Package hlbubble is the BUBBLE lock: the bridge's BUBBLE route on gno.land (bridge/PLAN.md §5.2–§5.5), the same shape as r/hlgnot over the BUBBLE token (gno.land/r/…/bubble) instead of coins.
Out. TransferRemote takes amount + fee of the caller's BUBBLE through the token's allowance (the caller approves this realm first), keeps the amount in the lock, pays the fee to r/hlfees, and sends a token message through r/hlmailbox to the synthetic BUBBLE program on Solana, which mints as much there.
In. A burn on Solana comes back as a token message: Process takes it from the mailbox, checks it came from the enrolled router, and writes a claim in the recipient's queue; Claim pays claims in turns under the meters — a tenth of the lock a day (never below the floor), a quarter of that for any one recipient, the fee first. The old 1,000,000 BUBBLE day cap and the admin's pause are gone: the meter and the guardians' flags replace them.
Who may change what. Nobody but the governor through the builders until it yields on r/hlmailbox, and GovDAO after (M1k); the guardians and watch keys can only pause, through r/hlmailbox. Every launch value is compiled in below; nothing moves until the Launch decision executes. The state machine is gno.land/p/…/hlroute/v0; this realm holds the BUBBLE and makes the calls.
