ContentsBrowse sections
A proposal can name a future owner without changing the present one. That grammatical difference carries this paper. PIP-54 says that two Protocol Council Safes will receive listed Polygon PoS rights. PIP-54 remained in Peer Review, and at Ethereum block 25,539,164 three contracts named in its transition plan still returned the legacy timelock as owner().
The Council already had on-chain machinery. Its standard and emergency Safes were deployed with 7/13 and 10/13 thresholds, and their owner sets matched PIP-77. Participation also had a live surface: staked-POL signaling. The operative fact is coexistence. Legacy owner values on the three sampled surfaces, Council infrastructure, a proposed transfer, and non-executing public signal occupied the same institutional field.
Basis of analysis
This is a study of selected system-smart-contract authority routes. Polygon PoS also governs client upgrades through validator and ecosystem consensus and exposes a Heimdall governance module for consensus parameters. Those mechanisms prevent the Council map from being generalized into a description of Polygon PoS governance as a whole.
The research object is a right, an address, and a state at a named block rather than a governance label.
Evidence and Scope
Contract calls at Ethereum block 25,539,164 establish the sampled owner, Safe, and timelock state reported below. Polygon’s documentation identifies active multisigs and their stated purposes, PIPs distinguish adopted designs from proposals still under review, source code identifies callable authority surfaces, and announcements describe institutional direction. Together these sources map a transition without turning three sampled contracts into a complete inventory of Polygon PoS governance (0xPolygon 2026; Polygon Improvement Proposals 2026).
Implementation-State Map
| State | Primary artifact | Observation at the snapshot | Inference boundary |
|---|---|---|---|
Legacy deployed route |
Polygon’s active-multisig page; Ethereum calls at block |
The documentation identified |
Establishes that a legacy owner value remained on the three sampled surfaces, not every role listed in PIP-54 or every executable control path. |
Deployed Council infrastructure |
Council Safes, PIP-29, PIP-77 |
|
Establishes deployed Council machinery, not that it received the legacy PoS rights. |
Proposed transition |
PIP-54 and PIP-68 |
PIP-54 proposed reassigning listed ownership and roles to Council routes. PIP-68 proposed changing two legacy Safe signer sets and their signature policy to 7/13. |
Both documents remained Peer Review. Their future-tense specifications are not deployment records. |
Live staker signaling |
PIP-50; Polygon Governance Hub announcement |
Staked-POL holders and delegates could signal approval or veto on regular system-contract proposals. |
Polygon expressly described a veto as lacking on-chain enforceability. Execution still required Council action. |
Announced Treasury transition |
PIP-40; January 9, 2026 forum announcement |
Polygon announced that the Treasury Board would become advisory, the Foundation would set strategy, and Labs would manage execution with biannual reporting. |
The announcement does not identify the wallet controls or transactions that implemented the change. |
Other PoS governance |
Polygon governance documentation |
Client upgrades become canonical through validating-stake consensus; Heimdall exposes an on-chain parameter-governance module. |
These routes sit outside this system-contract study and defeat whole-system generalization. |
The map contains the central result. A deployed Council and an uncompleted transfer are compatible facts. Treating the first as proof of the second erases the very transition that needs explanation.
Polygon’s live reference page supplied the active-multisig labels, and its governance-fundamentals page supplied the validator-consensus and Heimdall boundaries (Polygon Developer Documentation 2026a; Polygon Developer Documentation 2026b).
What the Chain Snapshot Establishes
Three PIP-54 surfaces were selected because the proposal itself names them and because each exposes a directly callable owner() view.
| Contract | Address | Raw owner() result at block 0x185b25c |
|---|---|---|
StakeManagerProxy |
|
|
GovernanceProxy |
|
|
RootChainProxy |
|
|
The selector was 0x8da5cb5b (owner()). All three results decode to 0xCaf0aa768A3AE1297DF20072419Db8Bb8b5C8cEf, the legacy timelock identified by PIP-54. This is positive evidence about three rights at one block. It is not evidence that every proxy admin, AccessControl role, Polygon-chain right, or operational permission remained unchanged.
The Safe calls supply the other half of the map. getThreshold() used selector 0xe75235b8, getOwners() used 0xa0e67e2b, and the timelock getMinDelay() call used 0xf27a0c92.
| Address | Threshold result | Owner count | Additional observation |
|---|---|---|---|
Legacy Ethereum Safe |
|
9 |
Polygon’s documentation labelled it the active PoS/staking upgrade Safe. |
Council Standard Safe |
|
13 |
Its decoded owner set matched the thirteen PIP-77 addresses. |
Council Emergency Safe |
|
13 |
Its decoded owner set matched the same thirteen PIP-77 addresses. |
Standard-route timelock |
Not applicable |
Not applicable |
|
The match between PIP-77 and the two Council owner sets verifies membership implementation. It does not verify the next edge in the graph: Council Safe → legacy contract right. No sampled owner() call produced either Council Safe.
