JobberBadge.sol       ERC-721, fixed supply, on-chain tokenURI rendered
                      live from tier + activation state

JobberRegistry.sol    Own initializing ERC-6551 registry. Deploys and
                      initializes the account clone atomically or reverts.

JobberPayroll.sol     Tiers, activation, weekly linear decay, renewal
                      pricing, transfer-zeroes-weight hook, Signatory
                      base weight

JobberDistributor.sol Multi-asset pull accumulator. Permissionless crank()
                      pulls from the pons fee escrow via claimToken(),
                      advances per-asset indices, pays caller bounty.
                      Enrollment registry for outside launches.

JobberRedeemer.sol    Burn badge, open its account, transfer contents out

Non-negotiable:

• No admin key on the Distributor. None.
• Registry initialization is atomic or the transaction reverts.
• Weight and index math frozen and tested before mint, not patched after.
• Reentrancy guards on every path that touches a token-bound account.
• ≥95% branch coverage on the Distributor, the Payroll decay curve, and the Redeemer.
• Third-party audit before mint. pons v2 itself is unaudited — three reviews are in progress and none has closed — so our own review is the only one that exists at launch, and the docs say so.