Safety Circuit Breakers

AI should never be allowed to operate without a hard stop.

In traditional finance, circuit breakers pause markets when volatility or risk exceeds safe limits. Surf applies the same principle at the execution layer, inside every Smart Vault.

Circuit breakers are deterministic rules that can halt, restrict, or unwind activity when predefined safety conditions are breached.

They exist to protect users from:

  • Protocol failures

  • Liquidity collapses

  • Oracle anomalies

  • Abnormal price movements

  • Exploits or governance attacks

  • Model or data errors

  • Extreme utilisation spikes

  • Unexpected correlation shocks


How Circuit Breakers Work?

Every action proposed by the Surf Agent is continuously evaluated against safety thresholds. If any of the following conditions are triggered, execution is blocked or modified:

1. Venue Health Triggers

Execution halts if:

  • A protocol falls below a security or audit confidence tier

  • Governance changes introduce new risk

  • Admin keys or upgrade paths change unexpectedly

  • Emergency pauses or exploits are reported

2. Liquidity Exit Triggers

Execution halts or exposure is reduced if:

  • Available exit liquidity falls below safe unwind depth

  • Slippage exceeds allowed bounds

  • Pool utilisation approaches stress zones

  • Borrow rates spike beyond stability thresholds

3. Price and Oracle Anomaly Triggers

Execution halts if:

  • Oracle deviation exceeds tolerance bands

  • Cross-venue price feeds diverge abnormally

  • Volatility exceeds stress model limits

4. Portfolio Risk Triggers

Execution halts or reallocates if:

  • Concentration limits are breached

  • Correlation between positions increases tail risk

  • Drawdown velocity exceeds guardrail thresholds

  • Health factor or LTV approaches liquidation zones

5. AI Behavioural Anomaly Triggers

Execution halts if:

  • Proposed actions violate invariant rules

  • Simulation error margins exceed confidence bands

  • Strategy behaviour deviates from historical stability envelopes


Emergency Actions

When a circuit breaker is triggered, Surf can deterministically perform one or more of the following actions, depending on severity:

  • Block new rebalances

  • Freeze exposure increases

  • Gradually unwind positions

  • Route to safest allowlisted venues

  • Shift capital into neutral stable positions

  • Pause all automation and await manual review

  • Enable user-initiated emergency withdrawal paths

All actions remain:

  • Non-custodial

  • Vault-scoped

  • Rule-enforced

  • Fully on-chain verifiable


Why This Matters?

Most DeFi automation systems fail in stress because they optimise first and ask questions later.

Surf is built on the opposite philosophy:

Risk defines the optimisation space. Not the other way around.

The Guardian Layer ensures that:

AI can never override safety. Optimisation can never bypass invariants. Automation can never outrun control.

This is how AI should interact with real money.

Not as an unconstrained trader. But as a proposal engine operating inside hard, auditable, and enforceable safety rails.

Last updated