Description:
Introduce a high-severity safety control that can halt buyback execution during abnormal market or protocol conditions.
Tasks:
- Implement circuit-breaker checks for volatility spikes, failed settlement streaks, and oracle divergence thresholds
- Add governance-controlled
emergency_halt_campaign and clear_emergency_halt entrypoints
- Ensure halted campaigns block execution but preserve read/query behavior
- Add tests for trigger conditions, unauthorized halt attempts, and safe recovery flow
Acceptance Criteria:
Emergency halt behavior is governance-controlled, tamper-resistant, and validated by negative and recovery tests.