From 699678cf4cd2e6304259459dd89d15b519ba83e0 Mon Sep 17 00:00:00 2001 From: Liam Monninger Date: Mon, 11 Nov 2024 13:29:44 +0100 Subject: [PATCH 01/12] feat: the bilbao model. --- MIP/mip-n/README.md | 48 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 MIP/mip-n/README.md diff --git a/MIP/mip-n/README.md b/MIP/mip-n/README.md new file mode 100644 index 00000000..5bd20c01 --- /dev/null +++ b/MIP/mip-n/README.md @@ -0,0 +1,48 @@ +# MIP-54: The Bilbao Model +- **Description**: Proposes an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. +- **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) +- **Reviewer**: Andreas Penzkofer +- **Desiderata**: $\emptyset$ + +## Abstract + +We defined the Bilbao Model as an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). + +## Motivation + +The Bilbao Model is a intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls). + +## Specification + +We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](https://github.com/movementlabsxyz/MIP/pull/53). + +| Category | Criterion | Evaluation | +|-----------|-----------|------------| +| **General** | | | +|X| When to use | - During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network. | +|X| Suitable preceding models.
- The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | NONE | +|X| Suitable succeeding models | - [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | +|X| Technological motivations | - Contends with bridge fallibility under high operational assumptions.
- Allows for building genesis state which can be altered prior to open launch. | +|X| Usership motivations | - Allows for early release of network. | +| **Components** | | | +|X| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account ex post facto. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | +|X| Bridge Insurance Account | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | +|X| Right to Rollback | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | +|X| Right to Invalidate and Migrate | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | +|X| Low-cost DA | The model assumes that the cost of the DA is low, for example that in internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|X| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that in internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|X| Signers Whitelist (Optional) | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | +| **Operational Assumptions** | | | +|X| **Low Availability Requirements** | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | +|X| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage, or else the network would forever remain under the Bilbao Model. | +|X| **Trust of Governance** | Users are willing to trust governing body with the operations described. | + +### Pros +1. **Delayed calculation of rewards to cover centralized expenses**: because fees are held in the gas pool, the governing body need not calculate rewards which would be used to cover their own operating expenses until control of the governance is transferred to the community. The governing body can, for example, decide to use a percentage of captured gas to pay the centralized operators when a more stable token price is known some time after the L2 has been operational. +2. **Usable but recoverable period of network liveness**: the model allows for an early-stage network to be introduced with a high level of control over the network's state. This allows for the network to be introduced with the potential for long-term implications which is critical to network utility, while at the same time minimizing the implication of early misuse. + +### Cons +1. **Highest trust in governance**: the model requires complete trust in the governing body. +2. **1:1 token correlation**: the model asserts a 1:1 token correlation between the L1 staking and L2 gas tokens. This may not be desirable in all cases as exploits on the bridge may compromise the security of staking on the L1 or sybil resistance on the L2. + +## Verification From 3bd77e4eb44872add13108628cb462887e796566 Mon Sep 17 00:00:00 2001 From: Liam Monninger <79056955+l-monninger@users.noreply.github.com> Date: Mon, 11 Nov 2024 13:33:10 +0100 Subject: [PATCH 02/12] fix: typo --- MIP/mip-n/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/MIP/mip-n/README.md b/MIP/mip-n/README.md index 5bd20c01..a6195879 100644 --- a/MIP/mip-n/README.md +++ b/MIP/mip-n/README.md @@ -6,11 +6,11 @@ ## Abstract -We defined the Bilbao Model as an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). +We define the Bilbao Model as an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly-controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). ## Motivation -The Bilbao Model is a intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls). +The Bilbao Model is a intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls) and a reduction of the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). ## Specification From 96427deb0858e6a8abd97c519d7cdda7993991a8 Mon Sep 17 00:00:00 2001 From: Liam Monninger <79056955+l-monninger@users.noreply.github.com> Date: Mon, 11 Nov 2024 13:33:22 +0100 Subject: [PATCH 03/12] fix: typo --- MIP/mip-n/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MIP/mip-n/README.md b/MIP/mip-n/README.md index a6195879..84c4a87c 100644 --- a/MIP/mip-n/README.md +++ b/MIP/mip-n/README.md @@ -1,4 +1,4 @@ -# MIP-54: The Bilbao Model +# MIP-55: The Bilbao Model - **Description**: Proposes an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. - **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) - **Reviewer**: Andreas Penzkofer From 360eb113fc82f65d057c3a6e267cb10e79e37467 Mon Sep 17 00:00:00 2001 From: Liam Monninger <79056955+l-monninger@users.noreply.github.com> Date: Mon, 11 Nov 2024 13:34:10 +0100 Subject: [PATCH 04/12] fix: typo --- MIP/mip-n/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/MIP/mip-n/README.md b/MIP/mip-n/README.md index 84c4a87c..bfafa998 100644 --- a/MIP/mip-n/README.md +++ b/MIP/mip-n/README.md @@ -19,8 +19,8 @@ We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing P | Category | Criterion | Evaluation | |-----------|-----------|------------| | **General** | | | -|X| When to use | - During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network. | -|X| Suitable preceding models.
