Skip to content

Commit 8743c2d

Browse files
committed
editorial: note conserved-value teeth law in settlement quorum primer
A quorum-attested counter has teeth only over conserved value, because conservation supplies the adverse counterparty that makes an attestation worth trusting. The same machinery over a non-conserved quantity (reputation, a cooperation score) records and makes legible but cannot enforce. Deepens the reputation-as-a-gate trap and explains why settlement stays scoped to conserved-value domains. Signed-off-by: Chris Raynor <chris@raynor.tech>
1 parent 1bb3be2 commit 8743c2d

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

primer.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,8 @@ The institutions are the members, not the machines. A bank is a durable principa
166166

167167
The gate is assent, not outcome, and that distinction is where real systems live. A sender short of funds declines, and the refusal is not silence to be timed out but a signed negative that travels back and unstages whatever the other side had prepared. Even two assents settle nothing on their own, because agreement that a transfer should happen is not the durable fact that it did. Finality is a write to the ledger the protocol defers to, and a lost confirmation is resolved by reading that ledger, never by re-running the quorum. The protocol carries the requirements, witnesses the record, and yields the truth of the balance to the source of truth, exactly as it yields physical safety to the actuator floor.
168168

169+
The teeth in this gate come from conservation, not from the quorum alone. A transfer moves a conserved quantity, so every credit is someone's debit. The party on the losing side is present, and motivated to refuse a false assent, and that adverse signer is what makes the attestation worth trusting. Run the same quorum machinery over a quantity that is not conserved, a reputation or a cooperation score, and the teeth are gone. Nobody is out of pocket when the number is inflated, so a colluding ring can mint it for nothing. The parties it harms are whoever later trusts the score, and they are not present to object. The protocol can still carry such a counter and make it legible. It cannot make it true. This is the deeper reason reputation is never a gate, named among the traps above, and the reason settlement stays scoped to conserved-value domains. Conservation is what supplies the adverse counterparty. Without one, a signed number is a claim, not a fact.
170+
169171
## The threat model: abandonment, obsolescence, poison
170172

171173
Three longevity threats, deliberately kept distinct because their defences are different, and a design that conflates them handles none:

0 commit comments

Comments
 (0)