Foundation address holds Tier 1 authority — can veto proposals and escalate urgent items. UUPS upgrades require Foundation approval.

Active validators vote on Tier 2 and Tier 3 proposals. Protocol upgrades and validator admissions each carry their own quorum threshold.

Once a proposal passes and the Foundation veto window expires, anyone can trigger execution — it is permissionless. No privileged key can execute it early, block it, or fake it.