open-decisions.md

type	Register
title	Open decisions
description	Every open item for Clutch, the page that closes it, the agent recommendation where one exists, and who decides.
tags	decisions open-questions
status	stable
review_status	slop
generated	by at claude-code/opus-5.5 2026-10-22 19:14:25 UTC
verified
sources	id resource title s1 /registers/decision-log.md Decision log — EM's inputs

Open decisions

EM decides every item until the Treasury Management Committee takes over as acceptor (ADR 002) [s1]. An agent recommendation is a recommendation, not a decision. Items OD-01 to OD-06 were raised in the design interview on 2026-09-22 and not answered before the repository work started [s1]. Closed items move to the table at the end.

ID	Question	Closes in	Agent recommendation	Decides
OD-65	Who holds the emergency Safe's fifth seat? The fifth signer is a member of neither the committee nor the Emergency Brakes multisig (OD-58), and a DAO Snapshot appoints them.	ADR 005	EM said on 2026-10-13 "yup, tentatively tho" to a member of the Tech team. Accept that as a criterion, not a name: a Tech-team member on neither body, whose key and seed are generated apart from the Emergency Brakes members' setup, who signs a written statement of independence, keeps on-call duty and takes part in the timed drill. Review the seat at the first rotation, because the only quorum without the committee is then all from the engineering organisation	EM; a DAO Snapshot appoints the signer

Closed

Generated from closed-decisions.yaml. EM's words are in the decision log; each decision's text is in its ADR. The state counts only the ODs in force: an OD that a later one replaced no longer replaces or refines anything.

ID	Question	Closed	Record	State
OD-01	Where does the screening hook live?	2026-10-02	OD-01: the screening route; ADR 010	In force; replaced in part by OD-80 and OD-83.
OD-02	Which Safe version do the two new Safes use?	2026-10-02	OD-02 and OD-19: the two new Safes; research note	In force; replaced in part by OD-80.
OD-03	What is the base of the yield-bearing cap?	2026-10-02	OD-03: the base of the yield-bearing cap; ADR 009	In force.
OD-04	Does Lido Lend count against the protocol cap?	2026-10-02	OD-04: Lido Lend and the protocol cap; ADR 009	In force; replaced in part by OD-41.
OD-05	How are the swap instances configured?	2026-10-02	OD-05 Q1 and Q2: instance managers and parameters; OD-05 Q3: where recovered rebalancing tokens go; ADR 007	In force; replaced in part by OD-43.
OD-06	The period and the limit of the funding registry	2026-10-02	OD-06 Q1: the period; OD-06 Q2: the limit; ADR 008	In force; replaced in part by OD-89; refined by OD-92.
OD-07	The screening vendor's guard: the agreement, the build, the confirmations and the announcement	2026-10-02	OD-07: the screening vendor's guard; ADR 010	In force; replaced in part by OD-80.
OD-08	The approval ceiling per token and the budget refill-period floor	2026-10-02	OD-08: approvals and the refill-period floor; ADR 009	In force.
OD-09	How does an immediate removal work?	2026-10-05	OD-09 Q1: the removal path; OD-09 Q2: DAO-scoped role keys; ADR 006	In force; replaced in part by OD-70.
OD-10	Which team owns the repository in CODEOWNERS?	2026-10-05	OD-10: code owners and the branch rule; ADR 003	In force.
OD-11	Do the shared payment ACL parameters stay unchanged, which token list does the stablecoin registry use, and is ETH a funding asset?	2026-10-05	OD-11: the payment permission, the token list and ETH; ADR 008	In force; refined by OD-93.
OD-12	Confirm four recorded readings: the vision answer, the acceptor answer, the start of Lido Lend's capped months, and who signs the vendor agreement	2026-10-05	OD-12: four recorded readings; ADR 002; ADR 009; ADR 010	In force; replaced in part by OD-41.
OD-13	Who writes and maintains the vault's detectors in each monitoring estate?	2026-10-05	OD-13: who writes and maintains the detectors; ADR 009	In force.
OD-14	Reporting operations: who publishes, on what schedule, what happens on a stale or missing price, who answers for a late report, and where a report's identifier is anchored	2026-10-05	OD-14: reporting operations and the anchor; OD-14: the mandate text; ADR 009	In force; refined by OD-62, OD-85 and OD-90.
OD-15	How do the committee and the Emergency Brakes multisig record a verification of a page?	2026-10-05	OD-15: how a body records a verification; ADR 002	In force.
OD-16	The policy data format and the compiler toolchain	2026-10-05	OD-16: the policy data format and the compiler; ADR 004	In force.
