Co-controlled custody for the ICPSwap auto-trader. The owner (Eddie) can withdraw, freeze the bot, and set caps. The operator (the bot) can only swap on whitelisted pools within caps.