> For the complete documentation index, see [llms.txt](https://docs.tigris.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tigris.global/core-roles.md). # Core Roles ## Curator The curator is the vault's risk manager: what markets the vault holds, under what parameters it runs, and how its risks are controlled are all the curator's responsibility — and it is here that users' trust is chiefly placed. Becoming a curator requires no one's approval, only a sufficient bond: anyone who stakes enough sSOSO with the protocol automatically qualifies as a curator. Each vault's curator is then appointed by the vault's owner from among the qualified addresses. Ordinary users may delegate sSOSO to curators they trust, adding weight to a curator's credit and sharing part of the management-fee income from the vaults that curator manages. A curator's duties span three fronts: * **Assets**: reviewing an asset's qualification — whether the issuer is credible, NAV reporting is truthful, the token is backed by real assets, and the cross-chain bridge is reliable. * **Parameters**: exercising vault governance — changes to fees, subscription and redemption parameters, and operator appointments are initiated by the curator and take effect through the timelock. * **Emergencies**: pausing the vault, and revoking scheduled changes that have not yet executed. In addition, curators who meet ValueChain's validator requirements may simultaneously serve as validators of the chain itself, participating in consensus — the protocol's risk management and the chain's consensus security thereby share a single trust layer. ## Executor The executor is a service provider that connects asset holders to the Tigris protocol. Its job is to monitor the markets for demand for exposure to a given asset, source and obtain that asset's tokens on ValueChain, and deposit them into the corresponding market contract — satisfying the vaults' demand for exposure to that market's asset. ## Team Signers The team signers are the protocol's key role in verifying asset truthfulness. Off-chain, they check and sign the vault's fulfillment and settlement parameters, NAV reports, delayed-redemption settlements, oracle prices, and other critical data — forming, beyond the curator and the oracle, a third line of gatekeeping for assets. Only transactions and reports carrying their signatures are accepted by the vault and market contracts. The signer role itself is institutionally protected: membership changes are managed by a dedicated signature-verification contract, and the changes are themselves timelocked — securing the signer set against silent replacement. ## Sentinel The sentinel can change no parameter and touch no funds, yet holds the right to veto any pending change to a vault or market. Execution and oversight are thereby separated — even if the curator itself is compromised, vaults and markets retain a final line of defense.