Aragon OSx Updates, a seamless way to make security and feature updates for your DAO, is available directly on the Aragon app. Each DAO deployment is completely self-sovereign, so updates are always optional.
Each DAO is built into the Aragon application Aragon OSX,The basic DAO framework. With this new feature, your DAO has the option to update its Aragon OSx contracts to the latest version by passing the suggestion, giving you access to security and feature updates made by the Aragon team.
This process is safe, easy and intuitive, regardless of your knowledge of smart contracts. The release notes for each update are transparent, so anyone can dive into the details and evaluate each update. An example can be found in the release notes here.
Every update automatically goes through a security check that is visible to all DAO members. Security scanning analyzes the suggestion to ensure that the suggestion's actions will result in a secure update. For example, it verifies that the update address exists in the Aragon OSx registry, that the correct methods are called, that the actions in the suggestion are ordered correctly, and more. This protects DAO members from inadvertently passing on malicious upgrades that don't come from the Aragon team or don't follow best practices.
If you decide that you want to propose an update to the DAO, Necessary smart contract changes are automatically populated as actions within the proposal, so there is no possibility of adding actions incorrectly. There is a verification panel that automatically checks whether the actions in the proposal are safe, which all DAO members can view. The DAO must then pass a vote to make the update available. For the last step, the wallet must perform the action.
Smart contract updates of this type usually require advanced experience in Solidity. With Aragon OSx updates, we've made it so anyone can safely suggest updates without writing any code!
Updates are optional and can be done whenever you want, just like operating system updates on your computer. In stark contrast to operating system updates, Automatic Updates are not passed on without your consent. The app will notify you when updates are available, but will never ask you to update. Your DAO is self-sovereign, so updates are entirely your choice.
Each update is carefully created and evaluated within the Aragon team. The Aragon OSx protocol is subject to 3/5 Aragon OSx multisig, which can upgrade the protocol but not existing DAOs. Security is our top priority, so we thoroughly test and evaluate every update. During more than six years of construction, no Aragon products have ever been hacked, while cumulatively controlling more than $18 billion in assets.
Learn more about Aragon OSx updates:
The Aragon app is built on Aragon OSx, a smart contract framework for building DAOs. Aragon OSx is UpgradeableWhich means that the underlying code of the smart contract framework can be modified, but the state, address, and balance of each DAO are kept the same.
We've made Aragon OSx contracts upgradable to enable us to stay at the forefront of technological developments in the space. This means that there are many versions of OSx, each with security updates and new features that improve the operation of your DAO. This is similar to the many versions of your Mac or PC operating system, each of which has different levels of updates that you may want to make to your DAO.
DAOs on Aragon OSx and App are completely self-sovereign, Which means that the Aragon team has no ability to change anything in the backend of your DAO.
This is important, because DAOs are inherently intended to be autonomous and self-sovereign organizations. If there was a central party controlling them on the backend, that would defeat the purpose of what DAOs are meant to do.
When you create a new DAO on the Aragon app, it is automatically created using the latest version of Aragon OSx contracts. But older DAOs will not be automatically updated with the latest version. That's why we created a system for decentralized autonomous organizations (DAOs) to pass along a proposal to install the latest updates if they choose.
DAOs can skip updates or abandon them all together. This process is intentionally optional, so you have full scope for your DAO contracts.
Create automatically generated suggestions for updates
Whenever a new update is available, it will appear as a logo on the Aragon app. You can click “View all updates” and see what node updates are available. Read the details and decide whether you want to automatically generate a proposal for this update. The automatically generated update eliminates the possibility of incorrect configuration of actions.
Option to evaluate open source code in the update before making your decision
DAO members can read details of the update before making their decision. Each update automatically goes through a security verification process, but DAO members can also read the update details before making their decision. The release notes are written for anyone to understand, even non-technical DAO members. And for DAO members who want to dig deeper, you can read about the exact changes being made on Github.
All of the code we push at Aragon is open source. We will never release an unopened, unreadable update to anyone!
Make multiple updates with one suggestion
You can make multiple updates at once, reducing the administrative burden of multiple proposals. Simply select the updates you want to make and click Next to create your proposal. This speeds up the process of updating your DAO contracts!
Plugin updates take two transactions
Extras—Contracts that adapt the governance, membership, or treasury management of your DAO, such as the token voting plugin or multisig plugin — are also upgradable. This is important, because it means that plugins can get security and feature improvements.
For added security, track plugins A Two-step process To update. This means that you need to sign a transaction to set up the plugin first before installing it. You will see a “Set Up Plugin” button when it is required. Simply click the button, sign the transaction, and the plugin will be ready to install after passing the proposal.
Updating your DAO is never required
Your DAO is completely self-sovereign. This means that you can continue to use the older version of OSx contracts on the Aragon app if you choose.
Where can I read more about updates?
Consult Changelog on GitHub To find out what has changed with each new iteration of contracts!
