From 2d99e1bba88895cfe0a669c07f9d8c6951e3192a Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Wed, 7 Oct 2026 18:03:08 +0000 Subject: [PATCH] funding.md: restore the cryptanalysis row as the internal adversarial pass (the previous commit had left the row blank) The row: no cash, 24 box-hours for first results on igneum-build-2 (ceiling 48 proposed), the USD 80,000 to 160,000 external estimate withdrawn, the staged disclosure prize the only outside check, labelled internal. Co-Authored-By: Claude Fable 5.1 --- docs/plans/funding.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/plans/funding.md b/docs/plans/funding.md index d3f5cc88a..282f20d22 100644 --- a/docs/plans/funding.md +++ b/docs/plans/funding.md @@ -28,7 +28,7 @@ Columns: estimated cost with its basis; what is funded today; what depends on fu | Development: the second independent node client | Not in the 13-month plan (`docs/fud-fixes.md` rows 31, 47). Basis: decision pending | Not funded | Yes, entirely | Does not start | | Independent review: finality rule v2 (gate 3, phase 4, the rule external review is paid to break) | USD 50,000 to 100,000. Basis: a focused review of one consensus rule plus its simulation by two reviewers over a few weeks, from memory, approximate | Founder's own means | No | Not pausable: the roadmap says the phase 4 gate is "finality design passes external review". If it cannot be paid, phase 4 does not close and the dates move | | Independent audit: the node fork (consensus delta, p2p, difficulty, header validation, the pow engine) before public testnet | USD 60,000 to 120,000. Basis: the delta is listed row by row in `docs/fork-divergence.md`; the base is rusty-kaspa, already audited upstream, approximate | Founder's own means, second in order after the finality review | Partly: a second pass after the attack harness closes its stubs | The single pass is kept; the second pass waits. Public testnet does not open without the first pass | - +| Cryptanalysis of the lottery hash: the mixer `M_r`, the chained cache and the acceptance rule, with the frozen class v4 sub-version 3 object as the target (Counter ASIC 3.0 item 3). INTERNAL ADVERSARIAL PASS, NOT AN INDEPENDENT REVIEW (the project lead's correction through main, 7 October 2026, evening: nothing goes outside, no firms, no paid lots, no briefs to anyone; the rule set is `docs/plans/cryptanalysis/in-house-pass.md` and the brief is the last section of this file) | No cash. Agent time the founder already pays for, plus box time on igneum-build-2: 24 box-hours for first results (three lanes, 8 each, one 32-core slot per lane), a proposed ceiling of 48 before main's word; a box-hour costs nothing beyond the box's monthly rent (`docs/plans/build-server.md`). The former estimate for two external reviews (USD 80,000 to 160,000, from the 2019 RandomX price points) is withdrawn and never totalled | Founder's own means (the box and the agents) | No | Nothing pauses. The only outside check is the disclosure prize (USD 50,000, approved 7 October 2026, STAGED: escrowed before it is named, the entity address on its documents, the project lead's publish word; rule 3). Testnet-1 opens with the pass's state (plans, results, bounds) on the download page, labelled internal; mainnet's gate on this item is the published internal reports plus the staged prize, never a claim of independent review | | Independent audit: execution layer and proving integration (revm driver, two-dimensional gas, proof records, the veto, the `ProofSystem` version 1 integration) before mainnet | USD 80,000 to 150,000. Basis: an EVM-integration audit of a new client's execution path, from memory, approximate | Not funded | Yes | Mainnet moves until it is paid. Mainnet does not ship with an unaudited execution layer | | Independent audit: the official client and release process (spec 08: reproducible builds, release key, update path) | USD 20,000 to 40,000. Basis: a short application security review, from memory, approximate | Not funded | Yes | The one-click app ships at testnet unaudited and says so on the download page; the audit lands before mainnet or the app does not carry the mainnet release key | | Infrastructure: the 20-node cloud devnet | USD 476 per month for 20 nodes (Hetzner API prices of 3 October 2026, net, `docs/plans/cloud-devnet.md`); about USD 6,000 for the 13 months, plus rented GPU hours for the hourly-compile and shard measurements at USD 0.22 to 0.74 per card hour (RunPod, 3 October 2026): under USD 1,000 over phase 2 | Founder's own means | No | Node count drops to 8 (two per location); the rented GPU hours are replaced by the project's own cards |