summaryrefslogtreecommitdiff
path: root/8f/36dcdb310805bcc37638dc009b9fb14376f149
blob: 79bfa4f396a7b24acd97e2a98437ce5a9e690fce (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
Return-Path: <keagan.mcclelland@gmail.com>
Received: from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])
 by lists.linuxfoundation.org (Postfix) with ESMTP id 6301DC002D
 for <bitcoin-dev@lists.linuxfoundation.org>;
 Wed, 27 Apr 2022 18:32:49 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by smtp4.osuosl.org (Postfix) with ESMTP id 5774641A15
 for <bitcoin-dev@lists.linuxfoundation.org>;
 Wed, 27 Apr 2022 18:32:49 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level: 
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5
 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
 DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: smtp4.osuosl.org (amavisd-new);
 dkim=pass (2048-bit key) header.d=gmail.com
Received: from smtp4.osuosl.org ([127.0.0.1])
 by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id c46pHlw8va6M
 for <bitcoin-dev@lists.linuxfoundation.org>;
 Wed, 27 Apr 2022 18:32:47 +0000 (UTC)
X-Greylist: whitelisted by SQLgrey-1.8.0
Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com
 [IPv6:2a00:1450:4864:20::32a])
 by smtp4.osuosl.org (Postfix) with ESMTPS id CE44C41A49
 for <bitcoin-dev@lists.linuxfoundation.org>;
 Wed, 27 Apr 2022 18:32:46 +0000 (UTC)
Received: by mail-wm1-x32a.google.com with SMTP id
 bi24-20020a05600c3d9800b00393ff664705so1711558wmb.4
 for <bitcoin-dev@lists.linuxfoundation.org>;
 Wed, 27 Apr 2022 11:32:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=mime-version:references:in-reply-to:from:date:message-id:subject:to
 :cc; bh=fMrTFa3F9AIAPqYRJk92dvzl0Zcht3mc4Wr+8idBo+s=;
 b=XhDaDCmbQ84mb8Os1Pdd+eBDWuv5vN+orfHrBzxBH873v1U7mn2UXYNhOm66yrYjlm
 ma/+sgjIbtDhNkfOqh9xQil6vuNGOo7WtvA5jqV/2NVhlVmslyz3yQpJyifaV6OJYId3
 5mXbi5DmsT6hflb+6EVAz/289kI3TOSkURfUQPeLm+KGfgfMxvBX1IUWaLyDUmjwsmg/
 tKgU8zaAj6AEv0FDX6tMdl2uwJiO9v2zWMaLKa5sVSIGgpl5wrtQgawTp3ktO+yX6TkC
 Uyv3XI0FgflNS55tUAKFeNfhY0b+qtBfOT1N/5YPzgtcs1F5adP/8KcEYFfNYFh2cK3w
 TOLA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:mime-version:references:in-reply-to:from:date
 :message-id:subject:to:cc;
 bh=fMrTFa3F9AIAPqYRJk92dvzl0Zcht3mc4Wr+8idBo+s=;
 b=QnTE3fvq3STDxGxtwdmgVGL833oCyTcNQGSz/761eTkEGy800oyz0eXw19B3d0UIzO
 MJucILK3X4qpSOBkvFSC/E2SIXO8sxJ+vZ4EZk7T4k0YBu2SMfJkGxF/3GeP4BNkd7lU
 KbaYcZGZB9cDeMOPnLJj97gk7zdaIc3ggdKh+89xDi5ppD9z4QraKlq1//JLMvA9Hywj
 FAvKo3ZNyjW4wENa33iHHnkkk9g5dQYs03srKdo1+3zPhe7IdybPP214xHt5XePjRVx+
 e0U1XnnugdPkdQzS+2Yxyp2zArCcrJpdTmktMjO2tV3o5b6i/6c7sAbN+vjObc6Nu8Px
 6Xbg==
X-Gm-Message-State: AOAM531J67A7UIfFrfoHi6qRHh+1GihlbP6pO/KX+XZZe1V3agPkAJYA
 b8PM/GR1lyDIAet3RiVccBfvE/rQMnsKb1UMf+whFz0LimE=
X-Google-Smtp-Source: ABdhPJy9/vmrArXLcSgAFn7Db10eJtSeun/zo0J3BUZijorC8LAmC2CI5oS3qMTTfFJcJSzvsxmLKPC+YG962xDrgpc=
X-Received: by 2002:a05:600c:4f09:b0:393:ec87:f011 with SMTP id
 l9-20020a05600c4f0900b00393ec87f011mr14461107wmq.103.1651084364797; Wed, 27
 Apr 2022 11:32:44 -0700 (PDT)
MIME-Version: 1.0
References: <CALeFGL2Orc6F567Wd9x7o1c5OPyLTV-RTqTmEBrGNbEz+oPaOQ@mail.gmail.com>
 <CAHvMVPQWkEN_tpwNwkVkPs9W=DsmkBxMfJfqAbv8JNPVxkfKkQ@mail.gmail.com>
In-Reply-To: <CAHvMVPQWkEN_tpwNwkVkPs9W=DsmkBxMfJfqAbv8JNPVxkfKkQ@mail.gmail.com>
From: Keagan McClelland <keagan.mcclelland@gmail.com>
Date: Wed, 27 Apr 2022 12:32:33 -0600
Message-ID: <CALeFGL3oV2c8cioak1-CfDxNp93wz1qwasYETTgkAY+C31Mbxw@mail.gmail.com>
To: micaroni@gmail.com
Content-Type: multipart/alternative; boundary="0000000000000edadf05dda709c8"
X-Mailman-Approved-At: Wed, 27 Apr 2022 18:43:57 +0000
Cc: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] Towards a means of measuring user support for
	Soft Forks
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>, 
 <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>, 
 <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Apr 2022 18:32:49 -0000

