DFOS Identity Bridge, Federated Auth & Fee Model v2
Every login now creates a DFOS genesis chain. Four-node relay mesh live. The economic model got its first real spec.
🌐 DFOS Identity Bridge — LIVE (#532)
- Genesis is client-side — server never holds private keys.
@imajin/dfosbridge wrapscreateIdentityChain()for browser - Lazy backfill on login — existing users without relay chains get one silently on next login
- Ryan's prod DID backfilled immediately:
did:dfos:7v4vtfnh7v28ka7af3cv79 - Four-node mesh confirmed: ATX / NYC / LIS peered with Imajin. Content syncing across US + Portugal
- Brandon's Go relays push to us; peer-back pending (he'll poll our
/log)
📡 RFC-22: Federated Authentication
Three iterations in one session to get it right.
- v1: OAuth-style redirect → too complex
- v2: Email verification primary → but email→DID is private by design (Brandon confirmed)
- v3 (final): Consent-and-sign redirect. User clicks "Login with DFOS" → redirect to home platform → authenticate + consent → platform signs challenge (KMS for custodial, user key for self-sovereign) → redirect back with signed JWS → verify against chain key
- Three tiers: direct key auth (strongest) → consent-and-sign redirect (primary cross-platform) → email verification (fallback)
💰 Fee Model v2 (RFC Draft)
Three-party settlement: 1% protocol + 0.5% node + 0.25% user credit.
- Dual-token: MJN (equity, earned through usage) + MJNx (stable, CHF-pegged)
- Gas: 100% to node, MJN-denominated, bilateral signature (relay + user)
- Rate integrity: decreases instant, increases require 24h notice. Rate schedule on-chain. Peering relays audit
- Revenue streams: settlement fees, app licensing, professional services, managed hosting, compliance certification
🔧 Fixes
- Migration system fixed —
drizzle-kit pushbanned,migrate.shis the only path. CI check added (scripts/check-migrations.sh) - Carmen email bug — payment webhook had no try/catch around onboard token insert. One failure killed all subsequent emails silently. Each step now fails independently
- RFC-21: Imajin Conformance Suite — tests ARE the spec, ~35 assertions, 7 categories. Certification as commercial product
📊 By the Numbers
- 4 RFCs written or updated (19–22)
- 4-node relay mesh live
- Fee model v2 specced (three-party + dual-token)