|
| 1 | +# Bridge, DA, And Security Review Requirements |
| 2 | + |
| 3 | +Status: research gate, no bridge implementation |
| 4 | + |
| 5 | +The local FlowMemory devnet has no live bridge and no live Base settlement. `AnchorBatchToBasePlaceholder` only models compact anchor payloads for future review. |
| 6 | + |
| 7 | +## Bridge Assumptions To Resolve Later |
| 8 | + |
| 9 | +Before any appchain can carry value, FlowMemory must define: |
| 10 | + |
| 11 | +- Deposit message format. |
| 12 | +- Withdrawal message format. |
| 13 | +- Message nonce and replay protection. |
| 14 | +- Source chain and destination chain binding. |
| 15 | +- Rootfield and receipt context binding. |
| 16 | +- Withdrawal finality policy. |
| 17 | +- Emergency pause authority and limits. |
| 18 | +- Upgrade path and delay. |
| 19 | +- Failed message recovery path. |
| 20 | + |
| 21 | +## Data Availability Requirements |
| 22 | + |
| 23 | +Before production appchain work, reviewers must be able to answer: |
| 24 | + |
| 25 | +- Where is appchain transaction data posted? |
| 26 | +- Can a new node reconstruct appchain state from public data? |
| 27 | +- How long is data retained? |
| 28 | +- What happens if data is missing? |
| 29 | +- How does the indexer mark unavailable data? |
| 30 | +- How does the verifier avoid claiming `verified` when data is unavailable? |
| 31 | + |
| 32 | +Missing DA should make appchain work unresolved or invalid, not silently trusted. |
| 33 | + |
| 34 | +## Fraud, Validity, And Proof Boundary |
| 35 | + |
| 36 | +The local devnet does not implement: |
| 37 | + |
| 38 | +- Fraud proofs. |
| 39 | +- Validity proofs. |
| 40 | +- ZK proofs. |
| 41 | +- Permissionless fault challenges. |
| 42 | +- Rollup withdrawal finality. |
| 43 | + |
| 44 | +If a future prototype uses OP Stack-derived or Base Appchain infrastructure, FlowMemory must document the exact inherited proof assumptions instead of making generic rollup claims. |
| 45 | + |
| 46 | +## Independent Review Gate |
| 47 | + |
| 48 | +Before value moves: |
| 49 | + |
| 50 | +- Bridge design review. |
| 51 | +- DA review. |
| 52 | +- Anchor schema review. |
| 53 | +- Replay-protection review. |
| 54 | +- Key custody review. |
| 55 | +- Emergency pause review. |
| 56 | +- Monitoring and incident response drill. |
| 57 | + |
| 58 | +## No-Go Conditions |
| 59 | + |
| 60 | +Any of these blocks value-bearing appchain work: |
| 61 | + |
| 62 | +- Unclear withdrawal finality. |
| 63 | +- Unclear DA source or retention. |
| 64 | +- No replay protection. |
| 65 | +- No emergency pause policy. |
| 66 | +- No independent bridge/security review. |
| 67 | +- Anchor roots cannot be reconciled by indexers. |
| 68 | +- Verifier reports can be marked verified without available evidence. |
| 69 | +- Appchain value requires moving raw memory, artifacts, or evidence on-chain. |
0 commit comments