Protocol Token Printing Permissions

Contract allowing multiple independent debt auction houses to print protocol tokens

1. Summary

GebPrintingPermissions allows governance to whitelist multiple independent GEBs to print the same protocol token. It imposes delays for adding and removing permissions and it can also allow specific systems to print tokens indefinitely.

2. Contract Variables & Functions

Variables

• authorizedAccounts[usr: address] - addresses allowed to cover or uncover systems

• allowedSystems[system: address] - data about a system that is allowed to print protocol tokens

• usedAuctionHouses[house: address] - mapping that shows whether a DebtAuctionHouse is allowed to print tokens or not

• unrevokableRightsCooldown - minimum time (in seconds) after which as system will have indefinite permission to print protocol tokens

• denyRightsCooldown - cooldown that must pass between calling startUncoverSystem and endUncoverSystem

• addRightsCooldown - cooldown for quickly removing cover from a freshly added system

• coveredSystems - the current number of systems covered by the protocol token

• protocolTokenAuthority - the authority contract dictating who can print tokens

• AUCTION_HOUSE_TYPE - debt auction house identifier

Data Structures

• SystemRights - struct that stores data about each AccountingEngine (system). Contains:

  • covered - whether this system is covered or not

  • revokeRightsDeadline - deadline after which governance can no longer remove printing permissions from the system

  • uncoverCooldownEnd - cooldown after which governance can call endUncoverSystem and uncover this system

  • withdrawAddedRightsDeadline - cooldown during which governance can uncover a system without having to wait until uncoverCooldownEnd passed

  • previousDebtAuctionHouse - the previous DebtAuctionHouse connected to the AccountingEngine

  • currentDebtAuctionHouse - the current DebtAuctionHouse connected to the AccountingEngine

Modifiers

• isAuthorized - checks whether an address is part of authorizedAddresses.

Functions

• addAuthorization(usr: address) - add an address to authorizedAddresses.

• removeAuthorization(usr: address) - remove an address from authorizedAddresses.

• modifyParameters(parameter: bytes32, data: uint256) - modify a uint256 parameter

• giveUpAuthorityRoot() - give up the perinting permission's position of root inside the ProtocolTokenAuthority

• giveUpAuthorityOwnership - give up the perinting permission's position of owner inside the ProtocolTokenAuthority

• coverSystem(accountingEngine: address) - cover a new system / allow the DebtAuctionHouse set inside accountingEngine to print protocol tokens

• startUncoverSystem(accountingEngine: address) - start to uncover a system / withdraw the permission of the previous and current DebtAuctionHouses that were associated with accountingEngine

• abandonUncoverSystem(accountingEngine: address) - abandon the uncovering of a specific system

• endUncoverSystem(accountingEngine: address) - end the uncovering process for a system

• updateCurrentDebtAuctionHouse(accountingEngine: address) - update the currentDebtAuctionHouse of a specific system and set the old current auction house as the

  previousDebtAuctionHouse

• removePreviousDebtAuctionHouse(accountingEngine: address) - remove the permission to print protocol tokens from an accountingEngine's previousDebtAuctionHouse

• proposeIndefinitePrintingPermissions(accountingEngine: address, freezeDelay: uint256) - propose a deadline after which the accountingEngine / system cannot be denied printing permissions

Events

• AddAuthorization - emitted when a new address becomes authorized. Contains:

  • account - the new authorized account

• RemoveAuthorization - emitted when an address is de-authorized. Contains:

  • account - the address that was de-authorized

• ModifyParameters - emitted when a uint256 parameter is updated.

• GiveUpAuthorityRoot - emitted when giveUpAuthorityRoot is called.

• GiveUpAuthorityOwnership - emitted when giveUpAuthorityOwnership is called.

• RevokeDebtAuctionHouses - emitted when both the current and the previous DebtAuctionHouses are denied printing permissions. Contains:

  • accountingEngine - the accounting engine whose debt auction houses are denied permissions

  • currentHouse - the current debt auction house

  • previousHouse - the previous debt auction house

• CoverSystem - emitted when a new system is covered / allowed to print tokens. Contains:

  • accountingEngine - the accounting engine from the system that is being covered

  • debtAuctionHouse - the debt auction house set inside the accountingEngine

  • coveredSystems - the new number of systems being covered

  • withdrawAddedRightsDeadline - the deadline after which governance can no longer quickly uncover a system without calling startUncoverSystem and endUncoverSystem

• StartUncoverSystem - emitted when governance starts to uncover a system. Contains:

