KVORUM
aaveSource: Aave governance v3 · #432

AGRS (Risk Stewards) migration to Risk Agents

executedJan 13, 2026, 08:05 AM UTCbyF70xf71f…1e02

01Summary

AISummary by Kvorumclaude-haiku-4-5

This proposal migrates Aave's automated risk parameter update infrastructure from the legacy injector system to the new Chaos Risk Agents framework. The migration affects all networks (Arbitrum, Avalanche, Base, BNB, Ethereum, Gnosis, Linea, Optimism, Plasma, Polygon) and includes supply/borrow caps, interest rates, and Pendle collateral parameters. The change improves system maintainability and visibility without altering the actual risk constraints. BGD Labs will be reimbursed 120 LINK from the Collector contract.

Type
protocol addition

Key changes

  • Migrate all automated risk parameter updates from legacy injector middleware to Chaos Risk Agents system across 10 networks(high)
  • Register new agents on AgentHub and configure constrained ranges on RangeValidationModule for supply/borrow caps, interest rates, and Pendle parameters(high)
  • Transfer RISK_ADMIN role from previous injector contracts to new Agent contracts(high)
  • Cancel previous injector automation and register new ones on AgentHub; use Gelato for off-chain automation on Linea, Gnosis, and Plasma(high)
  • Reimburse BGD Labs with 120 LINK from Collector on Ethereum(low)
  • Risk parameter constraints remain unchanged from the previous injector system(medium)

Notable concerns

  • Migration involves multiple contracts and networks; coordination of deployments and configuration required
  • Previous injector automation must be properly cancelled to avoid conflicts
  • System has been audited by Zellic and Hexens, and migration payload reviewed by Certora, but this is a complex cross-chain infrastructure change
ContractsAgentHubRangeValidationModuleACL ManagerRISK_ADMIN role holdersPrevious injector contracts
Generated by Kvorum
model: claude-haiku-4-5
provider: anthropic
profile: anthropic-fast-v1
prompt: v1.0
generated: 2mo ago
Read the description ↗

02Description

1,013 words

Simple Summary

Following the approval of Risk Agents, this proposal migrates all existing injector middleware infra used to perform automated risk updates to the new chaos agents system.

Motivation

Currently, the AGRS, in conjunction with the injector system, is responsible for processing highly constrained risk recommendations for a range of parameters, including supply and borrow caps, interest rates, pendle pt e-mode collateral params, and CAPO values across multiple assets and Aave instances. These updates are executed through the injector middleware, which consumes updates from the chaos risk oracles and injects updates onto the Aave protocol in real-time.

While the existing system has served Aave more than well, several limitations exist:

  • Limited generalization: Almost every Risk Stewards activation requires ad-hoc replication of the entire architecture. This results in meaningful overhead for Aave SPs.
  • Limited infrastructure visibility: Tracking all active Risk Stewards, as well as their covered assets and constraints, can be challenging at times.

The Chaos Risk Agents framework generalizes and modularizes the process of ingesting Risk Oracle data within Aave. It eliminates redundant deployments, centralizes validation logic, and improves visibility across all risk automation layers. The result is a cleaner, more maintainable architecture that allows Aave to expand real-time risk management capabilities, ensuring consistent, verifiable execution of parameter updates.

Specification

All the current automated risk param updates will be migrated from the old injector infra to the chaos-agent system, including the following:

Risk ParamNetwork InstanceConstrains
Supply and Borrow CapsArbitrum, Avalanche, Base, BNB, Gnosis, Optimism, Polygonmax 30% relative change / 3 days
Pendle EMode Collateral ParamEthereumCore, Plasmamax 0.5% absolute change / 3 days for LT, LTV, LB
Pendle Discount RateEthereumCore, Plasmamax 1% absolute change / 2 days
Interest Rate: Base, Slope1, Slope2, uOptimalEthereumPrimemax 3% uOpt, 0.5% base, 0.5% slope1, 5% slope2 absolute change / 1 day
Interest Rate: Slope2EthereumCore, Lineamax 4% absolute change / 8 hours

Whitelisted Assets / Markets configured by agent:

