REAL SOL. Your stake is held by the program's vault, not by the operator, and no instruction can move it to them. If the event is not resolved before the deadline, anyone at all can trigger a full refund — it needs no permission and no operator.