Protocol
Safety & Risk Controls
Hard limits enforced in smart-contract code, not policy.
Limits
25%exposure cap per node operator95%minimum uptime barrier for allocation- Cooldown period between rebalances
- Slashing for nodes that misreport
Guardian Circuit Breaker
A 2-of-3 guardian multisig can pause the fund or perform an emergency withdrawal. Any two of the three guardians must agree to act.