From 9109adce965062119c71fcbf46f4d758435d7a16 Mon Sep 17 00:00:00 2001 From: Aere Network Date: Sat, 22 Aug 2026 12:49:41 +0300 Subject: [PATCH] Anchor threshold raised to a full 2f+1 quorum: since block 14,961,456 (August 21, 2026) an anchor block does not finalize without at least six of nine valid Falcon-512 validator seals; measured on-chain before this text changed --- README.md | 4 +++- anchor/README.md | 10 +++++++--- 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 042b845..a9187c2 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,9 @@ Consensus on chain 2800 is **hybrid post-quantum in a precise and limited sense* mechanism: the QBFT header anchor in `anchor/` and `patches/0003`. Since 2026-08-14 every 32nd block (an anchor block) must carry, under its block hash, a certificate of at least three valid Falcon-512 validator seals (f+1 of nine; eight or nine are carried in practice), and a node -does not finalize an anchor block without it. Classical secp256k1 ECDSA QBFT still finalizes every +does not finalize an anchor block without it. Raised at block 14,961,456 (August 21, 2026): the +enforced minimum is now **six of nine, a full 2f+1 quorum**; the schedule step is +`aere.pq.anchorMinSeals=13014000:0,13034000:3,14961456:6`, uniform on all nine validators. Classical secp256k1 ECDSA QBFT still finalizes every block; validator identity and QBFT message transport are classical. Correction 2026-08-19: the per-block Falcon quorum rule armed at block 14,050,000 (`aere.falcon.forkBlock`) is, in the shipped code, retired in favour of the anchor rules from block 13,014,000 and changed no enforcement, so diff --git a/anchor/README.md b/anchor/README.md index 567eaaf..385a30c 100644 --- a/anchor/README.md +++ b/anchor/README.md @@ -19,9 +19,13 @@ should not be confused: replacement: a rewrite of anchored history must also forge the post-quantum signatures. 2. **The enforced minimum.** Since 2026-08-14 a node does not finalize an anchor block unless its certificate holds at least three valid Falcon-512 seals (f+1 of nine, the guarantee that at - least one honest validator signed; eight or nine are carried in practice). Blocks between - anchors carry no Falcon seals and are finalized by ECDSA alone, so the post-quantum guarantee - is a checkpoint about every 16 seconds, not a per-block quorum. + least one honest validator signed; eight or nine are carried in practice). Raised at block + 14,961,456 (August 21, 2026): the enforced minimum is now **six of nine, a full 2f+1 quorum**, + the same count of validators QBFT itself requires to agree on the block. The schedule step is + `aere.pq.anchorMinSeals=13014000:0,13034000:3,14961456:6`, uniform on all nine validators; the + startup guard refuses any threshold above N - f = 7, the highest count reachable with the fault + budget down. Blocks between anchors carry no Falcon seals and are finalized by ECDSA alone, so + the post-quantum guarantee is a checkpoint about every 16 seconds, not a per-block quorum. Correction 2026-08-19: the fleet was also configured on 2026-08-15 with `aere.falcon.forkBlock` at 14,050,000, intended as a per-block blocking Falcon quorum. In the shipped code that rule