Velocity Protocol Metrics

Program uprgade authority

Root authority. Set at initialize; only this key can rotate warm_admin and pause_admin. Expected to sit behind a (small) timelocked multisig.

Operational authority (e.g. multisig+timelock). Can rotate the 10 hot admins. Pubkey::default() means unset — only cold_admin can act in that case.

Emergency-pause authority. No on-chain timelock — intended to live behind a fast-acting multisig that can flip pause flags without delay. May only add pause bits (never clear them); cold/warm retain full pause + unpause power. Pubkey::default() means unassigned (only cold/warm can pause).

Program uprgade authority