Files

D.Popov 68e057209c Add alpha-hardening ADRs and issue plan from pre-release audit.

Lock alpha scope, tracker auth, TOPLOC fraud verification, and deferred multi-tracker money-path work; supersede legacy fraud issues with ADR-0018.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-04 23:12:09 +03:00

1.1 KiB

Raw Blame History

Status: ready-for-human

13 — C3/C4: Consensus-gated money mutations (deferred)

What to build

Route money-affecting ledger events through Raft commit, not gossip-only apply. Extend raft.py command set beyond register/deregister. Settlement remains leader-only with treasury key.

Code refs:

packages/tracker/meshnet_tracker/server.py — settlement leader gate (~3331–3332), payout batch (~3353–3356)
packages/tracker/meshnet_tracker/raft.py — log entry types (~26–27)
packages/tracker/meshnet_tracker/billing.py — apply_events (~301–311)

Design: ADR-0019 §2. Deferred post-alpha while single operator holds settlement.

Acceptance criteria

charge, payout, forfeit, credit, settlement, bind commit via Raft log
Followers reject direct gossip money mutations
Leader-only _settlement_loop unchanged in semantics
Migration plan from gossip-only billing to Raft-backed log

ADR links

ADR-0019 §2

Blocked by

12-c2-on-chain-idempotency.md
14-a3-raft-durable-term-vote.md

1.1 KiB Raw Blame History Unescape Escape