MIME-Version: 1.0
References: <XDPm1ve5FC6e68LI_ZK4f_oRGDArvptCDh1ofEXNNZV9TaTQ_XRALF2KIdIknQOw-TXKJHedJ-5xHi0sbipTrF7qIe4ynp2Qxp823BGcXcY=@lnp-bp.org>
In-Reply-To: <XDPm1ve5FC6e68LI_ZK4f_oRGDArvptCDh1ofEXNNZV9TaTQ_XRALF2KIdIknQOw-TXKJHedJ-5xHi0sbipTrF7qIe4ynp2Qxp823BGcXcY=@lnp-bp.org>
From: "G. Andrew Stone" <g.andrew.stone@gmail.com>
Date: Mon, 11 Sep 2023 11:26:52 -0400
Message-ID: <CAHUwRvtadqomqDpWBuOwjJR7ftsTpE_-C4mPVAg0j3HqR6vFUw@mail.gmail.com>
To: Dr Maxim Orlovsky <orlovsky@lnp-bp.org>, 
 Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="000000000000585d74060516f575"
Subject: Re: [bitcoin-dev] Trustless 2-way-peg without softfork
Precedence: list

--000000000000585d74060516f575
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Any chance of a quick tldr to pique our interest by explaining how exactly
this works "and the protocol will reach consensus on whether the state
reported by the oracle is correct" in presumably a permissionless,
anonymous, decentralized fashion, and what caveats there are?

Regards,
Andrew

On Sun, Sep 10, 2023 at 4:06=E2=80=AFPM Dr Maxim Orlovsky via bitcoin-dev <
bitcoin-dev@lists.linuxfoundation.org> wrote:

> Hi,
>
> Several years ago my team from Pandora Project working on
> censorship-resistant distributed machine learning proposed Prometheus: a
> protocol for high-load computing on top of Bitcoin. The protocol operates
> as a multi-party game setting where an oracle ("worker") is provided with
> an arbitrary computationally complex task (any Turing-complete computing,
> machine learning training or inference etc) and the network is able to
> reach a consensus on whether a result reported by the worker is true. The
> consensus is reached via optional rounds of verification and arbitrage. T=
he
> protocol is cryptoeconomically-safe, i.e. has a proven Nash equilibrium.
> The protocol was later transferred to LNP/BP Standards Association (
> https://lnp-bp.org) and was kept in a backlog of what can be done in a
> future as a layer on top of Bitcoin.
>
> I'd like to emphasize that Prometheus works on Bitcoin, requires just
> several Bitcoin tx per task, and _doesn't require any soft fork_. All
> economic setting is done with Bitcoin as a means of payment, and using
> existing Bitcoin script capabilities.
>
> Link to the paper describing the protocol: <
> https://github.com/Prometheus-WG/prometheus-spec/blob/master/prometheus.p=
df
> >
>
> Only today I have realized that Prometheus protocol can be used to build
> cryptoeconomically-safe (i.e. trustless) 2-way-peg on the Bitcoin
> blockchain without any soft-forks: a "worker" in such a case acts as an
> oracle for some extra-bitcoin system (sidechain, client-side-validated
> protocol, zk rollup etc) validating it, and the protocol will reach
> consensus on whether the state reported by the oracle is correct.
>
> In other words, this is an alternative to BIP-300 and other similar
> soft-forks having the only purpose of doing 2-way pegs. It also enables t=
he
> two-way trustless transfer of Bitcoins between Bitcoin blockchain, RGB an=
d,
> in a future, potential new layer 1 called "prime" (to learn more about
> prime you can check my Baltic Honeybadger talk <
> https://www.youtube.com/live/V3vvybsc1A4?feature=3Dshared&t=3D23631>).
>
>
> Kind regards,
> Dr Maxim Orlovsky
> Twitter: @dr_orlovsky
> Nostr: npub13mhg7ksq9efna8ullmc5cufa53yuy06k73q4u7v425s8tgpdr5msk5mnym
>
> LNP/BP Standards Association
> Twitter: @lnp_bp
>
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>

