Liveness
What happens when the operator's bot stops, and what never stops.
If the crank doesn't resolve
A round can only be resolved with its seed, and only the crank has it. The program accepts a resolve until the intermission ends, 140 slots (about 30 s) after the reveal window, well inside the 512 slot hashes Solana keeps, so a resolve in time can always prove its hash. After that the program refuses it, and anyone can call refund_round: every opened stake comes back in full, bonds of sealed bets that were never opened go to the jackpot, and the next round opens at the first start of the fixed clock after the refund.
You don't have to do it. The crank refunds late rounds itself, and so does any open Whisp page whose ghost wallet holds a little SOL: it locks a stalled round with opened bets, refunds any unresolved round right after the deadline, empty or not, and resends until it lands, also while a private transfer waits. A page with a bet in the round checks the chain itself at those moments; the others go by the game feed and check the chain only when it goes quiet or shows a round running late. In normal rounds no page sends anything. A refunded round's seed comes out later, with the next resolve or one at a time from the crank. What a refund records: Randomness.
If the crank stops restocking ZEC
claim_zec pays whatever the vault holds and keeps the rest owed. After 400,000 slots (about a day) without a restock, if the vault cannot cover your claim, claim_zec_as_sol pays the owed ZEC in SOL at the last posted rate, out of the SOL that was earmarked for it. Withdraw does this for you.
If the crank stops buying WHISP
Your WHISP share for a round stays parked until that round is booked. There is no SOL fallback for it; the earmarked SOL stays in the vault. One share parks at a time: while it waits, a later win that would park too waits with it (its SOL and ZEC included), and you can't seal a new bet.
If the app goes away
The ghost wallet is yours: export the key. withdraw is never paused and sends the game balance to any address, so you can leave with nothing but the program and an RPC. A sealed bet, though, can only be opened with the secret this browser kept.
Pause
The admin can pause new sealed bets and new accounts (a first deposit or stake). Opening bets, resolves, refunds, deposits, withdrawals, staking, claims and checkpoints keep working.