Signers Multisigs.
Every multisig in the security model, its live signer quorum, and the roles it holds on each access manager.
Root owner of the protocol. Manages roles and delays behind the 72-hour timelock, unpauses contracts, and handles emergency oracle actions and fee claims.
The proposer. Schedules every delayed parameter update and upgrade: core protocol changes at 72 hours, entry-point configuration at 24 hours.
Dedicated fast-response guardian. Cancels any scheduled operation during its timelock window, with no delay.
Dedicated pause multisig. Can pause every protocol contract immediately; unpausing belongs to the Foundation.
Operations multisig for vault strategies. Allocates and deallocates funds between strategies and manages vault withdrawals.
Contracted service provider. Grants and revokes tranche LP roles as an operational duty.