- The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | NONE | +|X| When to use | - During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network.
- The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | +|X| Suitable preceding models.
| NONE | |X| Suitable succeeding models | - [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | |X| Technological motivations | - Contends with bridge fallibility under high operational assumptions.
- Allows for building genesis state which can be altered prior to open launch. | |X| Usership motivations | - Allows for early release of network. | From 23e849b45e2797874c7fc09029f17488d50f9abf Mon Sep 17 00:00:00 2001 From: Liam Monninger <79056955+l-monninger@users.noreply.github.com> Date: Mon, 11 Nov 2024 15:28:13 +0100 Subject: [PATCH 05/12] fix: table --- MIP/mip-n/README.md | 32 +++++++++++++++++--------------- 1 file changed, 17 insertions(+), 15 deletions(-) diff --git a/MIP/mip-n/README.md b/MIP/mip-n/README.md index bfafa998..e0ad0e10 100644 --- a/MIP/mip-n/README.md +++ b/MIP/mip-n/README.md @@ -19,23 +19,25 @@ We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing P | Category | Criterion | Evaluation | |-----------|-----------|------------| | **General** | | | -|X| When to use | - During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network.
- The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | -|X| Suitable preceding models.
| NONE | -|X| Suitable succeeding models | - [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | -|X| Technological motivations | - Contends with bridge fallibility under high operational assumptions.
- Allows for building genesis state which can be altered prior to open launch. | -|X| Usership motivations | - Allows for early release of network. | +|| When to use | During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network | +||| The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | +|| Suitable preceding models.
| NONE | +|| Suitable succeeding models | [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | +|| Technological motivations | Contends with bridge fallibility under high operational assumptions. | +||| Allows for building genesis state which can be altered prior to open launch. | +|| Usership motivations | Allows for early release of network. | | **Components** | | | -|X| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account ex post facto. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | -|X| Bridge Insurance Account | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | -|X| Right to Rollback | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | -|X| Right to Invalidate and Migrate | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | -|X| Low-cost DA | The model assumes that the cost of the DA is low, for example that in internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | -|X| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that in internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | -|X| Signers Whitelist (Optional) | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | +|| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account ex post facto. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | +|| Bridge Insurance Account | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | +|| Right to Rollback | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | +|| Right to Invalidate and Migrate | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | +|| Low-cost DA | The model assumes that the cost of the DA is low, for example that in internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that in internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|| Signers Whitelist (Optional) | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | | **Operational Assumptions** | | | -|X| **Low Availability Requirements** | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | -|X| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage, or else the network would forever remain under the Bilbao Model. | -|X| **Trust of Governance** | Users are willing to trust governing body with the operations described. | +|| **Low Availability Requirements** | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | +|| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage, or else the network would forever remain under the Bilbao Model. | +|| **Trust of Governance** | Users are willing to trust governing body with the operations described. | ### Pros 