OD-17	Does Safe v1.5.0 hold up to due diligence on its audits and incident history?	2026-10-05	OD-17: Safe v1.5.0 after the due diligence; ADR 005; ADR 010; research note	In force; replaced in part by OD-80.
OD-18	Does the Stonks price source cover every pair?	2026-10-02	research note	In force; replaced in part by OD-43. Answered by evidence, not by a decision: the deployed Stonks stack prices only stETH and LDO, and the configuration moved to OD-20.
OD-19	The operator Safe's threshold	2026-10-02	OD-02 and OD-19: the two new Safes	In force.
OD-20	Who configures the swap pricing before launch, and when?	2026-10-05	OD-20: swap pricing; ADR 007, decision 27; research note	In force; replaced in part by OD-43. The withdrawal-queue route left the design on 2026-10-08 (ADR 007, decision 27).
OD-21	How do the legacy investments that the mandate carries over move into the vault, and who holds them now?	2026-10-05	OD-21: the legacy investments; ADR 008; research note	In force; replaced in part by OD-42 and OD-60.
OD-22	Should DAI earn, or stay idle?	2026-10-05	OD-22: DAI; ADR 011; research note	In force.
OD-23	When does the agent get its own GitHub identity?	2026-10-07	many contributors and their agents; ADR 012, decision 5	In force.
OD-24	The ceiling per USDS payment in the rewritten payment permission	2026-10-05	OD-24: the USDS ceiling; ADR 008	In force; refined by OD-93.
OD-25	Does decision 6 of ADR 003 cover the kit's dry-run values, and what comes before the acceptance of ADR 001 to ADR 004?	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 003	In force.
OD-26	In a USDC depeg, which stablecoins can recovery swap into USDT?	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 007; research note	In force; refined by OD-90.
OD-27	Does the stETH approval to Lido's withdrawal queue spend a budget key, or have a fixed ceiling?	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 007, decision 27; research note	In force. The withdrawal queue left the design on 2026-10-08 (ADR 007, decision 27).
OD-28	Does the no-redeem rule for the first-loss Earn shares bind the emergency role?	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 008	In force; replaced in part by OD-42 and OD-60.
OD-29	What does "a pause of the whole module" in decision 6 of ADR 009 mean?	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 009	In force; replaced in part by OD-58.
OD-30	The mandate draft promises an emergency exit that is independent of the committee, but the emergency Safe is a subset of the committee	2026-10-05	OD-25 to OD-30: acceptance round 1 and the emergency exit; ADR 005	Replaced by OD-58.
OD-31	May an agent record a human's own acceptance and verification on that human's instruction, and how is such an entry marked?	2026-10-06	OD-31: recording a human's own verification; ADR 002; ADR 003	In force.
OD-32	Who publishes the fortnightly cap reading that the trigger of OD-29 needs?	2026-10-06	OD-32: the fortnightly cap reading; ADR 009	In force.
OD-33	Is the Zodiac constellation the source of the permission policy?	2026-10-06	OD-33: the constellation as the policy source; ADR 004; research note	In force.
OD-34	May the files copied from the constellation keep LGPL-3.0-only?	2026-10-06	OD-34 and OD-35: the constellation's licence and the Zodiac workspace; ADR 001	In force.
OD-35	Who owns the Lido Zodiac workspace and its API key?	2026-10-06	OD-34 and OD-35: the constellation's licence and the Zodiac workspace; ADR 004	In force.
OD-36	May a governance motion grant the operator delegatecall?	2026-10-06	OD-36: no delegatecall through governance, and the policy CI job; ADR 006; ADR 005	In force.
OD-37	How does Clutch teach the system to new readers, and keep that material true?	2026-10-06	OD-37: the onboarding guide; specification	In force.
OD-38	May a motion give the operator the safety modifier, or another module of the Asset Safe, as a target?	2026-10-06	OD-38: the governance role refuses every module of the Asset Safe; ADR 006; ADR 005	In force.
OD-39	How does Clutch cover the mandate rules that the permission layer cannot enforce?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 009; specification	In force; refined by OD-90.
OD-40	How is the liquidity buffer of at least one month of baseline spend kept?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 009	In force; refined by OD-90.
OD-41	When does a new Lido product leave the protocol and counterparty cap?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 009	In force. It replaces in part OD-04 and OD-12.
OD-42	How are the DAO's first-loss Earn shares kept apart from the vault's other shares?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 008; ADR 005	In force; replaced in part by OD-60 and OD-73; refined by OD-89. It replaces in part OD-21 and OD-28.
