# Your money (https://docs.helico.site/docs/your-money)

Who holds it, what can happen to it, and what cannot.

## Who holds it
You do. Your funds stay in your wallet as a token that proves you own them. You give the
contract permission to move them, not to keep them.

During a move, the contract holds your funds for one step, because an exchange has to happen
somewhere. Before that step ends, it checks that it kept nothing. If it did, the whole move is
undone.

## What the program can do
One thing: propose a move inside your rules.

It cannot pay itself. It cannot spend more than your funds released. It cannot send anything
anywhere except back to you or into the market. A misbehaving program could move you within
your own rules, and nothing else.

## What the contract will not do
* Move your funds to another market.
* Make a band wider or narrower than you said.
* Move more often than you allowed.
* Keep less of your funds working than you demanded.
* Act after your rules expire.
* Keep anything.

Each of those is a line in the contract that refuses the move, and each line has a test.

## Updates to the contract
The contract can be updated, and we say so plainly. Three things keep that honest: an update
waits two days after it is announced, the announcement is fixed and expires after seven days,
and your exit is never affected by a pending update.

## The honest part
Nothing is live yet, and the contract has not had a professional audit. Twelve automated
reviewers went over it, then six more; that is not an audit. See [Status](https://docs.helico.site/docs/status).