Status: Draft v1.0
Category: Intelligence Fabric Protocol
This specification defines how model weight shards are:
- Committed
- Indexed
- Optionally stored
- Economically incentivized
- Proven available
- Pruned
Tetcore does NOT store raw model weights on-chain.
Instead, it stores cryptographic commitments and optional availability attestations.
A model M is divided into N shards:
M = {Shard₀, Shard₁, …, Shardₙ₋₁}
Each shard:
Shardᵢ ∈ Bytes
Shard size is not consensus-restricted.
For each shard:
shard_hashᵢ = SHA256(Shardᵢ)
Model root commitment:
shard_root = MerkleRoot(shard_hash₀ … shard_hashₙ₋₁)
This root is stored on-chain under IFP-100.
The Shard Storage Ledger maintains:
ShardStorageLedger = { model_id → { version → { shard_root, shard_count, storage_registry } } }
Where:
storage_registry = { shard_index → [storage_node_addresses] }
Storage nodes are normal accounts that register willingness to store shards.
Registration transaction includes:
- model_id
- version
- shard_index
- optional collateral amount
On successful registration:
storage_registry[shard_index] appends storage_node_address
Registration does NOT prove possession automatically.
Storage nodes that register for shard storage implicitly agree to:
- Maintain shard availability
- Respond to availability challenges
- Serve shard data upon request (off-chain)
- Maintain integrity of stored shard
Failure may trigger economic penalties if collateralized.
Any participant may initiate:
ShardAvailabilityChallenge
Payload:
{ model_id, version, shard_index, challenged_node }
Upon challenge:
challenged_node must respond within:
challenge_window_blocks
Defined by governance.
Proof includes:
- shard_hash
- optional Merkle proof
- signature of storage node
If proof valid and matches shard_root:
Challenge resolved successfully.
If no proof submitted within window:
Challenge considered failed.
Storage registration MAY require:
collateral_amount > 0
Collateral is locked until:
- Voluntary exit
- Slashing event
- Governance removal
Collateral may be slashed if:
- Node fails availability challenge
- Node submits incorrect shard proof
- Node repeatedly fails service
Slashing logic is deterministic and enforced by kernel.
Shard ownership is distinct from model ownership.
Model owner:
- Controls shard_root
- Controls version updates
Storage node:
- Stores physical shard
- Does not own model
Ownership of shard data does NOT transfer model rights.
Core ledger retains:
- shard_root
- shard_count
- storage registry metadata
Never pruned.
Availability proofs and challenge records are stored in prunable ledger.
These may be pruned after:
challenge_window_blocks expire.
If model version becomes Deprecated or Disabled:
Shard registry entries MAY be pruned after:
deprecation_ttl_blocks
Defined by governance.
Storage node may voluntarily deregister:
DeregisterShardStorage transaction:
{ model_id, version, shard_index }
If collateralized:
Collateral unlocks after safety delay.
All shard registry updates must:
- Use canonical ordering
- Be deterministic
- Not depend on off-chain availability
- Not verify raw shard contents
Protocol validates only commitments, not data content.
Formal structure:
ShardRegistry = { (model_id, version, shard_index) → { storage_nodes: OrderedSet
, collateral_locked: map(Address → u128) } }OrderedSet must use deterministic ordering.
Protocol does NOT enforce:
- Redundancy level
- Geographic distribution
- Minimum storage count
These may be introduced via governance or contract logic.
Shard storage security relies on:
- Economic incentives
- Availability challenges
- Reputation systems (future extension)
Protocol does NOT:
- Guarantee permanent storage
- Enforce replication factor
- Encrypt shard contents
Encryption is model-owner responsibility.
Inference operators may:
- Fetch shards from storage nodes
- Cache shards locally
- Operate without registering as storage node
Shard registration is optional unless governance mandates otherwise.
Possible future enhancements:
- Proof-of-Replication
- Proof-of-Retrievability
- ZK-based availability proofs
- Decentralized storage auctions
Such features must preserve deterministic state updates.
IFP-101 defines:
- Cryptographic commitment of model shards
- Optional storage node participation
- Deterministic registry tracking
- Challenge-based availability model
- Pruning safety rules
This enables scalable off-chain weight storage while maintaining on-chain integrity commitments.
End of IFP-101.