Demo on a mainnet fork: the real Upside program, the real Voltr and Phoenix programs, live Phoenix prices; only the USDC is test money. Nothing here is real money. What that means
upside

Transparency

uUS100Live

What backs the token, where the keeper’s lines are, and every action it has taken. Read straight from the keeper’s own records.

Last snapshot 8 s ago
Leverage bandin band
Leverage 2.88xband 2.7–3.3x · hard delever 4x
2.88x
uUS100 realised leverage 2.88x; realised leverage = notional ÷ NAV; the keeper rebalances outside the band
2.70x3.00x3.30x4.00x
Venue equity / notionalbetween floor and ceiling
Margin 18.1% of notionalfloor 12.5% · target 17.5% · ceiling 22.5%
18.1%
uUS100 equity / notional 18.1%; venue equity ÷ notional; top-up below the floor, withdraw above the ceiling, liquidation at the venue's maintenance
12.5%17.5%22.5%12.5%

Action ladder

At what underlying move does each keeper action fire, from the latest snapshot and this token's policy.

external index
−14%
−9%
−5%
+5%
+9%
+14%
$592.52
$614.39
$660.26
$661.10
$731.81
$745.43
$705.63
If the price falls
  1. Band edge 3.30x−6.3% · $661.10
    Rebalance down to target (any hour)
  2. Margin floor 12.5% of notional−6.4% · $660.26
    Top up collateral from idle
  3. Hard delever 4.00x−12.9% · $614.39
    Emergency delever to target, market order
  4. Liquidation (est.)−16.0% · $592.52
    Phoenix liquidates the account; the stop and top-ups sit well before this
If the price rises
  1. Band edge 2.70x+3.7% · $731.81
    Rebalance up to target (external session only)
  2. Margin ceiling 22.5% of notional+5.6% · $745.43
    Withdraw excess collateral to idle

Computed from realised leverage 2.882x and venue equity at 18.1% of notional at mark $705.63, holding everything else fixed. Margin distances follow this token's own policy: lower tiers post more collateral, so a 2x token has further to fall than a 3x one (D27). Liquidation is where equity reaches the 2.5% maintenance margin Phoenix requires on notional (registry value, Q13); the on-chain stop and the keeper's top-ups are designed to act well before it. Estimates for reading, not for trading.

Leverage over time

Realised leverage against the band, the target and the hard-delever line. Markers are keeper actions; hover for reason, before/after and fill.

Realised leverageBand 2.7x3.3xHard delever 4.0xRebalanceEmergency delever

Margin over time

Venue equity (collateral plus unrealised PnL) as a share of notional, against the floor, target and ceiling. Distances do not depend on leverage. Top-ups and withdrawals are the keeper's margin loop; the stop is refreshed after every rebalance.

Venue equity / notionalFloor 12.5% – ceiling 22.5%Top-upWithdraw excessStop set

Buffers and capacity

Idle USDC pays instant redemptions and Jupiter sells; collateral sits at Phoenix; the cap bounds TVL against Phoenix depth.

Idle USDC in vault2,375 of 4,976 USDC · 47.7%
Collateral at Phoenix (share of NAV)2,620 USDC · equity 18.1% of notional
Pending redemptionsnone
Cap used$4,975.85 of $250.0K
LP supply
5,000 uUS100
Token price
0.995169 USDC
Unrealised PnL
−19.78 USDC
Funding (annualised)

Session

How the underlying is being priced right now.

external indexExternal index live

The underlying exchange is open. Phoenix marks track the external index, and the keeper cranks NAV every 20–30 s. Expansion and defensive rebalances both run.

Mark
$705.63
Index
$705.53
Pool price
no pool
Premium to NAV
Realised vs target
2.882x / 3.0x

Keeper liveness

Heartbeats, halted flag and per-loop status. Two keepers on different RPCs are the target.

  • keeper-stagingv0.1.0 · surfpool#0 · heartbeat 6 s ago
    stream dGOLD:band dGOLD:stop dGOLD:tick dMSTR:band dMSTR:stop dMSTR:tick uGOLD:band uGOLD:stop uGOLD:tick uMSTR:band uMSTR:stop uMSTR:tick dGOLD:crank dGOLD:guard dMSTR:crank dMSTR:guard dUS100:band dUS100:stop dUS100:tick dUS500:band dUS500:stop dUS500:tick uGOLD:crank uGOLD:guard uMSTR:crank uMSTR:guard uUS100:band uUS100:stop uUS100:tick uUS500:band uUS500:stop uUS500:tick dGOLD:inflow dGOLD:margin dGOLD:redeem dMSTR:inflow dMSTR:margin dMSTR:redeem dUS100:crank dUS100:guard dUS500:crank dUS500:guard dWTIOIL:band dWTIOIL:stop dWTIOIL:tick uGOLD:inflow uGOLD:margin uGOLD:redeem uMSTR:inflow uMSTR:margin uMSTR:redeem uUS100:crank uUS100:guard uUS500:crank uUS500:guard uWTIOIL:band uWTIOIL:stop uWTIOIL:tick dGOLD:harvest dMSTR:harvest dUS100:inflow dUS100:margin dUS100:redeem dUS500:inflow dUS500:margin dUS500:redeem dWTIOIL:crank dWTIOIL:guard uGOLD:harvest ✗ 1uMSTR:harvest ✗ 1uUS100:inflow uUS100:margin uUS100:redeem uUS500:inflow uUS500:margin uUS500:redeem uWTIOIL:crank uWTIOIL:guard dUS100:harvest ✗ 1dUS500:harvest ✗ 1dWTIOIL:inflow dWTIOIL:margin dWTIOIL:redeem uUS100:harvest ✗ 1uUS500:harvest ✗ 1uWTIOIL:inflow uWTIOIL:margin uWTIOIL:redeem dWTIOIL:harvest ✗ 1uWTIOIL:harvest

Alerts · 1 open

Raised by the keeper, resolved when the condition clears.

  • warning
    TICK_FAILED · uUS10015 Sep 14:42 UTC
    uUS100: tick failed: fetch failed
  • warning
    CRANK_STALE · uUS10015 Sep 15:26 UTC → resolved 3 min ago
    uUS100: last crank 103s ago during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 15:24 UTC → resolved 6 min ago
    uUS100: last crank never during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 15:19 UTC → resolved 11 min ago
    uUS100: last crank never during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 15:13 UTC → resolved 17 min ago
    uUS100: last crank never during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 14:58 UTC → resolved 19 min ago
    uUS100: last crank never during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 14:15 UTC → resolved 55 min ago
    uUS100: last crank 209s ago during an external session
  • warning
    CRANK_STALE · uUS10015 Sep 14:03 UTC → resolved 1.4 h ago
    uUS100: last crank never during an external session

Event log

Every action planned, sent or observed for this token, newest first.

