Trustless Custody Playbook for DAO Treasuries

MPC signer topology

Client Signer (MPC) holds keys, while BrainCenter only receives signed payloads. Exchange scopes exclude withdrawals. Even during the +80% sprint, funds never left DAO custody.

Audit artifacts

We publish signer logs with hashed payloads, Redis heartbeats, and mission-control screenshots. Auditors can map each trade to a signer event plus a BrainCenter directive.

Incident handling

If anything looks odd (e.g., stale depth, RPC issues), the Boss role freezes directives, Ops receives an alert, and DAO councils can pull telemetry from `/security` to verify safeness.

Onboarding flow

This article includes a runbook: configure API scopes, deploy the signer, approve governance motion, and schedule a live fire drill. Most treasuries complete the process in under 60 minutes.

CTA

Link heads of security to `/security` for diagrams, then jump to `/contact` to book a readiness workshop tailored to your DAO.