Height + signing
Watchdog checks chain identity, height advancement, catching-up state and validator signing height.
MAINNET SECURITY POSTURE
Reduce the exposed surface.
Keep consensus boring.
The launch configuration separates public wallet/developer access from raw validator services and disables RPC capabilities that are unnecessary for normal network use.
Comet unsafe RPCDISABLED
/dial_seeds, /dial_peers and /unsafe_flush_mempool reject public access.
EVM adminDISABLED
admin_* unavailable.
EVM personalDISABLED
No public local-account listing or unlocking namespace.
Debug / trace / txpoolDISABLED
High-risk or unnecessary diagnostic namespaces are not exposed publicly.
Unprotected EVM txsREJECTED
allow-unprotected-txs = false.
Insecure unlockOFF
allow-insecure-unlock = false.
Public raw backend portsCLOSED
Access is routed through TLS virtual hosts instead of opening service ports in firewalld.
Batch JSON-RPCCAPPED
Public EVM batch request limit is 100.
VALIDATOR HEALTH
Continuous local checks.
Listeners + process
Checks the twixd systemd service and expected local listeners without opening internal services publicly.
Disk + memory
Operational checks include disk and available-memory thresholds plus service restart counts.