--0000000000000edadf05dda709c8
Content-Type: text/plain; charset="UTF-8"

Felipe,

> For me, the consensus should follow the current line: discussions and
tests carried out by experts. We all know that the most important devs have
the most weight in discussions. And that's how it should be, because they
understand far better than any other lowly mortal. Consensus simply means
that there are not at least two or three important people opposing the idea
with solid arguments. Is it very subjective and difficult? Yes. For sure.
We all yearn for objective answers or methods. However, any method would
fail. At the end, after numerous discussions and an apparent consensus, the
objective answer and the real consensus will be obtained in the network, in
the nodes upgrading. If there is a big war, the network will end up
splitting in two, as it has in the past. To avoid any unwanted splits we
discuss for exhaustion here in the list.

This is essentially an admission that devs have control over the protocol.
Users "having control" but deferring their judgement to devs is not
meaningfully different than devs "having control". Many people have
asserted, quite strongly, that this ought not be how Bitcoin governs
itself. I myself am on the fence about what is practically possible or not.
However, let's say that your supposition is correct. How would we protect
against a corollary scenario where a dev has a proposal that looks great
but has dark ends that no one notices yet, if the process for evaluation
more or less is to defer to "the most important devs" expertise? Presumably
we hash this out in forums like this, but in order to "override" the "most
important devs" we have to have a way (formalized or not) of deciding when
the "lesser experts" in aggregate have better judgement.

Erik,

> There are many challenges with on-chain voting, here are a few:

This may be hair-splitting but I feel it important to clarify that my
proposal isn't voting per se. Calling it that doesn't bug me, but the
mechanics are meaningfully different than a simple tally vote which is the
intuition that I think that term conveys. As Billy mentions this proposal
actually requires that miners block signals from inclusion in the block if
they themselves do not signal. I'm not necessarily claiming this is a
superior design overall, however the "flaw" you point out is by design in
this case. My goal in the proposal was really to give users a means of
applying direct economic pressure to miners, who do inevitably play a role
in BIP8/BIP9 activation procedure.

Ryan,

> - you're feeding the Chainalysis beasts, when hodlers move their UTXOs;

Definitely a frightening proposition I hadn't considered. It does open up
the possibility of tracking individual preferences and targeting of
political opponents.

>   - yuk, it's voting.

I don't think the process of collecting information on user preference is
in and of itself bad. Where I think Bitcoiners really want to avoid voting
is this notion that 51% of the constituency can bully the other 49% into
whatever they want. No part of my proposal suggests this, nor is it
something I would want.

-----

I think there are a few questions surrounding the issue of soft fork
activation. Perhaps it warrants zooming out beyond even what my proposal
aims to solve. In my mind the most important questions surrounding this
process are:

1. In an ideal world, assuming we could, with perfect certainty, know
anything we wanted about the preferences of the user base, what would be
the threshold for saying "this consensus change is ready for activation"?
    1a. Does that threshold change based on the nature of the consensus
change (new script type/opcode vs. block size reduction vs. blacklisting
UTXOs)?
    1b. Do different constituencies (end users, wallets, exchanges,
coinjoin coordinators, layer2 protocols, miners) have a desired minimum or
maximum representation in this "threshold"?
2. Given an answer from #1, what tests can we devise to measure those
levels of support directly? If we can't measure it directly, can we measure
different indicators that would help us infer or solve for the knowledge we
want?
3. Can any of the answers to #2 be "gamed"? I'm defining "game" here to
mean that the measurement taken, diverges from the ground truth we are
trying to get at in such a way that its divergence would be undetectable.