1. **Delayed calculation of rewards to cover centralized expenses**: because fees are held in the gas pool, the governing body need not calculate rewards which would be used to cover their own operating expenses until control of the governance is transferred to the community. The governing body can, for example, decide to use a percentage of captured gas to pay the centralized operators when a more stable token price is known some time after the L2 has been operational. From c3a93618c22710475061ca11d736156a19b307ee Mon Sep 17 00:00:00 2001 From: apenzk Date: Tue, 12 Nov 2024 15:57:19 +0100 Subject: [PATCH 06/12] codeowners and folder name --- .github/CODEOWNERS | 2 ++ MIP/{mip-n => mip-55}/README.md | 0 2 files changed, 2 insertions(+) rename MIP/{mip-n => mip-55}/README.md (100%) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 3d5e5fd6..48093db4 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -14,3 +14,5 @@ /MIP/mip15/ @l-monninger @apenzk /MD/md-15/ @l-monninger @apenzk + +/MIP/mip-55/ @l-monninger diff --git a/MIP/mip-n/README.md b/MIP/mip-55/README.md similarity index 100% rename from MIP/mip-n/README.md rename to MIP/mip-55/README.md From 2cf9cee782311e93f2368358949f6cc083cc71a0 Mon Sep 17 00:00:00 2001 From: apenzk Date: Wed, 12 Feb 2025 18:06:45 +0100 Subject: [PATCH 07/12] edits --- .vscode/spellright.dict | 1 + MIP/mip-55/README.md | 6 ++++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.vscode/spellright.dict b/.vscode/spellright.dict index 19f37f90..19829b48 100644 --- a/.vscode/spellright.dict +++ b/.vscode/spellright.dict @@ -1,6 +1,7 @@ Changelog Fastconfirmation multisig +testnet timelock timelocks trustlessness diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index e0ad0e10..e2848c80 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -1,7 +1,7 @@ # MIP-55: The Bilbao Model + - **Description**: Proposes an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. - **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) -- **Reviewer**: Andreas Penzkofer - **Desiderata**: $\emptyset$ ## Abstract @@ -40,11 +40,13 @@ We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing P || **Trust of Governance** | Users are willing to trust governing body with the operations described. | ### Pros + 1. **Delayed calculation of rewards to cover centralized expenses**: because fees are held in the gas pool, the governing body need not calculate rewards which would be used to cover their own operating expenses until control of the governance is transferred to the community. The governing body can, for example, decide to use a percentage of captured gas to pay the centralized operators when a more stable token price is known some time after the L2 has been operational. 2. **Usable but recoverable period of network liveness**: the model allows for an early-stage network to be introduced with a high level of control over the network's state. This allows for the network to be introduced with the potential for long-term implications which is critical to network utility, while at the same time minimizing the implication of early misuse. ### Cons -1. **Highest trust in governance**: the model requires complete trust in the governing body. + +1. **Highest trust in governance**: the model requires complete trust in the governing body. 2. **1:1 token correlation**: the model asserts a 1:1 token correlation between the L1 staking and L2 gas tokens. This may not be desirable in all cases as exploits on the bridge may compromise the security of staking on the L1 or sybil resistance on the L2. ## Verification From 3899181e711624339759fe54c8679993ea222357 Mon Sep 17 00:00:00 2001 From: apenzk Date: Wed, 12 Feb 2025 18:11:34 +0100 Subject: [PATCH 08/12] add old review --- MIP/mip-55/README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index e2848c80..2345305a 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -19,7 +19,7 @@ We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing P | Category | Criterion | Evaluation | |-----------|-----------|------------| | **General** | | | -|| When to use | During a genesis period after which the resulting state is intended to be accepted as canonical by a more decentralized network | +|| When to use | During a genesis period and after after which the resulting state is intended to be accepted as canonical entry point for a progressive more decentralized network. | ||| The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | || Suitable preceding models.
