cloudinit-bot
a780884379
P1 complete. Docs lexicon firewall (lexicon_meta_docs_test.go, 5 tests incl. G-013 walk-coverage + G-014 shared self-test). MkDocs Material scaffold with 26-page nav (G-011). README.md + docs/index.md + 7 docs/shared/ pages. Both firewalls green, go test ./... 22 packages green, no regression. ---ci--- project: oy phase: 1 milestone: v0.3 status: complete tag_base: v0.2.x phase_role: execution requirements: covered: [REQ-028] partial: [REQ-027] ---/ci---
1.9 KiB
Watchers & Mirror
OpenYield is attested by 9 Watchers with a 6-of-9 quorum (REQ-004). The Watchers make daily attestations to the canonical state, and each posts a 100,000 Bread bond. The Mirror mirrors the canonical state to the bearers so a Holder can verify the mesh's state without trusting a single Watcher.
The 9 Watchers
The Watchers are the attestation layer of the mesh. There are exactly 9, and the quorum is 6-of-9: any 6 Watchers can attest to a state transition, but no 5 can. Each Watcher posts a 100,000 Bread bond, which is at risk if the Watcher attests to a false state. The 9/6 split is a mission-locked parameter — no Council can lower the quorum or the bond.
Daily attestations
The Watchers attest to the state of the three Storage Pools daily: the Stash totals, the Vault totals, and the Root-Pool. The attestation is a signed statement that the canonical state recorded by OY Chain matches the state the Watcher observed. A Holder who wants to verify the mesh's real return can read the attestations and check that the Watchers agree.
The Mirror
The Mirror mirrors the canonical state to the bearers (OY-LR, OY-BLE, OY-WiFi-Direct, OY-SAT, OY-QR). A Holder on a surveillance-resistant bearer can read the mirrored state without an internet connection to OY Chain; the Mirror is the read-side of the bearer layer. The Mirror is read-only: it mirrors state, it does not author it. Authoritative state lives on OY Chain and is attested by the Watchers.
Why 6-of-9
The 9/6 split is a balance: 9 is large enough that no single adversary can easily capture a quorum, and 6 is large enough that no small cabal can attest to a false state. The 100,000 Bread bond per Watcher makes capturing a quorum expensive. The split is locked by Mission Lock — no Council can change it. See Six Principles for the mission-lock covenant.