Program governance

Program authority is one of the highest-value Solana control surfaces. Quorum can place upgrade and authority-management workflows behind multisig approval.

What to govern

• Program upgrade authority.
• Buffer authority.
• Emergency pause or admin instructions.
• Validator or oracle configuration instructions.
• Program-owned treasury movements.

Proposal pattern

1. Prepare the program action.
2. Verify program ID, buffer address, spill address, and upgrade authority.
3. Propose the action.
4. Collect approvals, including any required PQ approvals.
5. Execute after timelock.
6. Verify the resulting program state.

CLI-assisted flows

Some program actions require CLI steps outside the app, such as writing a buffer. The app can help prepare or document those steps, but operators should still verify the final program IDs and authorities directly.