Security
Permission model and risk controls as design targets, plus a working pre-execution check.
no audit · contracts not deployed
Role separation (design target)
| Role | Can | Constraint |
|---|---|---|
| Project owner | Sets policy within platform bounds; can withdraw only assets the vault's permission table lists | timelocked for loosening |
| Keeper | Calls execute() with an already-approved action; cannot change policy or destinations | rate-limited |
| Governance | Registers adapters, changes limits | timelock required |
| Guardian | Pause execution only; cannot withdraw | immediate |
| Platform | Fee parameters within caps | timelocked |
Pre-execution guardian
PASS — would be forwarded to execution
- System not pausedactive
- Recipient on allow-listregistered adapter / vault
- Daily spending cap400 + 4500 vs cap 5000
- Reserve floor120000 − 4500 = 115500 vs floor 50000
- Slippage boundminOut is 21.9 bps below TWAP quote (max 50)
- Oracle freshnessage 240s vs max 300s
- Minimum TWAP window30 observations vs min 24
Smart contractsNot written or deployed yet. No addresses are shown because none exist.not available
Independent auditNone. Nothing on this site should be read as audited or safe.not available
Contract verification linksWill appear here per chain once real deployments exist.limitation
Permission modelDesign target: project, platform, governance, emergency and keeper roles kept separate; no single admin over all funds.design target
Treasury limitsDesign target: per-action budgets, daily caps and a reserve floor enforced in the vault, not only in the UI.design target
TimelocksDesign target: loosening limits or changing adapters is delayed; tightening and pause can be immediate.design target
Emergency pauseDesign target: scoped to halting execution. It must not grant a way to withdraw other people's funds.design target
Chain limitationsEthereum, Base, BNB Chain and Arbitrum differ in fee accounting, finality and available infrastructure. L2 costs include L1 data fees.limitation
Existing tokensImmutable ERC-20s cannot be given transfer taxes. They can only use a voluntary treasury route.limitation
Uniswap V4Hooks are fixed at pool initialization and cannot be attached to an existing pool. Dynamic LP fees are not token taxes.limitation
ReturnsNo yield, price support or return is promised. Simulations depend on stated assumptions.not available