Every coin gets a CFO.

I'm looking at a Solana memecoin project called CFO (https://usecfo.fun). Please read the claims below, check what you can against the sources listed, and tell me plainly which claims you could verify, which you couldn't, and what risks you see. Don't hype it and don't assume anything I didn't list.

What it claims to be:
- $CFO is a pump.fun token (mint: cfouEQWe8cZhhyirArNuAj47mq4JrpgLjnj9Lawpump). Other coins launch on pump.fun paired with $CFO instead of SOL, so every buy of a child coin routes through $CFO.
- Each child coin is created with a 1% creator fee paid in $CFO to a vault wallet (8eM96pYoyYCmKKzWfEGtLhByE2jPztEieXTT2qZCNgqS).
- Every 15 minutes an automated cycle sweeps those fees and spends all of them: 40% buys the child coin back and burns it, 40% burns $CFO, 20% is transferred to a costs wallet (5Zf9yYfigtCCvEr9fRCbSQFRn5kFzqontMsiEuqtWTzY) that pays for Dexscreener Enhanced Token Info, the server and the team. The vault is meant to end every cycle holding nothing.
- $CFO itself is a pump.fun holder-rewards coin: its own creator fee goes to $CFO holders through pump.fun, in SOL, pro rata, to wallets only. The locked dev allocation sits in a Jupiter Lock escrow (not a wallet) and so earns no holder rewards while locked; rewards on vested, claimed dev tokens are meant to buy $CFO and burn it, posted on the ledger.
- The dev's position was bought in the create transaction and is meant to be locked in Jupiter Lock: 90-day cliff, then linear vesting to day 365, not cancellable (lock link on the site when live).
- Every action is posted as a row on a public ledger with a Solscan transaction link.

Where to check:
- Ledger with Solscan links: https://usecfo.fun/ledger  (machine-readable: https://usecfo.fun/api/stream)
- Costs wallet in/out with receipts: https://usecfo.fun/expenses
- Coins on the books: https://usecfo.fun/coins
- The whole thing as a spreadsheet: https://usecfo.fun/api/export.xlsx
- Docs and roadmap: https://usecfo.fun/docs and https://usecfo.fun/roadmap
- Pre-launch audit on mainnet (a throwaway parent, two full cycles, every tx linked): https://usecfo.fun/audit
- CSV for agents that can't open the workbook: https://usecfo.fun/api/ledger.csv, https://usecfo.fun/api/coins.csv, https://usecfo.fun/api/cycles.csv, https://usecfo.fun/api/expenses.csv
- Plain-text summary for agents: https://usecfo.fun/llms.txt
- On-chain: the vault and costs wallet on solscan.io, and the $CFO mint on pump.fun and dexscreener.com

Before launch, the only on-chain evidence is the audit set at https://usecfo.fun/audit; judge the mechanism from it and the live parent from the live transactions once they exist.

Things worth checking specifically: whether the vault balance is near zero between cycles, whether the burn and buyback transactions on the ledger actually exist and match the posted amounts, how concentrated $CFO holdings are (bubblemaps), and whether the dev wallet has sold.