Keeper and indexer
Two small programs run beside the contracts. Neither holds your money, and the site works without trusting either.
The keeper
The keeper sends each buy when it is due and pays the gas. It only sends buys while the stock market is open, because that is when the price feed is live.
- It cannot change the stock, the amount, the destination or the schedule.
- It cannot withdraw anything.
- It cannot send a buy early.
If the keeper stops, buys are late, not lost. Once a buy is 12 hours overdue anyone can send it, and you can always send your own.
The indexer
The indexer reads the vault's events off the chain into a database, so the Activity and Plans pages load quickly. It only reads. Every row it shows carries the transaction it came from, so anything on those pages can be checked on the explorer.
If the indexer is wrong or down
Your plan is on chain, not in the database. Buys and stops do not go through the indexer, and a stale page cannot change what you own.