Skip to main content

Governance

Contract ownership and protocol parameters are controlled through a Safe multisig behind a Timelock, so privileged changes are transparent and delayed.

Ownership model​

  • After feature development, every contract owner is transferred to the Safe + Timelock.
  • Safe configuration: 3-of-5 signers (client provides member addresses; placeholder EOAs during development).
  • Timelock delay: testnet 6h, mainnet recommended 48h.

Contracts​

本模块尚未部署 / 尚无地址（contracts.governance 为空）。部署对应 stage 后重新构建本门户即会自动填充。

Proposing a change​

  1. A signer queues the transaction in the Safe (e.g. setFee, upgradeTo).
  2. Other signers approve until the 3-of-5 threshold is met.
  3. The Safe submits to the Timelock, starting the delay.
  4. After the delay, anyone can execute.

This delay window lets the community observe and react to any privileged change before it lands.

Next steps​