Philidor Labs: Risk Committee Re-Election Application (August 2026)
Entity background and nominated individual
Applying entity: Philidor Labs LLC (Delaware), operating the Philidor risk infrastructure platform at philidor dot io
Primary representative: Adrien, co-founder and CEO, Joel, co-founder and CTO. Adrien and Joel will attend all scheduled Risk Committee meetings, coordinate Philidor’s internal research and engineering inputs, and remain accountable for Philidor’s votes and public deliverables.
Supporting team: Philidor operates a published methodology committee with defined roles (methodology lead, protocol specialist, asset specialist, risk analyst). For Ethena work, we will allocate one methodology owner, one DeFi composability analyst, and one oracle and market-data engineer on a standing basis, with peer review before any material committee output.
Philidor scores and monitors on-chain vaults and tokenized funds for institutional allocators. We do not take custody, do not execute trades, and do not manage reserves. Our revenue model is flat subscription and fixed-fee work, not a share of assets under management. Public surfaces include analytics dot philidor dot io (vaults, tokenized funds, oracle monitoring, events), docs dot philidor dot io (open methodology and API reference), research dot philidor dot io (signed research papers), api dot philidor dot io (programmatic access), and mcp dot philidor dot io (agent tooling). Current coverage spans 800+ vaults across 10 chains and 11 protocol modules, with a deterministic 0-10 scoring framework and Prime, Core, and Edge tiers.
Our founding thesis is that institutional capital on-chain requires the same separation between product infrastructure and independent risk verification that TradFi allocators expect from rating and surveillance functions. We built Philidor to be that verification layer for composable DeFi and tokenized fund markets.
Statement of intent
Ethena’s risk profile has changed materially over the past year. The protocol moved from a crypto-basis-heavy backing book toward a diversified mix of liquid stables, RWAs, whitelabel partner stablecoins, and institutional distribution channels. USDe is no longer only a DeFi-native synthetic dollar; it is collateral in lending markets, a yield-bearing wrapper in sUSDe, a Pendle and derivatives stack, and increasingly the plumbing behind regulated distribution partners. That shift moves a larger share of risk out of mechanisms anyone can watch on a single dashboard and into composability, concentration, and dependency chains that require continuous, standardized surveillance.
We are applying to serve on the Risk Committee to contribute independent composability and DeFi risk analysis: a published, deterministic framework for scoring synthetic stablecoins and their DeFi dependencies, continuous monitoring infrastructure already calibrated for USDe-class assets, and verifiable outputs (versioned scores, look-through graphs, signed decisions) that ENA holders can inspect and replay.
Where we start, and how we scale with the committee. Our strongest day-one coverage is composability, look-through, oracle surveillance, on-chain lending mechanics, and RWA attestation freshness through our published methodology. We do not treat that as a fixed boundary. Ethena’s risk agenda will keep shifting (new backing sleeves, partner stablecoins, institutional channels, cross-chain deployments). Where the Foundation and fellow members need broader analysis, Philidor will extend its scope to match: dedicate methodology and engineering time, build Ethena-specific monitoring and briefs, and work alongside the rest of the committee until the question is covered with reproducible evidence. When we lack primary evidence on a topic, we will say so plainly, then either invest in closing the gap or recuse on the vote while still contributing whatever on-chain verification we can support in the deliberation.
Our statement of intent is concrete. If elected, Philidor will:
-
Extend the committee’s visibility into USDe’s composable footprint. Where USDe, sUSDe, PT-sUSDe, and related wrappers appear as collateral across Morpho, Aave, and adjacent markets, we will apply look-through resolution, concentration analysis, and breach-surface bounds so the committee can see shared dependencies before they bind in stress, not only after an incident.
-
Apply a published synthetic-stablecoin taxonomy to Ethena’s ecosystem. USDe is an explicit reference asset in our Asset Composition methodology under the synthetic_stablecoin category, with primary failure modes defined as basis unwind and funding inversion, and dimensions including peg stability, redeemability, reserve transparency, dependency depth, and liquidity. Hard-fail controls (including active_depeg with a 1.0 score cap and 7-day cooldown) are event-sourced and versioned. This is not ad hoc commentary; it is a reproducible scoring pipeline any third party can audit against our published method.
-
Publish independent rationales and implementation tracking. We will publish our reasoning on material votes where confidentiality permits, maintain a public tracker of conditions attached to our support, and document recusals. Our default posture is conservative: we would rather conditionally support a proposal with explicit monitoring requirements than approve open-ended exposure without a defined review trigger.
-
Keep ENA alignment distinct from short-term token price. Value accrual mechanisms, including any fee switch, should be evaluated against sUSDe competitiveness, reserve fund adequacy, and solvency across regimes. Philidor will contribute quantitative framing wherever our data and methodology apply, and will expand that analysis as committee priorities require.
