Administer

Change privileged state safely: signer, risk, pause, roles, deployment identity, and manifests.

Administrative docs are high-risk runbooks. They assume the reader can mutate protocol or service state and must prove the change before and after execution.

Signer Rotation

Rotate quote signer custody without leaving stale signed inventory active.

Risk Policy Change

Change collateral policy, caps, ceilings, fees, signer, or signed quote mode.

Emergency Pause

Use the narrowest safe stop when oracle, signer, broker, or admin state is unsafe.

Deployment Runbook

Deploy hooks, markets, LI.FI executors, quote server, and gateway with command-level checks.

Admin Rule

Every privileged change needs:

target manifest and chain id.
current on-chain value.
intended new value.
caller authority.
dry-run or simulation where available.
rollback path.
post-change readback.