cloudinit-bot
a780884379
P1 complete. Docs lexicon firewall (lexicon_meta_docs_test.go, 5 tests incl. G-013 walk-coverage + G-014 shared self-test). MkDocs Material scaffold with 26-page nav (G-011). README.md + docs/index.md + 7 docs/shared/ pages. Both firewalls green, go test ./... 22 packages green, no regression. ---ci--- project: oy phase: 1 milestone: v0.3 status: complete tag_base: v0.2.x phase_role: execution requirements: covered: [REQ-028] partial: [REQ-027] ---/ci---
42 lines
1.9 KiB
Markdown
42 lines
1.9 KiB
Markdown
# Watchers & Mirror
|
|
|
|
OpenYield is attested by **9 Watchers** with a **6-of-9 quorum** (REQ-004).
|
|
The Watchers make daily attestations to the canonical state, and each posts
|
|
a 100,000 Bread bond. The **Mirror** mirrors the canonical state to the
|
|
bearers so a Holder can verify the mesh's state without trusting a single
|
|
Watcher.
|
|
|
|
## The 9 Watchers
|
|
|
|
The Watchers are the attestation layer of the mesh. There are exactly 9, and
|
|
the quorum is 6-of-9: any 6 Watchers can attest to a state transition, but no
|
|
5 can. Each Watcher posts a 100,000 Bread bond, which is at risk if the
|
|
Watcher attests to a false state. The 9/6 split is a mission-locked
|
|
parameter — no Council can lower the quorum or the bond.
|
|
|
|
## Daily attestations
|
|
|
|
The Watchers attest to the state of the three [Storage Pools](storage-pools.md)
|
|
daily: the Stash totals, the Vault totals, and the Root-Pool. The
|
|
attestation is a signed statement that the canonical state recorded by OY
|
|
Chain matches the state the Watcher observed. A Holder who wants to verify
|
|
the mesh's real return can read the attestations and check that the
|
|
Watchers agree.
|
|
|
|
## The Mirror
|
|
|
|
The Mirror mirrors the canonical state to the bearers (OY-LR, OY-BLE,
|
|
OY-WiFi-Direct, OY-SAT, OY-QR). A Holder on a surveillance-resistant bearer
|
|
can read the mirrored state without an internet connection to OY Chain; the
|
|
Mirror is the read-side of the bearer layer. The Mirror is read-only: it
|
|
mirrors state, it does not author it. Authoritative state lives on OY Chain
|
|
and is attested by the Watchers.
|
|
|
|
## Why 6-of-9
|
|
|
|
The 9/6 split is a balance: 9 is large enough that no single adversary can
|
|
easily capture a quorum, and 6 is large enough that no small cabal can
|
|
attest to a false state. The 100,000 Bread bond per Watcher makes
|
|
capturing a quorum expensive. The split is locked by Mission Lock — no
|
|
Council can change it. See [Six Principles](six-principles.md) for the
|
|
mission-lock covenant. |