Architecture

How the contracts fit together, and who is allowed to call whom.

Spec: README Sections 43, 80, 82, 85

Three consumer-facing surfaces — account, credit, payments — sit on top of a lending engine, a monetary controller and a collateral registry. Governance reaches all of it through a timelock, never directly.

Contract dependency map

                 GOV NFT
                    │
                    ↓
              POTUS Governor
                    │
                    ↓
                Timelock
                    │
        ┌───────────┼───────────┐
        ↓           ↓           ↓
   Pool Config  Risk Config  Treasury
        │           │
        └─────┬─────┘
              ↓
         POTUS Comet ←── USDG (lenders in, borrowers out)
                     │
             ┌───────┼────────┐
             ↓       ↓        ↓
            SPY     AAPL     NVDA
             │       │        │
             └───────┼────────┘
                     ↓
                  Oracle
                     │
                  Chainlink

Separation of concerns

Layer	Responsibility
GOV NFT	Policy — who decides
POTUS Governor	Governance execution — proposals, voting, quorum
Timelock	Delayed authorization; holds the privileged permissions
POTUS Comet	The USDG pool — lender claims, debt, interest, collateral
Liquidation Engine	Partial, competitive liquidation; the shortfall path
Oracle Adapter	Valuation — price, staleness, corporate actions