EN FR
← overview 1 · atom 2 · pool 3 · federation 4 · economy

Layer 3 — Federation

Molecule · 3 bonded pools · RAID quorum · anti-entropy gossip

MOLECULE · 3 bonded pools · quorum N≥3 (floor(N/2)+1 = 2) cellule.ai VPS public pool · WAN pool v0.2.67 primary pool Ed25519 atom id Gladiator GPU pool · satellite isolated venv · pgvector docker Ed25519 atom id systemd · bootstrap runbook master cluster cluster pool · satellite Qwen 14B · 363 GB free pool2 · RAID member Vertex-307b migrated here Ed25519 Ed25519 bi-dir bonded FEDERATION PROTOCOLS Gossip M11.2 pull anti-entropy · 3-row signed Merkle M11 RFC 6962 · slashed exclusion Heartbeat M7b failover · seed list · discovery Forwarding M7a cross-pool jobs · worker_sig=NULL RAID quorum (M11) • Row creation: N pools present → quorum signature • Cross-verify rebuild: if 1 pool falls, data reconstructed • Merkle primitive v1 frozen (format + ordering) • RF=1 history (pre-M11) → RF=N quorum now Goal: lose 1 pool ≥3 = 0 data loss (Cassandra multi-DC mental model) M12 — Recruitment & placement • Pools detect capacity gaps → recruit • Worker checks gaps BEFORE joining (self-sufficient) • Pool-failure migration: Vertex VPS → master.86 (35s) • Forwarding = fallback, not default Routing = only lever (no premium rate · token-guardian validated) Trust model v2 (M5) 0 unknown · 1 observed · 2 reciprocal · 3 replication-bonded (LIVE) 4 settlement-bonded · LOCKED until M10 live • Trust 3 HARD-LOCKED in code · reciprocation opt-in cap 64 • FS kill switch /etc/iamine/fed_disable (M6) M11.5 gossip invariants • Fernet conversations (end-to-end encrypted content) • Resumable bootstrap · tracking relationships mandatory • TODO M11.4 split-brain (deferred until N≥5 WAN) • Scale: epidemic k=3 before N=10 (mesh O(N²) breaks)

3 live pools (2026-04-11+)

  • • cellule.ai VPS (primary, WAN)
  • • Gladiator (GPU satellite)
  • • master cluster (satellite)
  • • Quorum N=3 reached · RAID member

Ed25519 bonding

  • • Bi-directional between pools
  • • Trust-3 replication-bonded (LIVE)
  • • Reciprocation opt-in, cap 64
  • • Enroll idempotence

Gossip M11.2

  • • Pull anti-entropy (E2E validated)
  • • Signed rows · merkle · idempotent
  • • 2 non-blocking bugs tracked
  • • Scale target: epidemic k=3 (N≥10)

M7a Forwarding

  • • Server-side cross-pool jobs
  • • No worker wheel change
  • • ledger.worker_sig=NULL (pending)
  • • M7-worker deferred M9b

M12 E2E migration validated

  • • Pool falls → worker migrates (35s)
  • • Discovery gaps + latency
  • • Resilience baseline
  • • Living "molecule" proof

Governance

  • • Phase 1: hardcode + UI
  • • Phase 2: quorum-signed config
  • • 5 molecule-guardian invariants
  • • Blacklist → Q7 mandatory

CELLULE · layer 3/4 · ← pool · overview · economy →