Every privileged action, gated and timelocked.

Every core protocol change is proposed by a signer quorum, held in a 72-hour public timelock, and screened for the full window. Guardians can cancel it at any moment.

PROPOSED CHANGE

✓

EXECUTED

Multisig approval

3 of 5 · Safe ↗

72H

SCREENING

CONTINUOUS

Guardian review

Hypernative automated monitoring

GUARDIAN VETO

CANCELLED

Proposed → 3-of-5 multisig → 72h screened timelock → executed, or guardian-cancelled at any point in the window.

DELAY LADDER

1518 GATED FUNCTIONS

CORE PROTOCOL

72H

Core Protocol Parameter UpdatesKernel & accountant parameters (fees, coverage, YDMs), UUPS implementation upgrades, role grants/revocations and delay changes, Makina risk-manager settings, and token rescue.

736 fns

PERIPHERY

24H

Peripheral Configuration UpdatesEntry-point tranche configuration (deposit/redemption routing and limits).

4 fns

IMMEDIATE

Protocol pausing and maintenance operationsPause any protocol contract (dedicated pause multisig), unpause (Foundation), guardian veto of scheduled operations, allowlisted LP deposits/redemptions, and accounting sync.

778 fns

Pending operations · All chains

Active (0)Expired (4)All (4)

Day AM →Dawn AM →

No active operations on any chain. 4 expired op(s) hidden; nothing in the core protocol can change for at least 72 hours from now.

The rules gate themselves. Changing any role, delay, or guardian is itself an admin operation, subject to the same 72h delay.

Gated functions

1518

Pending ops

Last config change

9 d ago

Served full delay

100 %

Markets

Access managers