Security
Governance timelocks and how to size them
A timelock is the community's exit window. It converts an irreversible action into a reviewable one.
What the delay actually buys
Time for holders to inspect the queued calldata, time for security researchers to object, and time to cancel if the payload is not what was approved.
Choosing a duration
Parameter tweaks often sit at 24-48 hours. Upgrades and treasury movements commonly run 3-7 days. The right number scales with how much damage the action could cause.
Emergency paths
Keep a separate, narrowly scoped emergency route with a higher signature requirement and a mandatory post-hoc disclosure, rather than shortening the standard timelock.