Phase 1: Dungeon-operated 2-of-3 multisig, 0.01 BTC hard cap. Phase 2: FROST threshold drawn from dungeon-1 validators.
Phase 1 cap is intentionally small (0.01 BTC). Cap raises follow the decentralization roadmap, not volume.
Phase 1 is a Dungeon-operated multisig. Phase 2 migrates custody to a FROST threshold signer set drawn from existing dungeon-1 validators.
If the relayer goes down, headers stop arriving and the bridge halts safely — no funds at risk; users can still burn against existing headers.
