Core contracts separate duties. GPv2Settlement at deterministic address 0x9008…b41 checks signatures, limits and filled amounts and is documented as non-upgradeable. GPv2VaultRelayer is also non-upgradeable and limits token movement to authorized settlement. GPv2AllowListAuthentication at 0x2c4c…8aFE is upgradeable so governance can add or remove solvers or change admission logic.
Solver competition is permissionless at the solution layer but production settlement is authenticated and bonded. The documented full pool requires $500,000 in stable assets plus 1,500,000 COW; the reduced path begins at $50,000 plus 500,000 COW and grows toward $100,000 plus 1,000,000 COW, with core-team approval. A Solver Controller Safe manages the allow-list under DAO rules, and a separate Solver Payouts Safe pays rewards from collected fees.
COW voting uses a forum draft, then a seven-day Snapshot vote; a holder of more than 10,000 COW may advance an eligible proposal. Executable oSnap actions add a three-day delay. These are governance process rights, not equity or automatic revenue rights. The DAO Safe, USDC Safe, solver safes, grants safes and Karpatkey-supported treasury divide operational custody.