feat(PGL): DVT_INCENTIVE.md v0.1 draft (70%) — Brood #3#4
Conversation
PGL appendix for DVT program (Brood #3 deliverable, coordination hub YetAnotherAA-Validator#42). Drafted §1-§7 + §10 (independent of upstream SP #283). §8 SP v5 ROLE_DVT integration table + §9 IDVTIncentive.sol interface await SP #283 ROLE_DVT slash trigger spec. Sections covered: - §1 Positioning: PGL appendix, not Charter modification - §2 Role definition: ROLE_DVT_NODE as PGL infrastructure-public-goods provider - §3 Two non-negotiable principles: independence + no sign-count incentive - §4 SBT trait system: 5 core traits (NoBlindSign / OnDuty / Diversity / PolicyPublisher / LongStanding), all on-chain auto-issued - §5 Incentive forms: cash leg (service fee = ordinary commercial value) + reputation leg (SBT trait unlocks AgentStore curator / DAO weight) - §6 Canary/Honeypot mechanism for "correct execution" verifiability - §7 Anti-pattern library (6 things PGL-DVT must NOT do) - §10 Boundary with other PGL docs (no Charter / Manifest changes; minimal pointers in REVENUE_MODEL + CITY_REP + README) Legal red lines reused from Charter: SBT non-transferable, no tradable tokens, service fee = ordinary commercial contract (not dividend / not securities).
…sions Hub YetAnotherAA-Validator#42 协商 CLOSED (issuecomment-4702143353). Frozen decisions on signature format + PolicyRegistry + staked-validation unblock §8 + §9 of this doc. Promote to v0.2 (95%). §8 SP v5 ROLE_DVT + IPolicyRegistry 对接表 — 6 subsections: - 8.1 Role registration (reuse current Registry + BLSAggregator H-02 path) - 8.2 Policy hash registration (per-sender / staked / governance-gated PolicyRegistry) - 8.3 Canary slash trigger (using frozen signerMask+sigG2 + DST=POP) - 8.4 Service fee distribution (signerMask-equal-share, NOT count-weighted) - 8.5 Sender-keyed state (frozen decision #5) - 8.6 Alignment with RecoveryService / time-lock §9 IDVTIncentive.sol — concrete Solidity interface draft: - Trait enum (5 core traits) - traitCount / traitActive queries - recordCanaryPass (hub-only) / reportBlindSign (permissionless w/ BLS proof) - distributeServiceFee (signerMask-equal split) - registerNodePolicy (reuse PolicyRegistry) - 5 events for trait + fee + policy lifecycle §12 NEW — Charter scope question flagged: Hub frozen decision #6 says "激励落 PGL Charter". v0.2 draft remains "PGL appendix, no Charter主体 change" per §1.2 + §10. Two interpretations (A) appendix vs (B) Charter Article 6 — author leans (A), awaits hub owner explicit confirmation. If (B), will draft Article 6 text bilingually in v1.0. PR #4 updated for this commit.
|
v0.2 推送 commit |
… scenarios
Spin off the economic / operator-facing material from DVT_INCENTIVE.md
spec doc into a focused economics doc. Operators can read this without
wading through the spec.
§1 Why this doc (vs the spec)
§2 Charter (A)/(B) decision pointer
§3 Reputation incentive — who decides, how distributed
- All 5 traits are on-chain auto-issued, zero human jury
- Non-monetary unlocks + 2nd-order cash effects
§4 Commercial incentive
- Funding source = users paying fees (not treasury, not inflation)
- Per-account custom trigger thresholds (hub owner 6-14 input)
- signerMask-equal split, NOT count/stake/rate-weighted
- 5 income-affecting factors + 3 non-affecting (命门二硬约束)
§5 Income reverse-derivation
- Formula: M × F × P / N
- Three-stage scenario table targeting node monthly = $100 USDC
- opt-in早期: N=5, F=$0.50, requires 1000 ops/mo (33/day)
- opt-out 默认开: N=20, F=$2.00, requires 1000 ops/mo (33/day)
- mandatory 普及: N=100, F=$2.00, requires 5000 ops/mo (167/day)
- hub 6-14 owner decision "DVT 默认开 (opt-out)" is the pivot point —
business volume M jumps 10x+ after flip
§6 Early participation hidden time value
- Trait accumulation NPV makes early entry strictly better for
long-term operators
§7 Risk exposure and downside scenarios
§8 References to hub frozen decisions
DVT_INCENTIVE.md §5 gets a pointer to this new doc.
|
新增 |
…tech check User decision 2026-06-15: - (A) PGL appendix LOCKED — Charter five articles untouched - Infrastructure roles (DVT, x402 facilitator, ...) future-collected under "aNode" namespace (current naming kept; forward-compat note) §11 v1.0 entry added §12 (A) decision locked §13 NEW — aNode infrastructure umbrella forward compatibility note §14 NEW — tech dependency check list (verified / pending / external decision) §15 NEW — sub-topics flagged for possible split-out (line-comment pins)
✅ v1.0 就位,等 review + mergehub #42 闭环审计要求 Brood 提交 2 项全部就位(详见 hub comment-4705369854)。
请 review。merge 即可让 hub 标 Brood ✅ 闭环 → 朝着 hub 「DVT v1 RELEASED」推进。 |
clestons
left a comment
There was a problem hiding this comment.
