> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accumulate.supply/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Model

> Reduce attack surface through simplicity and predictability

Accumulate is designed to reduce attack surface by limiting complexity and enforcing predictable behavior.

<Card title="Core Principle" icon="shield" color="#0ea5e9">
  Security is treated as a **property of the system's design**, not an
  afterthought.
</Card>

## Smart Contract Design

<AccordionGroup>
  <Accordion title="Immutability Where Possible" icon="lock">
    Core protocol logic is implemented through **immutable smart contracts**
    wherever possible. Once deployed, critical execution logic cannot be
    altered.
  </Accordion>

  <Accordion title="Deterministic Execution" icon="code">
    Contracts execute deterministically and avoid conditional behavior based on
    market data or external signals. The same input always produces the same
    output.
  </Accordion>

  <Accordion title="No Hidden Logic" icon="eye">
    All execution paths are explicit and verifiable. There are no backdoors,
    escape hatches, or hidden administrative functions.
  </Accordion>
</AccordionGroup>

***

## Treasury Security

Bitcoin accumulated by the protocol is held using a **Safe multisig wallet**.

<Steps>
  <Step title="Distributed Authority" icon="users">
    Multisig custody distributes signing authority across multiple parties,
    reducing single point of failure risk.
  </Step>

  <Step title="Custody Only" icon="hand">
    The multisig is used for **custody only** and does not control protocol
    execution or strategy logic.
  </Step>

  <Step title="Transparent Operations" icon="magnifying-glass">
    All multisig transactions are publicly visible onchain and can be
    independently verified.
  </Step>
</Steps>

<Note>
  The multisig cannot override smart contract logic or execute actions outside
  its defined scope.
</Note>

***

## Access Controls

<Card title="Limited, Explicit, and Scoped" icon="key">
  Permissions are limited, explicit, and scoped. Only defined actions can be
  executed through governance or multisig processes.
</Card>

### What This Means

* Every permission is documented and verifiable
* No administrator can execute arbitrary actions
* Access is granted only for specific, predefined operations
* There are no hidden execution paths
* No "emergency" powers that bypass rules

***

## Dependency Surface

<Warning>Accumulate minimizes reliance on external systems.</Warning>

The protocol does **not** depend on:

<AccordionGroup>
  <Accordion title="Price Oracles" icon="signal">
    No oracle feeds are required for normal operation. The protocol doesn't need
    to know Bitcoin's price to execute its strategy.
  </Accordion>

  <Accordion title="Yield Platforms" icon="chart-line">
    Treasury assets are not deployed to external protocols. This eliminates smart
    contract risk from third-party integrations.
  </Accordion>

  <Accordion title="Offchain Logic" icon="server">
    All critical decisions are made onchain through deterministic smart contract
    execution. No offchain systems are required.
  </Accordion>
</AccordionGroup>

<Info>
  By minimizing dependencies, Accumulate reduces the attack surface and
  maintains operational independence.
</Info>

***

## Transparency and Verification

<Card title="Observable Rather Than Inferred" icon="eye">
  All core contracts, treasury addresses, and protocol activity are **publicly visible and verifiable onchain**.

  Behavior is observable rather than inferred.
</Card>

Anyone can verify:

* 🔍 Smart contract code and logic
* 💰 Treasury holdings and transactions
* 📊 Fee collection and routing
* 🔥 Token burns and buybacks
* ⚙️ Governance actions and votes

<Card title="Verify the Protocol" icon="code" href="#">
  View contract addresses and verification links (Coming Soon)
</Card>

***

## Design Constraints

<Note>Accumulate is **intentionally narrow in scope**.</Note>

The protocol enforces simple, verifiable rules instead of adaptive or complex logic.

### Why Simplicity Matters

<AccordionGroup>
  <Accordion title="Reduced Attack Surface" icon="shield-halved">
    Simple systems have fewer vulnerabilities. Each additional feature or
    integration increases risk.
  </Accordion>

  <Accordion title="Easier Verification" icon="magnifying-glass-chart">
    Simple logic is easier to audit, test, and verify. Complex systems hide bugs
    and exploits.
  </Accordion>

  <Accordion title="Predictable Behavior" icon="chart-simple">
    Fixed rules produce predictable outcomes. Adaptive logic introduces
    uncertainty and manipulation vectors.
  </Accordion>

  <Accordion title="Long-term Stability" icon="mountain">
    Simple systems are more likely to function correctly over extended periods
    without intervention.
  </Accordion>
</AccordionGroup>

<Card title="This Constraint Is Deliberate" icon="compass" color="#10b981">
  The narrow scope is not a limitation it is **central to the security
  posture**.
</Card>

***

## Security Through Design

Accumulate's security model is not based on assumptions about human behavior, market conditions, or external systems.

It is based on:

* Immutable smart contracts
* Limited, explicit permissions
* Full transparency and verifiability
* Narrow scope and simple rules
* Minimal external dependencies