Executive Summary
The Laniakea Upgrade is Sky Ecosystem's new infrastructure development plan for automated capital deployment across multiple blockchain layers. This document primarily describes the Laniakea Smart Contracts, but reference other essential parts of the Laniakea Upgrade, such as the Sentinel Network. The system extends the existing Spark ALM Controller contracts, using a modular PAU (Parallelized Allocation Unit) pattern for maximum code reuse across all deployment contexts.
Core Principle
Every layer is composed of PAUs using the same contract patterns. The system minimizes code differences between layers to maximize audit reuse and simplify deployment.
The PAU Pattern (Universal Building Block)
Every PAU, regardless of layer, consists of the same core components:
| Component | Purpose |
|---|---|
| Controller | Entry point for operations, enforces rate limits (MainnetController or ForeignController) |
| ALMProxy | Holds custody of funds, executes calls via doCall() |
| RateLimits | Linear replenishment rate limits with configurable max and slope |
| Governance Layer | Whitelist validation, operational constraints, enumeration |
What differs between PAU deployments:
- Upstream connection (what feeds capital in)
- Approved allocation targets (what the PAU can deploy to)
- Rate limit values (how much can flow)
- Nothing else — same contracts, different configuration
The Four Layers
| Layer | Location | Upstream Connection | Downstream Connection |
|---|---|---|---|
| Generator | Mainnet | ERC20 stablecoin contract | Prime Layer (via ERC4626 vault) |
| Prime | Mainnet | Generator Layer | Halo Layer (including Core Halos) |
| Halo | Mainnet | Prime Layer | RWA strategies, custodians, regulated endpoints |
| Foreign | Altchains | Mainnet Prime (via bridge) | Foreign Halo Layer |
Relationship to Synome layers: These four capital-flow layers describe how funds move through smart contracts. They all map to Layer 2 (Synomic Agents) of the five-layer Synome architecture (Synome → Synomic Agents → Teleonomes → Embodiments → Embodied Agents). Generator, Prime, Halo, and Foreign are all Synomic Agent types — the Synome layers describe governance and cognition, while the capital-flow layers describe on-chain fund movement. See synomics/synome-overview.md.
Layer Details
Generator Layer
- Manages the interface with the stablecoin ERC20 contract
- Deploys capital into Prime Layer via ERC4626 vaults (deposit anytime, redeem if liquidity available)
- Has its own governance scope separate from Prime/Halo
Prime Layer (Mainnet)
- Receives capital from Generator via ERC4626 vault
- Deploys to:
- Halo Layer — the primary long-term deployment path (includes both Prime-created Halos and Core Controlled Agents)
- Core Controlled Agents — legacy DeFi (Morpho vaults, Aave pools, SparkLend) wrapped as Halo Units under Core Council governance
- Foreign Primes — via bridge for cross-chain deployment
- Each Prime controls its own vault's liquidity availability
Halo Layer (Mainnet)
- Receives capital from Prime Layer
- Deploys to RWA strategies, custodian vaults, and regulated offramps (not external DeFi)
- Multiple vault types supported:
- Stablecoin-style (instant deposit/redeem)
- Request/redeem patterns
- LCTS (Liquidity Constrained Token Standard) — queue-based, most common for capacity-constrained strategies
- LCTS is the natural fit because Halos face capacity/liquidity constraints both on deposit (capacity-limited strategies) and withdrawal (liquidity constraints)
Foreign Layer (Altchains)
Foreign Prime:
- Receives bridged assets from mainnet Prime
- No vault between Prime and Foreign Prime — direct ALM Proxy to ALM Proxy transfers via bridge
- Deploys to Foreign Halo Layer on that chain
Foreign Halo:
- Works identically to mainnet Halo Layer
- Uses same vault types as mainnet
- Deploys to external yield strategies on that chain
Connection Types Between Layers
| Connection | Mechanism | Control |
|---|---|---|
| Generator → Prime | ERC4626 vault | Rate limits on deposit/withdraw |
| Prime → Halo | ERC4626 vault (or other vault types) | Rate limits + vault-specific parameters |
| Prime → Core Controlled Agents | Via CoreHaloFacet (ERC4626, Aave, Curve interfaces) | Rate limits + protocol-specific parameters |
| Prime → Foreign Prime | Direct bridge transfer (no vault) | Rate limits on LayerZero/CCTP transfers |
| Foreign Prime → Foreign Halo | Various vault types | Rate limits + vault-specific parameters |
| Halo → RWA/Custodian | Asset transfer | Rate limits on transfers to custodian addresses |
Governance Structure
Per-Layer Governance Scope
Each layer type has its own governance scope for managing approved allocation targets and operational permissions:
| Scope | Controls | Used By |
|---|---|---|
| Generator scope | Generator operations | All Generator PAUs |
