Robinhood Robinhood Chain 4663 // Owner Governance
Veil Owner Decisions
All 19 binding architectural, risk, and deployment decisions ratified by protocol owner.
19 Binding Decisions/Ratified Oct 2026/Immutable Policy
Decision Categories
1–4Founding Architecture
5–9Scope, Name & Risk
10–16Mainnet Readiness & Runbook
17–19Full-ZK Circuits & Keys
1. Founding Architectural Decisions (2026-10-07)
- Attestation: open to anyone.
selfAttestis permissionless with no eligibility barriers. Gating acts exclusively as an anti-bot speedbump plus launch windows. - Association set: open sentinel rule, no human judgment. Every label that appears in real onchain deposits plus the genesis sentinel is included automatically by open automated publishing tooling. No manual allow/deny decisions. See Association Set Policy.
- Owner keeps control. No renounce schedule. Guardian, treasury, registry, and hook ownership stay with the operator wallet indefinitely.
- Fees: 30 BPS hook fee, 70% buyback share. Matches the live defaults with zero unapproved deviation.
2. Scope & Risk Decisions (2026-10-08)
- Final Protocol Name: Veil. Kept as canonical working name; collision risk accepted.
- External Audit (F4): Waived internally. Satisfied by comprehensive internal audit and deep multi-round root audits with strict ruling log.
- Whitelist v1: ETH + VEIL. Dedicated isolated pools per asset for native ETH and canonical VEIL token.
- Attestation Criteria: Open self-attest. Advanced ZK proof-of-clean-funds deferred to v2.
- Guardian Role: Indefinite status quo. Emergency deposit pause maintained by operator.
3. Mainnet-Readiness & Governance (2026-10-09)
- F5 Limited: Lifetime caps + pause controls. No private contract allowlists; open access constrained by pool volume limits.
- Legal Risk Mitigation: Mandatory live Terms of Service & Privacy Architecture, no price promises, and strict compliance terminology guardrails.
- Relayer Model: Self-relay is primary. Direct client-side submission with fallback-free path.
- UUPS Entrypoint Proxy: Explicitly accepted. OpenZeppelin UUPS standard with transparent deploy manifests.
- Fuzz & Invariant Verification: Strictly verified via continuous balance checks (
totalDeposits − totalWithdrawn = pool balance). - Contract Verification: Mandatory. All deployed pools must have verified source on Blockscout.
- Rollback & Incident Response: Pause-first. Deposit pausing prevents new entries while withdrawals stay cryptographically unblockable.
4. Full-ZK Architecture & Operational Security (2026-10-09)
- Audited Circuit Reuse: Built on battle-tested Groth16 commitment and withdrawal circuits with established trusted setup transcripts.
- Operator Wallet Rotation: Live keys rotated to active operator wallet
0xCAB1...79e6. Legacy addresses permanently decommissioned. - Suite v3 Deployment: Entrypoint, ETH pool, VEIL pool, and sentinel state established on active chain.
Ready to interact with the verified protocol?Launch Veil Terminal →