
| Burn empty LP NFT | Fixed position manager | Allowed only for the connected owner after zero liquidity and no-collectible-fee conditions are verified. |
| Pending-nonce recovery | Connected account → itself | The account menu can replace any wallet-reported pending nonce with an explicitly reviewed zero-value self-transfer. Compound recovery can also offer the same action for a dropped journaled transaction. |
| Factory administration | Fixed factory | Only the configured EOA after live factory-owner verification. Calls are limited to pool protocol fee and distribution configuration exposed by the fixed ABI. |