before wallets will use a ledger, the operator spends the re...

ynniv

npub12akj8hpakgzk6gygf9rzlm343nulpue3pgkx8jmvyeayh86cfrus4x6fdh

hex

2636751fd619fa6e93a3690c4b1d86421e7ea4f9f25d79a62bf7c451dc2d3c18

nevent

nevent1qqszvdn4rltpn7nwjw3kjrztrkryy8n75nulyhte5c4l03z3mskncxqprpmhxue69uhhyetvv9ujuem4d36kwatvw5hx6mm9qgs9wmfrms7myptdyzyyj330ac6ce70s7vcs5trredkzv7jtnavy37gjjh6dk

Kind-1 (TextNote)

2026-05-08T11:56:19Z

↳ Reply to Goose_in_Gensokyo (npub1zwfqq3xmqwsecmd7lm6w34fv04h6w4nrcee3rtehxhdskgq4gkks88n6zj)

Most interesting question is how honest members of quorum will reassign ledgers to re-gain control over "stealed by operator" funds; need they vote ma...

before wallets will use a ledger, the operator spends the reserves to a multisig of quorum members. so during operation, the operator controls "truth", but the quorum controls "funds".

a bad operator cannot steal, they can only misattribute.

the majority of a quorum can steal, but in doing so reveal themselves to be dishonest. it is required that quorum members have their own ledgers with their own quorums of at least half the size, so by colluding to steal, a minimum of 2 or 3 other ledgers are at risk

since quorum membership is visible, wallets can choose ledgers where dishonesty would cause maximum fan-out of liability

Raw JSON

{
  "kind": 1,
  "id": "2636751fd619fa6e93a3690c4b1d86421e7ea4f9f25d79a62bf7c451dc2d3c18",
  "pubkey": "576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9",
  "created_at": 1778241379,
  "tags": [
    [
      "e",
      "02889611ff7900e5b1e6ab47bf1f3ab3f9b8ce6c8ca9feda70215bb9b55f5fb5",
      "",
      "root"
    ],
    [
      "e",
      "157d173f3d104b0308ec1ee3fd98e107899a99db2c626263f1eb8688988e212b",
      "wss://relay.primal.net",
      "reply",
      "13920044db03a19c6dbefef4e8d52c7d6fa75663c67311af3735db0b201545ad"
    ],
    [
      "p",
      "3f770d65d3a764a9c5cb503ae123e62ec7598ad035d836e2a810f3877a745b24"
    ],
    [
      "p",
      "13920044db03a19c6dbefef4e8d52c7d6fa75663c67311af3735db0b201545ad"
    ]
  ],
  "content": "before wallets will use a ledger, the operator spends the reserves to a multisig of quorum members. so during operation, the operator controls \"truth\", but the quorum controls \"funds\". \n\na bad operator cannot steal, they can only misattribute. \n\nthe majority of a quorum can steal, but in doing so reveal themselves to be dishonest. it is required that quorum members have their own ledgers with their own quorums of at least half the size, so by colluding to steal, a minimum of 2 or 3 other ledgers are at risk\n\nsince quorum membership is visible, wallets can choose ledgers where dishonesty would cause maximum fan-out of liability",
  "sig": "613031d769e24fea899f79d1e160690d9a5a3e663431286ee57e21ffc8ff85c2928f8dc7bd038c933b4b350e1d3e7510043c3a414c2ac1e6af29db810f540810"
}