Skip to main content
Use the Strategy Canvas to configure rule-based operations and approved read integrations to monitor their outcomes.

Authentication for Automation

SuperformOS uses a browser session through its backend-for-frontend (BFF). Headless access requires an approved endpoint, identity, vault scope, credential lifecycle, and rate policy from the Superform team. Upstream service credentials are not self-service curator keys. See Authentication.

Safety Principles

Automation can change live vault configuration within its granted permissions. Keep monitoring separate from remediation and authorize each write workflow explicitly.

Test in an Isolated Environment

Use a separately authorized test environment. Base is mainnet, not a sandbox.

Rate Limit Polling

Agree polling limits with the integration owner. Use request timeouts, bounded backoff, and non-overlapping polls; faster collection does not make upstream observations fresher.

Circuit Breakers

Stop automated writes when required reads fail or telemetry becomes unknown. Alert on the collection failure rather than substituting healthy values.

Validate Before Writing

Before pushing strategy or configuration changes:
  1. Fetch current state and version.
  2. Validate the proposed change, permissions, and execution prerequisites.
  3. Confirm yield-source whitelisting and hook authorization.
  4. Apply only the approved change.
  5. Re-fetch the exact target; for onchain changes, also verify the receipt and resulting contract state.
A timed-out write may have applied. Inspect current state before retrying.

Example: Strategy-Driven Vault Monitoring

  1. Read the vault and service state through the approved integration.
  2. Validate response shape, units, and observation age before evaluating PPS, pause status, or service health.
  3. Report missing, stale, or invalid telemetry as UNKNOWN, not healthy.
  4. Investigate alerts against Intent History before taking a separately authorized action.
See Monitoring for the fields and checks.

Next Steps

Monitoring

Poll vault state and build alert conditions.

Webhooks

Notification delivery and audit collection.