  • accountingEngine - the address of the accounting engine whose debt auction houses are uncovered

  • currentDebtAuctionHouse - the current debt auction house connected to the accounting engine

  • previousDebtAuctionHouse - the previous debt auction house that was connected to the accounting engine

  • coveredSystems - the latest amount of covered systems

  • revokeRightsDeadline - the deadline after which governance will not be able to remove this system's printing rights

  • uncoverCooldownEnd - the deadline after which governance can call endUncoverSystem and finish the uncover process

  • withdrawAddedRightsDeadline - cooldown during which governance could have uncovered the system without having to call endUncoverSystem

• AbandonUncoverSystem - emitted when governance abandons the uncover process for a system. Contains:

  • accountingEngine - address of the accounting engine who's no longer being uncovered

• EndUncoverSystem - emitted when the uncovering process is finished. Contains:

  • accountingEngine - the address of the accounting engine whose debt auction houses are denied printing permissions

  • currentHouse - the current debt auction house connected to the accounting engine

  • previousHouse - the previous debt auction house that was connected to the accounting engine

• UpdateCurrentDebtAuctionHouse - emitted when the current debt auction house of an accounting engine is updated. Contains:

  • accountingEngine - the address of the accounting engine whose current debt auction house is updated

  • currentHouse - the address of the new current debt auction house

  • previousHouse - the address of the previous debt auction house

• RemovePreviousDebtAuctionHouse - emitted when the previous debt auction house is removed from a covered system. Contains:

  • accountingEngine - the address of the accounting engine whose previous debt auction house is updated

  • currentHouse - the address of the new current debt auction house

  • previousHouse - the address of the previous debt auction house

• ProposeIndefinitePrintingPermissions - emitted when governance proposes a deadline after which they can no longer remove a system's permission to print tokens. Contains:

  • accountingEngine - the address of the accounting engine that's part of the system which will no longer be denied printing permissions

  • freezeDelay - the delay from the current timestamp after which the system will have indefinite printing permissions

3. Walkthrough

Current and Previous Debt Auction Houses

Inside the printing permissions contract, a system is represented by an AccountingEngine. The AccountingEngine has one debt auction house address in it at any time. That's the currentDebtAuctionHouse although governance may have previously had another auction house that was buggy or had to be upgraded and so the printing permissions keep track of both the currentDebtAuctionHouse and previousDebtAuctionHouse until there's no outstanding auction left in the previousDebtAuctionHouse.

Function Descriptions

coverSystem : checks that the debt auction house associated with that AccountingEngine is not already covered. Updates the withdrawAddedRightsDeadline for that specific AccountingEngine. The deadline makes sure that governance can withdraw cover from the AccountingEngine without the need to wait between startUncoverSystem and endUncoverSystem

startUncoverSystem: it cannot uncover a system if either the current or the previous debt auction house associated with that system have outstanding debt auctions to settle. It cannot uncover a system if that system is already in the process of being uncovered. It can withdraw cover from a system either if there are at least 2 systems covered or, even if there are multiple systems covered, the withdrawAddedRightsDeadline for the system that governance wants to uncover was not passed. It must make sure that at least one system is protected at any time the exception being when all the systems added have not passed their respective withdrawAddedRightsDeadline s

abandonUncoverSystem : it can only abandon the uncover for a system that is in the process of being uncovered.

endUncoverSystem : it must check again that neither the current nor the previous debt auction house has any outstanding auctions left. Similar to startUncoverSystem , it can withdraw cover from a system either if there are at least 2 systems covered or, even if there are multiple systems covered, the withdrawAddedRightsDeadline for the system that governance wants to uncover was not passed (same exception to the rule applies as for startUncoverSystem).

updateCurrentDebtAuctionHouse: it cannot update the currentDebtAuctionHouse if the new auction house is the same as the current one. It also cannot update the current auction house if previousDebtAuctionHouse is non null. It must allow the new auction house to print tokens and set previousDebtAuctionHouse as the last currentDebtAuctionHouse

removePreviousDebtAuctionHouse : it cannot remove the permission of the previousDebtAuctionHouse to print protocol tokens unless there are no outstanding auctions in that auction house.

proposeIndefinitePrintingPermissions : it sets a time after which governance can never remove cover from a specific accounting engine (and thus it's associated debt auction house). updateCurrentDebtAuctionHouse and removePreviousDebtAuctionHouse should still work even if now > allowedSystems[accountingEngine].revokeRightsDeadline