References - Vitalik Buterin —– “Credible Neutrality As A Gui… a16z crypto (Miles Jennings) —– “Machiavelli for DAOs,” part …governance/) - a16z crypto —– “Machiavelli for DAOs,” part …zed-governance/) - Liquity —– Governance Free (https://www.…/v2-faq/general) - Uniswap —– Governance Overview (immutabl…ecosystem/governance/overview)

Topic The design school that a…e surface is the smallest one —– shrink what a token vote can …utable code cannot be patched —– a latent bug or a stale param…nce minimization destroys them

Governance minimization is the… be kept as small as possible —– and that for many protocols t…nance so much as anti-surface —– it asks, of each governable k…omeone changes it against you.

The spectrum, from immutable t… contracts with no admin key —– every parameter was fixed at …t genuinely cannot do without.

What governance usually can't … surviving governance tightly —– Liquity V2, for instance, kee…the protocol can survive with.

The trade-off: ossification an…at immutability cannot follow —– the same property that makes … needs to change after launch —– and how much is just a lever waiting to be seized.

How Caper approaches this Mos…tracts but leave their market —– prices, issuance, fees —– under a vote. A caper (/wiki…that every caper trades under.

The spectrum, from immutable t…ld 112m UNI on 1 October 2026.The v2 factory (https://ether…t genuinely cannot do without.

How Caper approaches this Mos…no logic version can violate.”Since a source change on 2 Oct…gration created, and no more).Pricing a trade is still the s…ather than handed to a signer.In the vocabulary of this page…that every caper trades under.

The spectrum, from immutable t…ral types could ever be added. PoolTogether (/wiki/daos/lending/pooltogether) made its V5 core immutable in 2023 and then, in March 2026, had its token holders hand the governance timelock to a contract that can never use it. A step in from the edge is t…t genuinely cannot do without.

How Caper approaches this Mos…o logic version can violate.” The curve’s slope constant CURVE_K is not in that package. It sits in the swappable logic tier beside the fee scheduleSince a source change on 2 October 2026, the slope constant CURVE_K and the reserve integral cumulative_xrd sit in that package too, and the state tier uses them to check every buy and sell itself: assert_reserve in contracts/core/src/caper_dao.rs aborts a trade that would leave the reserve below what the curve says the circulation is worth (a caper that migrated an existing token is allowed the shortfall its migration created, and no more). Pricing a trade is still the swappable logic tier’s job, and a governed UPGRADE propo…try at a fresh logic component carrying its own. So no per-caper majority can…time setter exists on any tier – but the stronger form of the claim, that no proposal type can reprice it at all, is the one that fails: UPGRADE is that proposal type. An UPGRADE can still change the price a trader is quoted, but it can no longer take the reserve below the curve, whether by paying a seller too much or by minting tokens the reserve does not back. The check ships with the next core redeploy: on the core deployed to Stokenet on 25 September, CURVE_K sits in the logic tier and an UPGRADE can reprice the curve outright. What remains governable is …that every caper trades under.

The spectrum, from immutable t… retain a narrow set of levers — most famously, the protocol fee switch (htt…ce/overview) and the treasury —, so the market itself is fixed…cides only revenue and grants. Holders pulled the first of those levers when the UNIfication (https://blog.uniswap.org/unification) proposal passed on 25 December 2025 (https://www.theblock.co/post/383742/uniswap-passes-unification-proposal) , with 125m UNI for and 742 against. It turned protocol fees on, starting with v2 and selected v3 pools on Ethereum, sends them to a mechanism that burns UNI, and burned 100m UNI from the treasury; the burn address held 112m UNI on 1 October 2026. The v2 factory (https://etherscan.io/address/0x5C69bEe701ef814a2B6a3EDD4B1652CB9cc5aA6f#readContract) now names a fee recipient, and still names the Uniswap timelock as the only address that can change it, so the fee stays a parameter each later vote can move. Fully governed protocols such…t genuinely cannot do without.

How Caper approaches this Mos…kets/bonding-curve) is fixed inat the blueprint: the curve constant is a compile-time constant in the contract, and thelayer a member is most exposed to, and the reason is a split between two packages rather than one act of freezing. The curve’s notional cap N is CURVE_CAP, declared is no proposal type and no admin call anywhere in the componentn contracts/common/src/lib.rs and asserted by the state tier on every mint and every migration; that package is published with OwnerRole::None, so its code is immutable on-chain and thate can reprice it. Issuance and redemption follow one immutable formula for the life of the caper, so the thing a memberp is, in the source’s own words, “a structural invariant no logic version can violate.” The curve’s slope constant CURVE_K is not in that package. It sits in the swappable logic tier beside the fee schedule, and a governed UPGRADE proposal in the $CAPER caper points the registry at a fresh logic component carrying its most exposed to — the price at which they can enter and exit — is not something any majority can vote to changown. So no per-caper majority can reprice the price at which its own members enter and exit, and no runtime setter exists on any tier – but the stronger form of the claim, that no proposal type can reprice it at all, is the one that fails: UPGRADE is that proposal type. What remains governable is…han spent down over time: the market is immutable, the governable surfacesurface any per-caper majority governs is theits treasury and nothing more, and escoped to the fiven that surface is scoped to five fixed kindsyped executive kinds – plus, since 5 September 2026, a sixth option kind, DEBATE, which is ranked like the others and can win a tally but executes nothing by construction. It is the mirror of the ossification critique above —: because ano caper never makes its market governable’s own ballot can reach its market, there is no per-caper market-lever for anyone to capture, a… none to lose to a bug either. The one lever that exists is platform-wide, and pulling it takes a proposal in the $CAPER caper that every caper trades under.

