Skip to content

Commit ab49976

Browse files
committed
Add multisig operational runbooks and documentation guidance
1 parent 8af1c97 commit ab49976

10 files changed

Lines changed: 777 additions & 1 deletion

File tree

docs/pages/multisig-for-protocols/emergency-procedures.mdx

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -173,6 +173,12 @@ Current multisig status:
173173
- **Backup signers** - Have additional signers available for activation
174174
- **Communication redundancy** - Multiple ways to reach each signer
175175

176+
## Emergency Pause Runbook
177+
178+
Use the full [Emergency Pause Runbook](/multisig-for-protocols/runbooks/emergency-pause) as the canonical execution
179+
playbook for emergency pause transactions. Keep this page focused on incident coordination, communication, and recovery,
180+
and use the runbook page for the transaction-specific signing and execution steps.
181+
176182
### Emergency Drill Procedures
177183

178184
#### Regular Testing Schedule
@@ -230,6 +236,7 @@ Current multisig status:
230236
- [Hardware Wallet Setup](/wallet-security/intermediates-and-medium-funds) - Device replacement procedures
231237
- [Seed Phrase Management](/wallet-security/seed-phrase-management) - Key recovery procedures
232238
- [Personal Security (OpSec)](/multisig-for-protocols/personal-security-opsec) - Account security measures
239+
- [Operational Runbooks](/multisig-for-protocols/runbooks/overview) - Example runbooks for common operations
233240

234241
</TagProvider>
235242
<ContributeFooter />

docs/pages/multisig-for-protocols/index.mdx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,3 +24,4 @@ title: "Multisig For Protocols"
2424
- [Multisig Incident Reporting](/multisig-for-protocols/incident-reporting)
2525
- [Multisig Offboarding](/multisig-for-protocols/offboarding)
2626
- [Multisig Implementation Checklist](/multisig-for-protocols/implementation-checklist)
27+
- [Runbooks](/multisig-for-protocols/runbooks)

docs/pages/multisig-for-protocols/overview.mdx

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,8 @@ import { TagList, AttributionList, TagProvider, TagFilter, ContributeFooter } fr
3232
- Joining as a signer? → [Joining a Multisig](/multisig-for-protocols/joining-a-multisig) and [Hardware Wallet Setup](/wallet-security/intermediates-and-medium-funds)
3333
- Need to sign a transaction? → Signing & Verification:
3434
[Safe Multisig](/wallet-security/signing-and-verification/secure-multisig-safe-verification) and
35-
[Squads](/wallet-security/signing-and-verification/secure-multisig-squads-verification)
35+
[Squads](/wallet-security/signing-and-verification/secure-multisig-squads-verification), plus
36+
[Operational Runbooks](/multisig-for-protocols/runbooks/overview)
3637
- Emergency situation? → [Emergency Procedures](/multisig-for-protocols/emergency-procedures)
3738

3839
## Core principles
@@ -55,6 +56,7 @@ import { TagList, AttributionList, TagProvider, TagFilter, ContributeFooter } fr
5556
- [Registration & Documentation](/multisig-for-protocols/registration-and-documentation) - Document and verify setup
5657
- [Communication Setup](/multisig-for-protocols/communication-setup) - Establish secure communication channels
5758
- [Use Case Specific Requirements](/multisig-for-protocols/use-case-specific-requirements) - Special requirements by type
59+
- [Operational Runbooks](/multisig-for-protocols/runbooks/overview) - Example procedures for common operations
5860

5961
### 3. For Signers
6062

docs/pages/multisig-for-protocols/registration-and-documentation.mdx

Lines changed: 151 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,73 @@ Detailed steps for collecting this information are provided in [Joining a Multis
7676

7777
**Note**: Entity affiliations are acceptable - the goal is accountability, not doxing.
7878

