Skip to main content

Safety and Performance Layer

Signals v1 separates two concerns that are easy to conflate:

  • Mechanism correctness: settlement meaning, pricing math, and accounting identities must remain consistent.
  • Economic admissibility: market configuration must remain inside a solvency envelope that the maker-side capital stack can underwrite.

In v1, the safety envelope is enforced at market creation time. The protocol validates that a market's depth and prior are admissible given current maker-side capacity. The trading mechanism remains CLMSR; the safety layer constrains which markets can exist with which parameters.

Safety and performance layers

Figure: Performance choices live inside a non-negotiable safety envelope.

Safety envelope at market creation

Two checks define the core envelope:

  • Depth admissibility: the market's depth parameter α\alpha must be below an on-chain limit derived from maker-side capacity and outcome grid size.
  • Prior admissibility: the market's prior factors must not be too concentrated relative to the effective backstop budget.

These checks are not an "alternative pricing mode." They are gates that decide which market configurations are allowed to exist.

The envelope exists to preserve a small set of mechanism-level invariants:

  • claims are paid out from reserved escrow after settlement
  • daily accounting remains internally consistent across settlement and fees
  • market configuration does not imply a worst-case loss that exceeds the effective maker-side backstop budget

Depth admissibility

Each market has a depth parameter α\alpha that scales CLMSR price impact. Higher α\alpha compresses slippage for a given trade size; lower α\alpha makes the curve more sensitive.

The safety layer derives a conservative upper bound on admissible depth from two public quantities:

  • current maker-side capital (vault NAV)
  • outcome grid size nn for the market

At a high level, the bound has the shape:

αbase=λEtlnn\alpha_\text{base} = \frac{\lambda E_t}{\ln n}

where EtE_t is maker-side NAV and λ\lambda is a safety constant that caps uniform-prior worst-case loss as a fraction of NAV.

This bound has a direct CLMSR interpretation. For a market with nn ticks, CLMSR has a worst-case loss scale proportional to αlnn\alpha \ln n. Bounding that loss scale by a fraction of maker NAV yields the αbase\alpha_\text{base} expression. The details of constant factors and rounding are implementation-specific, but the structural dependence is stable: admissible depth grows with maker NAV and shrinks as the grid has more ticks.

One way to state the idea is to treat αlnn\alpha \ln n as the "loss scale" of a market at a fixed resolution. Higher α\alpha makes trading cheaper for the trader side (less slippage), but it also increases the maximum amount the maker can lose in the worst case. The admissibility gate treats that tradeoff as an explicit budget.

The base bound is tightened under peak drawdown:

αlimit=αbasemax(0,1kDDt)\alpha_\text{limit} = \alpha_\text{base}\cdot \max(0, 1 - k\,DD_t)

with drawdown

DDt=1PtPtpeakDD_t = 1 - \frac{P_t}{P_t^\text{peak}}

where PtP_t is the current maker share price and PtpeakP_t^\text{peak} is the running peak.

In v1, this bound is enforced as a gate at market creation: a market cannot be created with α\alpha above αlimit\alpha_\text{limit} when enforcement is enabled. Depth is fixed per market at creation in the current release.

Two comparative statics are useful:

  • Holding capital fixed, increasing nn increases lnn\ln n and lowers αbase\alpha_\text{base}. Finer resolution constrains admissible depth under the same capital stack.
  • Holding nn fixed, drawdown increases DDtDD_t and tightens αlimit\alpha_\text{limit}. This ties new market admissibility to maker-side health.

Numeric sketch for αlimit\alpha_\text{limit}

This sketch shows the scaling without relying on any particular deployment values.

Suppose:

  • n=256n=256 bins, so ln(n)5.545\ln(n) \approx 5.545
  • maker NAV is Et=1,000,000E_t = 1{,}000{,}000 (in the protocol's internal fixed point)
  • λ=0.30\lambda = 0.30

Then:

αbase0.301,000,0005.54554,100\alpha_\text{base} \approx \frac{0.30 \cdot 1{,}000{,}000}{5.545} \approx 54{,}100

If peak drawdown is DDt=0.20DD_t = 0.20 and k=1k=1, the effective bound is:

αlimit54,100(10.20)43,300\alpha_\text{limit} \approx 54{,}100 \cdot (1 - 0.20) \approx 43{,}300

The point is the scaling: tighter resolution (larger nn) lowers admissible depth; drawdown lowers admissible depth; higher NAV raises admissible depth.

