Dara DocsReferenceStellar
Asset Configuration and Creation Review Gate
Some Stellar settings are hard or impossible to change later: the asset code and issuer (identity), clawback on existing trustlines, and AUTH_IMMUTABLE. No asset is created on Testnet or Mainnet until this form is filled in for it and approved by the product owner, plus two staff (PLATFORM_ADMIN + SECURITY_ADMIN). LOCAL/DEMO assets are created by make demo from the same template with demo values.
Template (one per asset per network)
| Field | Value | Changeable later? |
|---|---|---|
| Asset code | No (identity) | |
| Issuer account | No (identity) | |
| Network passphrase | No | |
| Real-world unit (1 token =) | No (it would change what holders own) | |
| Display precision | ≤ 7 | Yes (display only) |
AUTH_REQUIRED | yes (Q-03) | Technically yes; policy: never unset |
AUTH_REVOCABLE | yes (Q-03) | Yes, while not immutable |
AUTH_CLAWBACK_ENABLED | yes (Q-03), set before the first trustline | Only affects trustlines created after the change |
AUTH_IMMUTABLE | no | Setting it is irreversible |
| Issuer signers and weights | Each human signer = 10 (launch: one), AUTH = 1, master 0 (../security/AUTHORITY_MATRIX.md) | Yes, high threshold + procedure |
| Thresholds low/med/high | 1 / 20 / 30 | Yes, high threshold + procedure |
home_domain + stellar.toml | Domain still to be chosen (Q-13) | Yes |
TREASURY_COLD / TREASURY_HOT | Yes (with a migration of inventory) | |
| Future SAC admin contract | no (MVP); allowed later (ASSET_MODEL_EVALUATION.md) | Yes until the issuer is locked |
| Disaster recovery | Signer loss: with three or more signers the others rotate it out; with the launch configuration of one signer a lost key cannot be replaced (accepted risk, ../decisions/OWNER_DECISIONS_20261031.md). Key backup per ../security/KEY_MANAGEMENT.md | — |
Ceremony verification (scripted, read-only, must pass before activation)
- The issuer exists; master weight 0; signers and weights equal the form; thresholds equal the form.
- Flags equal
AUTH_REQUIRED | AUTH_REVOCABLE | AUTH_CLAWBACK_ENABLEDand notAUTH_IMMUTABLE. - Simulation: removing any single signer still leaves each threshold reachable.
- Treasury trustlines exist, are authorized and carry
TRUSTLINE_CLAWBACK_ENABLED. - The asset has no other holder and zero supply before the first issuance.
- Non-local networks: the issuer's
home_domainresolves to ourstellar.toml. Its[[CURRENCIES]]entry matches code, issuer,display_decimalsand unit (SEP-1;STELLAR_ARCHITECTURE.md§3). - No SAC contract balance, liquidity pool or claimable balance exists for the asset.
- The creation transaction hashes are recorded in
ASSET_REGISTRY.md(created when the first non-local asset exists).
GOLD (draft; not approved for Testnet or Mainnet)
| Field | Value |
|---|---|
| Asset code | GOLD (decided 2026-10-31) |
| Unit | 1 GOLD = 1 gram of 750 (18 k) gold (Q-04) |
| Display precision | 3 decimals (mg), proposed |
| Flags | AUTH_REQUIRED, AUTH_REVOCABLE, AUTH_CLAWBACK_ENABLED |
| Signers | One human signer, software key (decided 2026-10-31); the person and key are recorded at the ceremony |