The Log

What's Happening

A running record of what's built, what's running, and what's next.

Now

C7.1 Crash Recovery certified. A restarted node can now recover from its persisted finalized anchor, verify every missing certified block against the exact production validation rules, and converge to the same finalized state as the live cluster — without exercising protocol authority during recovery. 16/16 harness assertions, zero skipped.

Negative control proven: three unauthorized signers injected, correctly rejected with no state mutation. Catch-up enforces the same designated-attester and panel-eligibility rules as live ingestion. Authority muting verified: zero proposals, attestations, signatures, or local QCs while Recovering.

Ratification integrity repair. Located and fixed a consensus bug where panel derivation was node-relative — different nodes computed different designated-attester panels from the same participant set. The derivation is now deterministic: identical pools produce identical panels, verified offline across all six callers. Domain-separated signature binding ties attestations to exact block content. Full Ed25519 verification on the live QC path.

Forensic instrumentation. Structured diagnostic output on every catch-up and live rejection: per-signer panel membership, required-attester peer-table detail (last seen, heartbeat epoch, public-key availability), peer-table snapshot, and state-root context. The harness captures the exact moment and cause of the first post-recovery canonical-chain rejection.

Two nodes, peered. The Z4 in Florida and the relay in Germany are connected and exchanging gossip across the Atlantic. The economic layer is active — the receipt-gated mint is running — and correctly produces 0 DUUs. Contribution requires a third party, and there isn't one yet.

The landing page now shows honest telemetry for the first time: real node counts, real locations, no fabricated numbers. The architecture pages describe what runs, not what might run someday.

Phase 6 wired. The receipt-gated mint is operational. Relay receipts now correctly attest to genuine relay work (source ≠ propagation). Self-reported minting — a Phase 5 placeholder — is gated to test-only. The economic layer no longer manufactures value from one perspective.

Built

BootstrapEnded spec. A single chain-anchored block that partitions the ledger into two honest eras — root-authorized and quorum-certified. One-way, irreversible. Waiting on a third peer before it can be committed.

Thickness provenance graph. Contribution-derived and vouch-derived thickness with full derivation lineage. Four verified properties. Chained clawback for collusion detection. Scale-invariant gauge.

Witness/certificate flow. Deterministic sortition, 3-of-5 quorum, append-only Blake3 hash-chain ledger. Certificates become blocks through accumulation, not authorship.

P2P mesh with cross-Atlantic peering. libp2p stack: Noise XX + Yamux + Kademlia DHT + gossipsub. Relay server at Hetzner. mDNS for local discovery.

Next

The third node. Every mechanism is built and waiting. The mesh correctly produces nothing at two nodes because contribution is a three-party act. The first person to run a node who isn't the founder is the person who activates the Lattice. Join the Lattice →

Persistence. Economic state doesn't survive restarts yet. Designed as chain-replay (log-authoritative, not snapshot). Blocked on economic events riding the certificate flow — which needs quorum — which needs a third peer.

BootstrapEnded. The one-way block that ends root authority and begins quorum governance. Spec exists, build waits on the same thing everything else waits on.