Custody & multisig model (v1)
RMP is designed to transition from bootstrap custody to multisig custody before public expansion. The target design separates operational, development, and security funds to reduce surprise powers.
Bootstrap phase (current)
- • Single operator custody for early development simplicity
- • Explicitly temporary
- • Avoid irreversible actions while solo
- • No public distribution until transition triggers are met
Target custody architecture
Separate multisigs per bucket are the target design (audit-friendly, separation of concerns). Thresholds such as 3-of-5 or 4-of-7 are typical targets.
Bucket controls (target)
| Bucket | Target control |
|---|---|
| Protocol Treasury | Long-term multisig custodians |
| Infrastructure Reserve | Ops-focused multisig |
| Development Fund | Core contributor multisig |
| Security & Audit Fund | Security-first multisig |
| Unallocated Buffer | Locked / governance decision required |
Transition trigger (commitment)
RMP will transition to multisig custody before any significant public distribution or expansion of incentive programs. The exact signer set and threshold will be published at the time of transition.