We believe this role is timely because Ethena’s next phase of growth runs through channels (Coinbase, Robinhood, BlackRock Aladdin integration, whitelabel stablecoins, cross-chain deployments) that will ask allocators a single question: who independently verifies the risk of what USDe touches outside the core reserve dashboard? Philidor exists to answer that question with open methodology and buyer-side economics.
Previous involvement with Ethena
Philidor has no commercial agreement with Ethena Labs and has not accepted paid research or advisory mandates from Ethena. Our involvement to date is methodological and analytical:
-
Asset taxonomy: USDe is classified under synthetic_stablecoin in our published Asset Composition vector (docs dot philidor dot io/docs/methodology/asset-vector), alongside explicit failure-mode definitions and hard-fail peg controls.
-
Collateral registry: USDe and sUSDe appear in our public collateral tier reference with documented tier assignments, separate from any Ethena marketing materials.
-
Composability research: Our paper The Recursion Map (Philidor Research, 2026) samples vault look-through across major lending markets and documents that derivative and synthetic-dollar collateral (including USDe, sUSDe, USDtb) represents a material share of resolved exposure in the sampled book, with explicit limits on where look-through terminates. This work is public at research dot philidor dot io.
Live breach tables from the same paper: research dot philidor dot io/papers/the-recursion-map.
-
Stablecoin failure-mode research: Our paper Four Ways a Stablecoin Breaks (Philidor Research, 2026) develops a four-mode depeg taxonomy (reflexivity, reserves, redemption, contagion) and connects each mode to live scoring inputs rather than static labels. It is written for governance and allocator audiences, not retail yield marketing.
-
Index and basket constraints: Our T-Bill Anchored DeFi basket methodology documents issuer concentration guardrails that bind Ethena-related exposure through named vault and protocol channels, demonstrating that we already model Ethena footprint limits in our own curated index construction.
-
Ecosystem monitoring: We track USDe, sUSDe, PT-sUSDe, and reUSDe in our asset registry and Pendle parser infrastructure, and we monitor oracle freshness across Chainlink, Pyth, and Redstone feeds relevant to scored collateral.
We have not previously served on the Ethena Risk Committee. We have followed governance proposals and public reporting through the forum and published third-party analyses in this re-election cycle.
Evidence of expertise and value to the committee
Philidor’s value to the committee is infrastructure and methodology, not slide-deck research alone. The following capabilities are operational today and can be directed toward Ethena-specific workflows under appropriate confidentiality and access arrangements.
Published risk methodology (deterministic, versioned). Scores are produced from a four-vector framework (Asset 30%, Platform 30%, Control 20%, History 20%) with non-compensatory caps, tier stability rules (6-hour promotion delay, 24-hour demotion delay), and suitability labels for institutional use. Methodology versions are served by GET /v1/methodology and documented publicly. Score runs carry run_id, methodology_version, and input snapshot hashes for audit reconstruction.
Synthetic stablecoin scoring calibrated for USDe-class assets. Dimensions include peg stability, redeemability, reserve transparency, dependency depth, and liquidity. Hard-fail flags such as active_depeg, redemption_paused, and proof_of_reserve_missing bind regardless of weighted dimension quality. This is the right abstraction layer for a dollar that is simultaneously a reserve asset, a yield wrapper, and a collateral token across DeFi.
DeFi composability and look-through. Our Risk Graph API resolves vaults to underlying curator, protocol, chain, asset, wrapper, and oracle exposures (GET /v1/graph/look-through). Breach preview endpoints return liquidatable debt band bounds for monitored positions (GET /v1/graph/breach). Our research demonstrates where recursive collateral chains truncate and why resolved exposure is a lower bound on true dependency risk. For Ethena, this means the committee can ask: where is USDe reused, through which curators, with what shared oracle and wrapper dependencies?
Oracle and market-data surveillance. A dedicated worker polls oracle freshness every 15 seconds across Chainlink, Pyth, Redstone, and related feeds, with public monitoring at analytics dot philidor dot io/oracle-vector and API access at /v1/oracle-vector/freshness. Peg stability is not a annual attestation; it is a live input.
Events, signals, and security monitoring. We ingest protocol incidents, parameter changes, and security events via /v1/events, /v1/signals, and /v1/security-events, with admin workflows that enforce four-eyes approval on score-affecting overrides.
Signed decisions and verification. Decisioning outputs bind verdicts to content-addressed snapshot IDs, methodology versions, and EIP-191 signatures, with public verification endpoints. Counterparties can validate an envelope without receiving a customer’s API key. This is designed for governance workflows where “we reviewed it” must mean “here is the reproducible record.”
