Security

Security and risk transparency

Capital resilience needs verifiable controls. This page tracks audit posture, threat modeling references, and vulnerability disclosure paths.

Planned

Core Protocol Contracts Audit

Scope definition for Vault, Reserve, and settlement-critical contracts.

Planned

Model guardrails, policy boundaries, and override constraints.

In Design

Substitution logic, evacuation sequencing, and recovery-state validation.

Security maturity requires explicit assumptions. These are active design assumptions under ongoing review:

External execution venues and dependency providers can degrade or fail unexpectedly.
Governance participation can become adversarial or unavailable during stress windows.
Telemetry and oracle inputs can be delayed, noisy, or partially compromised.

These areas receive priority analysis before formal audit publication:

Cross-layer interactions between allocation policy outputs and execution constraints.
Failure-mode transitions where substitution logic and settlement timing interact.
Reserve accounting edge cases during prolonged drawdown and partial recovery.

High-risk scenarios are mapped to deterministic response doctrine. Current matrix highlights:

Slow drawdown
Reserve dampening with gradual de-risking.
Flash volatility spike
Continuity mode with strict risk reduction.
Vault outflow surge
Priority routing and tighter liquidity controls.
Reserve depletion pressure
Automatic protective posture and allocation contraction.
Escrow imbalance
Rebalance doctrine and delayed release conditions.
Allocation drift
Deterministic corrective weighting by policy cycle.

Coordinated disclosure path for researchers and integrators.

Sagitta Labs can run protocol-level threat reviews across custody, reserve, execution, and continuity layers.