Oracle Updater Ownership

Scope

Use this runbook when changing the account or service allowed to update oracle state for a deployed market.

Authority Required

Protocol admin authority for the relevant oracle or risk configuration contract.

Preconditions

• Identify the exact market manifest.
• Confirm the new updater account and custody model.
• Confirm the old updater can remain available through the cutover window.
• Prepare a post-change quote request for the smallest supported amount.

Procedure

1. Read the current oracle adapter and risk config addresses from the manifest.
2. Confirm the current owner or role holder onchain.
3. Submit the ownership or role change transaction from the authorized admin.
4. Start the new updater process.
5. Disable the old updater only after the new updater has produced healthy observable state.

Verification

• Onchain role or owner reads show the new authority.
• Oracle freshness checks pass.
• Quote server requests no longer report stale oracle or risk errors.

Rollback

If the new updater cannot keep the market fresh, restore the previous authority or pause the affected path until ownership is corrected.

Source Files

• src/ChainlinkOracleAdapter.sol
• src/RiskConfig.sol
• deployments/manifests/