OD-43	How does the vault swap, given the committee's need for DCA, standing limit orders, stop-loss orders, and 1inch and Uniswap?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 007; research note	In force; replaced in part by OD-73; refined by OD-96. It replaces in part OD-05, OD-18 and OD-20.
OD-44	What does the Zodiac UI show about the vault's value and limits, and from which data?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 009	In force; replaced in part by OD-84 and OD-86; refined by OD-62.
OD-45	Are all structural increases of exposure timelocked?	2026-10-06	OD-39 to OD-45: the committee's meeting on controls, buffer, product tiers, first-loss, swaps, NAV and timelocks; ADR 009; ADR 010	In force.
OD-46	How does a new token join the orders account's lists, given that a motion cannot write the order signer's delegatecall permission?	2026-10-06	OD-46: how a new token joins the orders account's lists; ADR 006; ADR 007	In force.
OD-47	What is the maximum life of an order from the orders account?	2026-10-06	OD-47: the maximum order life; ADR 007	In force; replaced in part by OD-61 and OD-79.
OD-48	Do recovery orders need an on-chain price floor?	2026-10-06	OD-48: the price risk of recovery orders; ADR 007; research note	In force.
OD-49	How does the emergency role exit a position that a motion onboarded?	2026-10-06	OD-49: emergency exits for positions that a motion onboards; ADR 006; ADR 005; ADR 011	In force.
OD-50	Which human ids may verify a page, besides EM, the committee and the Emergency Brakes multisig?	2026-10-07	OD-50 to OD-53: reviewers, verification locks, the fork suite and the request's figures; ADR 012, decision 6	In force.
OD-51	Does a verification lock the page's text?	2026-10-07	OD-50 to OD-53: reviewers, verification locks, the fork suite and the request's figures; ADR 012, decision 7	In force.
OD-52	Where does the fork suite run in CI?	2026-10-07	OD-50 to OD-53: reviewers, verification locks, the fork suite and the request's figures; ADR 012, decision 8	In force.
OD-53	Are the request for solution's allocation figures restricted, like the mandate's?	2026-10-07	OD-50 to OD-53: reviewers, verification locks, the fork suite and the request's figures; ADR 012, decision 9	In force.
OD-54	How does a launch without the screening guard stay under its cap, and what lifts the cap?	2026-10-09	OD-54 to OD-56: the capped launch, its figure and the budgets; ADR 010, decisions 20 to 22; ADR 008, decision 20	In force.
OD-55	Which figure caps a launch without the guard?	2026-10-09	OD-54 to OD-56: the capped launch, its figure and the budgets; ADR 010, decision 20	In force.
OD-56	How often do budgets follow the caps?	2026-10-09	OD-54 to OD-56: the capped launch, its figure and the budgets; OD-56's reason, and OD-57: one modifier on the orders account; ADR 009, decisions 31 to 33	In force.
OD-57	How many Roles modifiers does each account carry?	2026-10-09	OD-56's reason, and OD-57: one modifier on the orders account; ADR 005, decision 21; ADR 007, decision 28	In force; replaced in part by OD-58.
OD-58	Who holds the emergency powers? May the Emergency Brakes multisig exit positions and send assets home, and does the emergency Safe stay?	2026-10-13	OD-58 and OD-63: the emergency Safe and the switch; ADR 005, decisions 23 to 25; ADR 007, decision 30; ADR 009, decision 34	In force; refined by OD-90. It replaces OD-30; it replaces in part OD-29 and OD-57.
OD-59	May an emergency body restart what it stopped, for example unpause Easy Track?	2026-10-13	OD-59: no resume by an emergency body; ADR 005, decision 26	In force.
OD-60	Who burns or redeems the first-loss shares under the March 2026 terms?	2026-10-13	OD-60: the first-loss role; ADR 008, decisions 21 and 22; ADR 005, decision 27	In force; replaced in part by OD-67 and OD-73. It replaces in part OD-21, OD-28 and OD-42.
OD-61	How long may an operator order live?	2026-10-13	OD-61: the order life; ADR 007, decision 29	In force. It replaces in part OD-47.
OD-62	Which price does a report use when a source is missing or wrong, and what does the Zodiac UI show?	2026-10-13	OD-62: prices and the Zodiac UI; the protected files; ADR 009, decisions 35 to 38	In force; replaced in part by OD-84; refined by OD-90. It refines OD-14 and OD-44.
OD-63	Does the Emergency Brakes multisig still verify the records that constrain the operator?	2026-10-13	OD-58 and OD-63: the emergency Safe and the switch; ADR 002, decision 12	In force.
