Emergency Pause

Scope

Use when oracle data, quote signing, broker settlement, LI.FI fills, or admin keys may be unsafe.

Decision Order

1. Stop off-chain issuance or solver submission when the issue is off-chain.
2. Disable signed quote mode for affected collateral when signed settlement is unsafe.
3. Use guardian safe mode or oracle pause when price or risk state is unsafe.
4. Use token mint or manager-burn pause for native stablecoin emergencies.
5. Communicate what is paused and what remains available.

Verification

After pausing:

• read back the changed mode/config.
• confirm unsafe path fails closed.
• confirm any intended pure AMM path still behaves as expected.
• record exact transaction hash and caller.

Recovery

Resume with canary traffic. Do not jump from emergency pause directly to full traffic if quote service, oracle, or LI.FI state was part of the incident.