LP-134 was renumbered LP-1340 (lp-1340-lux-chain-topology); 21 citations across 16 files still named the old number, which resolves to nothing. Corona rests on Module-LWE, not Ring-LWE — LP-4805 says so in three places and b17e086 already corrected one file, leaving evm/main.go and schain/SECURITY_review.md claiming the wrong hardness assumption. The two-family argument in LP-4900 depends on which lattice problem this is. P3Q at 0x012205 is kind-byte signature dispatch; STARK/FRI is starkfri at 0x012220 (LP-7050). Naming P3Q for a scheme at another slot describes a precompile that is not the one being imported. Carries the substance of 2f22fa2, the one commit the parallel line held that this history did not.
3.9 KiB
Pluggable chain VMs
luxfi/chains hosts the luxd plugin shells — each subdirectory's
cmd/plugin/main.go is the binary that luxd loads. The actual VM
implementations live in dedicated repos so they can also run as standalone
operator daemons (no luxd validator required), the same way mpcd and
kms do.
Repository ownership
| chain VM | luxd plugin (this repo) | canonical implementation | standalone daemon |
|---|---|---|---|
| R-Chain (relay) | chains/relayvm/ (shim) |
luxfi/relay/vm/ |
luxfi/relay/cmd/relayd |
| O-Chain (oracle) | chains/oraclevm/ (shim) |
luxfi/oracle/vm/ |
luxfi/oracle/cmd/oracled |
| M-Chain (MPC threshold) | luxfi/chains/mpcvm/ (canonical, MPC mode) |
(same) | n/a — runs in luxd |
| F-Chain (FHE) | luxfi/chains/fhevm/ (canonical) |
(same) | n/a — runs in luxd |
| C-Chain (EVM) | chains/evm/ |
uses chains/evm/cevm (C++/GPU FFI shim) or pure-Go (default) via build tags |
n/a — runs in luxd |
| A-Chain (AI) | chains/aivm/ |
luxfi/ai |
n/a |
| I-Chain (identity) | chains/identityvm/ |
luxfi/id |
n/a |
M and F are both canonical here — they are written in this repo, not shimmed
from another. They divide the work LP-1340 took off T-Chain: M does threshold
signing and bridge custody, F coordinates confidential compute. F wraps the FHE
runtime library at mpcvm/fhe/, which stays where it is because mpcvm also
uses it; F reuses that package's types and threshold parameters and owns its own
persistence, since the runtime's Registry stamps time.Now() and cannot back
a state root.
The shim pattern is uniform:
// chains/<name>vm/<name>vm.go
package <name>vm
import canon "github.com/luxfi/<repo>/vm"
type Factory = canon.Factory
type VM = canon.VM
// … type aliases for every public type
External imports of github.com/luxfi/chains/<name>vm keep working
unchanged. The plugin's cmd/plugin/main.go doesn't need to be touched.
Pluggable EVM (cevm vs Go-evm)
chains/evm/cevm is an FFI shim around ~/work/luxcpp/cevm (C++ / GPU EVM),
not a standalone VM — it has no operator daemon, it lives in luxd. It folds
into this module rather than shipping as a separate luxfi/cevm repo. Two
implementations behind build tags:
| Tag | File | Implementation |
|---|---|---|
cgo (default if cgo enabled) |
cevm/cevm_cgo.go |
C++ / GPU-accelerated EVM via CGO |
!cgo (CGO_ENABLED=0) |
cevm/cevm_nocgo.go |
Pure-Go fallback (drops back to luxfi/geth) |
Operators choose at build time:
# C++/GPU EVM (default for production validators with cgo + GPU)
go build -o luxd ./cmd/luxd
# Pure-Go EVM (small footprint, no cgo dependency)
CGO_ENABLED=0 go build -o luxd ./cmd/luxd
# Hanzo node uses revm via the same plugin contract
# (separate luxd build flag; uses chains/evm/cevm at the API layer, REVM under the hood)
The plugin contract (chain.ChainVM from luxfi/vm/chain) is shared, so
ANY of these EVM kernels drops in behind the same import. Different
operators can run different kernels in the same network as long as state
roots match — which they do, because all kernels are EVM-spec compliant.
Standalone daemons (operator side)
relayd and oracled are operator-side processes — they observe source
data (chain logs / Bitcoin RPC / OP_NET indexer / external feeds), sign
with the operator key, and submit to the chain VM via JSON-RPC. The chain
VM is the security boundary; the daemons are couriers.
Same shape as mpcd (FROST/CGGMP21 threshold signing) and kms
(Hashicorp-style secret management): single binary, HTTP API, NATS
subscription, persistent local state.
Adding a new pluggable chain VM
- Create
luxfi/<name>repo withvm/package +cmd/<name>ddaemon. - Make
chains/<name>vm/<name>vm.gore-exportluxfi/<name>/vmtypes. - Update
chains/<name>vm/go.modto require the canonical repo. - Plugin
cmd/plugin/main.gokeeps its existing import path unchanged.