Kevin-FF-USA
commented
1 month ago Hi Thanks for applying to serve as an Allocator in the Filecoin Plus Program. In looking at this application, the TYPE OF ALLOCATOR is currently set to REQUEST FOR ALLOCATOR (RFA). Based on the details in application, this reads like a Manual review pathway. Can you please describe what type of Allocator pathway you wish to operate as?
For more details on the types of Allocators please check out this blog. https://blog.allocator.tech/2024/04/allocator-tech-blog.html
Finonaa
Allocator Application
Application Number
rec4wyj4g7HLMux57
Organization Name
Xman Team
Organization On-chain Identity
f1rto7zthkzfazt7baq6kpls4mozpmh2m7oxehcqy
Allocator Pathway Name
Xman Allocator
Github PR Number
160
Region of Operation
Greater China Region,Asia minus GCR
GitHub ID
Finonaa
On-chain address
I would like the governance team to create a multisig for me
Type of Allocator
RFA
Filecoin Community Agreement
As a member in the Filecoin Community, I acknowledge that I must adhere to the Community Code of Conduct, as well other End User License Agreements for accessing various tools and services, such as GitHub and Slack. Additionally, I will adhere to all local & regional laws & regulations that may relate to my role as a business partner, organization, notary, allocator, or other operating entity Acknowledge
Type of Allocator and RFA List
RFA: Automated - GitHub
Allocator Description
Contributions to EcosystemBuild better data onboarding pathway,Data Stewardship: Curate and provide high-quality datasets to be stored on the Filecoin network, enhancing the overall value and utility of the network.
Monetization and Fee structure
Client staking,SP fees,Client fees.
Target Clients
Web3 developers,Commercial/Enterprise,Nonprofit organizations,Open/Public,Individuals
Client Diligence Check
3rd party Know your business (KYB) service,3rd party Know your customer (KYC) service,Manual verification
Description of client diligence
Our pathway verifies clients and establishes initial trust through a multi-step approach: Verification Mechanism: We utilize a comprehensive verification process that includes identity verification, background checks, and validation of business credentials for enterprise clients. Mitigating Sybil Attacks: To prevent sybil attacks, we implement rate limits and deterministic checks in our automated verification system. This ensures that each entity is verified based on unique, identifiable criteria before datacap allocation. Authenticity Verification: For enterprise or paying clients, we validate data ownership claims through documentation review, including contracts and digital signatures. This ensures the authenticity and legitimacy of the data stored on Filecoin. Audit Trail: We maintain detailed records and evidence of our client diligence process. This includes providing auditable proof to the Governance Team, demonstrating compliance with regulatory requirements and best practices in data security and privacy. This approach ensures robust client verification and trust establishment, safeguarding against potential security risks and ensuring integrity within the Filecoin ecosystem.
Type of data
Public, open, and retrievable
Description of Data Diligence
How to Execute Data Due Diligence to Verify Clients: First, prior to collaboration, we will verify client identities through domain email, KYC, and KYB processes. After establishing cooperation, we will fully utilize the check-bot’s functionality to review check data before each round of signing. We will mainly observe whether the SP's disclosures align with actual cooperation, whether there is CID sharing, the proportion of DC obtained by the SP, and the level of support for Spark. If any doubts arise, we will suspend signing until the client provides a reasonable explanation. If the client fails to resolve the issues, we will cease support for them. Second, we have a dedicated legal compliance team responsible for monitoring and ensuring that our data processing activities comply with local and regional legal requirements. Additionally, we have established clear data protection policies and implemented appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of data. We also conduct regular risk assessments and compliance reviews to ensure our data processing activities meet local and regional legal standards. Types of Data Sampling and Tools Used to Confirm Data Consistency: We employ random sampling methods to regularly check and verify the data provided by clients. For instance, before each round of signing, we will download 10 sectors, decompress the data, and compare it with the source data provided by the client. We also use professional data audit tools, such as integrity checks, to confirm that the data is consistent with the initial declarations.
Data Preparation
Singularity,Go-CAR,Other existing ecosystem tooling
Replicas required, verified by CID checker
5+
Distribution required
Equal distribution of deals across regions
Number of Storage Providers required
5+
Retrieval Requirements
Public data highly retrievable over Spark.
Allocation Tranche Schedule TypeManual or other allocation schedule.
