Really excited to see this come to life!
The modular approach of this design makes it possible to iterate very quickly on a next step of this function. Today, the TMC will be in charge of the trigger and selecting thresholds, but there is no reason why this level-setting and execution couldn’t be done permissionlessly also. One way in which this could be done is by allowing an Aragon vote to set a maximum ceiling of swaps permitted in a rolling 12mo period (~2.6m blocks):
Consistent with the TMC mandate, this will allow an extension of the implementation to remove the multisig from the picture altogether.
More research is needed on this matter, but will likely form the basis of a a new TMC resolution in due time.