Repository navigation
[Hard] Add a governed emergency-pause and recovery design to treasury operations #81
Description
Goal
Provide a narrowly scoped, auditable emergency control that can pause new risky treasury actions without stranding funds or bypassing multisig governance.
Scope
- Define which operations pause (for example propose/approve/execute withdrawals) and which recovery/read operations remain available.
- Implement threshold-authorized pause and unpause with anti-replay protection, state/event versioning, and a documented recovery path.
- Integrate pause checks with governance-driven execution.
- Add threat-model and invariant tests.
Acceptance criteria
- Only the documented threshold authorization can change pause state.
- Paused operations fail before changing state or moving assets; reads remain available.
- Unpause cannot be replayed or used to evade the configured threshold.
- Tests cover normal operation, emergency transition, recovery, and governance integration.
- Documentation explains operational roles, evidence to retain, and recovery procedure.
Out of scope
An admin backdoor, unilateral owner withdrawal, or automated incident response.
Activity
socvic commentedon Aug 28, 2026
Hello maintainer. Please can I have this issue
grantfox-oss commentedon Aug 28, 2026
🦊 GrantFox — @socvic has been assigned to this issue as part of the Third Campaign campaign!
Next steps:
Closes #81)Good luck! Track your progress on GrantFox.
grantfox-oss commentedon Aug 28, 2026
🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!
@socvic's PR #86 was approved and merged by @xqcxx.
🏆 @socvic: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (201 total points). Track your full progress on GrantFox.
👏 Great work, @socvic! Keep contributing to Stellar-Re-Code.