Loading
Escrow fees, the treasury that receives them, and the two parameters that ship at their fail-closed defaults.
Connect a signer, the guardian, the escrow treasury key or the address it has named. Everything below is read from the contracts and needs no wallet. Sweeping fees, rotating the treasury and proposing a parameter each need a different one of those keys, and the panel for each says which. Completing a rotation needs the address step one named, and nothing else can do it for it.
Release 1 governance is three plain keys and a guardian key, by a deliberate operator decision taken for launch. Two of three is a property of the contract, not yet of the custody. The multisig follows public launch.
Two of these go straight to the contract. Two wait out the governance delay.
| Action | Call | Needs | Lands |
|---|---|---|---|
| Sweep escrow fees to the treasury | Escrow.sweepFees | any funded key. The call is permissionless and the escrow pays its treasury whoever sends it. | Next block |
| Name a successor to the escrow treasury | Escrow.transferTreasury | the current treasury key, and nothing else. The timelock cannot make this call. | Next block |
| Accept the escrow treasury | Escrow.acceptTreasury | the incoming address itself. Until it accepts, the current treasury keeps receiving. | Next block |
| Set the staking fee rebate tiers | Staking.setTiers | one of the three signer keys. The timelock administers the pool, so this is a proposal. | After the delay |
| Set the buyback limits and price ceiling | Buyback.setParams | one of the three signer keys. The timelock administers the buyback, so this is a proposal. | After the delay |
The protocol's cut of every release, held in the escrow until somebody pushes it to the treasury.
Reading what has accrued.
The call itself is permissionless and pays the treasury whoever sends it. This page asks for a signer, the guardian or the treasury key before it offers the control.
Where every swept fee lands, and the one role in this deployment the timelock cannot reach.
The escrow treasury is a plain key, and it is the only address that can name its successor. The timelock has no reach into it: there is no proposal, no delay and no quorum that can move it. A rotation is two steps, and until the new address accepts, the current one keeps receiving every swept fee. Lose that key with nothing pending and the fee revenue has nowhere to go, permanently.
the current treasury key, and nothing else. The timelock cannot make this call.
Connect the treasury key to name a successor.
the incoming address itself. Until it accepts, the current treasury keeps receiving.
Reading the escrow.
Whether a successor has been named is on its way.
The timelock administers both contracts, so both parameters below go through governance.
Read from the contracts, not from a plan.
A ceiling is the most a buyback will pay for one whole BRSR, and there is no price to set it against until the BRSR/USDG pool holds liquidity. Set it after the pool exists, never before. Everything pending is listed on the governance page.
Setting the tiers or the buyback ceiling is a proposal, so it needs one of the three signer keys, a second signer and the full delay. Connect a signer key here, or build the proposal on the governance page.