OperateRunbooks
Incident Response
Triage live failures across quote issuance, oracle state, solver execution, and privileged controls.
Scope
Use this runbook when production behavior is unsafe, unexplained, or customer-visible. It is the operations entry point before choosing a narrower runbook.
First Five Minutes
- Name the affected chain, market, manifest, and product path.
- Stop automated retries that could make state worse.
- Check quote server health and recent structured errors.
- Check oracle and risk freshness.
- Decide whether an administrative pause is required.
Decision Table
| Symptom | First runbook |
|---|---|
| Quote server down or returning 500 | Quote Server Operations |
| Signed payloads stale or unsafe | Signed Quote Operations |
| Solver unable to fill orders | LI.FI Solver Operations |
| Oracle stale or wrong | Oracle Updater Operations |
| Admin state must be stopped | Emergency Pause |
Handoff Notes
Record the manifest path, commit hash, chain id, affected contract addresses, first bad timestamp, first recovery timestamp, and any transactions submitted during response.
Source Files
docs/Archive/current-docs/legacy-markdown/SECURITY_RUNBOOK.mdquote-server/src/http.tsdeployments/manifests/