Safeguards

Deactivation Control

Bootstrap mode deactivation:

• Primary: Any 3 bootstrap signers collectively vote to disable bootstrap mode.

• Secondary (hard limit): 12 months post-deployment, privileges revoke automatically (immutable).

Operational Safeguards

• Rate limiting, action logging, quality standards, and signer management (add/remove/terminate).

• Front-end displays "BOOTSTRAP" badge for transparency.

• Dev team penalties apply if bootstrap proposals resolve incorrectly.