> Mitigation: Timelocked upgrade mechanism — changes announced 30 days before execution