If we do not answer these sorts of questions we can get technical consensus
through this messy process, but when it comes to assessing user consensus,
it is just going to devolve into dogma and demagoguery as we each have our
own perceptions or agendas and there is no rigorous way for anyone to
refute our claims. This would, again, be an admission that devs ultimately
do make protocol decisions. Perhaps it's unavoidable and we are doomed to
this painful process of arguing with one another until there's only one
opinion left standing (either because of merit or just plain old grit).
However, if this is the case, I don't think we can honestly claim that devs
don't control the protocol (as a group).

I don't think we will have broad agreement on #1 as it is ultimately a
value judgement and even the most intellectually honest people in Bitcoin
dev are going to have different value sets. I think this is OK, to a
degree. But where a lot of communication breakdown occurs is when people
are debating the properties of #2/#3 when they don't even know that there
is disagreement between them on #1. I think that everyone having an
individual answer to #1 can make these discussions go a lot more smoothly
in the technical sphere since I think most people can suspend their own
values for the sake of analyzing the effectiveness of a particular
approach. I am concerned, however, that if value differences are allowed to
be passed off as technical evaluations, the quality of the conversation may
erode to the point where no meaningful advancement can happen anymore,
since we will lose our shared framework for understanding. If this occurs
too soon, I believe quite strongly that Bitcoin will be captured through
the increasing power of custodial institutions.

Keagan

On Wed, Apr 27, 2022 at 11:22 AM <micaroni@gmail.com> wrote:

