Required for AmetystCreditToken. This address is baked into the constructor and becomes the only account allowed to mint. The prefilled value is just a default — overwrite it whenever the minter key has been rotated.

It must be the address that actually calls mint, which is the ZeroDev kernel address — not the EOA. Both admin-api and credential-api load MINTER_PRIVATE_KEY into a ZeroDev kernel (entryPoint 0.7, KERNEL_V3_3, ECDSA validator, default index), so the on-chain caller is that kernel's smart-account address. Paste the EOA here by mistake and every mint reverts with “ACT: caller is not the minter”. There is no way to fix that in place: you would have to redeploy the token, swap base_contracts_references, and migrate every merchant's payment preference again.

Required for FacilitatorsRegistry. This address becomes the registry's admin, and setFacilitatorFor / removeFacilitatorFor — the two calls this app makes on behalf of a merchant that cannot sign for itself — are onlyAdmin. So it must be the address admin-app signs with, or the Set Facilitator button reverts NotAdmin on every merchant.

admin is set in the CONSTRUCTOR. Afterwards it can only be changed by the current admin calling proposeAdmin followed by acceptAdmin from the new one. Get it wrong and there is no in-place fix: you have to redeploy the registry, swap base_contracts_references, and re-do every merchant's facilitator assignment.

Heads-up on this app's signer. Every on-chain action here builds a fresh, randomly generated EOA and wraps it in a new ZeroDev kernel (src/chain/kernel.ts), so admin-app has no stable signing address today. Until that changes, put an address you control and can sign with here — not an address this app produced.