For owners

1. Hire an operator on Float (or create_mandate).
2. Fund USDC-d. You remain the only withdraw authority.
3. Watch receipts. Over-cap and revoke show as ActionRefused, not crashes.
4. Pause, revoke, or withdraw at any time. Withdraw works in Active, Paused, and Revoked.

Local: Float. Connect Phantom or Solflare. Loopback still accepts demo owner owner_demo.