--000000000000585d74060516f575
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Any chance of a quick tldr to pique our interest by e=
xplaining how exactly this works &quot;and the protocol will reach consensu=
s on whether the state reported by the oracle is correct&quot; in presumabl=
y a permissionless, anonymous, decentralized fashion, and what caveats ther=
e are?</div><div><br></div><div>Regards,</div><div>Andrew<br></div></div><b=
r><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Sun, =
Sep 10, 2023 at 4:06=E2=80=AFPM Dr Maxim Orlovsky via bitcoin-dev &lt;<a hr=
ef=3D"mailto:bitcoin-dev@lists.linuxfoundation.org">bitcoin-dev@lists.linux=
foundation.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex">Hi,<br>
<br>
Several years ago my team from Pandora Project working on censorship-resist=
ant distributed machine learning proposed Prometheus: a protocol for high-l=
oad computing on top of Bitcoin. The protocol operates as a multi-party gam=
e setting where an oracle (&quot;worker&quot;) is provided with an arbitrar=
y computationally complex task (any Turing-complete computing, machine lear=
ning training or inference etc) and the network is able to reach a consensu=
s on whether a result reported by the worker is true. The consensus is reac=
hed via optional rounds of verification and arbitrage. The protocol is cryp=
toeconomically-safe, i.e. has a proven Nash equilibrium. The protocol was l=
ater transferred to LNP/BP Standards Association (<a href=3D"https://lnp-bp=
.org" rel=3D"noreferrer" target=3D"_blank">https://lnp-bp.org</a>) and was =
kept in a backlog of what can be done in a future as a layer on top of Bitc=
oin.<br>
<br>
I&#39;d like to emphasize that Prometheus works on Bitcoin, requires just s=
everal Bitcoin tx per task, and _doesn&#39;t require any soft fork_. All ec=
onomic setting is done with Bitcoin as a means of payment, and using existi=
ng Bitcoin script capabilities.<br>
<br>
Link to the paper describing the protocol: &lt;<a href=3D"https://github.co=
m/Prometheus-WG/prometheus-spec/blob/master/prometheus.pdf" rel=3D"noreferr=
er" target=3D"_blank">https://github.com/Prometheus-WG/prometheus-spec/blob=
/master/prometheus.pdf</a>&gt;<br>
<br>
Only today I have realized that Prometheus protocol can be used to build cr=
yptoeconomically-safe (i.e. trustless) 2-way-peg on the Bitcoin blockchain =
without any soft-forks: a &quot;worker&quot; in such a case acts as an orac=
le for some extra-bitcoin system (sidechain, client-side-validated protocol=
, zk rollup etc) validating it, and the protocol will reach consensus on wh=
ether the state reported by the oracle is correct.<br>
<br>
In other words, this is an alternative to BIP-300 and other similar soft-fo=
rks having the only purpose of doing 2-way pegs. It also enables the two-wa=
y trustless transfer of Bitcoins between Bitcoin blockchain, RGB and, in a =
future, potential new layer 1 called &quot;prime&quot; (to learn more about=
 prime you can check my Baltic Honeybadger talk &lt;<a href=3D"https://www.=
youtube.com/live/V3vvybsc1A4?feature=3Dshared&amp;t=3D23631" rel=3D"norefer=
rer" target=3D"_blank">https://www.youtube.com/live/V3vvybsc1A4?feature=3Ds=
hared&amp;t=3D23631</a>&gt;).<br>
<br>
<br>
Kind regards,<br>
Dr Maxim Orlovsky<br>
Twitter: @dr_orlovsky<br>
Nostr: npub13mhg7ksq9efna8ullmc5cufa53yuy06k73q4u7v425s8tgpdr5msk5mnym<br>
<br>
LNP/BP Standards Association<br>
Twitter: @lnp_bp<br>
<br>
_______________________________________________<br>
bitcoin-dev mailing list<br>
<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D"_blank">=
bitcoin-dev@lists.linuxfoundation.org</a><br>
<a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev" =
rel=3D"noreferrer" target=3D"_blank">https://lists.linuxfoundation.org/mail=
man/listinfo/bitcoin-dev</a><br>
</blockquote></div>

--000000000000585d74060516f575--