> The idea seems interesting at first glance, but soon we see several
> problems. The biggest problem with votes of this type is that they can be
> easily manipulated. Imagine a powerful attacker who impersonates someone in
> good faith and arrives with a proposal that looks great but has dark ends
> behind it (and that no one has simply noticed yet). It would be enough for
> this attacker to convince major wallets, major exchanges and even
> individuals to believe him. It could be with a good marketing campaign or
> even buying these people. This would create a "false consensus", a
> misconception of what consensus means.
>
> For me, the consensus should follow the current line: discussions and
> tests carried out by experts. We all know that the most important devs have
> the most weight in discussions. And that's how it should be, because they
> understand far better than any other lowly mortal. Consensus simply means
> that there are not at least two or three important people opposing the idea
> with solid arguments. Is it very subjective and difficult? Yes. For sure.
> We all yearn for objective answers or methods. However, any method would
> fail. At the end, after numerous discussions and an apparent consensus, the
> objective answer and the real consensus will be obtained in the network, in
> the nodes upgrading. If there is a big war, the network will end up
> splitting in two, as it has in the past. To avoid any unwanted splits we
> discuss for exhaustion here in the list.
>
> I don't think flagging transactions would be a good method to measure this
> sort of thing. You are handing important technical discussions into the
> hands of those who have no idea about the subject.
>
> Felipe.
>
> On Tue, Apr 26, 2022 at 5:12 PM Keagan McClelland via bitcoin-dev <
> bitcoin-dev@lists.linuxfoundation.org> wrote:
>
>> Hi all,
>>
>> Alongside the debate with CTV right now there's a second debate that was
>> not fully hashed out in the activation of Taproot. There is a lot of
>> argument around what Speedy Trial is or isn't, what BIP8 T/F is or isn't
>> etc. A significant reason for the breakdown in civility around this debate
>> is that because we don't have a means of measuring user support for
>> proposed sof-fork changes, it invariably devolves into people claiming that
>> their circles support/reject a proposal, AND that their circles are more
>> broadly representative of the set of Bitcoin users as a whole.
>>
>> It seems everyone in this forum has at one point or another said "I would
>> support activation of ____ if there was consensus on it, but there isn't".
>> This statement, in order to be true, requires that there exist a set of
>> conditions that would convince you that there is consensus. People have
>> tried to dodge this question by saying "it's obvious", but the reality is
>> that it fundamentally isn't. My bubble has a different "obvious" answer
>> than any of yours.
>>
>> Secondly, due to the trauma of the block size wars, no one wants to utter
>> a statement that could imply that miners have any influence over what
>> rulesets get activated or don't. As such "miner signaling" is consistently
>> devalued as a signal for market demand. I don't think this is reasonable
>> since following the events of '17  miners are aware that they have the
>> strong incentive that they understand market demand. Nevertheless, as it
>> stands right now the only signal we have to work with is miner signaling,
>> which I think is rightly frustrating to a lot of people.
>>
>> So how can we measure User Support for a proposed rule change?
>>
>> I've had this idea floating around in the back of my head for a while,
>> and I'd like to solicit some feedback here. Currently, all forms of
>> activation that are under consideration involve miner signaling in one form
>> or another. What if we could make it such that users could more directly
>> pressure miners to act on their behalf? After all, if miners are but the
>> humble servants of user demands, this should be in alignment with how
>> people want Bitcoin to behave.
>>
>> Currently, the only means users have of influencing miner decisions are
>> A. rejection of blocks that don't follow rules and B. paying fees for
>> transaction inclusion. I suggest we combine these in such a way that
>> transactions themselves can signal for upgrade. I believe (though am not
>> certain) that there are "free" bits in the version field of a transaction
>> that are presently ignored. If we could devise a mapping between some of
>> those free bits, and the signaling bits in the block header, it would be
>> possible to have rules as follows:
>>
>> - A transaction signaling in the affirmative MUST NOT be included in a
>> block that does not signal in the affirmative
>> - A transaction that is NOT signaling MAY be included in a block
>> regardless of that block's signaling vector
>> - (Optional) A transaction signaling in the negative MUST NOT be included
>> in a block that signals in the affirmative
>>
>> Under this set of conditions, a user has the means of sybil-resistant
>> influence over miner decisions. If a miner cannot collect the fees for a
>> transaction without signaling, the user's fee becomes active economic
>> pressure for the miner to signal (or not, if we include some variant of the
>> negative clause). In this environment, miners could have a better view into
>> what users do want, as would the Bitcoin network at large.
>>
>> Some may take issue with the idea that people can pay for the outcome
>> they want and may try to compare a method like this to Proof of Stake, but
>> there are only 3 sybil resistant mechanisms I am aware of, and any "real"
>> view into what social consensus looks like MUST be sybil resistant:
>>
>> - Hashpower
>> - Proof of personhood (KYC)
>> - Capital burn/risk
>>
>> Letting hashpower decide this is the thing that is currently contentious,
>> KYC is dead on arrival both on technical and social grounds, which really
>> just leaves some means of getting capital into the process of consensus
>> measurement. This mechanism I'm proposing is measurable completely
>> en-protocol and doesn't require trust in institutions that fork futures
>> would. Additionally it could be an auxiliary feature of the soft fork
>> deployment scheme chosen making it something you could neatly package all
>> together with the deployment itself.
>>
>> There are many potential tweaks to the design I propose above:
>> 1. Do we include a notion of negative signaling (allowing for the
>> possibility of rejection)
>> 2. Do we make it such that miner signaling must be congruent with >X% of
>> transactions, where congruence is that the signal must match any
>> non-neutral signal of transaction.
>>
>> Some anticipated objections:
>>
>> 1. signaling isn't voting, no deployment should be made without consensus
>> first.
>> - yeah well we can't currently measure consensus right now, so that's not
>> a super helpful thing to say and is breeding ground for abuse in the form
>> of certain people making the unsubstantiated claim that consensus does or
>> does not exist for a particular initiative
>>
>> 2. This is just a proposal for "pay to play", we should not let the
>> wealthy make consensus decisions.
>> - I agree that wealth should not be able to strong-arm decision making.
>> But the status quo seems even worse where we let publicly influential
>> people decide consensus in such a way where not only do they not "lose
>> ammunition" in the process of campaigning, but actually accrue it, creating
>> really bad long-term balances of power.
>>
>> 3. Enforcing this proposal requires its own soft fork.
>> - Yes. It does...and there's a certain cosmic irony to that, but before
>> we consider how to make this happen, I'd like to even discuss whether or
>> not it's a good idea.
>>
>> 4. This gives CoinJoin pool operators and L2 protocol implementations
>> power over deciding consensus.
>> - I see this as an improvement over the status quo
>>
>> 5. This encourages "spam"
>> - If you pay the fees, it's not spam.
>>
>> The biggest question I'd like to pose to the forum is:
>> - Does a scheme like this afford us a better view into consensus than we
>> have today?
>> - Can it be gamed to give us a *worse* view into consensus? How?
>> - Does it measure the right thing? If not, what do you think is the right
>> thing to measure? (assuming we could)
>> - Should I write a BIP spec'ing this out in detail?
>>
>> Cheers,
>> Keagan
>> _______________________________________________
>> bitcoin-dev mailing list
>> bitcoin-dev@lists.linuxfoundation.org
>> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>>
>

