Guardian/pause-keeper distinct from upgrader
Veda (BoringVault)'s assessment for RD-F-034 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Pauser.sol contract exists for emergency pause of ManagerWithMerkleVerification. MULTISIG_ROLE is documented as pause/unpause caller. Whether this role is held by a distinct address from the RolesAuthority owner (the 3-of-5 Safe via TimelockController) is not confirmed on-chain within time budget. Structural separation exists in code but on-chain role assignment verification incomplete.
Sources #
- GitHubVeda Roles directory — Pauser.sol and MULTISIG_ROLE documentedRoles directory contains Pauser.sol; ManagerWithMerkleVerification.sol: pause/unpause 'Callable by MULTISIG_ROLE'retrieved 2026-05-17
Methodology #
Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol veda factor RD-F-034 score yellow collected_at 2026-05-17 12:41:22