Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

02 · Where trust lives

Normative source: N-SPEC v0.7, preamble, §4.9, §12.15, §17.6, §18; WHY-N §3, §7; ATTACKS §2. This page explains; it does not restate rules or parameter values.

Assessing a settlement means identifying its dependencies. Bitcoin evidence, selection of a BATHRON history and a provider's external delivery answer different questions. Inclusion in an N chain does not remove the responsibilities of the party delivering an external asset. N-SPEC v0.7, preamble, §18; WHY-N §7

Locate each responsibility

Layer or roleWhat to examine
BitcoinThe evidence each node verifies and the Bitcoin reference used for the N block. N-SPEC v0.7 §8.4, §11.1
NValidation of each history and selection of one; its quantitative claims hold only within the published domain. N-SPEC v0.7 §1.1, §17.1
ProviderThe external value it delivers and the depth it chooses before delivery. WHY-N §7
ApplicationWhether its presentation distinguishes explicit facts, local observations and model results. N-SPEC v0.7 §16.1
UserWhether the stated policy and dependencies suit the operation being considered. N-SPEC v0.7 §1.1; WHY-N §7

These are questions to ask of a service, not additional consensus rules. A provider's chosen policy does not change N's validation or chain selection rules. N-SPEC v0.7 §1.1

Bitcoin evidence has a boundary

BATHRON reads Bitcoin; it never commands it. There is no native finality. Inclusion on BATHRON, at any depth, does not move an external asset. N cannot undo an external delivery. The party making that delivery therefore retains a separate responsibility even when the BATHRON operation meets its depth policy. N-SPEC v0.7, preamble, point 3, §18; WHY-N §7

M0 also has a distinct boundary: a burn irreversibly destroys bitcoin. It creates no recoverable Bitcoin reserve or claim on Bitcoin. Relying on BATHRON therefore includes relying on its consensus and on M0, alongside the dependencies of the external leg. N-SPEC v0.7 §4.9; WHY-N §3, §7

Waiting is part of the model

Wait or stop rather than be wrong. A settlement may wait hours; the network may pause to resolve a conflict. This describes a design choice within the published domain, not an unconditional outcome. Suspensions can occur without an attack. Outside the domain, N makes no quantitative claim, and a departure from the domain need not trigger STOP. N-SPEC v0.7 §14.4, §17.6, §18; WHY-N §7, §8

An origin is another dependency

A new node, or a returning node whose reception left the published domain, needs a recent authenticated origin before relying on the registry agreement claim. Exceptional recovery requires explicit acceptance of that origin. Signatures alone do not establish its honesty. N-SPEC v0.7 §12.14, §12.15, §18

Read the published limits and H1 counterexamples before treating a fingerprint as complete protection against conflicting histories.

See also

The N engine, Depth and statuses, Burns, and Who does what.