Files
zeekay 1ecc25e9cf papers: consolidate Photon/Wave/Nova/Nebula/Ray/Field protocol stubs into lux-consensus-engines
The seven engine specifications (lux-{photon,wave,nova,nebula,prism,ray,field}-protocol)
were fragmented short notes documenting layers of the same Quasar consensus stack.
This commit merges them into a single canonical reference, lux-consensus-engines.tex,
that uses one preamble, one set of theorems, one bibliography, and one composition
chapter showing how the engines layer into the LP-020 finality pipeline.

The seven originals are reduced to single-page breadcrumb stubs pointing at the
consolidated paper; their sections/ content is preserved on disk for git history.

- new: lux-consensus-engines/ (50 pages, 646KB PDF, ~2900 lines tex)
- breadcrumbs: each original keeps cover + title + stub paragraph naming its chapter
- composition: chapter 9 records the layered contract Photon < Wave < Nova < ...
- bibliography: consolidated from the seven original thebibliography blocks
2026-05-13 01:02:25 -07:00

59 lines
2.4 KiB
TeX

\section{Safety Analysis}
\label{sec:photon-safety}
\subsection{Independence of Confidence Counters}
\begin{theorem}[Pipelined Safety]
\label{thm:photon-pipeline-safety}
For $m$ independent transactions (no shared conflict sets) in the Photon pipeline, the
probability that any transaction experiences a safety violation is at most:
\[
\Pr[\text{any violation}] \leq m \cdot (q_0/q_1)^\beta
\]
where $q_0, q_1$ are the supermajority probabilities for minority and majority colors.
\end{theorem}
\begin{proof}
Consider two transactions $t_i, t_j$ in the pipeline with independent conflict sets.
Their confidence counters $D_{i,\cdot}$ and $D_{j,\cdot}$ evolve based on the same
sample $S$ but independent color queries.
For transaction $t_i$, the responses from $S$ about $t_i$'s conflict are drawn from
the population distribution for $t_i$'s conflict set. Similarly for $t_j$. Since the
conflict sets are disjoint, the responses are independent random variables (the same
validator may respond differently for $t_i$ and $t_j$).
Therefore, the confidence counter evolution for $t_i$ is statistically independent of
$t_j$'s. The safety violation probability for each transaction is $(q_0/q_1)^\beta$
(from the Wave analysis), and by a union bound over $m$ transactions:
\[
\Pr[\text{any violation}] \leq m \cdot (q_0/q_1)^\beta
\]
For $m = 100$ and $(q_0/q_1)^\beta < 2^{-128}$: $100 \cdot 2^{-128} < 2^{-121}$,
still negligible.
\end{proof}
\subsection{Conflicting Pipeline Entries}
\begin{lemma}[Same-Conflict Serialization]
\label{lem:photon-serialization}
If two transactions $t_i, t_j$ in the pipeline belong to the same conflict set
$\mathcal{C}$, the Photon protocol serializes their finalization: $t_j$ cannot finalize
until $t_i$'s conflict is resolved.
\end{lemma}
\begin{proof}
When $t_i \in \mathcal{C}(t_j)$, the validator's preference for $t_j$ depends on $t_i$'s
outcome. The confidence counter for $t_j$ cannot reach $\beta$ until the population
has converged on $t_i$'s resolution, because the supermajority condition for $t_j$
requires consistency with $t_i$'s resolution. This serialization adds at most $\beta$
additional rounds for the second transaction, which is the normal single-transaction
finality time.
\end{proof}
%% -----------------------------------------------------------------------
%% 5. PIPELINE STALL ANALYSIS
%% -----------------------------------------------------------------------