--0000000000000edadf05dda709c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Felipe,</div><div><br></div>&gt;=C2=A0<span style=3D"=
color:rgb(0,0,0);font-family:arial,helvetica,sans-serif">For me, the consen=
sus should follow the current line: discussions and tests carried out by ex=
perts. We all know that the most important devs have the most weight in dis=
cussions. And that&#39;s how it should be, because they understand far bett=
er than any other lowly mortal. Consensus simply means that there are not a=
t least two or three important people opposing the idea with solid argument=
s. Is it very subjective and difficult? Yes. For sure. We all yearn for obj=
ective answers or methods. However, any method would fail. At the end, afte=
r numerous discussions and an apparent consensus, the objective answer and =
the real consensus will be obtained in the network, in the nodes upgrading.=
 If there is a big war, the network will end up splitting in two, as it has=
 in the past. To avoid any unwanted splits we discuss for exhaustion here i=
n the list.</span><div><span style=3D"color:rgb(0,0,0);font-family:arial,he=
lvetica,sans-serif"><br></span></div><div><span style=3D"color:rgb(0,0,0);f=
ont-family:arial,helvetica,sans-serif">This is essentially an admission tha=
t devs have control over the protocol. Users &quot;having control&quot; but=
 deferring their judgement to devs is not meaningfully different than devs =
&quot;having control&quot;. Many people have asserted, quite strongly, that=
 this ought not be how Bitcoin governs itself. I myself am on the fence abo=
ut what is practically possible or not. However, let&#39;s say that your su=
pposition is correct. How would we protect against a corollary scenario whe=
re a dev has a proposal that looks great but has dark ends that no one noti=
ces yet, if the process for evaluation more or less is to defer to &quot;th=
e most important devs&quot; expertise? Presumably we hash this out in forum=
s like this, but in order to &quot;override&quot; the &quot;most important =
devs&quot; we have to have a way (formalized or not) of deciding when the &=
quot;lesser experts&quot; in aggregate have better judgement.</span></div><=
div><span style=3D"color:rgb(0,0,0);font-family:arial,helvetica,sans-serif"=
><br></span></div><div><span style=3D"color:rgb(0,0,0);font-family:arial,he=
lvetica,sans-serif">Erik,</span></div><div><span style=3D"color:rgb(0,0,0);=
font-family:arial,helvetica,sans-serif"><br></span></div><div><span style=
=3D"color:rgb(0,0,0);font-family:arial,helvetica,sans-serif">&gt;=C2=A0</sp=
an>There are many challenges with on-chain voting, here are a few:</div><br=
 class=3D"gmail-Apple-interchange-newline"><div>This may be hair-splitting =
but I feel it important to clarify that my proposal isn&#39;t voting per se=
. Calling it that doesn&#39;t bug me, but the mechanics are meaningfully di=
fferent than a simple tally vote which is the intuition that I think that t=
erm conveys. As Billy mentions this proposal actually requires that miners =
block signals from inclusion in the block if they themselves do not signal.=
 I&#39;m not necessarily claiming this is a superior design overall, howeve=
r the &quot;flaw&quot; you point out is by design in this case. My goal in =
the proposal was really to give users a means of applying direct economic p=
ressure to miners, who do inevitably play a role in BIP8/BIP9 activation pr=
ocedure.</div><div><br></div><div>Ryan,</div><div><br></div><div>&gt; - you=
&#39;re feeding the Chainalysis beasts, when hodlers move their UTXOs;</div=
><div><br></div><div>Definitely a frightening proposition I hadn&#39;t cons=
idered. It does open up the possibility of tracking individual preferences =
and targeting of political opponents.</div><div><br></div><div>&gt;=C2=A0=
=C2=A0 - yuk, it&#39;s voting.</div><div><br></div><div>I don&#39;t think t=
he process of collecting information on user preference is in and of itself=
 bad. Where I think Bitcoiners really want to avoid voting is this notion t=
hat 51% of the constituency=C2=A0can bully the other 49% into whatever they=
 want. No part of my proposal suggests this, nor is it something I would wa=
nt.</div><div><br>-----</div><div><br></div><div>I think there are a few qu=
estions surrounding the issue of soft fork activation. Perhaps it warrants =
zooming out beyond even what my proposal aims to solve. In my mind the most=
 important questions surrounding this process are:<br><br>1. In an ideal wo=
rld, assuming we could, with perfect certainty, know anything we wanted abo=
ut the preferences of the user base, what would be the threshold for saying=
 &quot;this consensus change is ready for activation&quot;?</div><div>=C2=
