@@ -76,6 +76,73 @@ Detailed steps for collecting this information are provided in [Joining a Multis
7676
7777** Note** : Entity affiliations are acceptable - the goal is accountability, not doxing.
7878
79+ ## Roles & Accountability
80+
81+ ### Accountability Structure
82+
83+ | Role | Responsibilities |
84+ | ------| ------------------|
85+ | ** Multisig Operations Lead** | Policy maintenance, signer coordination, documentation, periodic reviews, incident escalation |
86+ | ** Security Contact** | Security incident response, signer verification, emergency coordination |
87+
88+ ### Multisig-Specific Roles
89+
90+ For each multisig, assign:
91+
92+ | Role | Responsibility |
93+ | ------| ----------------|
94+ | ** Admin** | Setup, configuration, signer management, documentation |
95+ | ** Transaction Proposer** | Prepares and proposes transactions (may be delegated non-signer) |
96+ | ** Signers** | Review, verify, and sign transactions |
97+
98+ ### Signer Responsibilities
99+
100+ Every signer must:
101+
102+ - Use a hardware wallet for all multisig operations
103+ - Maintain a backup hardware wallet with the same seed
104+ - Store the seed phrase securely
105+ - Verify every transaction before signing
106+ - Respond within SLA based on multisig classification
107+ - Report incidents immediately
108+ - Complete training and participate in drills
109+
110+ #### Response Time SLAs
111+
112+ Use the response time requirements from [ Planning & Classification] ( /multisig-for-protocols/planning-and-classification#operational-classification ) :
113+
114+ - ** Emergency** : \< 2 hours
115+ - ** Time-Sensitive** : 2-12 hours
116+ - ** Routine** : 24-48 hours
117+
118+ ### Admin Responsibilities
119+
120+ Multisig admins must:
121+
122+ - Ensure the multisig is properly documented
123+ - Maintain an up-to-date signer list with verified addresses
124+ - Set up primary and backup communication channels
125+ - Coordinate signer onboarding and offboarding
126+ - Schedule and conduct periodic reviews (quarterly minimum)
127+ - Ensure backup infrastructure is configured and tested
128+
129+ ### Operational Lead Responsibilities
130+
131+ - Maintain the playbook and keep documentation current
132+ - Coordinate across all multisigs
133+ - Conduct periodic audits of multisig configurations
134+ - Escalate security concerns to the security contact
135+ - Report on operational status
136+
137+ ### Review Schedule
138+
139+ | Review Type | Frequency | Owner |
140+ | ------------| -----------| -------|
141+ | Signer access review | Quarterly | Multisig Admin |
142+ | Classification review | Quarterly or after major changes | Ops Lead |
143+ | Emergency contact verification | Every 6 months | Ops Lead |
144+ | Full policy review | Annually | Ops Lead + Security |
145+
79146## Update Template
80147
81148Use this template when making changes to signer composition:
@@ -124,6 +191,89 @@ Transaction: [Link to executed transaction]
124191- Update classification if operational patterns change
125192- Maintain current contact information
126193
194+ ### Transaction Review Records
195+
196+ Maintain audit trails for:
197+
198+ - Transaction reviews and approvals
199+ - Execution and post-execution confirmation
200+ - Verification evidence
201+ - Issues encountered
202+
203+ ** Retention** : 3 years minimum
204+
205+ Transaction records should capture:
206+
207+ ``` text
208+ Transaction: [Brief Description]
209+
210+ Date: [YYYY-MM-DD]
211+ Multisig: [Name]
212+ Status: Proposed / Signing / Executed / Rejected
213+
214+ Transaction Details
215+ - Network
216+ - Safe or Squad address
217+ - Nonce
218+ - Transaction type
219+
220+ What This Transaction Does
221+ - Plain language description of what the transaction accomplishes
222+
223+ Initiation
224+ - Proposed by
225+ - Proposed date
226+ - Reason or justification
227+ - Runbook followed
228+
229+ Verification & Signing
230+ - Signer
231+ - Verified
232+ - Signed
233+ - Date
234+ - Notes
235+
236+ Verification Checklist
237+ - Correct multisig address
238+ - Correct network
239+ - Expected nonce
240+ - Target address verified
241+ - Calldata or amount verified
242+ - Simulation performed
243+ - Hash matched hardware wallet
244+
245+ Simulation Results
246+ - Tool used
247+ - Result
248+ - Expected behavior confirmed
249+ - Link
250+
251+ Execution
252+ - Executed by
253+ - Execution date
254+ - Transaction hash
255+ - Block explorer link
256+ - Gas used
257+
258+ Post-Execution Verification
259+ - Transaction confirmed on-chain
260+ - Expected state change verified
261+ - Registration updated if applicable
262+ - Team notified
263+
264+ Issues Encountered
265+ - Document any issues, delays, or anomalies
266+
267+ Attachments
268+ - Screenshot of simulation
269+ - Screenshot of hardware wallet confirmation
270+ - Communication thread link
271+
272+ Sign-Off
273+ - Proposer
274+ - Final executor
275+ ```
276+
127277## Ongoing Management
128278
129279### Regular reviews
@@ -164,6 +314,7 @@ Use the template in [Registration & Documentation → Update Template](/multisig
164314
165315- [ Planning & Classification] ( /multisig-for-protocols/planning-and-classification ) - How to classify your multisig
166316- [ Joining a Multisig] ( /multisig-for-protocols/joining-a-multisig ) - Signer verification process
317+ - [ Operational Runbooks] ( /multisig-for-protocols/runbooks/overview ) - Example procedures for common operations
167318
168319</TagProvider >
169320<ContributeFooter />
0 commit comments