Reference

Security and limits

What the design protects against, and what it does not.

Reference Reference.

Protected

An agent cannot withdraw: only the mandate's owner can, and only to itself.
An agent cannot trade a token off the owner's list, above its caps, or far from Chainlink.
A curator cannot swap the agent or move depositors' funds.
Owner settings have ceilings written in the contracts.

Losing trades inside the limits.
A Chainlink feed that is wrong but fresh. If a feed stops, its price goes stale and every trade in that token stops: the safe failure.
A sudden drop faster than a freeze.
BGAP's price: a bond counts at a fixed 200 USDG per BGAP, so a falling BGAP means less real cover than the number shows.
Correlation: bonds and the underwriter pool are both BGAP; in a BGAP crash both layers weaken together.
The chain itself: one sequencer, run by Robinhood.
Bugs: the contracts are not audited yet.