Skip to main content

Non-bypassable checklist

A deployed integration provides non-bypassable protection when every authority capable of performing the selected operation is inside the declared Luvion enforcement boundary. This checklist establishes that deployment property.

Authority inventory​

  • enumerate every owner, administrator, guardian, upgrader, pauser, minter, signer manager, and emergency role;
  • include proxy administrators, timelock proposers and executors, Safe modules, direct EOA paths, and upgrade or recovery contracts;
  • identify offchain custody, deployment, CI, or automation credentials that can reach the same authority.

Migration requirements​

  1. Select one protected operation and define its canonical fields.
  2. Install or configure one Luvion-aware enforcement point.
  3. Migrate the protected authority to that enforcement point.
  4. Remove or revoke every legacy route for the same operation, or migrate it behind the same mandatory authorization check.
  5. Require the active Luvion authorization key, policy version, validity window, replay boundary, and exact intent at execution time.
  6. Make missing, invalid, expired, conflicting, or consumed certificates fail closed.
  7. Test both the intended route and every known bypass attempt.
  8. Bind the execution receipt or onchain event back to the authorization.

Acceptance evidence​

A design-partner acceptance package should include the authority map, contract configuration, protected-operation schema, positive test, bypass tests, revocation test, replay test, recovery procedure, and final evidence export.

Scope language

A legacy owner, emergency key, or alternate module that can perform the same operation is a bypass. Route-specific enforcement may exist, but the operation must not be described as non-bypassable until those paths are technically closed or subject to the same authorization check and the result is tested.

Listing an exception does not close a bypass. A narrower claim is valid only for a technically distinct operation or authority domain with no such alternate route. Test recovery and upgrade powers that could restore a bypass as well.