Role separation: upgrade ≠ fee ≠ oracle

Centrifuge's assessment for RD-F-035 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Upgrade path: Root → ProtocolGuardian. Fee/oracle configuration: OpsGuardian or pool-level wards. Ward-based access control allows distinct role assignment per contract. Pool-level oracles (NAV managers) are separate permissioned roles. Explicit separation documented for ProtocolGuardian vs OpsGuardian.

Sources #

URL
https://docs.centrifuge.io/developer/protocol/overview/retrieved 2026-04-27
URL
https://docs.centrifuge.io/developer/security/guardian/retrieved 2026-04-27

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-035 score green collected_at 2026-04-30 21:19:10