Strategy

Your strategy is the plug. The vault creator deploys it and points the vault at it, and from then on it's the only logic allowed to act for that vault. It has three jobs:

• Decision logic: when to act, what to buy, in what size, at what cadence.
• Internal state: the configurable parameters and counters it needs to remember.
• Composition: orchestrating multi-step operations when one move isn't enough.

That's all it does. It never holds capital and never carries standing authorization. Capital, permissions, and the authorized identity all live in the vault. The strategy is only logic that proposes operations, and the container validates every one before it runs.

It's swappable

Because the strategy is a separate, pluggable piece, you can replace it without touching the vault. The logic evolves as you learn, while the capital, the identity, and the track record stay put. That is what lets a strategy improve over time instead of forcing a new vault on every change.

A buggy strategy can't escape the vault. At worst it proposes a bad move, and the contract reverts it.