Programmatic access for committee workflows. OpenAPI at https://api.philidor.io/v1/openapi.json, MCP tools for agent-assisted diligence (docs dot philidor dot io/docs/mcp/tools), and a CLI for reproducible pulls. We can provide read-only committee access arrangements without exposing unrelated customer data.
Model governance controls. Maker-checker separation on score-affecting changes, bitemporal classification records, evidence freshness haircuts, append-only attestation ledger, and an admin audit log. We publish our independence and conflict policies at philidor dot io/conflicts.
Design-partner precedent on stablecoin stress. We have executed fixed-fee design partner engagements for stablecoin and vault products, including independent stress assessment, depeg scenario work, and sleeve-level custody review, under contracts where fees are not contingent on score or conclusion. The same published methodology applies regardless of who pays.
Lending-market mechanics already in the scoring path. Morpho and lending-market LLTV haircuts apply to exposure scores before portfolio aggregation. Vault-level portfolio adjustments cover concentration, wrong-way risk, and correlation penalties. These are not cosmetic labels; they change published tiers when utilisation, collateral mix, or shared dependencies shift.
Continuous drift monitoring. /v1/vaults/changes and /v1/curators/{id}/events expose score moves, tier transitions, hard-fail flags, and curator actions on an hourly sync cadence, with incident-triggered rescoring within minutes. This supports post-approval surveillance: utilisation drift, collateral mix shifts, incentive expiry, and curator concentration after a deployment is live.
Pendle and fixed-income wrapper stack. We parse and registry-track USDe, sUSDe, PT-sUSDe, YT-sUSDe, and reUSDe tickers across maturity series, so committee work can treat Pendle liquidity and roll risk as first-class composability inputs, not an afterthought on collateral dashboards.
Incident and breach surfaces. Beyond look-through, Risk Graph includes breach preview (GET /v1/graph/breach), incident exposure reads, and limit checks with optional signed decisions (POST /v1/graph/check). Our research on liquidation failure (e.g. xUSD / Stream Finance residue on Morpho) shows why breach bounds and oracle staleness must bind committee conditions, not only reserve-level attestations.
Exit and secondary-market lens. On Decisioning-tier deployments, Exit Overhang translates holder concentration into action bands for monitored vaults, quantifying how secondary liquidity and large-holder overlap can amplify redemption pressure when backing composition changes unsettle depositors.
Index construction with Ethena guardrails. Our T-Bill Anchored DeFi basket methodology (v1.2.1) documents issuer concentration caps and a protocol-level selector clamp because Ethena-related exposure already sits near limits through channels such as aEthUSDtb and steakUSDTBethena. We apply the same concentration discipline we would bring to committee cap proposals.
Independence. Philidor has no commercial agreement with Ethena. Our economics come from allocators and integrators who need independent verification, which aligns our incentives with ENA holders who want risk scrutiny that does not depend on protocol vendor relationships.
Technical infrastructure and proposed deliverables
Philidor’s committee value is not only research PDFs. It is reproducible infrastructure ENA holders and fellow members can inspect. Below is the architecture we would orient toward Ethena composability work (public where confidentiality permits).
1. Ethena Composability Monitor (public, analytics.philidor.io). A dedicated view, maintained by Philidor at our cost, showing: venues where USDe and sUSDe appear as collateral; top curator and protocol concentrations; look-through dependency chains for scored vaults holding Ethena assets; oracle freshness on material feeds; hard-fail and tier-change status for USDe-class registry entries. Target: beta within 60 days of term start.
2. Quarterly Ethena Composability Risk Brief. Structured report with Risk Graph figures (concentration HHI by curator/protocol, derivative collateral share, breach-band snapshots, Pendle roll calendar), cross-referenced to methodology version and snapshot IDs so any third party can reproduce the charts via /v1/graph/snapshot/{id}.
3. Implementation condition tracker. Public log of conditions Philidor attaches to conditional support (caps, monitoring cadence, review triggers), status (open / met / breached), and evidence links tied to measurable graph and oracle inputs.
4. Conditional approval templates. Standard language for committee recommendations that bind: max share per curator/protocol/chain, oracle staleness triggers, utilisation ceilings on approved vaults, and mandatory re-review when /v1/vaults/changes flags tier demotion or hard-fail on a linked vault.
5. Stress scenarios via breach bounds. For proposals that place backing into lending markets, we will publish breach-preview bands (liquidatable debt lower/upper bounds, unknown collateral bands) using the same engine documented in The Recursion Map.
6. Committee read-only access. Read-only API and MCP arrangements for fellow members to pull look-through, breach, and oracle freshness without exposing unrelated customer portfolios.
Priorities for the next term
If elected, Philidor will prioritize the following workstreams, in coordination with existing committee members and Ethena Foundation staff.
