Other Contract References - Cargo Finance

Beyond the share contract and the auctions, every Cargo vault relies on a small set of supporting components.

Components

Component	Purpose
Identity registry	Whitelist of KYC-cleared, eligible wallets; checked on every transfer
Minting guard	Mints shares only against a current collateral-manager receipt and enforces the backing rule
Lot registry	Lot ID, quantity, grade, receipt hash and status for every lot
NAV oracle	Posts daily NAV and, during market hours, iNAV every 15 minutes; applies the hedge-market fallback
Safe and timelock	Administration with an independent co-signer on transfers out
Pause guardian	Suspends minting, batches, creations or redemptions on a safety trigger

Access Control

Roles

Administrator: the Safe, behind the timelock: configuration and upgrades.
Registry Agent: adds and removes verified identities; key held under the Safe policy.
Minter: the minting guard only, against collateral-manager attestations.
Pause Guardian: emergency pause and resume.
Oracle Signer: posts NAV and iNAV.

Planned Integrations

Integration	Design
Permissioned pool	A vault-share/USDC pool whose hook checks the ERC-3643 whitelist on every swap; operated by a panel market maker or licensed partner; 0.30% fee tier. First: cvCOCOA/USDC
Morpho market	Isolated market per vault share against USDC; 62.5% liquidation LTV for cvCOCOA; lower-of NAV oracle; whitelisted liquidators; liquidated shares redeem at NAV

Developer Notes

Keep oracle freshness checks conservative and reject stale NAV.
Never price vault shares from a pool alone; use NAV.
Any address you rely on must match the Contract Addresses page.