SOVEREIGN RISK GOVERNANCE
Aquifer separates execution from authority. Autonomous engines settle trades, price risk, and manage collateral — but human governance defines the boundaries they operate within.
HUMAN AUTHORITY ABOVE AUTONOMOUS EXECUTION
The Guardian Layer is the governance substrate of the protocol. Node operators holding Super Node Pass and Core Node Pass participate in consensus, risk parameter adjustment, and emergency intervention.
GOVERNANCE CONSENSUS
Protocol parameters — collateral ratios, settlement windows, risk band widths — require distributed validator consensus before on-chain enforcement. No single key holder controls policy.
MULTI-SIGNATURE AUTHORIZATION
Critical state transitions demand multi-party signatures. Contract upgrades, reserve rebalancing, and fee schedule changes pass through time-locked multi-sig before execution.
EMERGENCY CIRCUIT BREAKER
Guardian nodes retain the ability to halt autonomous engines under defined edge conditions — oracle failures, liquidity cascades, or anomalous settlement patterns. Human override is a design feature, not a failure mode.
RISK POLICY ENVELOPES
Every autonomous engine operates within human-defined risk envelopes. These envelopes specify maximum exposure, drawdown limits, and acceptable collateral types. Engines cannot modify their own constraints.
TWO TIERS OF GUARDIAN PARTICIPATION
Access to the Guardian Layer is gated by on-chain node passes. Each tier carries different governance weight and clearing authority.
SUPER NODE PASS
SUPPLY
31
DECISION
High
CLEARING
Tier 1
Higher governance weight. Tier 1 clearing authority. Full parameter voting rights and emergency override participation.
CORE NODE PASS
SUPPLY
10000
DECISION
Standard
CLEARING
Tier 2
Standard governance weight. Tier 2 clearing authority. Parameter voting rights with standard quorum contribution.