Code Exposes More Than One Authority Surface
The pos-contracts source explains why a single governance noun is inadequate.
contract Governance is ProxyStorage, IGovernance {
function update(address target, bytes memory data) public onlyOwner {
(bool success, ) = target.call(data);
require(success, "Update failed");
}
}Governance.sol exposes a forwarding call behind onlyOwner. Governable.sol separately defines onlyGovernance by comparing the caller with the contract’s configured governance address. In StakeManager.sol, governance-gated functions include forced unstaking, validator thresholds, checkpoint intervals and rewards, validator-contract addresses, dynasty values, proposer bonuses, minimum amounts, and MATIC-to-POL conversion. migrateValidatorsData and insertSigners are instead onlyOwner.
Validator-data migration follows an ownership gate, and token conversion follows a governance gate. That separation is substantive. Code establishes those callable paths, while state at block 25,539,164 establishes who occupied three sampled ownership positions.
Council Design, Membership, and the Transfer Gap
PIP-29, a Final proposal, created a thirteen-member Council for specified Polygon 2.0 system contracts. It described a 7/13 regular route with a ten-day delay and a 10/13 emergency route without the ordinary delay. It also published selection principles: value alignment, operational resilience, limited Polygon Labs influence, and technical, security, and governance competence (Polygon 2023).
The membership changed over time. PIP-67 replaced four signer positions in 2025 and converted two individual Polygon Labs seats into organizational multisigs. PIP-77 replaced three members in 2026 while retaining the two Labs organizational seats (Polygon 2025a; Polygon 2026a). At block 25,539,164, the two Council Safes contained the PIP-77 address set.
The appointment record is less complete than the key record. PIP-67 says its two incoming members were approved by existing Council members. PIP-77 describes “our recertification process” but does not identify the recertifying actor with equal precision. It is therefore accurate to describe documented recertification and incumbent involvement in PIP-67. It is not established that every later change was “Council-led” in the same way. PIP-29 leaves term length unspecified and allows the Council to add or remove members through the PIP framework. Fixed terms, a public recall path, general conflict rules, and external review remain thin in the reviewed documents.
PIP-54 and PIP-68 must then be read as transition documents. PIP-54 says the emergency Council Safe “will become” sole owner of listed proxies and that specified operational roles “will be transferred” to the standard route. PIP-68 proposes replacing signers and changing the threshold of the two legacy Safes while preserving their addresses (Polygon 2024d; Polygon 2025b). Their Peer Review status, the active-multisig documentation, and the sampled owner calls all point in the same direction: the proposed institutional destination cannot yet be narrated as a completed general transfer.
Live Signaling and Separate Execution
PIP-50 is a Continuous, Informational framework for regular system-smart-contract proposals. Its sequence is precise. The ordinary PIP process and Council consensus come first. Staked-POL holders and delegates then signal approval or veto through an adaptive quorum. The proposal returns to the Council for confirmation and on-chain execution, or for a decision not to execute (Polygon 2024b).
Polygon’s November 2024 launch announcement said this signaling was live through the Governance Hub. The same announcement supplied the decisive limitation: a veto has no on-chain enforceability, although the Council “can and should” take it into account (Polygon 2024c). The participants are stakers and their delegates, not an undifferentiated public. The mechanism concerns regular proposals, not the emergency route.
That design makes the signal institutionally visible but non-executing. The mechanism can be classified from the published design, while its use in contested decisions remains unmeasured. Evaluating Council practice would require proposal-level evidence connecting each signal to confirmation, execution, delay, and any divergence.
Treasury: Announcement versus Implementation
Treasury governance is analytically separate from system-contract governance. Under PIP-40, the Polygon Labs-operated Proposer Safe could introduce actions, while the Community Treasury Board’s Executor Safe supplied separate on-chain approval. The proposal expressly said Polygon Labs could not distribute funds without that approval (Polygon 2024a).
On January 9, 2026, a Polygon forum announcement described a new allocation of institutional roles: the Treasury Board would move from governing to advisory work, the Polygon Foundation would set long-term strategy, and Polygon Labs would manage day-to-day execution and publish biannual reports. The announcement called the change a transition and said the former governing role was ending (Polygon 2026b).
Those statements establish Polygon’s represented direction. They do not identify every affected wallet, contract role, activation transaction, or surviving approval constraint. Without those artifacts, the supported wording is “Polygon announced a transition,” not “all Treasury authority moved.”
An Accountability Standard for Appointed Technical Authority
Walch (2017) and De Filippi and Wright (2018) direct attention to the distance between decentralizing vocabulary and operative control. The implementation map makes that distance testable. For each executable position, five questions follow.
-
Who converts published selection principles into an appointment, and who can contest it?
-
Which conflicts must be disclosed, especially when builders also sign?
-
What term, recertification, removal, or recall rule applies?
-
How is a contrary staker signal answered and preserved in the execution record?
-
Which reviewer sits outside the body whose action is under review?
