filecoin-project / notary-governance

114 stars 56 forks source link

v5 Notary Allocator Application:Genesis #1019

Closed Chuangshi1 closed 3 months ago

Chuangshi1 commented 6 months ago

v5 Notary Allocator Application

To apply to be an allocator, organizations will submit one application for each proposed pathway to DataCap. If you will be designing multiple specific pathways, you will need to submit multiple applications.

Please complete the following steps:

1. Fill out the information below and create a new GitHub Issue

  1. Notary Allocator Pathway Name (This can be your name, or the name of your pathway/program. For example "E-Fil+"):Genesis
  2. Organization Name:Genesis
  3. On-chain address for Allocator (Provide a NEW unique address. During ratification, you will need to initialize this address on-chain): f1ldkhvk55psquvhc727udmdl2tgm55exndh2meqa
  4. Country of Operation (Where your organization is legally based): China
  5. Region of Operation (What region will you serve?): GCR
  6. Type of Allocator, diligence process: (Automated/programmatic, Market-based, or Manual (human-in-the-loop at some phase): Manual
  7. DataCap requested for allocator for 12 months of activity (This should be an estimate of overall expected activity. Estimate the total amount of DataCap you will be distributing to clients in 12 months, in TiB or PiB):100P

2. Access allocator application (download to save answers)

Click link below to access a Google doc version of the allocator application that can be used to save your answers if you are not prepared to fully submit the application in Step 3. https://docs.google.com/document/d/1-Ze8bo7ZlIJe8qX0YSFNPTka4CMprqoNB1D6V7WJJjo/copy

3. Submit allocation application

Clink link below to access full allocator questionnaire and officially submit your answers: https://airtable.com/appvyE0VHcgpAkt4Z/shrQxaAIsD693e1ns

Note: Sections of your responses WILL BE posted back into the GitHub issue tracking your application. The final section (Additional Disclosures) will NOT be posted to GitHub, and will be maintained by the Filecoin Foundation. Application information for notaries not accepted and ratified in this round will be deleted.

Kevin-FF-USA commented 6 months ago

@Chuangshi1 Wanted to let you know this application has been received. After you complete and submit the Airtable form with your detailed Allocator plan - the public answers will be posted in a thread below. If you have any questions - please let me know.

ghost commented 6 months ago

Basic Information

1. Notary Allocator Pathway Name: Genesis

2. Organization: Genesis

3. On Chain Address for Allocator: f1ldkhvk55psquvhc727udmdl2tgm55exndh2meqa

4. Country of Operation: China

5. Region(s) of operation: Asia minus GCR, Greater China

6. Type of Allocator: Manual

7. DataCap requested for allocator for 12 months of activity: 70P

8. Is your allocator providing a unique, new, or diverse pathway to DataCap? How does this allocator differentiate itself from other applicants, new or existing?: In order to prevent customers from malicious use or abuse of DataCap, we will carefully review customers, examining their needs, and allocate them on demand. So I first specify some rules to figure out the true identity of the applicant.Browse its official website to get a general understanding of the company or individual.

9. As a member in the Filecoin Community, I acknowledge that I must adhere to the Community Code of Conduct, as well other End User License Agreements for accessing various tools and services, such as GitHub and Slack.: Acknowledge

Client Diligence

10. Who are your target clients?: Individuals learning about Filecoin, Small-scale developers or data owners, Enterprise Data Clients

11. Describe in as much detail as possible how you will perform due diligence on clients. If you are proposing an automated pathway, what diligence mechanism will you use to determine client eligibility?: In order to ensure the fairness and justice of DataCap distribution, we have formulated separate online and offline application procedures based on the number of DataCap applications and individual and corporate users. For individual users: We will review their Github registration years (180 days at least) to prevent malicious application bots. The amount of approval will also be controlled below 5 TiB. For business users: We have developed different review methods and requirements based on the number of their DataCap applications. If it is less than or equal to 5TiB, we will use online review. The following points will be reviewed. • Business license • Enterprise authorization letter (CEO's signature + seal) • All shareholders who account for more than 25% of the total number of shareholders must provide ID cards or passport photos. • Sample data submission (accounting for 0.2% of its total DataCap requests) If the application is larger than 5TiB, we will add offline comments based on online surveys (visit customers on business trips or invite them to our company). Enterprise business type • data source • Data volume (monthly) • What companies think about Filecoin • Data storage plan Complete automated approvals by filling out a request form.

