Full scenario walkthrough $CNPY
It's 3 AM. A vault you're in gets hacked. You're asleep.
Canopy watches the vaults you hold. Paste your wallet, pick your alarms, arm once. If one fires, your money goes back to your own wallet. Nowhere else.
On @RobinhoodApp Chain. https://t.co/M58kunEM53
Canopy's planned flow can try to convert outputs to USDG within the user's price limits.
If the oracle is stale, USDG is off its peg or execution fails those checks, the design falls back to delivering the underlying tokens.
When a vault is fully lent out, an automated exit cannot withdraw assets that are unavailable.
Canopy's proposed keepers attempt partial exits and retry while an alarm remains live.
The proposed alarms include stablecoin depegs, share price drops, pauses, owner or curator changes and rapid drains.
External exploit reports and some governance changes pass through a watcher process rather than being facts that a contract can independently read.
The specification includes disarming individual positions, disarming all positions and revoking token approvals.
Those controls matter because a permission should remain a decision the user can change.
CanopyFi is being built around this decision:
A fixed owner destination is one boundary, not a guarantee that every intended result can execute.
Soon on @RobinhoodApp.
The exit contract described in the documents is designed to pay the position owner.
Its exit function does not accept an arbitrary recipient chosen by an agent.
What if withdrawals surge?
Canopy Liquidity Stress Lab compares five withdrawal scenarios against idle vault assets. See demand, idle coverage and shortfall, with optional owner withdrawal facts. Save the report without connecting a wallet.
Commit:
https://t.co/5ECYSbbZIL
Different markets can share the same risk.
Canopy Exposure Concentration groups known vault allocations by collateral, oracle and rate model. See shared dependencies, then save the report with its coverage limits.
Commit:
https://t.co/bFhfjqUCrj
An Exit Permission Cannot Create Withdrawal Liquidity
Canopy is building supported-position risk cards and constrained DeFi exits to the owner’s wallet.
Check who signed the evidence.
Canopy Evidence Verifier checks archived watcher bundles against your expected chain, alarm book and signers. Inspect signatures, hashes and validity. A valid signature does not prove the claims.
Commit:
https://t.co/AygTCXvwxU
Exit the position. Convert the outputs if the checks pass.
Canopy's proposed raw-token fallback keeps those steps separate. A failed optional swap is not the same result as nothing being withdrawn.
Funding references, with their source attached.
Canopy Funding Watch shows available rates with their venue and market labels. Save a snapshot without assuming a funding interval or treating it as a guaranteed next payment.
Commit:
https://t.co/bO4iLhbwbR
Know when an agent last signed.
Canopy Agent Liveness checks scoped heartbeats, increasing sequences and expiry. A fresh heartbeat shows recent signing-key activity; it does not prove correct operation or grant control of funds.
Commit:
https://t.co/zw5q5tiaYU
CanopyFi: An Exit Permission Cannot Create Withdrawal Liquidity
A rule is armed and an alarm fires, but the underlying position may release only part of its assets.