Governance in institutional DeFi: curator, guardian, sentinel, allocator
Governance in institutional DeFi: curator, guardian, sentinel, allocator
"Decentralized" doesn't mean "nobody's in charge." Serious institutional DeFi structures assign specific, bounded powers to specific roles, and separating those roles is what prevents any single party from having enough authority to compromise the whole system. Four roles recur across well-designed protocols: curator, guardian, sentinel, and allocator.
How it works
The curator sets strategy. In a vault context, the curator decides which markets the vault will lend into, what risk parameters to apply, and how capital should be allocated across options. The curator holds the most consequential ongoing decision-making power over how the structure actually behaves, which is exactly why the role is bounded by on-chain constraints (caps, whitelists) rather than given unlimited discretion.
The guardian is the safety brake. A guardian typically holds the power to pause, veto, or block certain actions, but not to unilaterally direct strategy. If a curator proposes something dangerous, or if an emergency requires halting activity, the guardian can stop it. The guardian's power is deliberately negative, the ability to prevent, not to command, so that it acts as a check on the curator without becoming a second point of unchecked control.
The sentinel is the monitor. A sentinel watches the system for defined risk conditions, oracle anomalies, parameter breaches, unusual activity, and can trigger protective responses when thresholds are crossed. The sentinel's job is detection and rapid response to specific, pre-defined conditions, a narrower and more automated role than the guardian's discretionary veto.
The allocator moves capital within the bounds the curator has set. Where the curator decides the strategy and constraints, the allocator executes the actual capital movements across approved markets, operating inside the guardrails rather than setting them. Separating "who sets the rules" (curator) from "who moves the money within the rules" (allocator) is a classic separation-of-duties control.
Why it matters
Separating these roles is the core defense against concentration of power in a system that handles significant capital. If one party set strategy, moved capital, monitored risk, and held the emergency brake all at once, that party's compromise, whether through a key hack, a rogue insider, or simple error, would compromise everything. Distributing the powers means an attacker or a mistake at any single role is contained by the others.
This role separation is also what makes institutional DeFi legible to the institutions evaluating it. An allocator can look at the governance structure and see exactly who can do what, who checks whom, and where the emergency stops are, rather than trusting an undifferentiated "the team" or "the DAO." That clarity is a prerequisite for institutional capital, which needs to underwrite governance risk as carefully as it underwrites credit risk.
Where this shows up in Rekord
Rekord's governance separates strategy-setting, execution, monitoring, and emergency-veto powers across distinct roles, so that no single party holds enough authority to compromise the platform. For the specific curator role in the vault context, see Morpho Blue, MetaMorpho V2, and the markets-plus-vaults model.