MIME-Version: 1.0
From: Olaoluwa Osuntokun <laolu32@gmail.com>
Date: Tue, 5 Apr 2022 11:06:03 -0400
Message-ID: <CAO3Pvs_pkYAYsrAEtv3KuJevXQHBLZQ-ihjP4Ur_A1NjJRA+Lw@mail.gmail.com>
To: Arnoud Kouwenhoven - Pukaki Corp via bitcoin-dev
 <bitcoin-dev@lists.linuxfoundation.org>, 
 lightning-dev <lightning-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="00000000000003d9d405dbe9968b"
Subject: [bitcoin-dev] Taro: A Taproot Asset Representation Overlay
Precedence: list

--00000000000003d9d405dbe9968b
Content-Type: text/plain; charset="UTF-8"

Hi y'all,

I'm excited to publicly publish a new protocol I've been working on over the
past few months: Taro. Taro is a Taproot Asset Representation Overlay which
allows the issuance of normal and also collectible assets on the main
Bitcoin
chain. Taro uses the Taproot script tree to commit extra asset structured
meta
data based on a hybrid merkle tree I call a Merkle Sum Sparse Merkle Tree or
MS-SMT. An MS-SMT combined the properties of a merkle sum tree, with a
sparse
merkle tree, enabling things like easily verifiable asset supply proofs and
also efficient proofs of non existence (eg: you prove to me you're no longer
committing to the 1-of-1 holographic beefzard card during our swap). Taro
asset
transfers are then embedded in a virtual/overlay transaction graph which
uses a
chain of asset witnesses to provably track the transfer of assets across
taproot outputs. Taro also has a scripting system, which allows for
programmatic unlocking/transfer of assets. In the first version, the
scripting
system is actually a recursive instance of the Bitcoin Script Taproot VM,
meaning anything that can be expressed in the latest version of Script can
be
expressed in the Taro scripting system. Future versions of the scripting
system
can introduce new functionality on the Taro layer, like covenants or other
updates.

The Taro design also supports integration with the Lightning Network
(BOLTs) as
the scripting system can be used to emulate the existing HTLC structure,
which
allows for multi-hop transfers of Taro assets. Rather than modify the
internal
network, the protocol proposes to instead only recognize "assets at the
edges",
which means that only the sender+receiver actually need to know about and
validate the assets. This deployment route means that we don't need to
build up
an entirely new network and liquidity for each asset. Instead, all asset
transfers will utilize the Bitcoin backbone of the Lightning Network, which
means that the internal routers just see Bitcoin transfers as normal, and
don't
even know about assets at the edges. As a result, increased demand for
transfers of these assets as the edges (say like a USD stablecoin), which in
will turn generate increased demand of LN capacity, result in more
transfers, and
also more routing revenue for the Bitcoin backbone nodes.

The set of BIPs are a multi-part suite, with the following breakdown:
 * The main Taro protocol:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro.mediawiki
 * The MS-SMT structure:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-ms-smt.mediawiki
 * The Taro VM:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-vm.mediawiki
 * The Taro address format:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-addr.mediawiki
 * The Taro Universe concept:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-universe.mediawiki
 * The Taro flat file proof format:
https://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-proof-file.mediawiki

Rather than post them all in line (as the text wouldn't fit in the allowed
size
limit), all the BIPs can be found above.

