Risk Policy Change

Scope

Use for RiskConfig changes that affect mint/redeem availability, caps, deviation policy, fees, or signed quote mode.

Inputs

• target RiskConfig.
• target collateral.
• current CollateralConfig.
• current GlobalConfig if changing global posture.
• expected effect on mint, redeem, and signed quote settlement.

Procedure

1. Read current config from chain.
2. Compare against deployment manifest and operator notes.
3. Prepare the smallest config diff.
4. Simulate where tooling allows.
5. Submit from the authorized admin.
6. Read the config back from chain.
7. Run the narrowest quote or swap canary that exercises the changed policy.

Verification

Watch for:

• SignedQuotePolicyViolation.
• cap reverts.
• oracle mode changes.
• unexpected mint/redeem disablement.

Rollback

Restore the previous config snapshot. If user safety is uncertain, disable signed quote mode for the affected collateral before tuning risk upward.