DEADSWITCH/ONLINE PHASE 1 / LIVE

ON-CHAIN EMERGENCY RESPONSE INFRASTRUCTURE

WHEN TRUST
BREAKS.
EXECUTION STOPS.

Programmable emergency safeguards for on-chain protocols. Define protective policies, simulate incident responses, and make critical security actions auditable.

SYSTEM STATUS00:00:00:00
> initializing policy engine...OK
> loading protection rules...OK
> monitoring sourceSIMULATED
POLICY ENGINE: DEMO MODE
01CIRCUIT BREAKERS
02TIMELOCKED ACTIONS
03MULTI-PARTY APPROVAL
04INCIDENT AUDIT TRAILS

// LIVE SIMULATION SURFACE

DEADSWITCH CONTROL ROOM

PROTOCOL MONITOR SIMULATED DATA
WITHDRAWAL VOLUME$184.2KLIMIT $250K / INTERVAL
FAILED TRANSACTIONS02TRIGGER AT 3
ABNORMAL ACTIVITY18/100RISK SCORE
WITHDRAWAL VOLUME / LAST 60 MINUTES SIMULATED FEED
-60M-45M-30M-15MNOW
SIMULATION ACTIVELAST EVENT —

// CONFIGURABLE POLICY LOGIC

CIRCUIT BREAKER LAB

Configure a hypothetical protocol. Every action below runs locally in your browser and has no connection to a live chain.

EMERGENCY RESPONSE MODE
DECISION TRACE LIVE
01EVENT INPUT2 FAILED TX
02RULE EVALUATIONWITHIN LIMITS
03POLICY RESPONSECONTINUE MONITORING
RESULTNO ACTION

// RESPONSE PROTOCOL

FROM SIGNAL TO RESPONSE

Detection does not automatically mean an action is safe to execute. Emergency actions must satisfy their authorization and execution rules.

01
◌

OBSERVE

Receive events from a supported monitoring source.

→
02
⌁

DETECT

Evaluate observed events against defined thresholds.

→
03
⌘

AUTHORIZE

Check that the proposed response meets policy.

→
04
→

EXECUTE

Submit or simulate the permitted protective action.

→
05
✓

VERIFY

Record the result for inspection and review.

// DISTRIBUTED CONTROL

NO SINGLE KEY
SHOULD CONTROL
EVERY EMERGENCY.

A production system should use authenticated signatures and verifiable authorization checks. This local demonstration shows how a threshold approval policy behaves before any on-chain integration exists.

APPROVAL SIMULATOR LOCAL STATE
REQUIRED3
RECEIVED1
REMAINING2
PAUSE NORTHSTAR WITHDRAWALSAWAITING APPROVAL

// AUDITABLE SIMULATION HISTORY

INCIDENT EXPLORER

INCIDENT IDDETECTEDTRIGGERED RULESTATERESPONSE
NO SIMULATED INCIDENTS RECORDED Run the circuit breaker lab to generate an auditable local record.

SIMULATED RECORDS ONLY — locally stored records are not immutable or publicly verifiable.

// DEFENSE IN DEPTH

SECURITY ARCHITECTURE

01

POLICY ENGINE

Evaluates defined rules against available event data.

02

DETECTION LAYER

Consumes monitoring signals and identifies configured anomalies.

03

AUTHORIZATION LAYER

Checks approvers, permissions, and action constraints.

04

RESPONSE LAYER

Submits permitted protective operations through integrations.

05

AUDIT LAYER

Records decisions, authorization evidence, and outcomes.

// THREAT MODEL

EMERGENCY CONTROLS
CREATE THEIR OWN RISKS.

False triggers, malicious administrators, compromised approver keys, monitoring delays, oracle manipulation, incorrect thresholds, denial-of-service, and failed recovery all require explicit mitigations. Use least privilege, multi-party authorization, scoped timelocks, rate limits, independent monitoring, and publicly inspectable records. DEADSWITCH does not prevent all exploits or guarantee protocol safety.

// PLANNED WORK

ROADMAP / 2026

01

POLICY SIMULATOR

Configurable rules, simulated incidents, and circuit-breaker logic.

PLANNED
02

AUTHORIZATION ENGINE

Authenticated approvals and timelocked proposals in a test environment.

PLANNED
03

ON-CHAIN ENFORCEMENT

Narrow smart-contract or Solana-program integration.

PLANNED
04

MONITORING INTEGRATIONS

Reliable event sources and incident detection.

PLANNED
05

SECURITY REVIEW

Adversarial testing, independent review, and recovery procedures.

PLANNED