BLK 379.76M·XRD $0.0008·Σ TVL √ 10.1K
LAUNCHGOVERN
Wiki homeEssays
  1. Home
  2. /
  3. Wiki
  4. /
  5. DAO governance & tooling
  6. /
  7. Concepts
  8. /
  9. Fundamentals
  10. /
  11. Governance minimization

Categories:WikiDAO governance & toolingConceptsFundamentals
MANIFESTO · CAPER / OWN THE GAME
The launchpad that raises and deploys capital. Guaranteed entry / exit liquidity. Governance that can't be captured.

Governance minimization is the argument that the amount of a protocol a token vote can change should be kept as small as possible — and that for many protocols the right amount is zero. Where the mainstream DAO playbook treats an active governance layer as the goal, governance minimization treats it as a liability to be spent down: every parameter a vote can move is a lever an attacker, a cartel, or a regulator can try to seize, so the most robust protocol is the one with almost nothing left to govern. The position is not anti-governance so much as anti-surface — it asks, of each governable knob, whether the ability to change it later is worth the standing risk that someone changes it against you.

The theory: credible neutrality and governance as attack surface

The intellectual root is Vitalik Buterin's 2020 essay on credible neutrality, which argues that a mechanism deciding high-stakes outcomes should be one where, in his words, "just by looking at the mechanism’s design, it is easy to see that the mechanism does not discriminate for or against any specific people." A governable parameter is in tension with that ideal: if a vote can redirect fees, mint tokens, or re-point an oracle, then the mechanism's behaviour depends on who controls the vote, and its neutrality is only as credible as its least-captured election.

a16z's Miles Jennings makes the operational case in “Machiavelli for DAOs” (2024), where governance minimization is the first of four principles for durable DAO design: reduce a protocol's reliance on, and the power of, its governance, because "eliminating all but essential governance would enhance the credible neutrality of a system" and lower the ongoing cost and risk of running it. The same reasoning drives the governance-attack literature: a low-quorum treasury vote or a flash-loaned proposal is only dangerous because there is a powerful lever on the other end of it. Take the lever away and the attack has nothing to grab.

The spectrum, from immutable to minimally governed

Real protocols sit on a spectrum, not a binary. At the extreme, Liquity shipped its V1 as governance-free contracts with no admin key — every parameter was fixed at deployment and, per its own documentation, the code "can never be changed"; LQTY is explicitly not a governance token. Reflexer's RAI went further and removed its remaining controls in staged "ungovernance" steps until no new collateral types could ever be added.

A step in from the edge is the "immutable core, governed periphery" pattern. Uniswap's core AMM contracts are non-upgradeable, but UNI holders retain a narrow set of levers — most famously the protocol fee switch and the treasury — so the market itself is fixed while a thin governance layer decides only revenue and grants. Fully governed protocols such as Compound and Aave sit at the far end, where a vote can upgrade the very contracts users' funds sit in. Governance minimization is the claim that, all else equal, a protocol should move toward the immutable end of that line and keep only the governance it genuinely cannot do without.

What governance usually can't eliminate

Even minimizers concede a residue of decisions that resist automation. In practice they cluster into three kinds: protocol upgrades and maintenance (re-pointing an oracle, deploying a fixed contract), complex parameter setting that markets can't self-tune (collateral factors, risk caps), and treasury decisions (diversification, grants, incentives). The minimizer's discipline is to scope the surviving governance tightly — Liquity V2, for instance, keeps a minimal vote whose only power is directing a slice of protocol revenue to liquidity incentives, and nothing else. The design question every DAO eventually faces, as the progressive-decentralization debate frames it, is not "how decentralized are we" but "how much of this should be governable at all," and governance minimization answers: as little as the protocol can survive with.

The trade-off: ossification and the missing patch

The cost of destroying a lever is that you can never pull it again. Immutable code that ships with a latent bug cannot be patched, and a parameter that was right at launch can drift out of step with a market that immutability cannot follow — the same property that makes a contract un-capturable makes it un-fixable. Critics argue this trades one risk for another: a governed protocol can respond to an exploit or a black-swan de-peg, an "ungovernable" one can only watch. Minimizers answer that governance is itself the larger and more permanent risk, and that adaptability is better bought through narrowly-scoped, timelocked, veto-guarded levers than through a general-purpose vote over the whole system. Where a protocol should land on that trade-off depends on how much of its behaviour genuinely needs to change after launch — and how much is just a lever waiting to be seized.

How Caper approaches this

Most protocols that pursue governance minimization freeze their contracts but leave their market — prices, issuance, fees — under a vote. A caper minimizes governance at exactly that layer. Its bonding curve is fixed in the blueprint: the curve constant is a compile-time constant in the contract, and there is no proposal type and no admin call anywhere in the component that can reprice it. Issuance and redemption follow one immutable formula for the life of the caper, so the thing a member is most exposed to — the price at which they can enter and exit — is not something any majority can vote to change.

What remains governable is deliberately narrow and pointed at the treasury alone. The treasury moves only through a small set of typed, on-chain proposal paths — PAYOUT, INVEST, and VOTE — never through arbitrary calldata, and a passed proposal's execution is public: anyone can trigger it, and the treasury badge is presented as a proof inside the call rather than handed to a signer. In the vocabulary of this page, a caper is minimized by construction rather than spent down over time: the market is immutable, the governable surface is the treasury and nothing more, and even that surface is scoped to three paths. It is the mirror of the ossification critique above — because a caper never makes its market governable, there is no market-lever for anyone to capture, and none to lose to a bug either.

References

  • Vitalik Buterin — “Credible Neutrality As A Guiding Principle” (2020)
  • a16z crypto (Miles Jennings) — “Machiavelli for DAOs,” part 1: principles
  • a16z crypto — “Machiavelli for DAOs,” part 2: designing governance
  • Liquity — Governance Free · Liquity V2 FAQ (minimal governance)
  • Uniswap — Governance Overview (immutable core, fee switch)
TopicThe design school that a protocol's safest governance surface is the smallest one — shrink what a token vote can change, ideally toward nothing
Also calledMinimal governance, governance-free design, "ungovernance," ossification
Core claimEvery governable parameter is a permanent, exploitable attack surface; removing the parameter removes the attack
Theoretical rootVitalik Buterin's credible neutrality (2020); named the first of four principles in a16z's “Machiavelli for DAOs” (2024)
SpectrumFully immutable (Liquity V1, Reflexer RAI) → minimized core + governed periphery (Uniswap) → fully governed (Compound, Aave)
Key riskImmutable code cannot be patched — a latent bug or a stale parameter becomes permanent
Mirror imageProgressive decentralization distributes the keys; governance minimization destroys them