Access Controls

Term Finance Protocol contracts inherit from OpenZeppelin's AccessControlUpgradeable.sol contract, an upgradeable variant of AccessControl.sol. This allows Protocol contracts to define multiple roles, each with access to perform different sets of actions. The table below documents all roles, their multi-signature wallets and modules, and accessible methods assigned within the Protocol.

Ethereum

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	All Contracts: _authorizeUpgrade e.g. _authorizeUpgrade TermInitializer.sol: pauseDeploying unpauseDeploying TermController.sol : updateTreasuryAddress updateProtocolReserveAddress TermPriceConsumerV3.sol: addNewTokenPriceFeed removeTokenPriceFeed
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	TermInitializer.sol: setupTerm setupAuction
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	TermController.sol : markTermDeployed unmarkTermDeployed

Avalanche

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	All Contracts: _authorizeUpgrade e.g. _authorizeUpgrade TermInitializer.sol: pauseDeploying unpauseDeploying TermController.sol : updateTreasuryAddress updateProtocolReserveAddress TermPriceConsumerV3.sol: addNewTokenPriceFeed removeTokenPriceFeed
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	TermInitializer.sol: setupTerm setupAuction
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	TermController.sol : markTermDeployed unmarkTermDeployed

Signers of the DevOps-Proposer Gnosis Safes and Admin Gnosis Safes are required to abide by the Signer Compliance Policy viewable here.