| NONE | || Suitable succeeding models | [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | @@ -27,16 +27,16 @@ We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing P ||| Allows for building genesis state which can be altered prior to open launch. | || Usership motivations | Allows for early release of network. | | **Components** | | | -|| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account ex post facto. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | +|| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account retroactively. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | || Bridge Insurance Account | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | || Right to Rollback | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | || Right to Invalidate and Migrate | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | -|| Low-cost DA | The model assumes that the cost of the DA is low, for example that in internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | -|| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that in internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|| Low-cost DA | The model assumes that the cost of the DA is low, for example that an internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +|| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that an internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | || Signers Whitelist (Optional) | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | | **Operational Assumptions** | | | || **Low Availability Requirements** | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | -|| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage, or else the network would forever remain under the Bilbao Model. | +|| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage are resolved, or else the network would forever remain under the Bilbao Model. | || **Trust of Governance** | Users are willing to trust governing body with the operations described. | ### Pros From 61f941a96347c43c76160112bdcad76642626c61 Mon Sep 17 00:00:00 2001 From: apenzk Date: Sun, 9 Mar 2025 21:46:04 +0100 Subject: [PATCH 09/12] edits --- MIP/mip-53/README.md | 40 +++++++++++++++++++--------------------- MIP/mip-55/README.md | 6 +++--- 2 files changed, 22 insertions(+), 24 deletions(-) diff --git a/MIP/mip-53/README.md b/MIP/mip-53/README.md index d7082402..abb6a6e1 100644 --- a/MIP/mip-53/README.md +++ b/MIP/mip-53/README.md @@ -6,7 +6,7 @@ ## Abstract -Movement's L2 system will progress through various changes during its life, and each stage is presented through a new L2 model (which we call **progressive L2 model**). Thus a given progressive L2 model describes as a particular stage in the evolution of the L2 system. A given progressive L2 model stage is defined through the sum of its improvements and it may encompass components that are not directly related to each other. +Movement's L2 (Level 2) system will progress through various changes during its life, and each stage is presented through a new L2 model (which we call **progressive L2 model**). Thus a given progressive L2 model describes as a particular stage in the evolution of the L2 system. A given progressive L2 model stage is defined through the sum of its improvements and it may encompass components that are not directly related to each other. We propose a set of conventions including naming, formatting, and related standards to assist reviewing proposals for said models. Finally a collection point of these terms to provide an overview @@ -18,11 +18,11 @@ In order to facilitate the development of L2 systems, it is important to have a Progressive L2 models should adhere to conventions of the following forms: -- **naming**: apply a standard naming format. -- **acknowledgement of standards**: acknowledge the conventions of this MIP. -- **summary table**: a table succinctly noting key features of the model. -- **statement towards progression**: a statement of how the model suits a progressive approach to L2 design and release. -- **pros and cons**: a list of pros and cons. +- **Naming**: apply a standard naming format. To be introduced in the MIP title. +- **Acknowledgement of standards**: acknowledge the conventions of this MIP. +- **Summary table**: a table succinctly noting key features of the model. +- **Statement towards progression**: a statement of how the model suits a progressive approach to L2 design and release. +- **Pros and cons**: a list of pros and cons. ### Naming @@ -32,27 +32,25 @@ In text, the model SHOULD be referred to as "[Location] Model," that is, the nam ### Acknowledgement of Standards -At the start of the "Specification" section of the MIP, the author MUST include the following markdown snippet: +At the start of the "Specification" section of the MIP, the author MUST include the following text: -``` -We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](../mip-53/). -``` +_The conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](../mip-53) are applied._ ### Summary Table All proposed progressive L2 models MUST complete the following table: -| Category | Criterion | Evaluation | -|-----------|-----------|------------| -| **General** | | | -|X| When to use | A brief general description of the circumstances under which the model is appropriate. | -|X| Suitable preceding models | A list of models or descriptions of models that are suitable precursors to this model. | -|X| Suitable succeeding models | A list of models or descriptions of models that are suitable successors to this model. | -|X| Technological motivations | A brief description of the technological motivations for using the model. | -|X| Usership motivations | A brief description of the user motivations for using the model. | -| **Components** | | | -|X| [Component Name 1](link/to/component/design) | A