Upgrade multisig signer configuration (M/N)

M^0's assessment for RD-F-026 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No traditional M/N multisig controls upgrade paths. Core protocol is immutable. Periphery proxy admin is a single deployer EOA (effective 1/1). TTG governance uses epoch-based POWER/ZERO token holders — no fixed signer set. safe_addresses: [] confirmed in config.

Sources #

Etherscan
M0: Deployer EOA — EtherscanDeployer EOA page — sole proxy admin for peripheryretrieved 2026-05-16
Docs
M^0 Deployed AddressesNo Safe multisig identified in protocol profile §6retrieved 2026-05-16

Methodology #

Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol m0 factor RD-F-026 score yellow collected_at 2026-05-16 09:46:19