How Caper approaches this Mos… – PAYOUT, INVEST, DIVEST and VOTEMETADATA, plus UPGRADE, which the cont… none to lose to a bug either.

How Caper approaches this Mos…ury moves only through a small, fixed set of typed, on-chain proposal paths —– PAYOUT, INVEST, DIVEST and VOTE —, plus UPGRADE, which the contract lets only the $CAPER caper raise – never through arbitrary calld…ven that surface is scoped to three pathfive fixed kinds. It is the mirror of the oss… none to lose to a bug either.

Topic The design school that a…mutable ( Liquity (/wiki/daos/organizations/stablecoins/liquity) V1, Reflexer RAI (/wiki/daos/organizations/stablecoins/reflexer-rai) ) → …ve decentralization (/wiki/daos-governance/concepts/fundamentals/progres…nce minimization destroys them

The theory: credible neutralit… governance-attack (/wiki/daos-governance/concepts/analysis/dao-securit…he attack has nothing to grab.

The spectrum, from immutable t…extreme, Liquity (/wiki/daos/organizations/stablecoins/liquity) shipped …. Reflexer's RAI (/wiki/daos/organizations/stablecoins/reflexer-rai) wen…protocol fee switch (https://docevelopers.uniswap.org/conceptsdocs/ecosystem/governance/overview) and the…t genuinely cannot do without.

What governance usually can't …aps), and treasury (/wiki/daos-governance/concepts/treasury/dao-treasur…ve-decentralization (/wiki/daos-governance/concepts/fundamentals/progres…the protocol can survive with.

The trade-off: ossification an…gh narrowly-scoped (/wiki/daos-governance/concepts/voting/token-weighte… a lever waiting to be seized.

References - Vitalik Buterin…e core, fee switch) (https://docevelopers.uniswap.org/conceptsdocs/ecosystem/governance/overview)

Topic The design school that a protocol's safest governance surface is the smallest one — shrink what a token vote can change, ideally toward nothing Also called Minimal governance, governance-free design, "ungovernance," ossification Core claim Every governable parameter is a permanent, exploitable attack surface; removing the parameter removes the attack Theoretical root Vitalik Buterin's credible neutrality (https://balajis.com/p/credible-neutrality) (2020); named the first of four principles in a16z's “Machiavelli for DAOs” (https://a16zcrypto.com/posts/article/machiavelli-principles-dao-decentralized-governance/) (2024) Spectrum Fully immutable ( Liquity (/wiki/daos/organizations/stablecoins/liquity) V1, Reflexer RAI (/wiki/daos/organizations/stablecoins/reflexer-rai) ) → minimized core + governed periphery (Uniswap) → fully governed (Compound, Aave) Key risk Immutable code cannot be patched — a latent bug or a stale parameter becomes permanent Mirror image Progressive decentralization (/wiki/daos/concepts/fundamentals/progressive-decentralization) distributes the keys; governance minimization destroys them

Governance minimization is the argument that the amount of a protocol a token vote can change should be kept as small as possible — and that for many protocols the right amount is zero. Where the mainstream DAO playbook treats an active governance layer as the goal, governance minimization treats it as a liability to be spent down: every parameter a vote can move is a lever an attacker, a cartel, or a regulator can try to seize, so the most robust protocol is the one with almost nothing left to govern. The position is not anti-governance so much as anti-surface — it asks, of each governable knob, whether the ability to change it later is worth the standing risk that someone changes it against you.

The theory: credible neutrality and governance as attack surface The intellectual root is Vitalik Buterin's 2020 essay on credible neutrality (https://balajis.com/p/credible-neutrality) , which argues that a mechanism deciding high-stakes outcomes should be one where, in his words, "just by looking at the mechanism’s design, it is easy to see that the mechanism does not discriminate for or against any specific people." A governable parameter is in tension with that ideal: if a vote can redirect fees, mint tokens, or re-point an oracle, then the mechanism's behaviour depends on who controls the vote, and its neutrality is only as credible as its least-captured election. a16z's Miles Jennings makes the operational case in “Machiavelli for DAOs” (https://a16zcrypto.com/posts/article/machiavelli-principles-dao-decentralized-governance/) (2024), where governance minimization is the first of four principles for durable DAO design: reduce a protocol's reliance on, and the power of, its governance, because "eliminating all but essential governance would enhance the credible neutrality of a system" and lower the ongoing cost and risk of running it. The same reasoning drives the governance-attack (/wiki/daos/concepts/analysis/dao-security-and-governance-attacks) literature: a low-quorum treasury vote or a flash-loaned proposal is only dangerous because there is a powerful lever on the other end of it. Take the lever away and the attack has nothing to grab.

