Contract addresses

MarginAccounts, CashVault, CollateralRegistry, InterestEngine, OracleHub, Realiser, the forced sale engine, Router and, once deployed, Staking are UUPS proxies owned by the governor, so their addresses are stable across upgrades. The governor, RiskEngine (swapped by pointer), the venue adapter and the TWAP source are plain contracts with no proxy; changing one means deploying a successor and pointing the system at it through the timelock. The $CALL token is not the desk's to change at all: it is the launchpad's contract, checked for any privileged surface before Staking is pointed at it, and the CALLToken name belongs to the mock chains alone, where the deploy mints a stand-in once with no upgrade path.