1. Composable collateral surveillance. As USDe and sUSDe circulate through lending markets, whitelabel partner stables, and cross-chain deployments, we will maintain a quarterly Ethena Composability Risk Brief covering: top curator and protocol concentrations, look-through dependency chains, oracle freshness on material feeds, hard-fail flag status for USDe-class assets in our registry, Pendle maturity and liquidity roll risk, and breach-band snapshots for vaults holding Ethena collateral. First brief within 45 days of term start; Ethena Composability Monitor beta within 60 days.
2. Whitelabel and partner stablecoin scaling. Apply our concentration and dependency framework as partner stablecoins grow, with explicit thresholds for when composability exposure requires committee re-review, including downstream DeFi reuse of those partner assets (shared curators, oracle feeds, and looping paths visible only after look-through).
3. RWA and tokenized fund backing quality. Where Ethena’s backing book includes tokenized treasury and credit exposures, we will apply our RWA module (/v1/rwa) and attestation freshness rules to assess issuer, custodian, and redemption terms, and we will flag when evidence staleness or attestation gaps trigger methodology caps. We will also track re-entry risk: when assets approved at the reserve layer are redeployed into lending markets, we monitor the on-chain sleeve for drift after approval.
4. Money-market utilisation and curator discipline. For approved lending deployments, publish standing monitoring on utilisation bands, withdrawal headroom, incentive-driven yield vs organic borrow demand, and curator event feeds. Tie conditional approvals to /v1/vaults/changes triggers so demotions and hard-fails force re-review without waiting for the next onboarding proposal.
5. Governance transparency. Publish vote rationales on material proposals where confidentiality permits; maintain a public implementation condition tracker for conditions attached to Philidor’s support; publish a term-end accountability report comparing commitments to deliverables.
6. Flexible coverage as needs evolve. We lead with composability and verifiable on-chain infrastructure, and we will extend into adjacent committee workstreams (RWA monitoring, concentration frameworks, cross-chain footprint, reserve-adjacent stress framing) as the term demands. We recuse when independence requires it; otherwise we treat gaps as work to close, not topics to avoid.
Six-month commitments
-
Meeting participation: Adrien/Joel will attend all scheduled Risk Committee meetings and circulate internal briefs to Philidor’s methodology and engineering owners within 48 hours of each session.
-
Ethena Composability Monitor: Public analytics view (beta within 60 days) covering USDe/sUSDe venue footprint, curator/protocol concentration, oracle status, and tier/hard-fail changes.
-
Quarterly composability brief: Public report with Risk Graph snapshot IDs, look-through figures, and breach-band context, unless restricted by confidentiality, with a minimum of one brief in the first term year.
-
Vote rationales: Publish reasoning for support, conditional support, or opposition on material proposals where forum publication is permitted.
-
Monthly exposure note: Short public note on changes in USDe-class asset scores, hard-fail flags, oracle anomalies, or material vault tier demotions in Ethena-linked markets, redacted as required.
-
Implementation condition tracker: Public log of Philidor’s conditional approvals, monitoring obligations, and status updates tied to measurable inputs (graph, oracle, vault changes).
-
Recusal and disclosure log: Document commercial relationships and recusals in a public log updated when relationships change.
-
Term-end report: Publish accountability report comparing these commitments to work completed, including vote record, deliverable index, and links to published snapshots.
Conflict of interest declaration
Philidor commits to independence and transparency. At the time of this application, we have no commercial or paid relationship with Ethena Labs or the Ethena Foundation (no research agreement, advisory contract, vendor arrangement, or token allocation). Our work on Ethena to date is public methodology and research only.
Philidor earns revenue elsewhere through subscriptions and fixed-scope engagements with allocators and product issuers. If any such relationship touches a committee deliberation, we will disclose it and recuse if it could reasonably impair independence. Should Ethena and Philidor enter a commercial relationship in the future, we would disclose it promptly and apply the same recusal rules.
Philidor does not hold user funds, operate mint/redeem functions, or route trades. Commercial activity and Risk Committee responsibilities are separated internally. Confidential committee information will not be used for trading, commercial negotiation, or selective publication.
We welcome Foundation screening and will provide additional entity and representative information as required for KYC and background checks.
Closing
Ethena’s risk surface has two layers that both matter: what backs USDe directly, and what USDe becomes once it circulates through lending markets, wrappers, and partner channels. Philidor offers independent, published, continuously updated DeFi composability risk infrastructure for the second layer: Risk Graph look-through and breach bounds, oracle surveillance, signed decisions bound to snapshot IDs, and public monitoring ENA holders can replay.
We ask ENA holders to consider this application on the strength of our methodology, live infrastructure, and research record, and on the deliverables we commit to publish during the term.
Thank you for considering this application. We welcome questions on this thread and will respond publicly where appropriate.
Philidor Labs LLC
