yanacuti1121/yana-ai/bft-consensus-patterns

import { SwarmRouter } from 'core/bus/swarm-router.js';
const router = new SwarmRouter();
// Register voters
['auditor-1', 'auditor-2', 'auditor-3', 'orch-1', 'orch-2'].forEach(id =>
  router.register(id, { role: 'auditor', trustScore: 90 })
);
// Propose a critical change
async function proposeChange(proposerId, change) {
  const QUORUM = 3;
  const votes = await Promise.allSettled(
    [...router.agents.keys()]
      .filter(id => id !== proposerId)
      .slice(0, 5)
      .map(id => router.route({
        from: proposerId, to: id,
        command: 'VOTE_REQUEST',
        payload: { change, fingerprint: router._fingerprint(change) }
      }))
  );
  const yesVotes = votes.filter(v => v.status === 'fulfilled' && v.value.delivered).length;
  if (yesVotes < QUORUM) throw new Error(`CONSENSUS_FAIL: ${yesVotes}/${QUORUM} votes`);
  return { approved: true, votes: yesVotes };
}

// Run same task on two independent agents, compare results
async function dualVerify(task, agentA, agentB) {
  const [resultA, resultB] = await Promise.all([
    runAgent(agentA, task),
    runAgent(agentB, task),
  ]);
  const hashA = sha256(JSON.stringify(resultA));
  const hashB = sha256(JSON.stringify(resultB));
  if (hashA !== hashB) {
    // Results diverged — trigger investigation
    router.penalize(agentA, 10, 'DUAL_VERIFY_DIVERGENCE');
    router.penalize(agentB, 10, 'DUAL_VERIFY_DIVERGENCE');
    throw new Error('DUAL_VERIFY_FAIL: agent outputs diverged');
  }
  return resultA;
}

function weightedQuorum(voters, minTrustScore = 60) {
  const eligible = voters.filter(a => a.trustScore >= minTrustScore && !a.quarantined);
  const totalWeight = eligible.reduce((sum, a) => sum + a.trustScore, 0);
  const threshold = totalWeight * 0.67;  // 67% weighted majority
  return { eligible: eligible.length, threshold, totalWeight };
}

// When task transitions to PENDING_APPROVAL state:
function demoteToMinPrivilege(agentId) {
  const agent = router.agents.get(agentId);
  // Restrict allowed commands to read-only subset
  agent.allowedCommands = new Set(['git status', 'ls', 'cat']);
  agent.role = 'observer';  // no write access
  router._log('PRIVILEGE_DEMOTE', agentId, { reason: 'PENDING_APPROVAL' });
}

// Periodic challenge: agents must respond with correct HMAC
setInterval(() => {
  for (const [id, agent] of router.agents) {
    const challenge = randomBytes(16).toString('hex');
    const expectedResponse = hmac256(challenge, agent.sharedSecret);
    sendChallenge(id, challenge).then(response => {
      if (response !== expectedResponse) {
        router.quarantine(id, 'HEARTBEAT_FAIL');
      }
    }).catch(() => {
      router.quarantine(id, 'HEARTBEAT_TIMEOUT');
    });
  }
}, 30000);