=A0 =C2=A0 1a. Does that threshold change based on the nature of the consen=
sus change (new script type/opcode vs. block size reduction vs. blacklistin=
g UTXOs)?<br>=C2=A0 =C2=A0 1b. Do different constituencies (end users, wall=
ets, exchanges, coinjoin coordinators, layer2 protocols, miners) have a des=
ired minimum or maximum representation in this &quot;threshold&quot;?</div>=
<div>2. Given an answer from #1, what tests can we devise to measure those =
levels of support directly? If we can&#39;t measure it directly, can we mea=
sure different indicators that would help us infer or solve for the knowled=
ge we want?<br>3. Can any of the answers to #2 be &quot;gamed&quot;? I&#39;=
m defining &quot;game&quot; here to mean that the measurement taken, diverg=
es from the ground truth we are trying to get at in such a way that its div=
ergence would be undetectable.</div><div><br></div><div>If we do not answer=
 these sorts of questions we can get technical consensus through this messy=
 process, but when it comes to assessing user consensus, it is just going t=
o devolve into dogma and demagoguery as we each have our own perceptions or=
 agendas and there is no rigorous way for anyone to refute our claims. This=
 would, again, be an admission that devs ultimately do make protocol decisi=
ons. Perhaps it&#39;s unavoidable and we are doomed to this painful process=
 of arguing with one another until there&#39;s=C2=A0only one opinion left s=
tanding (either because of merit or just plain old grit). However, if this =
is the case, I don&#39;t think we can honestly claim that devs don&#39;t co=
ntrol the protocol (as a group).</div><div><br></div><div>I don&#39;t think=
 we will have broad agreement on #1 as it is ultimately a value judgement a=
nd even the most intellectually honest people in Bitcoin dev are going to h=
ave different value sets. I think this is OK, to a degree. But where a lot =
of communication breakdown occurs is when people are debating the propertie=
s of #2/#3 when they don&#39;t even know that there is disagreement between=
 them on #1. I think that everyone having an individual answer to #1 can ma=
ke these discussions go a lot more smoothly in the technical sphere since I=
 think most people can suspend their own values for the sake of analyzing t=
he effectiveness of a particular approach. I am concerned, however, that if=
 value differences are allowed to be passed off as technical evaluations, t=
he quality of the conversation may erode to the point where no meaningful a=
dvancement can happen anymore, since we will lose our shared framework for =
understanding. If this occurs too soon, I believe quite strongly that Bitco=
in will be captured through the increasing power of custodial institutions.=
</div><div><br></div><div>Keagan</div></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 27, 2022 at 11:22 AM &lt;=
<a href=3D"mailto:micaroni@gmail.com">micaroni@gmail.com</a>&gt; wrote:<br>=
</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;b=
order-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><d=
iv dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,helv=
etica,sans-serif;font-size:small;color:rgb(0,0,0)"><span lang=3D"en"><span>=
<span>The idea seems interesting at first glance, but soon we see several p=
roblems. The biggest problem with votes of this type is that they can be ea=
sily manipulated. Imagine a powerful attacker who impersonates someone in g=
ood faith and arrives with a proposal that looks great but has dark ends be=
hind it (and that no one has simply noticed yet). It would be enough for th=
is attacker to convince major wallets, major exchanges and even individuals=
 to believe him. It could be with a good marketing campaign or even buying =
these people. This would create a &quot;false consensus&quot;, a misconcept=
ion of what consensus means. <br></span></span></span></div><div class=3D"g=
mail_default" style=3D"font-family:arial,helvetica,sans-serif;font-size:sma=
ll;color:rgb(0,0,0)"><span lang=3D"en"><span><span><br></span></span></span=
></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sa=
ns-serif;font-size:small;color:rgb(0,0,0)"><span lang=3D"en"><span><span>Fo=
r me, the consensus should follow the current line: discussions and tests c=
arried out by experts. We all know that the most important devs have the mo=
st weight in discussions. And that&#39;s how it should be, because they und=
erstand far better than any other lowly mortal. Consensus simply means that=
 there are not at least two or three important people opposing the idea wit=
h solid arguments. Is it very subjective and difficult? Yes. For sure. We a=
