The policy contract is an address guarded by a simple gnosis safe implementation. The policy address manages adjustments of the monetary policy of the O2 DAO protocol. This includes BCV and reward rate adjustments. Below are listed policy addresses by version, where the latest version represents the currently active address.
The DAO contract is guarded by a 2 of 3 multisig. That means any transaction for making DAO changes must be approved by at least 2 signers, of which we have 3 signers in total. The operation security for our DAO is thus protected from a single actor going rogue, because it takes a quorum of 2 to authorize any transaction like engaging in DAO swaps. The 3 signing addresses for the DAO are listed below.