Part V · Security & Trust
The trust model, stated plainly
| Actor | Can | Can never |
|---|---|---|
| Depositor | Deposit, withdraw, redeem in-kind, exit during notice windows | Be locked in beyond the 72h emergency maximum |
| Strategist | Propose target weights within the mandate, earn disclosed fees | Touch funds, trade directly, change the mandate, block exits |
| AI agent | Propose target weights, for human review | Anything else; it holds no key and signs nothing |
| Executor | Fill approved trades through allowlisted venues | Send value anywhere but the vault; exceed the per-window leakage bound |
| Velor (guardian) | Pause ≤72h during a declared exploit, trigger wind-down, maintain the venue allowlist | Withdraw user funds; no such code path exists, verify it |