Emergency Procedures

In the event of a catastrophic failure or zero-day exploit, CogniFi has a layered defense system.

The "Kill Switch": Pausing Agents

Since AI agents operate autonomously, they could theoretically "go rogue" due to a hallucination or a logic bug (e.g., buying a token at infinite price).

• Mechanism: A global "Pause" flag exists in the Agent Registry smart contract.

• Trigger: Can be activated by the CogniFi Security Council (a 4-of-7 multisig of trusted community members and security partners).

• Effect:

  • The on-chain contract rejects any new transaction signatures from the registered Agent TEEs.

  • Agents are effectively "frozen"—they can read data but cannot execute trades or move funds.

  • Note: This does not freeze user funds. Users can always withdraw their assets directly from the smart contracts; only the AI's automation is paused.

Multisig Governance Structure

CogniFi is progressively decentralized. Currently, sensitive protocol parameters are managed by Squads Protocol, the leading multisig standard on Solana.

The Council Structure:

• Total Signers: 7

• Threshold: 4 signatures required to execute any admin transaction.

• Composition:

  • 2 Core Developers (CogniFi Labs)

  • 2 Independent Auditors (e.g., from OtterSec, Mad Shield)

  • 3 Elected Community Delegates (Top $COGNI holders)

Timelock: Critical upgrades (e.g., changing the fee structure or upgrading the Lazarus program) have a 48-hour Timelock. This means the transaction is queued on-chain for 2 days before execution, giving the community time to audit the change and exit if they disagree. The "Kill Switch" bypasses this timelock for immediate safety.