> For the complete documentation index, see [llms.txt](https://delpho.gitbook.io/delpho-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://delpho.gitbook.io/delpho-docs/risk/trust-assumptions-and-multisig.md).

# Trust assumptions and multisig

This page documents the full authorization model: which functions are controlled by which authority, the signer set and threshold, and the timelock durations that apply to routine and emergency actions.

## **Authority structure**

All administrative authority over Delpho contracts and parameters is held by a multisig at V1. There is no token-vote governance at launch.

Authority is constrained in three ways:

* **Multisig threshold.** A defined number of signers must approve any controlled action.
* **Timelocks.** Non-emergency upgrades and parameter changes are subject to documented timelocks before execution.
* **Emergency carve-outs.** A defined set of pause functions can bypass the timelock to allow the protocol to respond to an active threat. Emergency actions are subject to post-hoc disclosure.