79+
## Roles & Accountability
80+
81+
### Accountability Structure
82+
83+
| Role | Responsibilities |
84+
|------|------------------|
85+
| **Multisig Operations Lead** | Policy maintenance, signer coordination, documentation, periodic reviews, incident escalation |
86+
| **Security Contact** | Security incident response, signer verification, emergency coordination |
87+
88+
### Multisig-Specific Roles
89+
90+
For each multisig, assign:
91+
92+
| Role | Responsibility |
93+
|------|----------------|
94+
| **Admin** | Setup, configuration, signer management, documentation |
95+
| **Transaction Proposer** | Prepares and proposes transactions (may be delegated non-signer) |
96+
| **Signers** | Review, verify, and sign transactions |
97+
98+
### Signer Responsibilities
99+
100+
Every signer must:
101+
102+
- Use a hardware wallet for all multisig operations
103+
- Maintain a backup hardware wallet with the same seed
104+
- Store the seed phrase securely
105+
- Verify every transaction before signing
106+
- Respond within SLA based on multisig classification
107+
- Report incidents immediately
108+
- Complete training and participate in drills
109+
110+
#### Response Time SLAs
111+
112+
Use the response time requirements from [Planning & Classification](/multisig-for-protocols/planning-and-classification#operational-classification):
113+
114+
- **Emergency**: \<2 hours
115+
- **Time-Sensitive**: 2-12 hours
116+
- **Routine**: 24-48 hours
117+
118+
### Admin Responsibilities
119+
120+
Multisig admins must:
121+
122+
- Ensure the multisig is properly documented
123+
- Maintain an up-to-date signer list with verified addresses
124+
- Set up primary and backup communication channels
125+
- Coordinate signer onboarding and offboarding
126+
- Schedule and conduct periodic reviews (quarterly minimum)
127+
- Ensure backup infrastructure is configured and tested
128+
129+
### Operational Lead Responsibilities
130+
131+
- Maintain the playbook and keep documentation current
132+
- Coordinate across all multisigs
133+
- Conduct periodic audits of multisig configurations
134+
- Escalate security concerns to the security contact
135+
- Report on operational status
136+
137+
### Review Schedule
138+
139+
| Review Type | Frequency | Owner |
140+
|------------|-----------|-------|
141+
| Signer access review | Quarterly | Multisig Admin |
142+
| Classification review | Quarterly or after major changes | Ops Lead |
143+
| Emergency contact verification | Every 6 months | Ops Lead |
144+
| Full policy review | Annually | Ops Lead + Security |
145+
79146
## Update Template
80147

81148
Use this template when making changes to signer composition:
@@ -124,6 +191,89 @@ Transaction: [Link to executed transaction]
124191
- Update classification if operational patterns change
125192
- Maintain current contact information
126193

194+
### Transaction Review Records
195+
196+
Maintain audit trails for:
197+
198+
- Transaction reviews and approvals
199+
- Execution and post-execution confirmation
200+
- Verification evidence
201+
- Issues encountered
202+
203+
**Retention**: 3 years minimum
204+
205+
Transaction records should capture:
206+
207+
```text
208+
Transaction: [Brief Description]
209+
210+
Date: [YYYY-MM-DD]
211+
Multisig: [Name]
212+
Status: Proposed / Signing / Executed / Rejected
213+
214+
Transaction Details
215+
- Network
216+
- Safe or Squad address
217+
- Nonce
218+
- Transaction type
219+
220+
What This Transaction Does
221+
- Plain language description of what the transaction accomplishes
222+
223+
Initiation
224+
- Proposed by
225+
- Proposed date
226+
- Reason or justification
227+
- Runbook followed
228+
229+
Verification & Signing
230+
- Signer
231+
- Verified
232+
- Signed
233+
- Date
234+
- Notes
235+
236+
Verification Checklist
237+
- Correct multisig address
238+
- Correct network
239+
- Expected nonce
240+
- Target address verified
241+
- Calldata or amount verified
242+
- Simulation performed
243+
- Hash matched hardware wallet
244+
245+
Simulation Results
246+
- Tool used
247+
- Result
248+
- Expected behavior confirmed
249+
- Link
250+
251+
Execution
252+
- Executed by
253+
- Execution date
254+
- Transaction hash
255+
- Block explorer link
256+
- Gas used
257+
258+
Post-Execution Verification
259+
- Transaction confirmed on-chain
260+
- Expected state change verified
261+
- Registration updated if applicable
262+
- Team notified
263+
264+
Issues Encountered
265+
- Document any issues, delays, or anomalies
266+
267+
Attachments
268+
- Screenshot of simulation
269+
- Screenshot of hardware wallet confirmation
270+
- Communication thread link
271+
272+
Sign-Off
273+
- Proposer
274+
- Final executor
275+
```
276+
127277
## Ongoing Management
128278

129279
### Regular reviews
@@ -164,6 +314,7 @@ Use the template in [Registration & Documentation → Update Template](/multisig
164314

165315
- [Planning & Classification](/multisig-for-protocols/planning-and-classification) - How to classify your multisig
166316
- [Joining a Multisig](/multisig-for-protocols/joining-a-multisig) - Signer verification process
317+
- [Operational Runbooks](/multisig-for-protocols/runbooks/overview) - Example procedures for common operations
167318

168319
</TagProvider>
169320
<ContributeFooter />

0 commit comments

Comments
 (0)