OD-64	Does the Emergency Brakes multisig keep the notice of a relaxed screening rule and its view of the Lido Zodiac workspace?	2026-10-13	ADR 002 verified again, the first-loss holder and OD-64; ADR 010, decision 23; ADR 004, decision 17	In force.
OD-66	How does the vault add and use insurance funds for products other than Lido Earn?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; OD-73: Aragon Voting owns the vault's Safes; OD-66 closed; ADR 008, decisions 25 to 30	In force; replaced in part by OD-78.
OD-67	Does a first-loss burn run without the objection window, as OD-60 allowed?	2026-10-13	OD-67: no first-loss burn without the objection window; OD-67: three readings confirmed; ADR 008, decision 23	In force. It replaces in part OD-60.
OD-68	How does a new token join the orders account after launch?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; ADR 007, decision 31	Replaced by OD-78. It replaces in part OD-46, OD-57 and OD-58.
OD-69	How does a motion give a budget to a spender that the enabling vote did not know?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; ADR 009, decision 39	In force; refined by OD-94.
OD-70	Do routine removals stay the emergency Safe's revoke?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; ADR 006, decision 14	In force. It replaces in part OD-09.
OD-71	What follows a new TM Floor Value, or a fall in the stETH price?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; ADR 008, decision 24	In force; refined by OD-89.
OD-72	Which protocol shapes and reward claims must the templates cover before the enabling vote?	2026-10-14	OD-68 to OD-72 decided, OD-66 in part, OD-73 opened; ADR 006, decision 15	In force; refined by OD-79.
OD-73	Who owns the vault's Safes and administers its funding registries: the Aragon Agent, through Dual Governance, or Aragon Voting, directly?	2026-10-14	OD-73: Aragon Voting owns the vault's Safes; OD-66 closed; ADR 005, decision 28	In force; refined by OD-92. It replaces in part OD-42, OD-43 and OD-60.
OD-74	What can a token that a motion adds do on the orders account, how does it get CoW's approval, how does it leave in an emergency, and does its template ship with the launch?	2026-10-14	OD-74 and OD-75: the interview on OD-68; ADR 007, decisions 32 to 36	Replaced by OD-79, and in part by OD-78. It refines OD-68.
OD-75	Which restarts after an emergency stop run as Easy Track motions?	2026-10-14	OD-74 and OD-75: the interview on OD-68; ADR 005, decision 29	Replaced by OD-78. It refines OD-59.
OD-76	Which launch tokens get stop-loss orders, when Chainlink's Feed Registry has no USD feed for wstETH, WETH or LDO?	2026-10-14	OD-76 and OD-77: launch stop-loss feeds, and the restore's launch version; ADR 007, decision 37	Replaced by OD-79. It refines OD-74.
OD-77	Does a restore keep writing the launch version, which drops later additions and brings back routine removals?	2026-10-14	OD-76 and OD-77: launch stop-loss feeds, and the restore's launch version; ADR 006, decision 16	Replaced by OD-78. It refines OD-75.
OD-78	Which items leave the launch, to cut its complexity?	2026-10-14	OD-78: a smaller launch; ADR 005, decision 30; ADR 006, decision 17; ADR 007, decision 38; ADR 008, decision 31	In force; refined by OD-97. It replaces OD-68, OD-75 and OD-77; it replaces in part OD-66 and OD-74.
OD-79	Which options of the 80/20 pass after OD-78 does the launch take?	2026-10-14	OD-79: the 80/20 pass after OD-78; ADR 007, decision 39; ADR 006, decision 18	In force. It replaces OD-74 and OD-76; it replaces in part OD-47; it refines OD-72.
OD-80	Does Clutch need its own operator Safe, or does the committee's existing Safe hold the operator role?	2026-10-14	OD-80 to OD-82: the committee's Safe as the operator, the Emergency Brakes multisig in the guide, and generated registers; OD-80 and OD-83 kept after a review of the operator Safe; ADR 005, decision 31	In force; refined by OD-83. It replaces in part OD-01, OD-02, OD-07 and OD-17.
OD-81	How do the guide and the diagrams show the Emergency Brakes multisig?	2026-10-14	OD-80 to OD-82: the committee's Safe as the operator, the Emergency Brakes multisig in the guide, and generated registers; ADR 012, decision 12	In force.
OD-82	Which parts of the registers and the ADR pages does the validator generate, and which checks guard them?	2026-10-14	OD-80 to OD-82: the committee's Safe as the operator, the Emergency Brakes multisig in the guide, and generated registers; ADR 012, decision 13	In force.