ll yearn for objective answers or methods. However, any method would fail. =
At the end, after numerous discussions and an apparent consensus, the objec=
tive answer and the real consensus will be obtained in the network, in the =
nodes upgrading. If there is a big war, the network will end up splitting i=
n two, as it has in the past. To avoid any unwanted splits we discuss for e=
xhaustion here in the list.</span></span></span></div><div class=3D"gmail_d=
efault" style=3D"font-family:arial,helvetica,sans-serif;font-size:small;col=
or:rgb(0,0,0)"><span lang=3D"en"><span><span><br></span></span></span></div=
><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-ser=
if;font-size:small;color:rgb(0,0,0)"><span lang=3D"en"><span><span>I don&#3=
9;t think flagging transactions would be a good method to measure this sort=
 of thing. You are handing important technical discussions into the hands o=
f those who have no idea about the subject.</span></span></span></div><div =
class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif;fon=
t-size:small;color:rgb(0,0,0)"><span lang=3D"en"><span><span><br></span></s=
pan></span></div><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif;font-size:small;color:rgb(0,0,0)"><span lang=3D"en"><spa=
n><span>Felipe.<br></span></span></span></div></div><br><div class=3D"gmail=
_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Apr 26, 2022 at 5:12 =
PM Keagan McClelland via bitcoin-dev &lt;<a href=3D"mailto:bitcoin-dev@list=
s.linuxfoundation.org" target=3D"_blank">bitcoin-dev@lists.linuxfoundation.=
org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"marg=
in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e=
x"><div dir=3D"ltr">Hi all,<div><br></div><div>Alongside the debate with CT=
V right now there&#39;s a second debate that was not fully hashed out in th=
e activation of Taproot. There is a lot of argument around what Speedy Tria=
l is or isn&#39;t, what BIP8 T/F is or isn&#39;t etc. A significant reason =
for the breakdown in civility around this debate is that because we don&#39=
;t have a means of measuring user support for proposed sof-fork changes, it=
 invariably devolves into people claiming that their circles support/reject=
 a proposal, AND that their circles are more broadly representative of the =
set of Bitcoin users as a whole.</div><div><br></div><div>It seems everyone=
 in this forum has at one point or another said &quot;I would support activ=
ation of ____ if there was consensus on it, but there isn&#39;t&quot;. This=
 statement, in order to be true, requires that there exist a set of conditi=
ons that would convince you that there is consensus. People have tried to d=
odge this question by saying &quot;it&#39;s obvious&quot;, but the reality =
is that it fundamentally isn&#39;t. My bubble has a different &quot;obvious=
&quot; answer than any of yours.</div><div><br></div><div>Secondly, due to =
the trauma of the block size wars, no one wants to utter a statement that c=
ould imply that miners have any influence over what rulesets get activated =
or don&#39;t. As such &quot;miner signaling&quot; is consistently devalued =
as a signal for market demand. I don&#39;t think this is reasonable since f=
ollowing the events of &#39;17=C2=A0=C2=A0miners are aware that they have t=
he strong incentive that they understand market demand. Nevertheless, as it=
 stands right now the only signal we have to work with is miner signaling, =
which I think is rightly frustrating to a lot of people.</div><div><br></di=
v><div>So how can we measure User Support for a proposed rule change?</div>=
<div><br></div><div>I&#39;ve had this idea floating around in the back of m=
y head for a while, and I&#39;d like to solicit some feedback here. Current=
ly, all forms of activation that are under consideration involve miner sign=
aling in one form or another. What if we could make it such that users coul=
d more directly pressure miners to act on their behalf? After all, if miner=
s are but the humble servants of user demands, this should be in alignment =
with how people want Bitcoin to behave.</div><div><br></div><div>Currently,=
 the only means users have of influencing miner decisions are A. rejection =
of blocks that don&#39;t follow rules and B. paying fees for transaction in=
clusion. I suggest we combine these in such a way that transactions themsel=
ves can signal for upgrade. I believe (though am not certain) that there ar=
e &quot;free&quot; bits in the version field of a transaction that are pres=
ently ignored. If we could devise a mapping between some of those free bits=
, and the signaling bits in the block header, it would be possible to have =
rules as follows:<br><br>- A transaction signaling in the affirmative MUST =
