Technical Security Policy & Infrastructure Architecture

Key operational guarantees

• Zero Asset Transfer

  Delegating SOL to SvitLab creates a cryptographic association via Stake Program instructions without transferring token ownership. Delegated SOL remains inside the delegator's wallet control at all times.

• Immutability of Funds

  SvitLab has zero administrative or protocol authority to move, lock, spend, or transfer delegated stake.

• Downtime Isolation

  In any scenario involving validator hardware fault, software failure, or extended network downtime, delegator funds are unaffected and cannot be slashed or forfeited. Delegators retain the unilateral right to deactivate or redelegate their stake at any epoch boundary without requiring permission or intervention from SvitLab.

Delegation types supported

• Native staking

  Direct delegation to SvitLab's vote account via native Solana stake accounts.

• Liquid staking

  Integration with verified liquidity pools (JPool, SolBlaze, Vault) managed by audited, on-chain smart contracts.

Key management breakdown

• Validator Identity Key

  Used solely for p2p networking, transaction broadcasting, and block signing. Stored with strict file permissions on isolated host storage and loaded securely into system memory.

• Vote Account Key

  Dedicated solely to signing consensus votes on-chain. Isolated from all financial transfer privileges.

• Authorized Withdrawer & Commission Authority

  Kept 100% offline in air-gapped cold hardware storage (Ledger / Hardware Security Modules). Never loaded onto validator hardware, cloud servers, or connected environments. Ensures that even in the theoretical event of a full host-level compromise, an attacker cannot alter validator settings, hijack rewards, or modify authority structures.

Infrastructure specifications

• Bare Metal Deployment

  Enterprise-grade physical hardware without virtualization overhead, ensuring deterministic I/O performance and low-latency transaction processing.

• DoubleZero & Specialized Routing

  Integrated with DoubleZero high-speed networking and optimized fiber routes to reduce block propagation latency and minimize skipped slot rates.

• AgaveBam Client & MEV Optimization

  Powered by the AgaveBam client, enabling direct MEV-aware block production and bundle processing. Integrated filtering policies help reduce toxic sandwiching in routed transactions, safeguarding network flow while preserving standard security guarantees for delegated stake.

• DDoS & Traffic Isolation

  Strict firewall rules (iptables / hardware-level filtering) restricting inbound RPC noise and public gossip overload. Isolated QUIC and TPU endpoints ensure uninterrupted transaction flow during network congestion.

• Redundancy & Failover

  Secondary bare-metal failover nodes maintained in warm standby mode across geodistributed tier-3+ datacenters. Automated monitoring prevents dual-signing scenarios while allowing rapid manual migration in disaster scenarios.

• 24/7 Monitoring & Alerting

  Proprietary telemetry pipeline monitoring node health, catch-up status, memory usage, CPU load, disk I/O, and consensus vote latency in real time. Multi-channel automated alerting triggers immediately upon minor metric deviations.

• Software Update & Patching Protocol

  Timely adoption of official stable release channels published by the Solana Foundation and core engineers. Staged deployment process: software builds are thoroughly tested on testnet and devnet environments before mainnet production upgrades.

• Next-Gen Protocol Testing

  SvitLab actively participates in testing next-generation protocol upgrades, including Solana's Alpenglow consensus on dedicated, air-gapped test networks. Testnet operations use entirely isolated keypairs and hardware, guaranteeing zero operational impact on mainnet stakers.