The decentralization stack overcomplicated the project. Removed:
internal/pow, internal/smt, internal/checkpoint, internal/bft,
internal/lightnode, cmd/lightnode, relay gossip/checkpoint/proof/BFT
endpoints, their docs, vectors and the blake3 dependency.
Kept: WebSocket streaming on the relay, the full protocol v1 object set
including DelegationClaim (0x07) and KeyRotation request/confirm
(0x08/0x09) with chain resolution in verify.Graph, TrustedIssuers,
batch fetch, stable cursor pagination, per-type metrics.
INV-1 reverts to its original form: the relay holds no keys again.
Everything removed remains reachable at commit 20cc52c.
- BLAKE3 keyed proof-of-work on object storage and auth challenges,
with frozen vectors cross-checked against an independent Python
reference implementing the single-block hash it needs.
- Sparse Merkle trie over object IDs: order-independent roots,
inclusion and absence proofs (internal/smt).
- Signed checkpoint chain per relay: transport key amendment to INV-1,
/v1/checkpoint/* and inclusion/absence proof endpoints, restart-safe
epoch continuity (internal/checkpoint).
- Head gossip with TOFU pinning and equivocation detection; light node
(cmd/lightnode) that stores no history: quorum of pinned relays,
every served object proven against the agreed root, LRU disk cache.
- WebSocket streaming on relay and light node (coder/websocket):
scoped channels mirroring REST, raw envelopes verified client-side;
light node marks streamed objects unproven until checkpoint coverage.
- Protocol v1 additions: DelegationClaim tag 0x07 with deterministic
chain resolution in verify.Graph, KeyRotationRequest/Confirm tags
0x08/0x09 with hash-bound two-sided consent and Policy.RotationMaxAge;
spec sections, frozen vectors appended byte-identically, Python
reference extended.
- Optional permissioned BFT finality over gossip (internal/bft):
prevote/precommit with quorum certificates verifiable offline.
- Quick wins: Policy.TrustedIssuers, per-type stored metrics,
batch fetch, lexicographic lists with stable cursor pagination.
- Security review of the network layer (docs/SECURITY-REVIEW.md) with
findings F-01..F-09; hub send/close race and unstable pagination
fixed under review.
12 packages green, vet/gofmt clean, protocol fuzzing stable.
