mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-03 05:07:46 +00:00
zeekay
9504b4c3ef
Sweep across the non-Tier-1 paper catalogue (Tier-1 owned by parallel
agent and excluded). All 113 processed papers already had luxcover
wired up; this commit fixes 14 build breakers and produces fresh
PDFs across the catalogue.
Fixes:
- lux-blockchain-scaling-laws: em-dash inside lstlisting -> --
- lux-corona-pq: stale \input pointing at 03-the-corona-scheme renamed
to 03-the-corona-scheme (file already renamed on disk)
- lux-lattice-cryptography-primer: same Corona->Corona rename
- lux-formal-verification-lean4: Lean source uses unicode (×, ∀, ∃, ∈,
∧, ∨, ∩, ≠, ⟨, ⟩, ·, ¬) inside lstlistings. Added a literate map
so listings render the math glyphs without UTF-8 fault.
- lux-id-did-specification: ✓/✗ in tabular replaced with \ding{51}
/ \ding{55} (pifont). Added pifont package.
- lux-ntt-simd-implementation: middle-dot in Go assembly listings;
added literate {·}{\textperiodcentered}.
- lux-ntt-transform: μ, ×, –, — in regular text (no T1 fontenc).
Replaced with $\mu$/$\times$/--/--- via unicode->latex sweep.
- lux-perpetuals-derivatives, lux-quantum-consensus,
lux-quasar-consensus, lux-tee-computing-mesh: same unicode->latex
sweep across body text. Also fixed broken math segment
`$L_{avg} = 10$\times$$` -> `$L_{avg} = 10\times$`.
- lux-zchain: emoji glyphs in roadmap table replaced with
parenthetical text.
- lux-triple-proof-consensus: dropped duplicate \usepackage{geometry}
that clashed with luxcover (geometry option clash).
- pq: defined missing \Rq macro.
PDFs rebuilt for the full Tier-2/3 set.
Excluded (Tier-1, parallel agent): lp-073-pulsar, lp-stricte2epq,
dag-evm-formal, lp-010-quasar-stm-{3,4}, lp-020-quasar-consensus,
lux-institutional-custody, lux-nist-mptc-submission, pqsafe-il5,
pq-rns, plus shared/ and lps/.
70 lines
2.7 KiB
TeX
70 lines
2.7 KiB
TeX
\section{Sovereign Chain Governance}
|
|
|
|
\label{sec:governance}
|
|
%% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
\subsection{Separation of Concerns}
|
|
|
|
Teleport cleanly separates three authority domains:
|
|
|
|
\begin{table}[h]
|
|
\centering
|
|
\small
|
|
\begin{tabular}{lll}
|
|
\toprule
|
|
\textbf{Domain} & \textbf{Controller} & \textbf{Scope} \\
|
|
\midrule
|
|
Security & MPC signer set & Mint/release authorization \\
|
|
Economics & Chain governor & Fees, limits, strategies \\
|
|
Protocol & Immutable code & Nonce checks, verification \\
|
|
\bottomrule
|
|
\end{tabular}
|
|
\caption{Authority domain separation. No domain can override another.}
|
|
\label{tab:separation}
|
|
\end{table}
|
|
|
|
\begin{property}[Governance Isolation]
|
|
\label{prop:isolation}
|
|
For any governor $G_C$ of chain $C$:
|
|
\begin{enumerate}[nosep]
|
|
\item $G_C$ cannot call \texttt{bridgeMint} without valid MPC signature $\sigma$
|
|
\item $G_C$ cannot modify $\mathcal{N}$ (nonce bitmap) directly
|
|
\item $G_C$ cannot set $f_b > 100$ bps (hard-coded maximum)
|
|
\item $G_C$ cannot change stakeholder vault without 48-hour timelock
|
|
\item $G_C$ cannot change MPC signers (MPC-controlled, configurable delay up to 7 days)
|
|
\end{enumerate}
|
|
\end{property}
|
|
|
|
\subsection{Per-Chain Deployment}
|
|
|
|
Each chain deploys an independent OmnichainRouter with its own governance:
|
|
|
|
\begin{center}
|
|
\small
|
|
\begin{tabular}{lll}
|
|
\toprule
|
|
\textbf{Chain} & \textbf{Governor} & \textbf{Fee Recipient} \\
|
|
\midrule
|
|
Lux C-Chain & LUX DAO & xLUX (LiquidLUX) \\
|
|
Zoo EVM & ZOO DAO & ZOO Stakers \\
|
|
Third-party L1 & Their DAO & Their staking vault \\
|
|
\bottomrule
|
|
\end{tabular}
|
|
\end{center}
|
|
|
|
The MPC signer set can be shared across chains or each chain can maintain its own. In either case, the fee flow is sovereign to each chain.
|
|
|
|
\subsection{Signer Rotation}
|
|
|
|
The rotation delay is a configurable operational parameter set by the governor (default 24 hours, minimum 0 for instant rotation, maximum 7 days). The delay is an operational convenience---not a security invariant---because the MPC threshold \emph{is} the trust model. A compromised governor cannot rotate signers; only the current $t$-of-$n$ MPC set can initiate rotation.
|
|
|
|
\begin{enumerate}[nosep]
|
|
\item Current $t$-of-$n$ MPC set signs rotation proposal with new MPC group address.
|
|
\item Configurable delay begins (default 24h, governor-settable $\in [0, 7\text{d}]$). Pending signers visible on-chain.
|
|
\item During delay: users can exit (burn tokens $\to$ receive underlying).
|
|
\item After delay expires: anyone calls \texttt{executeSignerRotation()}.
|
|
\item Current signers can cancel during delay via \texttt{cancelSignerRotation()}.
|
|
\end{enumerate}
|
|
|
|
%% +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|