> For the complete documentation index, see [llms.txt](https://onex-3.gitbook.io/onex-document/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://onex-3.gitbook.io/onex-document/coin/governance.md).

# Governance

## Governance Model

### Voting Power Formula

```
Votes = √(staked_tokens) × time_weight × loyalty_multiplier
```

* **Time weight:** +10% per 3 months of continuous staking, capped at 2×
* **Loyalty multiplier:** Diamond = 3×, Platinum = 2×, Gold = 1.5×, Silver = 1.2×, Bronze = 1×
* **Single-wallet maximum:** 5% of total votes regardless of holdings
* **Quorum:** Minimum 10% of total staked supply must vote

### Voting Thresholds

| Decision Type                                                  | Required Majority |    Timelock |
| -------------------------------------------------------------- | ----------------: | ----------: |
| Standard changes                                               |      51% majority | 48–72 hours |
| Critical parameters (floor price, IEV split, circuit breakers) | 66% supermajority |   168 hours |

***

## Parameter Adjustment Rules

| Parameter                  | Who Can Change               | Method            |  Timelock |
| -------------------------- | ---------------------------- | ----------------- | --------: |
| ADTL Base Tax Rate         | DAO Vote                     | 51% majority      |  48 hours |
| Whale Tier Thresholds      | DAO Vote                     | 51% majority      |  72 hours |
| IEV Split Ratio (70/30)    | DAO Vote                     | 66% supermajority | 168 hours |
| VVC Adjustment Factors     | DAO Vote                     | 51% majority      |  72 hours |
| Circuit Breaker Thresholds | DAO Vote                     | 66% supermajority | 168 hours |
| ABR Mode Activation        | Automatic (on-chain)         | Smart contract    | Immediate |
| Floor Price                | DAO Vote                     | 66% supermajority | 168 hours |
| Staking APY Rates          | Admin (operational multisig) | 2-of-3            |  24 hours |
| Total Supply Cap           | **IMMUTABLE**                | Cannot be changed |       N/A |
| Migration Ratio (1:1)      | **IMMUTABLE**                | Cannot be changed |       N/A |

***

## Multisig Architecture

### Primary Protocol Multisig (5-of-9)

* 9 keyholders: 3 founding team, 3 independent security firms, 3 community-elected members
* Controls: smart contract upgrades, emergency fund access, critical parameter overrides
* Timelock: 48 hours minimum on all actions
* Hardware security: all keys on HSM (Hardware Security Module) — no software keys

### Bridge Guardian Multisig (3-of-5)

* 5 keyholders: 5 independent security firms (no team members)
* Controls: bridge emergency pause ONLY
* Response time SLA: <15 minutes from alert to pause

### Treasury Multisig (4-of-7)

* 7 keyholders: 2 founding team, 2 legal/financial advisors, 3 community-elected members
* Controls: treasury fund disbursements above $100,000
* Smaller disbursements (<$100,000): 2-of-3 operational multisig

***

## Smart Contract Architecture

* Upgrade pattern: OpenZeppelin TransparentUpgradeableProxy
* ProxyAdmin: controlled by Primary Protocol Multisig (5-of-9)
* Upgrade delay: **7-day timelock** — community can review before any upgrade takes effect
* Emergency upgrade (critical vulnerability): 48-hour timelock, requires public disclosure
* Core invariants (total supply cap, 1:1 migration ratio) are **IMMUTABLE** — cannot be changed by any upgrade