|
9 | 9 |
|
10 | 10 | --- |
11 | 11 |
|
12 | | -> **Status notice (updated 2026-04-17)** |
| 12 | +> **Status notice (updated 2026-04-18)** |
13 | 13 | > |
14 | | -> This repository contains a ratified governing constitution, a full research package (~28,600 words), detailed feature specifications, and a comprehensive implementation with **784+ passing tests** across all modules. The CLI is functional with all 5 command groups wired. Core systems are implemented end-to-end. |
| 14 | +> This repository contains a ratified governing constitution, a full research package (~28,600 words), detailed feature specifications, and a substantial implementation with **802 passing tests** across all modules on Linux/macOS/Windows CI. Core systems and the P2P daemon are wired and exercised by unit + integration tests. **However, several subsystems have production scaffolding with placeholder values in critical paths — they are NOT production-ready as shipped.** The open GitHub issues track which pieces remain. |
15 | 15 | > |
16 | | -> **What exists and works:** |
17 | | -> - Library crate with 784+ passing tests (500+ lib, 284+ integration) |
18 | | -> - All 5 CLI command groups functional (donor, job, cluster, governance, admin) |
19 | | -> - WASM sandbox with CID store integration and real workload execution |
20 | | -> - Firecracker microVM driver with rootfs preparation from OCI images |
21 | | -> - Full cryptographic attestation (TPM2/SEV-SNP/TDX with RSA/ECDSA chain verification) |
22 | | -> - Deterministic 10-step policy engine with artifact registry and egress allowlist |
23 | | -> - Agent lifecycle: heartbeat, pause/checkpoint, withdrawal with zero host residue |
24 | | -> - Preemption supervisor with sub-10ms SIGSTOP delivery |
25 | | -> - BrightID, OAuth2, and phone/SMS identity verification |
26 | | -> - Sigstore Rekor transparency logging with Merkle inclusion proof verification |
27 | | -> - Raft consensus, CRDT ledger, BLS threshold signing (3-of-5) |
28 | | -> - Scheduler with ClassAd matchmaking and R=3 disjoint-AS placement |
29 | | -> - All 8 adversarial test scenarios fully implemented |
30 | | -> - Confidential compute (AES-256-GCM + X25519 key wrapping) |
31 | | -> - mTLS certificate management with 90-day auto-rotation |
32 | | -> - Distributed mesh LLM (router, aggregator, self-prompting, safety tiers, kill switch) |
33 | | -> - Platform adapters: Slurm, Kubernetes (with Helm chart), Cloud (AWS/GCP/Azure) |
34 | | -> - Tauri desktop GUI scaffold with React frontend |
35 | | -> - REST/HTTP+JSON gateway for all 6 gRPC services |
36 | | -> - Docker + Docker Compose + Helm deployment infrastructure |
37 | | -> - Energy metering (RAPL) and carbon footprint reporting |
38 | | -> - CI on Linux/macOS/Windows via GitHub Actions (all green) |
| 16 | +> **What is complete and verified in code:** |
| 17 | +> - P2P daemon: full libp2p NAT-traversal stack (TCP + QUIC + Noise + mDNS + Kademlia + identify + ping + AutoNAT + Relay v2 server/client + DCUtR). Validated end-to-end in-process by `tests/nat_traversal.rs` — a 3-node relay-circuit test that dispatches a real WASM job through the relay in ~5ms. |
| 18 | +> - Distributed job dispatch: TaskOffer and TaskDispatch request-response protocols over CBOR. Real WASM execution on the executor. `worldcompute job submit --executor <multiaddr> --workload <wasm>` CLI command for end-to-end remote dispatch. |
| 19 | +> - All 5 CLI command groups functional |
| 20 | +> - WASM sandbox with CID-store integration and real workload execution (wasmtime) |