TimeKindStatusReasonLeverageAmountFill / markSlipTx
15 Sep 15:30 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —9bUm…Lp5d
15 Sep 15:30 UTCCrankconfirmedcrank: receipt 75s old, session external2.88x → —5cEi…pyYh
15 Sep 15:30 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:29 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:29 UTCCrankconfirmedcrank: receipt 15s old, session external2.88x → —4uXH…WPx9
15 Sep 15:29 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —2XGp…Wg1a
15 Sep 15:29 UTCCrankconfirmedcrank: receipt 74s old, session external2.88x → —2pxd…CuWT
15 Sep 15:28 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:28 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:28 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —3zLA…eZpb
15 Sep 15:27 UTCCrankconfirmedcrank: receipt 194s old, session external2.88x → —4zEP…2xRY
15 Sep 15:27 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:27 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:26 UTCCrankconfirmedcrank: receipt 133s old, session external2.88x → —XvgK…Em3T
15 Sep 15:26 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:26 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:25 UTCCrankconfirmedcrank: receipt 74s old, session external2.88x → —43tY…Rkek
15 Sep 15:25 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:25 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:24 UTCCrankconfirmedcrank: receipt 13s old, session external2.88x → —3Mrz…6fdf
15 Sep 15:24 UTCCrankconfirmedcrank: receipt 11s old, session external2.88x → —2GSg…sAPP
15 Sep 15:24 UTCCrankconfirmedfirst crank for uUS1002.88x → —3TNU…xWTY
15 Sep 15:24 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:23 UTCCrankfailedfork compacted before this transaction confirmed2.88x → —
15 Sep 15:23 UTCCrankconfirmedcrank: receipt 22s old, session external2.88x → —kNeS…XwCD
15 Sep 15:23 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:23 UTCCrankconfirmedcrank: receipt 20s old, session external2.88x → —2djV…PAW9
15 Sep 15:22 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —vyJH…weyg
15 Sep 15:22 UTCCrankconfirmedcrank: receipt 17s old, session external2.89x → —3hsc…hULi
15 Sep 15:22 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:22 UTCCrankconfirmedcrank: receipt 17s old, session external2.89x → —4Biw…n9S3
15 Sep 15:21 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —66z1…MqzU
15 Sep 15:21 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —2iQf…kPba
15 Sep 15:21 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —iHdR…5h8f
15 Sep 15:21 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:21 UTCCrankconfirmedcrank: receipt 12s old, session external2.88x → —4jus…BoWc
15 Sep 15:20 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —4jpt…DCZj
15 Sep 15:20 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —5NFD…NyMi
15 Sep 15:20 UTCCrankconfirmedfirst crank for uUS1002.88x → —4eeL…K1F4
15 Sep 15:20 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:19 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.88x → —
15 Sep 15:19 UTCCrankconfirmedfirst crank for uUS1002.88x → —4Nrn…F1hq
15 Sep 15:19 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:18 UTCCrankconfirmedcrank: receipt 21s old, session external2.88x → —5X9d…AoK9
15 Sep 15:18 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:18 UTCCrankconfirmedcrank: receipt 20s old, session external2.88x → —CUCB…TMHx
15 Sep 15:17 UTCCrankconfirmedcrank: receipt 21s old, session external2.88x → —4B2w…cfLb
15 Sep 15:17 UTCCrankconfirmedcrank: receipt 24s old, session external2.88x → —4xmz…uC8D
15 Sep 15:17 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:17 UTCCrankconfirmedcrank: receipt 22s old, session external2.88x → —4Tvv…SXwq
15 Sep 15:16 UTCCrankconfirmedcrank: receipt 22s old, session external2.88x → —4hJj…DB3U
15 Sep 15:16 UTCCrankconfirmedcrank: receipt 21s old, session external2.88x → —4piJ…uLrD
15 Sep 15:16 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:15 UTCCrankconfirmedcrank: receipt 20s old, session external2.88x → —3awD…sgjZ
15 Sep 15:15 UTCCrankconfirmedcrank: receipt 20s old, session external2.89x → —4HDX…habX
15 Sep 15:15 UTCCrankconfirmedcrank: receipt 20s old, session external2.89x → —35xt…qspN
15 Sep 15:15 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:14 UTCCrankconfirmedcrank: receipt 17s old, session external2.89x → —rhgH…Find
15 Sep 15:14 UTCCrankconfirmedcrank: receipt 28s old, session external2.89x → —2G9z…mbzz
15 Sep 15:13 UTCCrankconfirmedfirst crank for uUS1002.89x → —4F8S…wpfw
15 Sep 15:13 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:13 UTCCrankconfirmedcrank: receipt 22s old, session external2.89x → —4DCC…3Wo5
15 Sep 15:13 UTCCrankconfirmedcrank: receipt 19s old, session external2.89x → —5VB3…LFvw
15 Sep 15:12 UTCCrankconfirmedcrank: receipt 15s old, session external2.89x → —x7Yr…vYss
15 Sep 15:12 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:12 UTCCrankconfirmedcrank: receipt 15s old, session external2.89x → —39sg…6Gy7
15 Sep 15:12 UTCCrankconfirmedcrank: receipt 14s old, session external2.89x → —FHcX…1oD9