OD-83	Where does the screening guard go when the launch cap lifts, now that the committee's own Safe is the operator?	2026-10-14	OD-83: the screening guard on the committee's Safe; OD-80 and OD-83 kept after a review of the operator Safe; ADR 010, decision 24	In force; refined by OD-88. It replaces in part OD-01; it refines OD-80.
OD-84	Which reading of the vault counts: Lido's, the policy provider's, or both?	2026-10-20	OD-84 to OD-88: two readings, the provider's reports and its checks; ADR 009, decisions 40 and 41	In force; refined by OD-87. It replaces in part OD-44 and OD-62.
OD-85	How do the policy provider's reports reach IPFS?	2026-10-20	OD-84 to OD-88: two readings, the provider's reports and its checks; ADR 009, decision 42	In force. It refines OD-14.
OD-86	What does the Zodiac UI do at signing when a transaction would breach a cap or the liquidity buffer's floor?	2026-10-20	OD-84 to OD-88: two readings, the provider's reports and its checks; ADR 009, decision 43	In force. It replaces in part OD-44.
OD-87	Where do the two readings get the mandate's rules, and how does a change reach the policy provider?	2026-10-20	OD-84 to OD-88: two readings, the provider's reports and its checks; ADR 009, decision 44	In force. It refines OD-84.
OD-88	What does the screening vendor's integration still lack: the approval in the Zodiac UI's signing flow, and an alert on a late approval?	2026-10-20	OD-84 to OD-88: two readings, the provider's reports and its checks; ADR 010, decisions 25 and 26	In force. It refines OD-83.
OD-89	What does the mandate size mean: a floor that top-ups refill, or a ceiling?	2026-10-21	OD-89 and OD-90 decided, OD-91 opened: the mandate size, the mandate's owed text, and LDO; ADR 008, decisions 32 to 34	In force; refined by OD-98. It replaces in part OD-06; it refines OD-42 and OD-71.
OD-90	Where does each item that the mandate text owes go: the Snapshot text, the forum post, or the LIP alone?	2026-10-21	OD-89 and OD-90 decided, OD-91 opened: the mandate size, the mandate's owed text, and LDO; specification	In force. It refines OD-14, OD-26, OD-39, OD-40, OD-58 and OD-62.
OD-91	Does the operator need LDO?	2026-10-22	OD-91 decided: LDO leaves the launch list; ADR 011, decision 15	In force.
OD-92	How does the enabling vote apply the Safe batches and make Voting the funding registries' admin?	2026-10-22	OD-92 to OD-94 decided: the vote's batches, the registries, the USDS items and the motion limit; ADR 005, decision 32; ADR 008, decision 35; research note	In force. It refines OD-06 and OD-73.
OD-93	Does the enabling vote keep the four USDS items?	2026-10-22	OD-92 to OD-94 decided: the vote's batches, the registries, the USDS items and the motion limit; ADR 008, decision 36	In force. It refines OD-11 and OD-24.
OD-94	How does Clutch keep its motions moving when Easy Track's shared limit of open motions is near?	2026-10-22	OD-92 to OD-94 decided: the vote's batches, the registries, the USDS items and the motion limit; ADR 009, decision 45	In force. It refines OD-69.
OD-95	Is the repository public now, and what replaces the rule that it stays private until deployment?	2026-10-22	OD-95 to OD-99 decided: the public repository, the order signer as new code, re-grants by motion, the seed's price rule and security reports; ADR 001, decision 10	In force.
OD-96	CoW's order signer has no known audit: does it count as new code? And what replaces the Stonks settings in the agents' rules?	2026-10-22	OD-95 to OD-99 decided: the public repository, the order signer as new code, re-grants by motion, the seed's price rule and security reports; ADR 007, decision 40	In force. It refines OD-43.
OD-97	May a motion bring back a permission that the emergency role revoked, or is every restart a vote?	2026-10-22	OD-95 to OD-99 decided: the public repository, the order signer as new code, re-grants by motion, the seed's price rule and security reports; ADR 006, decision 19	In force. It refines OD-78.
OD-98	At which price does the seed count the first-loss shares: the Earn oracle's, or the report's price rule?	2026-10-22	OD-95 to OD-99 decided: the public repository, the order signer as new code, re-grants by motion, the seed's price rule and security reports; ADR 008, decision 37	In force. It refines OD-89.
OD-99	Where does a security report about Clutch go?	2026-10-22	OD-95 to OD-99 decided: the public repository, the order signer as new code, re-grants by motion, the seed's price rule and security reports	In force. SECURITY.md holds the rule.