Vault Misconfiguration Risks¶

Wrong Vault¶

If credentials point to non-factory vault, deposit should fail. If checks are bypassed by bad upgrade, funds can route outside approved custody path.

Wrong Beacon¶

Beacon mismatch can connect vault proxy to unauthorized implementation logic.

Wrong Controller¶

Controller mismatch can break claim, settlement, and readiness logic; this is a critical configuration fault.

Wrong Gatekeeper¶

Incorrect gatekeeper binding can alter claim-state derivation and cap enforcement.

Wrong Exit Request Wiring¶

Primary/fallback exit endpoints with wrong code or wrong semantics can prevent exits or create operational deadlocks.

Validation Controls¶

• baseline metadata checks in deposit path
• policy assertions against governor registry
• readiness checks from controller
• immutable config and derivation-version matching