12. Please specify how many questions you’ll ask, and provide a brief overview of the questions.: Question: Please introduce yourself and your personal information on social media (official website, WeChat, LinkedIn,, GitHub). • What is the purpose of your application for DataCap? • Please provide the wallet address you want to apply for DataCap • Please provide the quota of Datacap you want to apply for. • Please provide the name of the organization, nationality, country of registration, time of registration, name of the executive, and relevant website (if you are an institutional user). • Please provide the region where you want to use DataCap, if it is more than one region, please pay attention. • How many miners do you plan to distribute DataCap to, if there are specially designated miners, please pay attention. • Have you assigned DataCap before? If so, please provide details. https://docs.google.com/spreadsheets/d/1ZZVv7ubFyXG8jdx6lXQi48yJ2U1MdjVzpMFwhIF9rXE/edit#gid=2015743766

13. Will you use a 3rd-party Know your client (KYC) service?: Yes.Toggle is the appropriate one that i used.

14. Can any client apply to your pathway, or will you be closed to only your own internal clients? (eg: bizdev or self-referral): Any client.It is a fully open and inclusive access.We encourage diversity programs come to filecoin.

15. How do you plan to track the rate at which DataCap is being distributed to your clients?: Real-time tracking on DC distribution, integrates and uses multiple open sourced tooling. The number of DC allocations by the same client shall not exceed 30% of the total number. And the allocated DC amount does not exceed 2P. The time allocated is a working day. The distribution speed is to complete the review questions and answers to obtain DC.

Data Diligence

16. As an operating entity in the Filecoin Community, you are required to follow all local & regional regulations relating to any data, digital and otherwise. This may include PII and data deletion requirements, as well as the storing, transmit: Acknowledge

17. What type(s) of data would be applicable for your pathway?: Public Open Dataset (Research/Non-Profit), Public Open Commercial/Enterprise, Private Commercial/Enterprise, Private Non-Profit/Social Impact

18. How will you verify a client’s data ownership? Will you use 3rd-party KYB (know your business) service to verify enterprise clients?: First, we will require the applicant to provide the corresponding business license, relevant information of the company's legal person, facial recognition, tax bill, and the corresponding legal certificate of the location of the data storage server to verify the company's application entity information. Secondly, applicants are required to provide relevant proof of data ownership, and the data samples provided must account for 20% of the total application quota.Finally, only through KYB information verification can the data applicant's information be proven. The public and enterprise client must be open and transparent。

19. How will you ensure the data meets local & regional legal requirements?: We will check local legal requirements. Data that does not comply with the law will be rejected directly.If some data that we can't be sure is legal or not, we will disclose it to the community. Even to the notary call.

20. What types of data preparation will you support or require?: We will support text, graphic images, video, audio, numbers, AI, GIS, hot and cold data, etc.

21. What tools or methodology will you use to sample and verify the data aligns with your pathway?: We will initiate a retrieval request to the SP and randomly access some sectors for spot checks.

Data Distribution

22. How many replicas will you require to meet programmatic requirements for distribution?: 5+

23. What geographic or regional distribution will you require?: At least 3 geopolitical regions,each replica at different physical location, no or minimal VPN, different SP owner operators.

24. How many Storage Provider owner/operators will you require to meet programmatic requirements for distribution?: 5+

25. Do you require equal percentage distribution for your clients to their chosen SPs? Will you require preliminary SP distribution plans from the client before allocating any DataCap?: The proportion does not exceed 25%, and the SP is required to do the KYB and provide a distribution plan and obey it . Then it should publicly disclose through comments on Github.

26. What tooling will you use to verify client deal-making distribution?: By far, the most convenient way is through the CID Checker, AC bot and datacapstats.io

27. How will clients meet SP distribution requirements?: Yes.we will use programmatic (such as software or smart contract) deal distribution to set of vetted and reputable SPs.

28. As an allocator, do you support clients that engage in deal-making with SPs utilizing a VPN?: I use a list of common VPN server IP addresses to filter whether a VPN is used.I am Willing to support SPs that utilize VPNs, but requires additional KYB checks and enforces distribution.

DataCap Allocation Strategy

29. Will you use standardized DataCap allocations to clients?: Yes, standardized

30. Allocation Tranche Schedule to clients:: • First:1. Review the information in the application form • Second:2. Ask the questions in Q12 above regarding the application • Third:3. Review the answers to the questions and ask further questions based on the answers. It is required to list data samples of no less than 20% of the total applied DC quota. • Fourth:4.Verify the authenticity, legality, and data size of the stored data type. • Max per client overall:2P All the information and decisions should be open and transparency.