The IETF supplies a bounded institutional comparator. Its nominating process, rotating terms, recall procedure, and standards-process appeals expose safeguards around appointed technical authority (IETF 2000; IETF 2020; IETF 2022). It is not a blockchain, does not govern upgrade keys, and does not reproduce Polygon’s economic incentives. The comparison supplies questions to ask of an appointed technical authority, and it assigns no score.
Polygon’s documents answer some of them. Selection principles are published, Council membership and threshold changes are inspectable, the standard route has a delay, and staker signaling is visible. The remaining gaps are also concrete: appointment procedure, fixed terms, general conflict rules, public recall, treatment of contrary signals, and review independent of the executing body.
What the Evidence Supports
At the July 15, 2026 snapshot, selected Polygon PoS system-contract authority is best described as an incomplete, layered transition.
-
Legacy execution remained observable on the three sampled ownership surfaces.
-
Council Safe infrastructure was deployed and its membership was current with PIP-77.
-
The documents proposing transfer or reform of legacy rights remained in Peer Review.
-
Staked-POL signaling was live for regular proposals but did not execute or enforce a veto on-chain.
-
A separate Treasury transition had been announced but not implementation-audited here.
The unusual feature is a governance transition whose destination was more legible than its completion. The Council’s keys, membership, thresholds, and delay could be verified; the general transfer edge could not.
Scope of Inference
This description is narrower than calling Polygon PoS either a DAO or a Council-governed chain. The chain has validator consensus and a Heimdall governance module beyond the scoped contracts. On the three sampled Ethereum ownership surfaces, the recorded owner remained the legacy timelock, while the Council Safes and their thresholds were separately observable. The evidence does not support extending that result to every PIP-54 right: the complete rights graph, role inventory, and execution history remain unfinished. Which institution held a particular act must therefore be established right by right and block by block.
Uniswap and Arbitrum remain outside the comparison. A supported cross-protocol comparison would need the same variables and implementation-state evidence for each case. Borrowing one visible feature from another protocol would add breadth while weakening identification.
Falsification
The incomplete-transition account should be revised under any of four observations.
-
Block-pinned storage and role checks show that all PIP-54 rights have moved to the specified Council routes.
-
Executed transactions show a different authority graph from the one implied by current owners, roles, and timelocks.
-
PIP-54 or PIP-68 reaches a new status and its specified state changes are implemented.
-
Staker outcomes acquire on-chain enforceability or another actor can execute regular system-contract changes without renewed Council discretion.
These conditions make the classification sensitive to implementation. A renamed institution or a revised proposal, without state change, would not be enough.
References
0xPolygon. 2026. pos-contracts. Accessed July 15, 2026. GitHub.
De Filippi, Primavera, and Aaron Wright. 2018. Blockchain and the Law: The Rule of Code. Harvard University Press.
IETF. 2000. “RFC 2850: Charter of the Internet Architecture Board.” IETF.
IETF. 2020. “RFC 8713: IAB, IESG, IETF Trust, and IETF LLC Selection, Confirmation, and Recall Process.” IETF.
IETF. 2022. “RFC 9281: Entities Involved in the IETF Standards Process.” IETF.
Polygon. 2023. “PIP-29: Polygon Protocol Council.” Final. Polygon Improvement Proposals.
Polygon. 2024a. “PIP-40: Support for Community Treasury Contracts.” Final. Polygon Improvement Proposals.
Polygon. 2024b. “PIP-50: Staked Tokenholder Signalling.” Continuous; Informational. Polygon Improvement Proposals.
Polygon. 2024c. “Participate in the Next Chapter of Decentralizing Community Governance for Polygon Networks.” November 8. Polygon.
Polygon. 2024d. “PIP-54: Reassign Upgradeability Rights of Polygon PoS Contracts to Protocol Council.” Peer Review. Polygon Improvement Proposals.
Polygon. 2025a. “PIP-67: Update Membership of the Protocol Council.” Final. Polygon Improvement Proposals.
Polygon. 2025b. “PIP-68: Reform Key Polygon PoS Multisigs to Integrate Protocol Council Members.” Peer Review. Polygon Improvement Proposals.
Polygon. 2026a. “PIP-77: 2026 Polygon Protocol Council Membership Update.” Final. Polygon Improvement Proposals.
Polygon. 2026b. “Transitioning the Community Treasury for Polygon’s Next Phase.” January 9. Polygon Community Forum.
Polygon Developer Documentation. 2026a. “PoS Mainnet Multi-signatures.” Accessed July 15, 2026. Polygon Developer Docs.
Polygon Developer Documentation. 2026b. “Governance Fundamentals.” Accessed July 15, 2026. Polygon Developer Docs.
Polygon Improvement Proposals. 2026. Public repository. Accessed July 15, 2026. GitHub.
Walch, Angela. 2017. “Blockchain’s Treacherous Vocabulary: One More Challenge for Regulators.” Journal of Internet Law 21(2): 1–11.