Skip to content

feat(work-unit): volunteer-mesh verification — trust untrusted results by quorum - #25

Merged
mdheller merged 1 commit into
mainfrom
feat/work-unit-verification
Aug 4, 2026
Merged

feat(work-unit): volunteer-mesh verification — trust untrusted results by quorum#25
mdheller merged 1 commit into
mainfrom
feat/work-unit-verification

Conversation

@mdheller

@mdheller mdheller commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

The piece the compute plane was missing, and the core of the volunteer-mesh design. A Grant proves who ran a Work Unit; it cannot prove the result is correct. On a Folding@home-scale grid (400k anonymous, churny, possibly-malicious workers) you must verify results — how BOINC/Folding@home actually work.

tools/work_unit.py

  • mint_work_unit — a content-addressed Work Unit (wu_id from the task def → dedup + repro), carrying proof_mode + sandbox + ttl + replication.
  • redundant_quorum — run the same WU on N independent workers; accept only the output a quorum agrees on (identical digest). No quorum → REJECTED, never accepted unverified. Flags the disagreers. Fail-closed.
  • spot_check — canary with a known answer for stochastic tasks.
  • Reputation — per-worker verified-success record; weights allocation, routes around bad actors (a liar earns nothing).

Implements the Dual-Orchestration PROOF_MODE (redundant|spot_check|tee|zk|optimistic) + the CluBORun reference-verifier idea. Distilled from your volunteer-computing corpus.

118 tools tests green. capd/volunteer-mesh-verification ingested by the commons as reproducible.

The full corpus synthesis (docs/VOLUNTEER_MESH.md — the superset design) lands next after the PDF review completes.

…s by quorum

The piece the compute plane was missing, and the core of the volunteer-mesh design. A Grant
proves WHO ran a Work Unit; it cannot prove the RESULT is correct. On a Folding@home-scale
grid (400k anonymous, churny, possibly-malicious workers) you must VERIFY results — that's
how BOINC/Folding@home actually work.

tools/work_unit.py:
  - mint_work_unit: a content-addressed Work Unit (wu_id from the task def; dedup + repro),
    carrying proof_mode + sandbox + ttl + replication factor.
  - Verifier.redundant_quorum: run the same WU on N independent workers; accept only the output
    a quorum agrees on (identical digest). No quorum -> REJECTED, never accepted unverified.
    Flags the disagreers. Fail-closed.
  - Verifier.spot_check: canary with a known answer for stochastic tasks; wrong canary -> reject.
  - Reputation: per-worker verified-success record; weights allocation, routes around bad actors
    (a liar earns nothing). trusted() gates on score + min samples.
  - verify_and_score: quorum-verify + update reputation in one call.

Implements the Dual-Orchestration Model PROOF_MODE (redundant|spot_check|tee|zk|optimistic) and
the CluBORun "reliable cluster as reference verifier" idea. Distilled from the volunteer-computing
corpus (BOINC OOBE, agent-first node, Urbit/CoreOS, CluBORun, dual-orchestration).

capd/volunteer-mesh-verification.mesh.capd.json (caps.compute.volunteer-mesh-verification) —
ingested by the commons as reproducible. Tests: +8 = 118 tools tests green. Makefile `verify`.

Corpus synthesis (docs/VOLUNTEER_MESH.md, the full superset design) lands next after the PDF review.
@mdheller
mdheller merged commit b4f63d8 into main Aug 4, 2026
1 check passed
@mdheller
mdheller deleted the feat/work-unit-verification branch August 4, 2026 05:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant