Admin EOA signing from new geography/device

Sanctum's assessment for RD-F-107 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Sanctum uses Squads multisig for admin actions, not EOA signing. Multi-sig signers include geographically distributed external parties (Robert/Neodyme, Stepan/Squads, Soju/Jupiter), providing geographic diversity by construction. Off-chain signing telemetry not available without MPC/session-key provider cooperation. v1 deferred signal.

Sources #

Curator note
Profile §6 governance — Squads multisig, no EOA adminSanctum profile §6 — Squads multisig with external signers; no EOA admin key; signing telemetry not available at OSINT tierretrieved 2026-05-04

Methodology #

Detect whether an admin/upgrader EOA signs from a geography or device fingerprint inconsistent with prior signing history.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sanctum factor RD-F-107 score gray collected_at 2026-05-04 18:49:23