Oracle Updater Operations

Scope

Use this runbook when an oracle adapter, price feed, updater wallet, or market readiness check is suspected to be stale or unsafe.

Authority Required

Operational access to the updater process and read access to the deployed manifest. Administrative key changes belong in Oracle Updater Ownership.

Preconditions

• Confirm the manifest and chain id.
• Confirm the RPC endpoint is healthy.
• Confirm the updater account has expected permissions and gas.

Procedure

1. Run the daily health check for the affected market.
2. Read the oracle adapter and risk config addresses from the manifest.
3. Compare latest onchain oracle state with the external source the market depends on.
4. Restart or rerun the updater only after confirming the market and feed.
5. Watch quote server errors for stale price, risk, or solvency rejection.

Verification

• Quote requests succeed for small safe amounts.
• Market read endpoints report the expected oracle timestamp or price state.
• No pause or risk-limit event is masking a price problem.

Rollback

If the updater produced unsafe state, stop the updater, pause the affected path if needed, and move to Emergency Pause.

Source Files

• src/ChainlinkOracleAdapter.sol
• src/RiskConfig.sol
• quote-server/src/quote.ts
• deployments/manifests/