Whitelisted Assets / Markets
Arbitrum Supply / Borrow CapsWETH, USDC, USDT, WBTC, DAI, weETH, ARB, USDC.e, GHO, LINK, wstETH, LUSD, FRAX, rETH, AAVE
Avalanche Supply / Borrow CapsWETHe, USDCe, USDTe, WBTCe, DAIe, LINKe, AAVEe, WAVAX, sAVAX, FRAX, MAI, BTCb, AUSD
Base Supply / Borrow CapsWETH, cbETH, USDC, USDbC, weETH, GHO, wstETH, cbBTC, LBTC, EURC
BNB Supply / Borrow CapsETH, wstETH, BTCB, USDC, USDT, WBNB
Gnosis Supply / Borrow CapsWETH, wstETH, USDCe, sDAI, EURe, GNO
Optimism Supply / Borrow CapsWETH, wstETH, rETH, WBTC, USDC, USDT, OP
Polygon Supply / Borrow CapsWETH, wstETH, WBTC, USDC, USDC.e, USDT, DAI, AAVE, LINK, WPOL
EthereumCore Pendle EMode CollateralEMode Ids: 8, 9, 10, 12, 13, 14, 17, 18, 19, 20, 24, 25, 27, 28, 29, 30, 31, 32
Plasma Pendle EMode CollateralEMode Ids: 5, 6, 7, 8, 13, 14, 15, 16
EthereumCore Pendle Discount RatePT_sUSDe_31JUL25, PT_USDe_31JUL25, PT_eUSDe_14AUG25, PT_sUSDe_25SEP25, PT_USDe_25SEP25, PT_sUSDe_27NOV25, PT_USDe_27NOV25, PT_sUSDe_5FEB26, PT_USDe_5FEB26
Plasma Pendle Discount RatePT_sUSDe_15JAN26, PT_USDe_15JAN26, PT_sUSDE_9APR26, PT_USDE_9APR26
EthereumPrime Interest RateWETH
EthereumCore Slope2 Interest RateWETH, USDC, USDT, USDe
Linea Slope2 Interest RateWETH, USDC, USDT

Please note: The whitelisted assets and the constraints are the same as previously on the AGRS injector infra. This proposal only migrates the existing automated AGRS system using injector infrastructure; there is no change to the manual AGRS system, and updates on it using the new infra will be applied at a different AIP.

The risk agent contracts have not been pre-configured during deployment, and all operations, will be done on the payload:

  • Register new agents on the AgentHub contract by calling registerAgent()
  • Configure constrained ranges on the RangeValidationModule to strictly bound the risk param update from the Chaos Risk Oracle.
  • Give RISK_ADMIN role to the AgentContract which will be called by the Chaos Agent system to inject updates onto the Aave protocol.
  • Revoke RISK_ADMIN role from the previous injector contracts, as this system will be unused.
  • Cancel previous injector automation and register new ones on the AgentHub Automation wrapper contract. This is done only on networks where we use Chainlink automation, on Linea, Gnosis, and Plasma networks, this will be done off-chain using the DAO account on Gelato automation.
  • Reimburse BGD Labs with 120 LINK by withdrawing aLINK from Collector on Ethereum, which was used to fund chainlink automation on BNB, Base networks as Collector did not have LINK on those networks.

All configurations used on the proposal payload could be found on the AgentConfigLib.

More detailed specifications can be found on the chaos-agents-migration repo.

Security

Chaos Risk Agent contracts is independently audited by Zellic and Hexens. In addition, the migration proposal payload and setup has been reviewed by Certora.

Permissions

Detailed permissions post payload execution of the Chaos Risk Agent could be found on the permissions-book, but to summarize (for all networks):

RoleEntity
AgentHub OwnerGovernance Executor Lvl 1
AgentHub ProxyAdmin ownerGovernance Executor Lvl 1
Agent AdminGovernance Executor Lvl 1
RangeValidationModule Config UpdateGovernance Executor Lvl 1
RISK_ADMIN on ACL ManagerEach Agent contract

Addresses

All Agents Hub addresses per network can be found on Aave Address Book.

References

Copyright

Copyright and related rights waived via CC0.