Initial Maximum for Each Client: Clients in the initial stages may be subject to restrictions on the overall cap to ensure fair distribution and prevent misuse. This initial cap can gradually increase as the client's participation and reputation grow in the network. Dynamic Adjustment of Overall Cap: With improvements in a client's performance and reputation within the Filecoin network, the overall cap can be dynamically adjusted. This encourages clients to contribute valuable data and actively engage in the Filecoin ecosystem. Allocator Always Follows a ""Limited Trust Over Time"" Approach: More Datacap is gradually released over time based on the time process, such as doubling the rate from the previous round. For example:
First Round: 512 TiB Second Round: 1 PiB Third Round: 2 PiB Fourth Round: 2 PiB Overall Cap for Each Client: (2 PiB)
Will you use FIDL tooling, such as allocator.tech and other bots?
Yes, all available tools
GitHub Bookkeeping Repo Link
https://github.com/Finonaa/Allocator-Governance
Success metrics
Number of clients,Retrievability of data,Speed of allocations (TTD),Amount of data onboarded, daily & aggregate
Timeline to begin allocating to clients
1 week from RKH approval
Funnel: Expected DataCap usage over 12 months
75-100PiB
Risk mitigation strategies
To protect our organization, reputation, and pathway for our specialized online education Filecoin allocator, we will implement robust risk mitigation strategies:
Operational Security (OpSec) Standards: Adhere to industry best practices for OpSec, including regular security audits, encryption of sensitive data, and access control measures to safeguard against unauthorized access.
User Agreements: Require clients to sign comprehensive user agreements outlining acceptable use policies, data ownership rights, and compliance with legal regulations such as GDPR and FERPA. These agreements ensure clarity and accountability in data handling practices.
Alert Systems: Implement real-time monitoring and alert systems to detect suspicious activities or anomalies in DataCap utilization patterns. Alerts will trigger immediate investigation and response to mitigate potential threats or abuse.
Throttling Mechanisms: Employ rate limiting and throttling mechanisms to control and limit the speed or frequency of data transactions, preventing overload scenarios or abusive usage patterns that could compromise network stability or performance.
Audits and Compliance Checks: Conduct regular audits of client accounts and data transactions to verify compliance with contractual obligations and regulatory requirements. These audits provide assurance of data integrity, security, and legal compliance.
Education and Training: Provide ongoing education and training to clients on best practices for secure data storage and management on Filecoin. This empowers clients to uphold security standards and mitigate risks from their end.
Incident Response Plan: Develop and maintain an incident response plan outlining procedures for handling security incidents, including communication protocols, escalation paths, and post-incident reviews to continuously improve response effectiveness.
Reputation Management: Monitor online reputation and feedback channels to promptly address any issues or concerns raised by clients or stakeholders. Swift resolution and transparency demonstrate commitment to maintaining trust and credibility.
By implementing these risk mitigation strategies, we aim to protect our organization, uphold our reputation, and maintain the integrity of our Filecoin allocator pathway dedicated to serving the online education sector securely and responsibly.
Dispute Resolutions
Response time: within 48 hours. Upon receipt of relevant dispute information, I will initiate the process of handling the dispute within 48 hours. Transparency: I will create the proposal on GitHub or Google Public Forms and allow parties to leave comments and submit evidence below the proposal. Dispute communication: Slack or Zoom online meetings. All parties are encouraged to communicate via Slack or Zoom online meetings to express their views and opinions. Accountability Mechanism: If a customer violates the law, penalties will be applied, including deletion of the remaining DataCap credits, blacklisting of the customer and the SP, and barring the customer from reapplying.
Compliance Audit Check
Regular checking: Check the utilization of DataCap regularly.
Track DataCap allocation metrics: Utilize tools such as datacapstats.io, CID checker bots, etc. to monitor DataCap allocation and usage, focusing on key metrics such as DataCap residuals, allocation frequency, and more.
Monitor time metrics: Track time patterns of client DataCap usage, such as frequency and duration of use, to ensure proper allocation. Regularly assess whether clients are completing data storage and usage on time to manage DataCap effectiveness.
Trust Assessment: Conduct an initial trust assessment of new customers, including their historical credit history and business reputation. When they demonstrate compliance and reliability, their trust score, as well as their DataCap allocation, increases.
Use tools such as CID Checker/Retrievability Bot: Utilize tools such as CID Checker to validate the data stored by the client to ensure it matches the declared data. Retrievability bots can be used to monitor and verify the retrievability of data and ensure that clients are adhering to storage protocols.
Compliance Report content presented for audit
Success metric: onchain report of data onboarded,Client Diligence: Client statements, client provided verification,Client Diligence: KYC/KYB report on clients,Data Compliance: Data Samples,Data Compliance: Manual report,Compliance: CID report,Client/Data Compliance: external third-party audit ,Client Diligence: Legal Review documents,Success metric: onchain data report,Client Diligence: Financial Audits and Credit Check reports,Data Compliance: Proof of provenance report.
Connections to Filecoin Ecosystem
Storage provider,Big data contributor,Developer
Slack ID
Mee