15 Sep 15:11 UTCCrankconfirmedcrank: receipt 19s old, session external2.89x → —3zp5…SDKK
15 Sep 15:11 UTCCrankconfirmedfirst crank for uUS1002.88x → —4imp…MKLK
15 Sep 15:11 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:09 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:08 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:07 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:06 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:05 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 15:05 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 15:04 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 15:04 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:04 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:03 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:02 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 15:01 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:59 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:59 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 14:59 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 14:58 UTCCrankfailedsimulation failed for crank: "InvalidProgramForExecution" :: 2.88x → —
15 Sep 14:58 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:39 UTCCrankconfirmedcrank: receipt 20s old, session external2.88x → —3CoA…6nCm
15 Sep 14:39 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:38 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —2g3T…aS6Q
15 Sep 14:38 UTCCrankconfirmedcrank: receipt 18s old, session external2.88x → —qSjq…cyQ9
15 Sep 14:37 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —5rRU…KDHp
15 Sep 14:37 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:37 UTCCrankconfirmedcrank: receipt 16s old, session external2.88x → —5kko…Rvwz
15 Sep 14:37 UTCCrankconfirmedcrank: receipt 17s old, session external2.88x → —4eY2…K8Fr
15 Sep 14:36 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —5rck…k7TN
15 Sep 14:36 UTCCrankconfirmedcrank: receipt 15s old, session external2.88x → —4yeh…91Cd
15 Sep 14:36 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:36 UTCCrankconfirmedcrank: receipt 13s old, session external2.88x → —3Nzn…CuWS
15 Sep 14:36 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —3VAh…kEDX
15 Sep 14:35 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —WekD…3CAW
15 Sep 14:35 UTCCrankconfirmedfirst crank for uUS1002.88x → —2RnV…RGJA
15 Sep 14:35 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:25 UTCCrankskippedPrior vault transaction reconciled; read fresh state before replanning2.90x → —
15 Sep 14:25 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:23 UTCCrankconfirmedcrank: receipt 463s old, session external2.89x → —5SzB…62h6
15 Sep 14:23 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:15 UTCCrankconfirmedcrank: receipt 210s old, session external2.89x → —3jdF…9ja9
15 Sep 14:15 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:11 UTCCrankconfirmedcrank: receipt 66s old, session external2.89x → —jJC2…5WAL
15 Sep 14:11 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:10 UTCCrankconfirmedcrank: receipt 36s old, session external2.89x → —5TYu…UWZa
15 Sep 14:09 UTCCrankconfirmedcrank: receipt 31s old, session external2.89x → —58Sq…xcy3
15 Sep 14:09 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:09 UTCCrankconfirmedcrank: receipt 25s old, session external2.89x → —3CTP…BQ8M
15 Sep 14:08 UTCCrankconfirmedcrank: receipt 27s old, session external2.89x → —47sP…L3FV
15 Sep 14:08 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:08 UTCCrankconfirmedcrank: receipt 24s old, session external2.89x → —5uRJ…oyza
15 Sep 14:07 UTCCrankconfirmedcrank: receipt 23s old, session external2.89x → —G5Nf…zoEa
15 Sep 14:07 UTCCrankconfirmedcrank: receipt 21s old, session external2.88x → —5EGG…kwqn
15 Sep 14:07 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:07 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —xEn4…mFF2
15 Sep 14:06 UTCCrankconfirmedcrank: receipt 19s old, session external2.88x → —323z…AbJa
15 Sep 14:06 UTCCrankconfirmedcrank: receipt 18s old, session external2.88x → —5ZTm…WLU8
15 Sep 14:06 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:05 UTCCrankconfirmedcrank: receipt 17s old, session external2.88x → —4mHo…W1ND
15 Sep 14:05 UTCCrankconfirmedcrank: receipt 16s old, session external2.88x → —d21P…kgaq
15 Sep 14:05 UTCCrankconfirmedcrank: receipt 16s old, session external2.88x → —2H4V…SLPZ
15 Sep 14:05 UTCCrankconfirmedcrank: receipt 13s old, session external2.88x → —55Jd…fhCE
15 Sep 14:05 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection
15 Sep 14:04 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —sxX8…eCq8
15 Sep 14:04 UTCCrankconfirmedcrank: receipt 14s old, session external2.88x → —4E3N…A5MP
15 Sep 14:04 UTCCrankconfirmedcrank: receipt 18s old, session external2.88x → —31a3…YNrK
15 Sep 14:03 UTCCrankconfirmedfirst crank for uUS1002.88x → —5quY…6yqs
15 Sep 14:03 UTCCrankskippedstop placement is disabled for this deployment; there is no verified keeper-independent backstop until it can, so keeper uptime is the only protection