Liquidity without a withdrawal lever

A conventional liquidity rug requires someone to control LP tokens and withdraw the underlying assets. D17 directs protocol LP tokens to a per-launch vault that exposes no LP withdrawal method.

The vault's pool-creation call is permissionless, but its choices are constrained: the launch fixes token, WETH, router, treasury, eligibility time, and the amount claimable for initial liquidity. The pair must not already have live LP supply and cannot be preseeded with the D17 token.

The initial mint uses liquidity WETH from lockers that settled before pool creation and the proportional share of the configured LP-token reserve. Tokens reserved for unsettled lockers remain in the launch.

A late settlement transfers that locker's liquidity WETH and reserved tokens to the vault and mints into the same pair atomically. The resulting LP also stays in the vault.

There is one market nuance: if trading has moved the pair away from the launch ratio, supplying the fixed late token/WETH relationship may be imbalanced. Normal Uniswap V2 mint mechanics can donate the excess side to existing LP holders. The vault still keeps protocol LP locked, and the late participant's sale-token entitlement and configured WETH split remain unchanged.