Framework

The GLAM Protocol’s access control framework employs a three-layered approach to maximize security and enhance risk management.

​

Vault-Level

The vault-level access control ensures that specific restrictions and permissions are applied uniformly to the entire vault, regardless of the permissions assigned to wallets interacting with it. For example, integration allowlist and assets allowlist are enforced on the vault-level. If JupiterSwap integration is not enabled, nobody, including the owner, could swap tokens. This approach strengthens security by providing an overarching control layer for critical vault operations.

​

Instruction-Level

The instruction-level access control in the GLAM Protocol is a fine-grained mechanism that enables secure delegation of permissions to other entities (such as a trader, an AI agent, or a bot) within defined boundaries. It ensures that delegates can only perform specific actions permitted by the vault owner, enhancing operational flexibility without compromising security.

​

Parameter-Level

The parameter-level access control represents a highly granular mechanism that restricts and defines access based not only on instructions but also on specific parameters within those actions. This level of control ensures that even when a delegate is permitted to execute certain instructions, the scope of those instructions is limited to predefined parameters.