Protego is a tool to permissionlessly deploy a spell which can be used to drop a particular plan in the MCD_PAUSE
contract, or in extreme cases the Protego contract can itself be lifted to the hat, allowing any user to
permissionlessly drop any scheduled plan.
- A
planis a scheduleddelegatecallthat exists inMCD_PAUSEand can be permissionlessly executed. - Plans in
MCD_PAUSEare identified by a unique 32 byte hash. - A conforming spell here is one where the values returned by
action(),tag(),sig()andeta()are equal to the correspondingplan,usr,tag,faxandetavalues respectively. Bad actors could potentially manipulate the return values of these functions such that they are not equal, which would result in a non-conforming spell. - Users interacting with
Protegoshould always assume the spell they want to drop is non-conforming and fetch the parameters directly from the logs created bypause.plot()
deploy(address _usr, bytes32 _tag, bytes memory _fax, uint256 _eta)(address)If there is sufficient ecosystem interest to cancel (drop) a particular scheduled set of actions (the target plan),
Protego contains a factory to permissionlessly create a spell ("Emergency Drop Spell"), which – upon being given
the hat – is able to drop the targeted plan in MCD_PAUSE.
drop(address _usr, bytes32 _tag, bytes memory _fax, uint256 _eta)In case of a governance attack, numerous spells could be created and planned by an attacker at a rate faster than a
single hat spell can drop them. To mitigate this risk, the Protego contract itself can be given the hat, which
allows any user to permissionlessly drop any plan.
It will immediately drop a plan in MCD_PAUSE using the parameters provided.
id(address _usr, bytes32 _tag, bytes memory _fax, uint256 _eta)(bytes32)Returns the bytes32 id of a given plan using the same method that hash does in MCD_PAUSE.
planned(address _usr, bytes32 _tag, bytes memory _fax, uint256 _eta)(bool)
planned(bytes32 _id)(bool)Returns true if a plan has been scheduled for execution.