Prior admissibility

Signals markets can be initialized with a prior over ticks. The prior is represented as per-bin factors. A uniform prior produces no additional tail budget. A concentrated prior produces a positive tail budget that the backstop needs to cover.

The prior concentration is summarized by a tail budget term:

ΔEt=αln ⁣(rootSumnminFactor)\Delta E_t = \alpha \ln\!\left(\frac{\text{rootSum}}{n\cdot \text{minFactor}}\right)

where rootSum\text{rootSum} is the sum of prior factors and minFactor\text{minFactor} is the minimum prior factor. Uniform priors satisfy rootSum=nminFactor\text{rootSum}=n\cdot\text{minFactor} and yield ΔEt=0\Delta E_t = 0.

Admissibility is enforced as:

ΔEtBt1eff\Delta E_t \le B^\text{eff}_{t-1}

where Bt1effB^\text{eff}_{t-1} is the effective backstop budget derived from the capital stack.

This gate prevents extremely concentrated priors from being listed without sufficient backstop capacity.

The ratio term rootSum/(nminFactor)\text{rootSum}/(n\cdot\text{minFactor}) is a concentration measure relative to the uniform baseline. Uniform priors have ratio 1 and yield ΔEt=0\Delta E_t=0. Concentrated priors have ratio greater than 1 and yield a positive ΔEt\Delta E_t. The log turns multiplicative concentration into an additive budget term.

Numeric sketch for ΔEt\Delta E_t

Suppose n=4n=4 and the base factors are (1,1,2,2)(1,1,2,2). Then:

rootSum=6,minFactor=1,nminFactor=4\text{rootSum}=6,\quad \text{minFactor}=1,\quad n\cdot\text{minFactor}=4

The ratio is 6/4=1.56/4 = 1.5, so:

ΔEt=αln(1.5)0.405α\Delta E_t = \alpha \ln(1.5) \approx 0.405\,\alpha

Holding the factor shape fixed, larger α\alpha produces larger ΔEt\Delta E_t. This is consistent with the interpretation: a deeper curve makes a concentrated prior more expensive to underwrite.

Performance choices inside the envelope

Within the envelope, a market instance is defined by:

  • the grid parameters (bounds and spacing)
  • the depth α\alpha
  • the fee policy used for effective price
  • the settlement timeline anchored at TsetT_\text{set}

In v1, depth and fee policy are set at market creation time. The curve semantics remain CLMSR. Fees remain an overlay applied on top of base cost. Execution differences across markets are attributable to different grid geometry, depth, or fee policy rather than hidden changes in the pricing rule.

The grid enters this layer indirectly through nn. Bounds and spacing determine how many ticks exist, and the number of ticks enters admissibility via lnn\ln n. Resolution and admissible depth are therefore coupled through the safety model, even though the grid is a settlement object and α\alpha is a pricing object.

Stress regimes

Stress enters the envelope through maker-side capital. If maker NAV draws down, the peak drawdown term increases and the admissible depth bound tightens. This restricts which new market configurations can be listed under the same capital stack.

The trading and settlement mechanism remains deterministic under stress:

  • trading remains CLMSR state updates and fee overlays
  • settlement remains candidate selection and explicit finalization
  • claims remain time-gated payouts against a finalized tick

Stress changes admissible configuration and economics; it does not change payout meaning or settlement meaning.

In the current release, the envelope is applied at market creation time. Trade entrypoints call risk-gate hooks, but exposure cap enforcement is not active. This means the safety layer determines which market configurations can exist given the capital stack; it does not selectively block individual trades inside an already-listed market.

Clarifications

  • A safety gate reverts market creation when an admissibility constraint is violated.
  • Depth is fixed per market at creation in the current release.
  • Fee overlays change effective price; base cost remains a CLMSR cost-function difference.

Related sections: