Guardrails
The specific limits enforced on-chain before any automated action is allowed to execute.
Checks on every keeper call
| Guard | Enforces |
|---|---|
| Caller allowlist | Only a registered keeper may call |
| Asset allowlist | Trades may only touch approved tokens |
| Size cap | Maximum notional per transaction |
| Slippage cap | Minimum output relative to the quote |
| Oracle freshness | Price must be newer than the staleness limit |
| Cooldown | Minimum interval between actions |
These are parameters, not code paths — they can be tightened by governance, but no setting turns them off entirely, and none of them unlocks a transfer to an address of anyone's choosing. What the owner can still do is make the vault trade when it need not: move the target split, or point a constituent at a different pool for the same pair. Both lose spread, both are bounded by the slippage ceiling, and neither is theft.