| Mainnet scope | Prime + Halo operations | All mainnet Prime and Halo PAUs |
| Per-chain altchain scope | Foreign Prime + Foreign Halo operations | All Foreign Prime and Foreign Halo PAUs on that chain |
Onboarding Types
General onboarding: A target approved for any PAU within the scope to use
- Example: A Morpho vault that any Prime can deploy to
Limited onboarding: A target approved for only a specific PAU
- Example: A bridge route from Prime A to Foreign Prime A (other Primes cannot use this route)
- Example: A regulated offramp that only accepts assets from a specific KYC'd Halo
Code Reuse Principle
The same contracts power every layer:
| Component | Generator | Prime | Halo | Foreign Prime | Foreign Halo |
|---|---|---|---|---|---|
| Controller | MainnetController | MainnetController | MainnetController | ForeignController | ForeignController |
| Proxy | ALMProxy | ALMProxy | ALMProxy | ALMProxy | ALMProxy |
| Rate Limits | RateLimits | RateLimits | RateLimits | RateLimits | RateLimits |
| Governance | ✓ | ✓ | ✓ | ✓ | ✓ |
This means:
- No new controller code for new layers
- No new proxy code
- Factories can stamp out identical PAUs
- Adding a new layer = deploying more instances of the same contracts
Capital Flow
MAINNET ALTCHAIN
┌──────────────┐
│ ERC20 │
│ Stablecoin │
└──────┬───────┘
│
▼
┌──────────────┐
│ Generator │
│ PAU │
└──────┬───────┘
│ ERC4626 vault
▼
┌──────────────┐ bridge ┌──────────────┐
│ Prime │ ──────────────────────► │ Foreign │
│ PAU │ (no vault, direct) │ Prime PAU │
└──┬───┬───────┘ └──────┬───────┘
│ │ │
│ │ ERC4626 vault │ various vault types
│ ▼ ▼
│ ┌──────────────┐ ┌──────────────┐
│ │ Halo │ │ Foreign │
│ │ PAU │ │ Halo PAU │
│ └──────┬───────┘ └──────┬───────┘
│ │ │
│ ▼ ▼
│ RWA/Custodian RWA/Custodian
│ Endpoints Endpoints
│
└──► Core Controlled Agents
(Morpho, Aave, SparkLend - legacy DeFi wrapped as Halo Units)
Note: Risk Capital Tokens
The diagram above shows the capital deployment flow. Parallel to this, risk capital tokens (srUSDS, TEJRC, TISRC) provide the risk capital that backs deployments:
- srUSDS (Senior Risk Capital) — held by end users, issued by Generators via LCTS
- TEJRC (Tokenized External Junior Risk Capital) — held by end users, issued by Primes via LCTS
- TISRC (Tokenized Isolated Senior Risk Capital) — held by end users, issued by Primes via LCTS
Primes ingress (recognize) this external risk capital as part of their capital base. Risk capital holders don't participate in the deployment flow — they provide the buffer that absorbs losses. See accounting/risk-capital-ingression.md for details.
Note: User Touchpoints — Demand Side and Supply Side
The capital flow above is infrastructure — funds move through PAUs, but end users interact at the edges. On the demand side, sUSDS is the user-facing product: holders deposit USDS and earn the savings rate passively. On the supply side, folios are the user-facing layer: each folio is a principal-controlled (or automated) PAU that gives the end user a direct capital-deployment surface within the Laniakea stack. sUSDS abstracts away all deployment complexity; folios expose it, giving sophisticated participants a governed vehicle for active allocation while inheriting the same rate-limit and risk-capital infrastructure as Primes and Halos. See sky-agents/folio-agents/agent-type-folios.md.
Laniakea Factory
A factory system that can deploy standardized PAU infrastructure:
| Deploys | Where |
|---|---|
| Generator PAUs | Mainnet |
| Prime PAUs | Mainnet |
| Halo PAUs | Mainnet |
| Foreign Prime PAUs | Altchains |
| Foreign Halo PAUs | Altchains |
| Skylink infrastructure | New altchain deployments |
Key Benefits
- Standardized deployment: All PAUs deploy from audited templates
- Rapid onboarding: New Primes/Halos can be deployed without custom development
- Pre-verification: Factory-deployed PAUs can be recognized by governance systems for streamlined approval
Beacon and Sentinel Integration
PAUs are operated by beacons — LPHA beacons (deterministic rule execution) in Phase 1, and HPHA sentinel formations (AI-capable, real-time) in later phases. Beacons:
- Execute approved operations within rate-limited bounds
- Monitor positions and trigger rebalancing
- Respond to market conditions within governance-approved parameters
The governance layer defines what beacons can do; beacons execute within those bounds.
Key Architectural Invariants
- Rate limits are the universal control mechanism — every capital flow is rate-limited
- Governance layer sits above deployed contracts — no redeployment of audited ALM Controller infrastructure
- Same contracts, different configuration — layers differ only in approved targets and rate limit values
- Instant decrease, constrained increase — losses are reflected immediately via exchange rate haircuts; gains accrue gradually over time