Protocol guarantees

These are properties of deployed contracts, not commitments made by anyone. Each one holds because of a mechanism, and the mechanism is named.

Guarantee	Why it holds
Liquidity is locked permanently	The position is held by a contract with no withdrawal function in its code. Not the creator, not the protocol team, nobody. Only the fees it earns are collected. It holds whether the position arrived at graduation or was seeded at creation on an instant launch.
No gap at graduation	The curve filling and the market opening are the same transaction. There is no interval during which anyone holds the raised ETH.
A coin's rules are frozen at creation	Launch mode, curve, fee model, LP share and every module are written into the coin and have no setter.
The protocol's share cannot be redirected	It is taken by the pool contract before any creator-chosen code is consulted, and the protocol always keeps an incompressible 0.03% of every fee.
The liquidity providers' share cannot be taken	Applied by the pool contract itself; no module can reach it.
No fee above 10%	Enforced by the pool contract, with the single exception of a sniper tax window declared at creation and expiring on its own.
A trade cannot be blocked by a module	A failing fee calculator is skipped and the pool falls back to its flat fee; a failing observer is ignored. Both fallbacks are automatic, on the swap itself.
A fee recipient cannot be taken away	A contract recipient — a staking vault, a buyback, a splitter — is bound at creation and contains no code able to hand the role on. A payout address can only be reassigned by whoever currently holds it.
A staking vault cannot be redirected	The vault address is written at creation, and there is no admin path to a stake or to unclaimed ETH.
The contracts are not upgradeable	What is deployed is what runs.
A creator's dev buy is capped	15% of supply, with a hard 25% ceiling the protocol team cannot raise, and the position is public from the first block.
Nobody gates a payout	The collection of what the locked liquidity earns is permissionless: it runs on its own and anyone can trigger it, so being paid never depends on the protocol team.

What a guarantee is not

None of these say anything about whether a coin is worth buying. They constrain what the platform and the creator can do to a holder after the fact; they do not constrain what a market does.

Risks covers what remains, and Admin controls lists the levers that do exist.