Authors
@kbrizzle (Equilibria)
Motivation
Currently, the Empty Set governor is the only mechanism by which privileged actions can be taken. This is the most secure and strict setup, however it does not provide the flexibility for swift actions during security incidents.
Other protocols solve this dilemma by introducing a separate protocol role with limited pausing privileges.
Overview
We propose adding a pauser role to the Empty Set protocol alongside the original owner role. This pauser role will be set by the owner role and have limited privileges to pause and unpause all state-mutating methods within the protocol.
Permissions Breakdown
pauser
owner (GovernorAlpha)
- Update or revoke pauser address
- Update or remove pausing functionality altogether
Implementation
The implementation of the change can be viewed here.
Operation
Since the protocol multisig already has guardian powers per the GovernorAlpha contract, we propose this multisig as the initial pauser.
Vote
The vote will take place on the governance page of the Empty Set webapp.
