What the design removes
Because the order book and margin engine are onchain, there is no private ledger to reconcile and no operator discretion over whose orders fill. Liquidations are sent to the public book first, so any participant can compete for that flow and the liquidated trader keeps whatever margin remains — and unlike most centralised venues there is no separate liquidation clearance fee.
Account access is also explicit. Trading permissions can be delegated to an agent, and that delegation is trade-only: an approved agent can place and cancel orders but cannot withdraw or transfer funds.