| 21 | +> - Deterministic 10-step policy engine with artifact registry + egress allowlist |
| 22 | +> - Preemption supervisor with SIGSTOP via nix (measured and logged) |
| 23 | +> - BrightID / OAuth2 / phone identity verification |
| 24 | +> - Scheduler with ClassAd matchmaking + R=3 disjoint-AS placement |
| 25 | +> - All 8 adversarial test scenarios implemented |
| 26 | +> - Confidential compute: AES-256-GCM + X25519 key wrapping |
| 27 | +> - mTLS certificate lifecycle via rcgen + Ed25519 auth tokens |
| 28 | +> - Credit decay with 45-day half-life + anti-hoarding |
| 29 | +> - Storage GC + acceptable-use filter + shard residency enforcement |
| 30 | +> - Energy metering via Intel RAPL |
| 31 | +> - 802 tests passing on CI (Linux/macOS/Windows + Sandbox KVM + swtpm) |
39 | 32 | > |
40 | | -> **What needs real-hardware validation (next milestone):** |
41 | | -> - Multi-machine LAN testnet (Phase 1: 3+ physical machines) |
42 | | -> - 72-hour churn simulation at 30% node failure rate |
43 | | -> - GPU mesh LLM inference at scale (4+ GPU nodes) |
44 | | -> - Preemption latency measurement on production hardware |
| 33 | +> **What has scaffolding but placeholder values or missing integration (see issues):** |
| 34 | +> - Mesh LLM (#27, #54): orchestration + router + aggregator + safety + kill switch all exist, but `load_model()` is a placeholder — no real LLaMA inference yet |
| 35 | +> - Attestation root CA fingerprints (#28): AMD ARK / Intel DCAP pinned as `[0u8; 32]` (bypass mode) — need real fingerprints before production |
| 36 | +> - Rekor public key (#29): pinned as `[0u8; 32]` — tree-head signature verification is skipped |
| 37 | +> - Firecracker rootfs (#33): concatenates layer bytes; real mkfs.ext4 + OCI-layer extraction not yet wired |
| 38 | +> - Platform adapters #37/#38/#39 (Slurm, K8s, Cloud): scaffolds + parsers; not exercised against live systems |
| 39 | +> - Tauri GUI (#40): scaffold; never built or run |
| 40 | +> - Docker / Helm deployment (#41): files present; never built or deployed |
| 41 | +> - REST gateway (#43): routing + auth logic present; no HTTP listener bound in daemon |
| 42 | +> - Admin ban (#34): `admin_service::ban()` is an explicit stub returning `Ok(())` |
| 43 | +> - Churn simulator (#51): statistical model; no real kill-rejoin |
| 44 | +> - Apple VF Swift helper (#52): scaffold; never built on macOS |
| 45 | +> |
| 46 | +> **Critical open issue:** |
| 47 | +> - #60: cross-machine firewall traversal. The production NAT stack is validated in-process only. Real WAN operation behind institutional / corporate firewalls is unverified, and our attempts from behind Dartmouth's firewall showed libp2p connections not completing. Resolving this is the next milestone. |
45 | 48 | > |
46 | 49 | > If you want to help build or test it, see [Contributing](#contributing). |
47 | 50 |
|
@@ -98,7 +101,7 @@ Five constitutional principles govern every design decision. They are not aspira |
98 | 101 |
|
99 | 102 | ## Status |
100 | 103 |
|
101 | | -World Compute has completed full functional implementation across all modules with 784+ passing tests. All 5 CLI command groups are wired and functional. Updated 2026-04-17. |
| 104 | +World Compute has substantial implementation with 802 passing tests and a fully-wired P2P daemon. All 5 CLI command groups functional. Several subsystems still have placeholder values in critical paths (see status notice at top of README and open issues #27, #28, #29, #33, #34, #37–#43, #51–#54, #56, #60). Updated 2026-04-18. |
102 | 105 |
|
103 | 106 | ### Design artifacts (complete) |
104 | 107 |
|
|
0 commit comments