Strategy Layer

pub struct RwtVaultStrategyConfig {
    // — Asset universe —
    pub allowed_ot_mints: Vec<Pubkey>,            // whitelist of OTs the vault may acquire
    pub allowed_swap_venues: Vec<Pubkey>,         // DEX pool addresses agents may route through

    // — Allocation bounds —
    pub max_alloc_per_ot_bps: u16,                // single-OT concentration cap (e.g., 2500 = 25%)
    pub max_total_ot_exposure_bps: u16,           // aggregate OT vs reserve (e.g., 8000 = 80%)
    pub min_reserve_usdc_bps: u16,                // liquid USDC floor (e.g., 1000 = 10%)

    // — Execution envelopes —
    pub max_daily_swap_volume_usdc: u64,          // per-day circuit breaker (denominated in USDC)
    pub max_single_swap_volume_usdc: u64,         // per-tx cap
    pub max_slippage_bps: u16,                    // per-trade slippage tolerance

    // — Rebalance triggers —
    pub rebalance_deviation_bps: u16,             // minimum allocation drift before acting
    pub rebalance_cooldown_secs: u32,             // minimum gap between consecutive rebalances

    // — Yield distribution —
    pub yield_split: YieldSplit {
        book_value_bps: u16,                      // default 7000 → NAV growth
        arl_treasury_bps: u16,                    // default 1500
        nexus_bps: u16,                           // default 1500
    },

    // — Safety —
    pub kill_switch_active: bool,                 // when true, all mutating agent actions revert
    pub last_config_update_ts: i64,               // block time of most recent applied update
    pub config_version: u64,                      // monotonic counter
    pub timelock_tier: Tier,                      // Operational | Critical — determines next unlock time
    pub pending_update_unlock_ts: Option<i64>,    // if set, agents see old config until this ts
    pub bump: u8,
}

pub struct NexusStrategyConfig {
    pub master_pool_funding_priority: Vec<Pubkey>,   // ordered list: which master pool fills first
    pub max_active_zone_width: u16,                  // cap on ACTIVE_ZONE_WIDTH for grow_liquidity
    pub min_nexus_usdc_reserve_bps: u16,             // never deploy below this floor
    pub geometric_density_r_bps: u16,                // current r parameter (default 8500 = 0.85)
    pub permanent_tail_refill_enabled: bool,         // whether governance allows topping up the tail
    pub kill_switch_active: bool,
    pub config_version: u64,
    // ... same metadata fields as above
}

pub struct TreasuryStrategyConfig {
    pub allowed_ot_holdings: Vec<Pubkey>,            // OTs the Treasury may accumulate independently of RWT Vault
    pub max_treasury_ot_exposure_bps: u16,
    pub runway_months_minimum: u8,                   // reserve USDC sufficient for N months of ops
    pub allowed_third_party_venues: Vec<Pubkey>,
    pub kill_switch_active: bool,
    pub config_version: u64,
    // ... same metadata fields as above
}

┌──────────────────┐
│  1. Proposal     │  ARL holder submits StrategyUpdate proposal referencing
│     submission   │  current StrategyConfig version and requested deltas
└──────────────────┘
         │
         ▼
┌──────────────────┐
│  2. Conditional  │  Two markets open: pass-ARL and fail-ARL
│     markets open │  Both receive equal bootstrap liquidity from Treasury
└──────────────────┘
         │
         ▼
┌──────────────────┐
│  3. Trading      │  Participants trade on expected token value under each outcome
│     period       │  Duration: 72 hours (operational) / 168 hours (critical)
└──────────────────┘
         │
         ▼
┌──────────────────┐
│  4. TWAP         │  Time-weighted average prices compared at window close
│     resolution   │  If pass-TWAP > fail-TWAP + epsilon: proposal passes
└──────────────────┘
         │
         ▼
┌──────────────────┐
│  5. Timelock     │  Pending config written on-chain with unlock_ts
│     window       │  Agents continue reading old config during window
└──────────────────┘
         │
         ▼
┌──────────────────┐
│  6. Apply        │  At unlock_ts, anyone can permissionlessly call
│     (permission- │  apply_strategy_update — new config becomes live
│      less crank) │  config_version increments; events emitted
└──────────────────┘