-- Laolu

--00000000000003d9d405dbe9968b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi y&#39;all, <br><br>I&#39;m excited to publicly publish =
a new protocol I&#39;ve been working on over the<br>past few months: Taro. =
Taro is a Taproot Asset Representation Overlay which<br>allows the issuance=
 of normal and also collectible assets on the main Bitcoin<br>chain. Taro u=
ses the Taproot script tree to commit extra asset structured meta<br>data b=
ased on a hybrid merkle tree I call a Merkle Sum Sparse Merkle Tree or<br>M=
S-SMT. An MS-SMT combined the properties of a merkle sum tree, with a spars=
e<br>merkle tree, enabling things like easily verifiable asset supply proof=
s and<br>also efficient proofs of non existence (eg: you prove to me you=
9;re no longer<br>committing to the 1-of-1 holographic beefzard card during=
 our swap). Taro asset<br>transfers are then embedded in a virtual/overlay =
transaction graph which uses a<br>chain of asset witnesses to provably trac=
k the transfer of assets across<br>taproot outputs. Taro also has a scripti=
ng system, which allows for<br>programmatic unlocking/transfer of assets. I=
n the first version, the scripting<br>system is actually a recursive instan=
ce of the Bitcoin Script Taproot VM,<br>meaning anything that can be expres=
sed in the latest version of Script can be<br>expressed in the Taro scripti=
ng system. Future versions of the scripting system<br>can introduce new fun=
ctionality on the Taro layer, like covenants or other<br>updates.<br><br>Th=
e Taro design also supports integration with the Lightning Network (BOLTs) =
as<br>the scripting system can be used to emulate the existing HTLC structu=
re, which<br>allows for multi-hop transfers of Taro assets. Rather than mod=
ify the internal<br>network, the protocol proposes to instead only recogniz=
e &quot;assets at the edges&quot;,<br>which means that only the sender+rece=
iver actually need to know about and<br>validate the assets. This deploymen=
t route means that we don&#39;t need to build up<br>an entirely new network=
 and liquidity for each asset. Instead, all asset<br>transfers will utilize=
 the Bitcoin backbone of the Lightning Network, which<br>means that the int=
ernal routers just see Bitcoin transfers as normal, and don&#39;t<br>even k=
now about assets at the edges. As a result, increased demand for<br>transfe=
rs of these assets as the edges (say like a USD stablecoin), which in<br>wi=
ll turn generate increased demand of LN capacity, result in more transfers,=
 and<br>also more routing revenue for the Bitcoin backbone nodes.<br><br>Th=
e set of BIPs are a multi-part suite, with the following breakdown:<br>=C2=
=A0* The main Taro protocol: <a href=3D"https://github.com/Roasbeef/bips/bl=
ob/bip-taro/bip-taro.mediawiki">https://github.com/Roasbeef/bips/blob/bip-t=
aro/bip-taro.mediawiki</a><br>=C2=A0* The MS-SMT structure: <a href=3D"http=
s://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-ms-smt.mediawiki">https=
://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-ms-smt.mediawiki</a><br>=
=C2=A0* The Taro VM: <a href=3D"https://github.com/Roasbeef/bips/blob/bip-t=
aro/bip-taro-vm.mediawiki">https://github.com/Roasbeef/bips/blob/bip-taro/b=
ip-taro-vm.mediawiki</a><br>=C2=A0* The Taro address format: <a href=3D"htt=
ps://github.com/Roasbeef/bips/blob/bip-taro/bip-taro-addr.mediawiki">https:=
//github.com/Roasbeef/bips/blob/bip-taro/bip-taro-addr.mediawiki</a><br>=C2=
=A0* The Taro Universe concept: <a href=3D"https://github.com/Roasbeef/bips=
/blob/bip-taro/bip-taro-universe.mediawiki">https://github.com/Roasbeef/bip=
s/blob/bip-taro/bip-taro-universe.mediawiki</a><br>=C2=A0* The Taro flat fi=
le proof format: =C2=A0<a href=3D"https://github.com/Roasbeef/bips/blob/bip=
-taro/bip-taro-proof-file.mediawiki">https://github.com/Roasbeef/bips/blob/=
bip-taro/bip-taro-proof-file.mediawiki</a><br><br>Rather than post them all=
 in line (as the text wouldn&#39;t fit in the allowed size<br>limit), all t=
he BIPs can be found above.<br><br>-- Laolu<br></div>

--00000000000003d9d405dbe9968b--