Contract owner — the governance key. On-chain it's still the only wallet allowed to create colonies (Create colony below).

Operator — the automation key. It's the server-side key (OPERATOR_KEY) the Fisc service uses to do the day-to-day work automatically: mint UBI, mint rebates, run billing, pay founders. It can only perform operational actions, never change the rules.