Risk
Smart contract and operational trust model
How immutable core logic and upgradeable operational logic split trust across the system.
Contract Trust Split
EVE and AMM are immutable. Their core mechanics cannot be upgraded after deployment.
Controller, ExitQueue, StrategyManager, and Oracle are upgradeable and role-managed. Those surfaces require operational trust and disciplined governance.
Operational Trust Split
- governance/admins control upgrades and privileged grants
- keepers operate queue pricing and strategy workflows
- frontend operators maintain the correct deployment snapshot
- indexing operators maintain the correct GoldSky deployment and config
Last updated on