# Access Control Boundaries

Privileged infrastructure access is strictly separated from execution authority.

Controls include:

* Multi-layer authentication requirements for administrative functions
* Explicit separation between execution, verification, and monitoring domains
* Network segmentation to limit operational exposure

Operational access does not grant the ability to alter deterministic ordering or settlement conditions.

Authority boundaries remain protocol-defined.