Tokens locked on-chain in the vesting contract — held safely and returnable only to the locker after the period ends. No admin can touch them.