Review: feat(PGL): DVT_INCENTIVE.md v0.1 draft + DVT_ECONOMICS.md — Brood #3
Verdict: APPROVE — 2-round (docs-only: 2 PGL design docs, +790, no code). No blocking findings. Strong, internally-consistent design that aligns with the rest of the DVT program.
Verified — the two 命门 are correctly enshrined ✅
- 命门一 (independence) — §3.1 + §2.1: independent BLS key (not same env as owner key) + independent on-chain-registered policy hash + independent confirmation channel; on-chain evidence (unique pubkey, registered policy hash, operator-namespace disclosure). Matches
dvt-solution.md(#71) and the coordination docs (#79/#80). - 命门二 (incentives NOT bound to signature count) — §3.2 + §4.3 + §8.4: service fee is split equally by
signerMaskbit count, never weighted by stake / cumulative count / success rate. The anti-pattern library (§7) explicitly rejects all three (§7.1 count, §7.4 stake-linear, §7.5 success-rate) plus centralized adjudication (§7.2) and transferable SBT (§7.3). This is exactly right — and §7.5's observation that "success rate = sign/total → maximizing it = blind-signing" is a sharp catch.
Cross-repo consistency (checked against what I reviewed this session) ✅
- BLS DST
BLS_SIG_BLS12381G2_XMD:SHA-256_SSWU_RO_POP_(§8.3, §14.1 #3) matches SP#285BLS.sol+ the hub-frozen decision. - Proof tuple
(signerMask, sigG2)with nopkG1/msgG2/messagePoint, verifier recomputesmsgG2 = hash_to_curve(userOpHash, DST)(§8.3) — matches the SP#285 golden-vector format. - sender-keyed state (§8.5) aligns with the PolicyRegistry / ERC-7562 model (#283); NoBlindSign per
(node, sender)is a good refinement (prevents per-sender selective blind-signing). - Registry/stake (§14.1) verified against SP source (30-ether stake, exit + 30-day cooldown, minStake → BLS auto-invalidation) — consistent with SP#285.
- §14 tech-dependency checklist honestly separates verified / to-verify (@noble v2.0.1 POP support, EIP-2537 precompile on Sepolia/OP, IPolicyRegistry signature pending #283, Mycelium SBT / AgentStore / CityRep not-yet-live) / external-DAO-decision. Excellent hygiene.
Findings (non-blocking — design-open items on a draft)
- [Design-open] Canary slash trust root.
reportBlindSignis permissionless (anyone submits BLS evidence that a node signed) — but proving the request was a Canary that should have been rejected still needs a trusted "this was a decoy" attestation (the hub). That's a partial centralization the §7.2 anti-pattern warns against. The doc flags the Canary protocol as "待 hub #42 详细定义" (§6.2) — recommend making this trust assumption explicit (who attests a request was a Canary, and why that issuer isn't the §7.2 centralized adjudicator). - [Design-open] Diversity-trait Sybil resistance. §4.1 Diversity = strategy-hash + operator + software-stack differs from the median. One operator running N nodes with artificially-diverse policy hashes / distinct addresses could fake diversity. Operator-namespace disclosure (§3.1) and the multiplicity Canary (§6.5) help but don't fully close it — worth a note on Sybil-resistance of the Diversity scoring.
- [Nit] Stale PR description. The PR body says "v0.1 (70%), §8-§9 pending"; the committed doc is actually further along (§8 + §9
IDVTIncentiveinterface + §12-§15 all present, version history showing v1.0/100%). The doc is more complete than the description — harmless, just update the PR body.
Notes
IDVTIncentive interface (§9) makes the right calls: recordCanaryPass hub-multisig-gated (no node self-mints traits), reportBlindSign permissionless (third-party monitoring), SBT forbids transfer/approve, distributeServiceFee by signerMask bits. DVT_ECONOMICS.md is clearly labeled estimate/decision-support and reinforces 命门二 ("做大不靠你多签").
Solid appendix. Approving — the two design-open items (Canary trust root, Diversity Sybil) are worth addressing before the §6/§9 implementation lands, not blockers for a v0.x design draft.
说明
DVT program Brood #3(PGL 激励)的设计文档 v0.1 草稿,完成度 70%。
已完成(§1-§7 + §10)
ROLE_DVT_NODE= PGL 体系内的基础设施公物提供者待补(§8 + §9,等 SP #283)
ROLE_DVT对接表:stake / slash / exit 接口映射 + 服务费结算合约调用IDVTIncentive.solSolidity interface 草稿法律红线复用 Charter
后续
合入后回到 hub #42 + Brood #3 贴进度。等 SP #283 ROLE_DVT slash 触发器定型 → 补 §8 + §9 → v0.2 → hub 命门复核 → v1.0。