description of usage of said component. | -|X| [Component Name 2](link/to/component/design) | A description of usage of said component. | +| Category / Criterion | Evaluation | +|-----------|------------| +| **General** | | +| _When to use_ | A brief general description of the circumstances under which the model is appropriate. | +| _Suitable preceding models_ | A list of models or descriptions of models that are suitable precursors to this model. | +| _Suitable succeeding models_ | A list of models or descriptions of models that are suitable successors to this model. | +| _Technological motivations_ | A brief description of the technological motivations for using the model. | +| _Usership motivations_ | A brief description of the user motivations for using the model. | +| **Components** | | +| _[Component Name 1](link/to/component/design)_ | A description of usage of said component. | +| _[Component Name 2](link/to/component/design)_ | A description of usage of said component. | ### Statement Towards Progression diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index 2345305a..fe9dff18 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -1,12 +1,12 @@ # MIP-55: The Bilbao Model -- **Description**: Proposes an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. +- **Description**: Proposes an L2 model with Native Bridge and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. - **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) - **Desiderata**: $\emptyset$ ## Abstract -We define the Bilbao Model as an AB-FFS L2 model that features a Gas Deficit Minter, Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly-controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). +We define the Bilbao Model as L2 (Level 2) model with Native Bridge and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly-controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). ## Motivation @@ -14,7 +14,7 @@ The Bilbao Model is a intended as a complete response to [MD-38](https://github. ## Specification -We acknowledge and apply the conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](https://github.com/movementlabsxyz/MIP/pull/53). +_The conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](../mip-53) are applied._ | Category | Criterion | Evaluation | |-----------|-----------|------------| From 67557ec17abc6fbd588af963e62a756b5fcbb46b Mon Sep 17 00:00:00 2001 From: apenzk Date: Sun, 9 Mar 2025 21:55:23 +0100 Subject: [PATCH 10/12] edits --- MIP/mip-55/README.md | 54 ++++++++++++++++++++++++-------------------- 1 file changed, 29 insertions(+), 25 deletions(-) diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index fe9dff18..430f24a1 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -2,42 +2,44 @@ - **Description**: Proposes an L2 model with Native Bridge and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. - **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) -- **Desiderata**: $\emptyset$ +- **Desiderata**: [MD-38](https://github.com/movementlabsxyz/MIP/pulls) ## Abstract -We define the Bilbao Model as L2 (Level 2) model with Native Bridge and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly-controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). +We define the Bilbao Model as L2 (Level 2) model with Native Bridge (**NB**) and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA, high centralized control, and ultimately high operational assumptions. At the core of this model is the highly-controlled use of trusted signers with high liquidity to replace components proposed in the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). + +The model may be extended beyond postconfirmation to feature a full Fast Finality Settlement (FFS), in which case we could refer to main characteristics also as **NB-FFS**. ## Motivation -The Bilbao Model is a intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls) and a reduction of the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). +The Bilbao Model is intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls) and a reduction of the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). ## Specification _The conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](../mip-53) are applied._ -| Category | Criterion | Evaluation | -|-----------|-----------|------------| -| **General** | | | -|| When to use | During a genesis period and after after which the resulting state is intended to be accepted as canonical entry point for a progressive more decentralized network. | -||| The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduce in genesis state. | -|| Suitable preceding models.
| NONE | -|| Suitable succeeding models | [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | -|| Technological motivations | Contends with bridge fallibility under high operational assumptions. | -||| Allows for building genesis state which can be altered prior to open launch. | -|| Usership motivations | Allows for early release of network. | -| **Components** | | | -|| Gas Deficit Minter | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account retroactively. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | -|| Bridge Insurance Account | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | -|| Right to Rollback | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | -|| Right to Invalidate and Migrate | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | -|| Low-cost DA | The model assumes that the cost of the DA is low, for example that an internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | -|| Low-cost Settlement | The model assumes that the cost of settlement is low, for example that an internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | -|| Signers Whitelist (Optional) | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | -| **Operational Assumptions** | | | -|| **Low Availability Requirements** | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | -|| **Fixes Can be Introduced Prior to Relinquishing Rights** | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage are resolved, or else the network would forever remain under the Bilbao Model. | -|| **Trust of Governance** | Users are willing to trust governing body with the operations described. | +| Category / _Criterion_ | Evaluation | +|-----------|------------| +| **General** | | +| _When to use_ | During a genesis period and after after which the resulting state is intended to be accepted as canonical entry point for a progressive more decentralized network. | +|| The benefits to the network of an immediate release against early technology outstrip the potential costs of failing to correctly resolve vulnerabilities introduced in a genesis state. | +| _Suitable preceding models_ | NONE | +| _Suitable succeeding models_ | [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54) | +| _Technological motivations_ | Contends with bridge fallibility under high operational assumptions. | +|| Allows for building genesis state which can be altered prior to launch. | +| _Usership motivations_ | Allows for early release of network. | +| **Components** | | +| _Gas Deficit Minter_ | We recognize the role of the Governed Gas Pool as one which can be replaced by simply computing and minting the burned gas to a governed account retroactively. The Gas Deficit Minter thus takes on the role of allowing for the manual capture of gas fees. | +| _Bridge Insurance Account_ | We recognize the role of the Bridge Insurance Fund as similar to that of a singular account which can replace bridge losses. While the guarantees are weaker than those proposed under [MIP-54: The Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54), this can be sufficient to insure safe liquidity invariance under the presumed Right to Rollback or Right to Invalidate and Migrate | +| _Right to Rollback_ | Operators may revert or roll back ledger versions prior to the Bilbao Model concluding its role as a genesis stage | +| _Right to Invalidate and Migrate_ | Operators may invalidate or migrate elements of state prior to the Bilbao Model concluding its role as a genesis stage. | +| _Low-cost DA_ | The model assumes that the cost of the DA is low, for example that an internal or testnet environment is used for the genesis DA. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +| _Low-cost Settlement_ | The model assumes that the cost of settlement is low, for example that an internal or testnet environment is used for the genesis settlement. This allows for concerns about gas fees to be deferred until the network is more stable, i.e., for immediate financial risks to the network to be regarded as negligible. | +| _Signers Whitelist (Optional)_ | The model assumes that the signers are whitelisted and that the whitelist can be updated by the governing body. This increases the trustedness of the genesis ceremony and can be used to ensure that the network is not compromised by a malicious actor. | +| **Operational Assumptions** | | +| _Low Availability Requirements_ | Crashes are allowed to occur frequently. The state of the network is critical; its liveness is not. | +| _Fixes Can be Introduced Prior to Relinquishing Rights_ | Once the Right to Rollback and the Right to Invalidate and Migrate are relinquished, all ability to fix vulnerabilities introduced in genesis state will be lost. To this end, it is assumed that outstanding concerns at the time of transition to the next stage are resolved, or else the network would forever remain under the Bilbao Model. | +| _Trust of Governance_ | Users are willing to trust governing body with the operations described. | ### Pros @@ -50,3 +52,5 @@ _The conventions of [MIP-53: Conventions for Proposing Progressive L2 Models](.. 2. **1:1 token correlation**: the model asserts a 1:1 token correlation between the L1 staking and L2 gas tokens. This may not be desirable in all cases as exploits on the bridge may compromise the security of staking on the L1 or sybil resistance on the L2. ## Verification + +## Changelog From dd569e013884ba24f7187b5499d35821a798f1a4 Mon Sep 17 00:00:00 2001 From: Liam Monninger Date: Fri, 23 May 2025 09:55:16 -1000 Subject: [PATCH 11/12] fix: broken link --- MIP/mip-55/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index 430f24a1..796a0d0c 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -12,7 +12,7 @@ The model may be extended beyond postconfirmation to feature a full Fast Finalit ## Motivation -The Bilbao Model is intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pulls) and a reduction of the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). +The Bilbao Model is intended as a complete response to [MD-38](https://github.com/movementlabsxyz/MIP/pull/38) and a reduction of the [Biarritz Model](https://github.com/movementlabsxyz/MIP/pull/54). ## Specification From 9c7be20c02898697c27c207906bb51a4883c3925 Mon Sep 17 00:00:00 2001 From: Liam Monninger Date: Fri, 23 May 2025 09:55:40 -1000 Subject: [PATCH 12/12] fix: broken link --- MIP/mip-55/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MIP/mip-55/README.md b/MIP/mip-55/README.md index 796a0d0c..ee4498f1 100644 --- a/MIP/mip-55/README.md +++ b/MIP/mip-55/README.md @@ -2,7 +2,7 @@ - **Description**: Proposes an L2 model with Native Bridge and Postconfirmation protocol that features a Gas Deficit Minter, Native Bridge Insurance Account, low-cost DA and settlement, high centralized control, and ultimately high operational assumptions. - **Authors**: [Liam Monninger](mailto:liam@movementlabs.xyz) -- **Desiderata**: [MD-38](https://github.com/movementlabsxyz/MIP/pulls) +- **Desiderata**: [MD-38](https://github.com/movementlabsxyz/MIP/pull/38) ## Abstract