31. Will you use programmatic or software based allocations?: Yes, standardized and software based

32. What tooling will you use to construct messages and send allocations to clients?: I use notary registry tooling at https://filplus.fil.org

33. Describe the process for granting additional DataCap to previously verified clients.: Applicants are required to distribute Datacap to at least 4 or more miners, which will increase storage redundancy and help maintain decentralization and reduce the potential for abuse. The more the miner client allocates, the more the Datacap client may receive. The remaining 20% of DC can be applied for the next round. In addition, the SP retrieval rate must be more than 20%, and at least 5 copies must be stored. CID checker and AC bot will be used for inspection.

34. Describe in as much detail as possible the tools used for: • client discoverability & applications • due diligence & investigation • bookkeeping • on-chain message construction • client deal-making behavior • tracking overall allocator health • disput: • client discoverability & applications  GitHub • due diligence & investigation  GitHub Comment • bookkeeping  Github • on-chain message construction  https://filplus.fil.org/#/ • client deal-making behavior  Github CID Check Report and on-chain messaging • tracking overall allocator health https://datacapstats.io/ • dispute discussion & resolution   Google Dispute • community updates & comms *  Github & Slack

Tools and Bookkeeping

35. Will you use open-source tooling from the Fil+ team?: Yes,we will use the boost and Github repo.

36. Where will you keep your records for bookkeeping? How will you maintain transparency in your allocation decisions?: All allocation decisions will follow the guidelines published on Github. The same is true for all communications.It will be real-time update.It should be open and transparency.But for E-fil+ the information will not be disclosed.It needs the third party KYC or KYB. Since all interactions are intended to be done publicly, most allocation decisions should be self-explanatory. Any challenges related to allocation decisions should first be discussed publicly in the Github repository. If the notary public can’t provide a convincing reason, it can submit a dispute resolution application to the Notary Public Administration 14 business days from the date of the initial challenge. After submitting the dispute resolution application, the notary public can appoint an arbitrator among the root key holders to resolve the dispute. According to the decision of the arbitrator, a hearing may be held within 30 business days after the dispute resolution application is made.

Risk Mitigation, Auditing, Compliance

37. Describe your proposed compliance check mechanisms for your own clients.: Datacap distribution tracking is mainly at https://filplus.fil.org/#/ and https://datacapstats.io/. Customers' DC usage can be viewed through Github's CID Report. Regarding customer tolerance, we will respond based on the most basic LDN Q&A. KYC questions and answers for customers will include company entity information, development status, data storage type, size, and SP related information.

38. Describe your process for handling disputes. Highlight response times, transparency, and accountability mechanisms.: First of all, when a dispute arises, we should immediately stop DC distribution to the LDN. Only when the dispute is resolved can normal distribution be carried out. When a dispute arises, the corresponding LDN should be marked and the dispute should be resolved below on GitHub. Any dispute should be handled fairly and transparently. Any distribution of DC should comply with distribution rules and audit mechanisms.

39. Detail how you will announce updates to tooling, pathway guidelines, parameters, and process alterations.: About tooling, we will announce it on Twitter and Slack and Github.Follow the announcement process and detailed rules introduction.For new optional tools, announce availability but make opt-in. Clearly explain purpose and intended usage. Pathway Guidelines For clarifications or minor adjustments, announce via release notes on documentation page. For substantive changes, first publish a proposal for public feedback on a discussion forum. Allow 2-4 weeks for comments. If approved, announce finalized changes along with a summary of feedback received and reasoning behind decisions. Give notice period before enforcement. Process Alterations Clearly define any proposed new processes as ""pilots"" or ""optional"" at outset to avoid scope creep. For pilots, set review period to assess usefulness prior to potential incorporation as standard process.

40. How long will you allow the community to provide feedback before implementing changes?: I will research the proposal and ask for opinions from multiple parties, and come to a conclusion that favors the axiomatic side.For minor clarifications or bug fixes, 1-2 weeks for feedback should suffice. For substantive changes or new proposals, 4 weeks minimum to allow broader discussion. Actively moderate discussions to prevent domination by any single entity. Synthesize feedback themes rather than taking a headcount approach. Consider perspectives across various stakeholder groups. Where there are disagreements, discuss trade-offs transparently in proposal updates. Explain rationale for final decisions. For proposals where consensus cannot be reasonably achieved, allow voting as a last resort - but only among validated members to prevent manipulation. Continue engaging skeptics after a decision to understand concerns and refine approach over time based on experience. Consult Fil+ Governance team proactively for guidance on complex proposals or issues lacking clear resolution from community process alone. The goal would be fair representation rather than pure democracy or decentralization for its own sake. Moderated, thoughtful discussion aimed at consensus wherever possible seems most likely to maintain community trust over the long run.

