Files
papers/lp-102-encrypted-sqlite-replication/lp-102-encrypted-sqlite-replication.tex
zeekay dd93cb41f7 papers: cover-consistency + build pass on Lux Tier-2/3 catalogue
Sweep across the non-Tier-1 paper catalogue (Tier-1 owned by parallel
agent and excluded). All 113 processed papers already had luxcover
wired up; this commit fixes 14 build breakers and produces fresh
PDFs across the catalogue.

Fixes:
- lux-blockchain-scaling-laws: em-dash inside lstlisting -> --
- lux-corona-pq: stale \input pointing at 03-the-corona-scheme renamed
  to 03-the-corona-scheme (file already renamed on disk)
- lux-lattice-cryptography-primer: same Corona->Corona rename
- lux-formal-verification-lean4: Lean source uses unicode (×, ∀, ∃, ∈,
  ∧, ∨, ∩, ≠, ⟨, ⟩, ·, ¬) inside lstlistings. Added a literate map
  so listings render the math glyphs without UTF-8 fault.
- lux-id-did-specification: ✓/✗ in tabular replaced with \ding{51}
  / \ding{55} (pifont). Added pifont package.
- lux-ntt-simd-implementation: middle-dot in Go assembly listings;
  added literate {·}{\textperiodcentered}.
- lux-ntt-transform: μ, ×, –, — in regular text (no T1 fontenc).
  Replaced with $\mu$/$\times$/--/--- via unicode->latex sweep.
- lux-perpetuals-derivatives, lux-quantum-consensus,
  lux-quasar-consensus, lux-tee-computing-mesh: same unicode->latex
  sweep across body text. Also fixed broken math segment
  `$L_{avg} = 10$\times$$` -> `$L_{avg} = 10\times$`.
- lux-zchain: emoji glyphs in roadmap table replaced with
  parenthetical text.
- lux-triple-proof-consensus: dropped duplicate \usepackage{geometry}
  that clashed with luxcover (geometry option clash).
- pq: defined missing \Rq macro.

PDFs rebuilt for the full Tier-2/3 set.

Excluded (Tier-1, parallel agent): lp-073-pulsar, lp-stricte2epq,
dag-evm-formal, lp-010-quasar-stm-{3,4}, lp-020-quasar-consensus,
lux-institutional-custody, lux-nist-mptc-submission, pqsafe-il5,
pq-rns, plus shared/ and lps/.
2026-05-13 01:27:59 -07:00

89 lines
2.8 KiB
TeX

\documentclass[11pt,a4paper]{article}
\usepackage{../shared/luxcover}
\usepackage[utf8]{inputenc}
\usepackage[T1]{fontenc}
\usepackage{amsmath,amssymb,amsfonts,amsthm}
\usepackage{graphicx}
\usepackage{hyperref}
\usepackage{booktabs}
\usepackage{listings}
\usepackage{xcolor}
\usepackage{tikz}
\usepackage{float}
\usepackage{enumitem}
\usepackage{array}
\usepackage{tabularx}
\input{../shared/lstlang}
\usetikzlibrary{arrows.meta,positioning,shapes.geometric,fit,calc}
\hypersetup{colorlinks=true,linkcolor=black,citecolor=blue,urlcolor=blue}
\lstset{
basicstyle=\ttfamily\scriptsize,
breaklines=true,
frame=single,
numbers=left,
numberstyle=\tiny\color{gray},
keywordstyle=\color{blue!70!black}\bfseries,
commentstyle=\color{green!50!black}\itshape,
stringstyle=\color{red!60!black},
showstringspaces=false,
}
\newtheorem{theorem}{Theorem}[section]
\newtheorem{lemma}[theorem]{Lemma}
\newtheorem{definition}{Definition}[section]
\newtheorem{proposition}[theorem]{Proposition}
\newtheorem{remark}{Remark}[section]
\newtheorem{invariant}{Invariant}[section]
\title{LP-102: Encrypted SQLite Replication Standard\\(age + Replicate)}
\author{
Zach Kelling\thanks{Corresponding author: [email protected]}\\
\textit{Lux Industries}\\
\texttt{[email protected]}
}
\date{2026}
\begin{document}
\luxcoverpage
\begin{abstract}
We define the standard for durable, encrypted SQLite database replication
across the Lux ecosystem using age (X25519) encryption and continuous
WAL-based streaming to S3-compatible storage. Per-organization SQLite
databases running on Hanzo Base are the canonical data model for
application state in Lux services. Kubernetes pods are ephemeral.
Persistent Volume Claims fail. This proposal specifies an encrypted
replication layer---\texttt{hanzoai/replicate} (a Litestream fork with
age end-to-end encryption)---that provides sub-second WAL shipping to
S3-compatible object stores with per-principal key isolation derived
through HKDF from a master key held in KMS. The chain remains the source
of truth for securities and on-chain state; this standard addresses the
complementary durability requirement for application state: sessions,
preferences, audit logs, KYC documents, and compliance records. We
specify the encryption scheme, the replication protocol, the sidecar
deployment pattern, the key hierarchy, and the recovery procedure.
\end{abstract}
\tableofcontents
\newpage
%% ============================================================
\input{sections/01-introduction}
\input{sections/02-motivation}
\input{sections/03-specification}
\input{sections/04-architecture}
\input{sections/05-security-considerations}
\input{sections/06-reference-implementation}
\input{sections/07-post-quantum-security}
\input{sections/08-compatibility}
\input{sections/09-operational-considerations}
\input{sections/99-conclusion}
\end{document}