The spectrum, from immutable to minimally governed Real protocols sit on a spectrum, not a binary. At the extreme, Liquity (/wiki/daos/organizations/stablecoins/liquity) shipped its V1 as governance-free (https://www.liquity.org/features/governance-free) contracts with no admin key — every parameter was fixed at deployment and, per its own documentation (https://docs.liquity.org/v2-faq/general) , the code "can never be changed"; LQTY is explicitly not a governance token. Reflexer's RAI (/wiki/daos/organizations/stablecoins/reflexer-rai) went further and removed its remaining controls in staged "ungovernance" steps until no new collateral types could ever be added. A step in from the edge is the "immutable core, governed periphery" pattern. Uniswap's core AMM contracts are non-upgradeable, but UNI holders retain a narrow set of levers — most famously the protocol fee switch (https://docs.uniswap.org/concepts/governance/overview) and the treasury — so the market itself is fixed while a thin governance layer decides only revenue and grants. Fully governed protocols such as Compound and Aave sit at the far end, where a vote can upgrade the very contracts users' funds sit in. Governance minimization is the claim that, all else equal, a protocol should move toward the immutable end of that line and keep only the governance it genuinely cannot do without.

What governance usually can't eliminate Even minimizers concede a residue of decisions that resist automation. In practice they cluster into three kinds: protocol upgrades and maintenance (re-pointing an oracle, deploying a fixed contract), complex parameter setting that markets can't self-tune (collateral factors, risk caps), and treasury (/wiki/daos/concepts/treasury/dao-treasury-management) decisions (diversification, grants, incentives). The minimizer's discipline is to scope the surviving governance tightly — Liquity V2, for instance, keeps a minimal vote whose only power is directing a slice of protocol revenue to liquidity incentives, and nothing else. The design question every DAO eventually faces, as the progressive-decentralization (/wiki/daos/concepts/fundamentals/progressive-decentralization) debate frames it, is not "how decentralized are we" but "how much of this should be governable at all," and governance minimization answers: as little as the protocol can survive with.

The trade-off: ossification and the missing patch The cost of destroying a lever is that you can never pull it again. Immutable code that ships with a latent bug cannot be patched, and a parameter that was right at launch can drift out of step with a market that immutability cannot follow — the same property that makes a contract un-capturable makes it un-fixable. Critics argue this trades one risk for another: a governed protocol can respond to an exploit or a black-swan de-peg, an "ungovernable" one can only watch. Minimizers answer that governance is itself the larger and more permanent risk, and that adaptability is better bought through narrowly-scoped (/wiki/daos/concepts/voting/token-weighted-voting) , timelocked, veto-guarded levers than through a general-purpose vote over the whole system. Where a protocol should land on that trade-off depends on how much of its behaviour genuinely needs to change after launch — and how much is just a lever waiting to be seized.

How Caper approaches this Most protocols that pursue governance minimization freeze their contracts but leave their market — prices, issuance, fees — under a vote. A caper (/wiki/foundations/what-is-a-caper) minimizes governance at exactly that layer. Its bonding curve (/wiki/markets/bonding-curve) is fixed in the blueprint: the curve constant is a compile-time constant in the contract, and there is no proposal type and no admin call anywhere in the component that can reprice it. Issuance and redemption follow one immutable formula for the life of the caper, so the thing a member is most exposed to — the price at which they can enter and exit — is not something any majority can vote to change. What remains governable is deliberately narrow and pointed at the treasury alone. The treasury moves only through a small set of typed, on-chain proposal paths — PAYOUT, INVEST, and VOTE — never through arbitrary calldata, and a passed proposal's execution is public: anyone can trigger it, and the treasury badge is presented as a proof inside the call rather than handed to a signer. In the vocabulary of this page, a caper is minimized by construction rather than spent down over time: the market is immutable, the governable surface is the treasury and nothing more, and even that surface is scoped to three paths. It is the mirror of the ossification critique above — because a caper never makes its market governable, there is no market-lever for anyone to capture, and none to lose to a bug either.

References - Vitalik Buterin — “Credible Neutrality As A Guiding Principle” (2020) (https://balajis.com/p/credible-neutrality) - a16z crypto (Miles Jennings) — “Machiavelli for DAOs,” part 1: principles (https://a16zcrypto.com/posts/article/machiavelli-principles-dao-decentralized-governance/) - a16z crypto — “Machiavelli for DAOs,” part 2: designing governance (https://a16zcrypto.com/posts/article/machiavelli-daos-designing-effective-decentralized-governance/) - Liquity — Governance Free (https://www.liquity.org/features/governance-free) · Liquity V2 FAQ (minimal governance) (https://docs.liquity.org/v2-faq/general) - Uniswap — Governance Overview (immutable core, fee switch) (https://docs.uniswap.org/concepts/governance/overview)