41. Regarding security, how will you structure and secure the on-chain notary address? If you will utilize a multisig, how will it be structured? Who will have administrative & signatory rights?: I use a hardware wallet。Here is how I would recommend structuring and securing the on-chain notary address: Use a multisig address requiring M-of-N signatures for transactions. M should be sufficiently high (e.g. 3 or 4) to prevent funds loss from any single compromised signatory. N should include 5-7 signatories total for redundancy and in case any signers become unavailable long-term. Signatories would include technical operators plus independent compliance/oversight roles assigned by the Fil+ Governance team. Private keys would be split and stored securely using hardware security modules (HSMs), multisig wallets, offline storage. Regular audits of private key storage, hardware, and software would be conducted by independent assessors. Administrative rights like adding/removing signatories would require oversight approval via governance process. Daily operations could be handled via multisig transactions initiated by dev/ops staff. Secure development practices like secret scanning, access control, logging/monitoring would be implemented. Networks would be firewalled/segregated, critical systems airgapped when possible. Data loss/leak prevention, backups, disaster recovery plans in place. The goal is a secure setup with balanced control, oversight to prevent malfeasance, and resilience against both external threats and internal compromise.

42. Will you deploy smart contracts for program or policy procedures? If so, how will you track and fund them?: I haven't done this yet

Monetization

43. Outline your monetization models for the services you provide as a notary allocator pathway.: We will release the quota in batches, and when the first batch of quota is completed, a data audit will be performed. We list the audit fees: 0.5FIl/TiB for both client & SP

44. Describe your organization's structure, such as the legal entity and other business & market ventures.: Genesis team focus on the field of distributed storage, with blockchain and filecoin data storage track as the major development business sectors.It currently has more than 80 members, invested about 300 million yuan, and deployed more than 4,000 storage server equipment in four cities across the country. The current daily growth rate is 500TB to 1.5PiB.The legal entity is Ying Xu。About filecoin products developed by the Genesis team :Firstly, The Genesis Browser。Secondly,""SD Cloud"" filecoin storage cloud service platform。

45. Where will accounting for fees be maintained?: We will charge the customer trading account and SP trading account in the early stage and retain the evidence for community review. In the future we will write a smart contract to ensure smooth auditing and distribution.

Past Experience, Affiliations, Reputation

46. If you've received DataCap allocation privileges before, please link to prior notary applications.: Yes ,we are V3 and V4 notary . For V4: https://github.com/filecoin-project/notary-governance/issues/732

47. How are you connected to the Filecoin ecosystem? Describe your (or your organization's) Filecoin relationships, investments, or ownership.: Our team has some SP:f020330 f025002 f024483 f0101020 f0101021 with 143.22PiB and the total amount of fil is 1.27Million Product: Genesis browser for filecoin SDCloud Storage platform

48. How are you estimating your client demand and pathway usage? Do you have existing clients and an onboarding funnel?: We usually receive requests via SLack, email, and GitHub. Customer demand is often estimated based on past allocations. Existing customers are also contacted through Slack.

1ane-1 commented 5 months ago

Question7: it should be 100P. It is our mistake that make wrong words.

galen-mcandrew commented 4 months ago

Datacap Request for Allocator

Address

f2m4ljkbqkw4rljq7mhu2xmdchnvbcuwqox4hebnq

Datacap Allocated

5PiB

filplus-bot commented 4 months ago

The request has been signed by a new Root Key Holder

Message sent to Filecoin Network

bafy2bzacecf6in63k7vbp46hhawcze26wsdu3qqj7f4urmyuhwua6jxdzwsxa

You can check the status of the message here: https://filfox.info/en/message/bafy2bzacecf6in63k7vbp46hhawcze26wsdu3qqj7f4urmyuhwua6jxdzwsxa

Chuangshi1 commented 3 months ago

Hope change f1ldkhvk55psquvhc727udmdl2tgm55exndh2meqa to f1mdk7s2vntzm6hu35yuo6vjubtrpfnb2awhgvrri. @galen-mcandrew @kevzak Thanks a lot.