03Mismatch analysis

AIMismatch analysis by Kvorumlow confidenceclaude-sonnet-5
Consistent

The proposal description is highly detailed, listing many specific on-chain operations (agent registration, RangeValidationModule configuration, RISK_ADMIN role grants/revocations, automation cancellation/re-registration, and a 120 LINK reimbursement) across 11 networks. However, the decoded calldata only shows three generic execute() fallback calls to three distinct Ethereum-mainnet addresses, with no decoded internal function calls, parameters, or cross-chain dispatch details. This pattern is consistent with Aave's standard governance architecture, where a mainnet vote triggers execution of payload contracts (and potentially cross-chain messages to bridge executors on other networks) that are not unpacked in this trace. Given the opacity of the calldata (three thin proxy/delegatecall wrappers), it is not possible to verify specific claims such as the exact LINK amount, role assignments, or per-network parameter constraints against the actual bytecode-level actions. No contradictions were found between the visible calldata and the description, but the low level of decoded detail means confidence in a full comparison is low. No discrepancies are flagged because there is no concrete evidence of mismatch — only insufficient visibility to confirm every granular claim in the description. This should not be read as a red flag against the proposal itself, but as a limitation of the decoding depth in the data provided for review.

Generated by Kvorum
model: claude-sonnet-5
provider: anthropic
profile: anthropic-strong-v1
prompt: v1.0
generated: 2mo ago
Review the decoded actions ↗

04Actions

3 total
#0fallback()chain 0x1
Target
0xffc3…b0ec
Value
0 wei
Function
fallback()
Arguments
{}
Calldata
#1fallback()chain 0x1
Target
0x8da7…0f6b
Value
0 wei
Function
fallback()
Arguments
{}
Calldata
#2fallback()chain 0x1
Target
0x90bb…90b8
Value
0 wei
Function
fallback()
Arguments
{}
Calldata

05Tally

Summed from votes

Voters57
VP participating414.8K
Outcome (current)For
Current support100%

06Voters

57 total
Filter:
VoterChoice% of totalRationale
EZezr3al.eth0x8659…7d0eFor160.4K38.67%—10mo ago
8B0x8b37…2a22For74.3K17.91%—10mo ago
2C0x2cc1…4df1For67.4K16.25%—10mo ago
B90xb933…8dd1For42.2K10.18%—10mo ago
EC0xecc2…6ac9For25K6.02%—10mo ago
3D0x3ddc…05b0For20.1K4.85%—10mo ago
7A0x7ae1…e585For10K2.41%—10mo ago
070x0703…961bFor10K2.41%—10mo ago
3E0x3e32…c4d0For2.9K0.70%—10mo ago
480x48e5…6430For2K0.49%—10mo ago
A50xa54f…0f31For150.80.04%—10mo ago
C80xc80a…aa1cFor150.40.04%—10mo ago
440x4444…34b3For122.20.03%—10mo ago
E30xe325…c9bfFor9.20.00%—10mo ago
460x4678…6082For60.00%—10mo ago
F80xf843…1de0For20.00%—10mo ago
010x0151…c3b9For1.20.00%—10mo ago
C50xc554…7759For10.00%—10mo ago
010x019e…2ee3For0.30.00%—10mo ago
290x29bc…d91dFor0.20.00%—10mo ago
810x8136…df3bFor0.20.00%—10mo ago
9E0x9ee0…b77cFor0.10.00%—10mo ago
160x168f…7400For0.10.00%—10mo ago
000x00b9…9787For0.10.00%—10mo ago
260x266e…9cc0For0.10.00%—10mo ago
A90xa97c…ccc8For00.00%—10mo ago
2F0x2f2f…f78aFor00.00%—10mo ago
5A0x5a3d…d2efFor00.00%—10mo ago
790x7913…a745For00.00%—10mo ago
980x986b…1174For00.00%—10mo ago
700x701f…2f2cFor00.00%—10mo ago
400x409e…04bdFor00.00%—10mo ago
700x7008…1be2For00.00%—10mo ago
640x6441…7c65For00.00%—10mo ago
4D0x4d4a…1bdfFor00.00%—10mo ago
170x1724…bdd5For00.00%—10mo ago
930x93d8…c1ebFor00.00%—10mo ago
BE0xbea7…b718For00.00%—10mo ago
D30xd3df…954bFor00.00%—10mo ago
D10xd17f…4569For00.00%—10mo ago
2E0x2eb3…c80dFor00.00%—10mo ago
090x0943…3d7dFor00.00%—10mo ago
D20xd2dd…ca86For00.00%—10mo ago
910x91f6…9bd6For00.00%—10mo ago
500x50bf…cacaFor00.00%—10mo ago
030x039d…837aFor00.00%—10mo ago
BF0xbfd7…e5efFor00.00%—10mo ago
730x736d…fa18For00.00%—10mo ago
D30xd311…8529For00.00%—10mo ago
690x69e2…f4c2For00.00%—10mo ago
Showing 50

07Forum

No forum thread is confidently linked to this proposal.