[Cryptography] Programmable rights in recursively proved live state

[dev]

In an August post to this list, I described a system where a recursive proof authenticates live state from genesis, allowing old transaction bodies to be discarded:

https://www.metzdowd.com/pipermail/cryptography/2026-August/039748.html (https://www.metzdowd.com/pipermail/cryptography/2026-August/039748.html)




That architecture now includes programmable spending rights. A funded contract instance is a live output containing an amount, a creation identifier and a Poseidon2b commitment to public terms. Those terms fix a bounded 16-instruction integer program, two persistent 64-bit counters, claim and recovery authorities, recipients, a deadline and spending limits. Applications share one proved integer core; they do not need individual circuits or proving keys.




A call identifies the exact (slot, creation_id) of the output it consumes. The block relation checks the opening against its commitment, the authorization for the branch selected at the inclusion height, checked program execution, value conservation and the resulting output. The call either creates a successor with updated counters or closes to the prescribed recipient. The block proof carries this transition forward through recursive verification.




This also defines the boundary of history pruning. A node can authenticate a current live right without replaying its earlier calls. A participant who missed a change still needs the successor's public terms or a retained call receipt. A receipt establishes a particular past call, while current unspentness is checked against live state.




Contract relation and lifecycle:

https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/contracts/core.md (https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/contracts/core.md)




https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/contracts/lifecycle.md (https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/contracts/lifecycle.md)




Security model:

https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/protocol/security-model.md (https://git.parano1d.org/ignotusnemo/parano1d/src/branch/main/docs/protocol/security-model.md)



Ignotus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20260927/c2fc7d62/attachment.htm>