External keeper/relayer not redundant
Chainlink CCIP's assessment for RD-F-062 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Execute DON is multi-node (not a single keeper). If Execute DON fails, users can manually execute valid transactions via CCIP Explorer after the DON retries and backs off. Liveness depends on Commit DON + RMN cooperating first (Merkle root must be blessed). No single-keeper-point-of-failure in the execution path.
Sources #
- DocsCCIP Architecture Overview - Chainlink DocumentationCCIP architecture docs - Execute DON multi-node structureretrieved 2026-05-16
- Chainlink CCIP Architecture Explainer - LlamariskLlamarisk CCIP research - DON failure mode: Executing DON retries repeatedly then backs off; users or anyone can manually execute via CCIP Explorerretrieved 2026-05-16
Methodology #
Determine whether the protocol depends on a single keeper or relayer (Gelato, Chainlink Automation, custom) with no redundancy or failover.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-062 score green collected_at 2026-05-16 01:55:09