Security

Why the mechanism is trustworthy without reading the source — and where it still trusts something. Start with the Trust Profile for the honest distribution of power and the residual assumptions.

• Trust Profile — who holds power, what's trusted, the security-value ceiling, and the claim qualifications
• Stake Accumulator — why the juror-set root is canonical by construction (no posted root, bond, or fraud window)
• Sortition & VRF — committed VRF + Merkle-Sum accumulator + inflation guard
• Circuit Breaker — AccordState, instant freeze, timelocked unpause

Security-relevant ADRs:

• ADR-0012 — on-chain stake accumulator (current draw mechanism; supersedes the snapshot layer of 0003/0008/0009)
• ADR-0007 — upgrade authority, freeze
• ADR-0009 — stake-weighted verifiable sortition (criterion retained in subtree-sum form)