NOT be included in a block that does not signal in the affirmative<br>- A t=
ransaction that is NOT signaling MAY be included in a block regardless of t=
hat block&#39;s signaling vector</div><div>- (Optional) A transaction signa=
ling in the negative MUST NOT be included in a block that signals in the af=
firmative</div><div><br></div><div>Under this set of conditions, a user has=
 the means of sybil-resistant influence over miner decisions. If a miner ca=
nnot collect the fees for a transaction without signaling, the user&#39;s f=
ee becomes active=C2=A0economic pressure for the miner to signal (or not, i=
f we include some variant of the negative clause). In this environment, min=
ers could have a better view into what users do want, as would the Bitcoin =
network at large.</div><div><br></div><div>Some may take issue with the ide=
a that people can pay for the outcome they want and may try to compare a me=
thod like this to Proof of Stake, but there are only 3 sybil resistant mech=
anisms I am aware of, and any &quot;real&quot; view into what social consen=
sus looks like MUST be sybil resistant:</div><div><br></div><div>- Hashpowe=
r</div><div>- Proof of personhood (KYC)<br>- Capital burn/risk</div><div><b=
r></div><div>Letting hashpower decide this is the thing that is currently c=
ontentious, KYC is dead on arrival both on technical and social grounds, wh=
ich really just leaves some means of getting capital into the process of co=
nsensus measurement. This mechanism I&#39;m proposing is measurable complet=
ely en-protocol and doesn&#39;t require trust in institutions that fork fut=
ures would. Additionally it could be an auxiliary=C2=A0feature of the soft =
fork deployment scheme chosen making it something you could neatly package =
all together with the deployment itself.</div><div><br></div><div>There are=
 many potential tweaks to the design I propose above:</div><div>1. Do we in=
clude a notion of negative signaling (allowing for the possibility of rejec=
tion)</div><div>2. Do we make it such that miner signaling must be congruen=
t with &gt;X% of transactions, where congruence is that the signal must mat=
ch any non-neutral signal of transaction.</div><div><br></div><div>Some ant=
icipated objections:</div><div><br></div><div>1. signaling isn&#39;t voting=
, no deployment should be made without consensus first.</div><div>- yeah we=
ll we can&#39;t currently measure consensus right now, so that&#39;s not a =
super helpful thing to say and is breeding ground for abuse in the form of =
certain people making the unsubstantiated claim that consensus does or does=
 not exist for a particular initiative</div><div><br></div><div>2. This is =
just a proposal for &quot;pay to play&quot;, we should not let the wealthy =
make consensus decisions.</div><div>- I agree that wealth should not be abl=
e to strong-arm decision making. But the status quo seems even worse where =
we let publicly influential people decide consensus in such a way where not=
 only do they not &quot;lose ammunition&quot; in the process of campaigning=
, but actually accrue it, creating really bad long-term balances of power.<=
/div><div><br></div><div>3. Enforcing this proposal requires its own soft f=
ork.</div><div>- Yes. It does...and there&#39;s a certain cosmic irony to t=
hat, but before we consider how to make this happen, I&#39;d like to even d=
iscuss whether or not it&#39;s a good idea.</div><div><br></div><div>4. Thi=
s gives CoinJoin pool operators and L2 protocol implementations power over =
deciding consensus.</div><div>- I see this as an improvement over the statu=
s quo</div><div><br></div><div>5. This encourages &quot;spam&quot;</div><di=
v>- If you pay the fees, it&#39;s not spam.</div><div><br></div><div>The bi=
ggest question I&#39;d like to pose to the=C2=A0forum is:</div><div>- Does =
a scheme like this afford=C2=A0us a better view into consensus than we have=
 today?</div><div>- Can it be gamed to give us a *worse* view into consensu=
s? How?</div><div>- Does it measure the right thing? If not, what do you th=
ink is the right thing to measure? (assuming we could)</div><div>- Should I=
 write a BIP spec&#39;ing this out in detail?</div><div><br></div><div>Chee=
rs,</div><div>Keagan</div></div>
_______________________________________________<br>
bitcoin-dev mailing list<br>
<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D"_blank">=
bitcoin-dev@lists.linuxfoundation.org</a><br>
<a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev" =
rel=3D"noreferrer" target=3D"_blank">https://lists.linuxfoundation.org/mail=
man/listinfo/bitcoin-dev</a><br>
</blockquote></div></div>
</blockquote></div>

--0000000000000edadf05dda709c8--