Every setting that decides what a mandate can do changes only with two of three signatures and a fixed delay.
A change needs two of the three signers. The delay before it takes effect gives anyone relying on Bursar time to read it and leave. Before it runs, the proposer can withdraw it alone, and two signers can veto anyone else's, so stopping a change takes no more than making one.
Each governance delay is a timelock: a contract that holds an approved change until its wait is over. More than one is live, one for each set of payment contracts on this chain, and the token, staking and the buyback answer to one of them. Each delay is listed below with what it administers, and every proposal says which delay governs it.
The pause is the one exception. The guardian key can pause an administered contract at once, with no approvals and no wait, and it can do nothing else.
Reading the governance contracts.
Connect a signer key to act on a proposal. Everything on this page is public and needs no wallet. Proposing, approving, cancelling and executing need a signer key, and pausing needs the guardian key.
Newest first.
Reading the governance contract.
Proposing counts as your approval. The change then needs one more signer and the delay that administers it.
Each option changes a contract under one of the governance delays, and the proposal goes to that delay.
Reputation publishes a ceiling per payee from their settlement history. Raising it lets one payee that turns out to be wrong take more before anyone notices.
What a payee with no settled history may be paid in one payment.
A score runs 0 to 100 and is the share of a payee’s jobs that released cleanly.
The curve stops here whatever the score. It cannot be below the cap at zero, or above what a perfect score reaches.
Reading which governance delay administers reputation.
Proposing needs one of the three signer keys. This wallet is not one of them.
Pauses a contract at once, with no approvals and no delay. This key can do nothing else.
The guardian key only pauses. The governance delay builds the call itself, and it is always pause(). Restarting is an ordinary proposal: two signatures and the full delay of the contract that paused it. Stopping is instant and starting is not, so a stolen guardian key can cause an outage but cannot move funds.
The escrow, the dispute registry, the provider registry, the staking pool and the buyback can be paused. Reputation, the mandate factories and the token cannot. Each contract can only be paused through the delay that administers it, so they are grouped by delay below.
The pause needs the guardian key. This wallet is not the guardian, and no signer key can send it.
Sweeping settlement fees and changing the escrow treasury are not proposals, because the escrow has no admin role. They are on the Operations page, which also drafts staking and buyback proposals with this same form.