> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redpotion.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Strategy

> Strategy is a restricted execution wallet for fund capital. The Fund pushes assets into a strategy, and operators holding CALLER_ROLE deploy that capital into external protocols (D

> Source: [`src/Strategy.sol`](https://github.com/zentryHQ/red-potion-contract/blob/main/src/Strategy.sol) · [`src/modules/CallValidatorModule.sol`](https://github.com/zentryHQ/red-potion-contract/blob/main/src/modules/CallValidatorModule.sol)

## Responsibility

`Strategy` is a **restricted execution wallet for fund capital**. The [Fund](/developers/contract-reference/fund) pushes assets into a strategy, and operators holding `CALLER_ROLE` deploy that capital into external protocols (DEXes, lending markets, …) through a generic `call` interface — but **only calls that have been explicitly allowlisted** can execute.

Key properties:

* Each strategy has its **own access control** (`ACLModule` with its own admin), separate from the Fund's roles. The fund admin and the strategy operator can be different parties.
* The Fund can always **pull assets back** (`pullAsset` is `onlyFund`, invoked via `Fund.pullAssetFromStrategy`), so the operator can deploy capital but never lock the Fund out of it.
* The strategy can **never call the Fund** (`target == fund` is rejected), preventing the operator from reaching Fund-privileged paths.

Strategies are deployed through `Fund.createStrategy` → `FundManager.createStrategyForFund`, which binds the strategy to the fund and puts its proxy under the same ProxyAdmin owner as the Fund's.

## Call allowlisting (`CallValidatorModule`)

Two allowlist granularities, both keyed per **(caller, target, selector)**:

1. **Plain calls** — `addCalls([{caller, target, selector}])` permits `caller` to invoke `target.selector(…)` with *any* arguments.
2. **Constrained calls** — `addConstrainedCalls([...])` additionally pins specific 32-byte words of the calldata: `constrainedOffsets[i]` is a byte offset and `constrainedValues[i]` the exact word required there. Example: allow `transfer(address,uint256)` only when the recipient word (offset 4) equals a specific address — the amount stays free.

At execution time the caller picks the matching overload of `call`. For constrained calls, the caller passes the same offsets/values used at registration (they're part of the allowlist key), and the module verifies the actual calldata matches every pinned word.

```mermaid theme={"dark"}
sequenceDiagram
    actor Admin as Strategy admin
    actor Op as CALLER_ROLE
    participant St as Strategy
    participant Ext as External protocol

    Admin->>St: addCalls / addConstrainedCalls
    Note over St: Fund pushes assets in (Fund.pushAssetToStrategy)
    Op->>St: call(target, data [, offsets, values])
    St->>St: target ≠ fund? call allowlisted? constraints match?
    St->>Ext: target.call{value}(data)
    Note over St: Fund pulls assets back (Fund.pullAssetFromStrategy)
```

## Function reference

### Execution

| Function                                                    | Access                  | Description                                                                                                                                                                                                                 |
| ----------------------------------------------------------- | ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `call(target, data)`                                        | `CALLER_ROLE` (payable) | Executes an allowlisted plain call. Reverts if `target` is the Fund, `data` \< 4 bytes, the (caller, target, selector) tuple isn't allowlisted, or the underlying call fails. Forwards `msg.value`; returns the raw result. |
| `call(target, data, constrainedOffsets, constrainedValues)` | `CALLER_ROLE` (payable) | Constrained variant — additionally verifies each pinned calldata word.                                                                                                                                                      |
| `receive()`                                                 | anyone                  | Accepts ETH (e.g. unwrapping WETH, protocol payouts).                                                                                                                                                                       |

### Fund actions

| Function                   | Access     | Description                                                                                              |
| -------------------------- | ---------- | -------------------------------------------------------------------------------------------------------- |
| `pullAsset(asset, amount)` | `onlyFund` | Transfers assets back to the Fund. Reached via `Fund.pullAssetFromStrategy` (`PULL_FROM_STRATEGY_ROLE`). |

### Allowlist management (strategy's own ACL)

| Function                               | Role                                  | Description                                                     |
| -------------------------------------- | ------------------------------------- | --------------------------------------------------------------- |
| `addCalls(calls[])`                    | `ADD_ALLOWED_CALL_ROLE`               | Register plain calls. Duplicate registration reverts.           |
| `removeCalls(callHashes[])`            | `REMOVE_ALLOWED_CALL_ROLE`            | Remove plain calls by hash.                                     |
| `addConstrainedCalls(calls[])`         | `ADD_ALLOWED_CALL_ROLE`               | Register constrained calls (offsets/values lengths must match). |
| `removeConstrainedCalls(callHashes[])` | `REMOVE_ALLOWED_CALL_ROLE`            | Remove constrained calls by hash.                               |
| `grantRoles` / `revokeRoles`           | `DEFAULT_ADMIN_ROLE` (strategy admin) | Batch role management.                                          |

### Views

`fund()`, `getAllowedCalls()`, `getAllowedConstrainedCalls()`, `getCall(hash)`, `getConstrainedCall(hash)`, `getCallHash(caller, target, selector)`, `getConstrainedCallHash(caller, target, selector, offsets, values)`.

## Related

[StandaloneStrategy](/developers/contract-reference/standalone-strategy) — the same engine detached from Fund control, for deploying on a different chain than the Fund.