filecoin-project / notary-governance

113 stars 55 forks source link

v5 Notary Allocator Application: VSTAR #1075

Closed DDUPA closed 3 months ago

DDUPA commented 5 months ago

v5 Notary Allocator Application

To apply to be an allocator, organizations will submit one application for each proposed pathway to DataCap. If you will be designing multiple specific pathways, you will need to submit multiple applications.

Please complete the following steps:

1. Fill out the information below and create a new GitHub Issue

  1. Notary Allocator Pathway Name (This can be your name, or the name of your pathway/program. For example "E-Fil+"): VSTAR
  2. Organization Name: VSTAR
  3. On-chain address for Allocator (Provide a NEW unique address. During ratification, you will need to initialize this address on-chain): f1t2hzgr25r7vwod46hglcvm32tldw2asj74b6rli
  4. Country of Operation (Where your organization is legally based): Cyprus
  5. Region of Operation (What region will you serve?): All Regions
  6. Type of Allocator, diligence process: (Automated/programmatic, Market-based, or Manual (human-in-the-loop at some phase): Manual
  7. DataCap requested for allocator for 12 months of activity (This should be an estimate of overall expected activity. Estimate the total amount of DataCap you will be distributing to clients in 12 months, in TiB or PiB): 100PiB

2. Access allocator application (download to save answers)

Click link below to access a Google doc version of the allocator application that can be used to save your answers if you are not prepared to fully submit the application in Step 3. https://docs.google.com/document/d/1-Ze8bo7ZlIJe8qX0YSFNPTka4CMprqoNB1D6V7WJJjo/copy

3. Submit allocation application

Clink link below to access full allocator questionnaire and officially submit your answers: https://airtable.com/appvyE0VHcgpAkt4Z/shrQxaAIsD693e1ns

Note: Sections of your responses WILL BE posted back into the GitHub issue tracking your application. The final section (Additional Disclosures) will NOT be posted to GitHub, and will be maintained by the Filecoin Foundation. Application information for notaries not accepted and ratified in this round will be deleted.

ghost commented 5 months ago

Basic Information

1. Notary Allocator Pathway Name: VSTAR

2. Organization: VSTAR

3. On Chain Address for Allocator: f1t2hzgr25r7vwod46hglcvm32tldw2asj74b6rli

4. Country of Operation: Cyprus

5. Region(s) of operation: Africa , Asia minus GCR, Greater China, Europe, Oceania, Japan, North America, South America

6. Type of Allocator: Manual

7. DataCap requested for allocator for 12 months of activity: 100PiB

8. Is your allocator providing a unique, new, or diverse pathway to DataCap? How does this allocator differentiate itself from other applicants, new or existing?: For this allocation, we are following the same due diligence procedures as V3 and V4, but we have been contemplating innovating the entire allocation process. For instance, GitHub remains a relatively centralized product; incorporating solutions using smart contracts and blockchain technology could enhance the transparency and security of the entire allocation process.

Additionally, leveraging machine learning and data analysis techniques allows us to analyze the behavior of clients throughout the process, from audit to approval, and finally, the usage of DataCap. This helps us understand customer needs and behaviors, enabling precise allocation of DataCap to clients and improving the flexibility and efficiency of the allocation process. The data analysis process, to some extent, can also help prevent fraudulent activities by clients.

The above represents our innovative considerations for data allocation.

9. As a member in the Filecoin Community, I acknowledge that I must adhere to the Community Code of Conduct, as well other End User License Agreements for accessing various tools and services, such as GitHub and Slack.: Acknowledge

Client Diligence

10. Who are your target clients?: Individuals learning about Filecoin, Small-scale developers or data owners, Enterprise Data Clients

11. Describe in as much detail as possible how you will perform due diligence on clients. If you are proposing an automated pathway, what diligence mechanism will you use to determine client eligibility?: • Conduct a personal identity verification for the applicant, assessing the authenticity and level of activity on platforms such as GitHub, Slack, Discord, etc. • Perform manual reviews of the business license, company website, and corporate email for the applying organization. • Confirm the source of corporate funds, potentially involving the analysis of financial statements, transaction history, and other relevant documents.
 • Analyze the provided data samples, checking for strong correlations with the client, ensuring the compliance of sample data with local regulations, and adherence to FIL+ data rules.
 • Following the completion of the above due diligence, continuous monitoring of the client organization's operations will be conducted to identify any new risks.
 • We have dedicated detection tools to track the usage of client DataCap continually, ensuring compliance with rules in the utilization of datacap.

12. Please specify how many questions you’ll ask, and provide a brief overview of the questions.: • Can you introduce yourself? Where can I find you online? (GitHub, Twitter, Linkedin handle, Wechat, etc.) • If you were an organization, please introduce your organization, including but not limited to the establishment time, organizational size, business model, etc. • Have you or the organization you represent applied for DataCap before? • What is the Filecoin address you would like me to allocate the DataCap to? • How much DataCap are you requesting? • What is the use case for the DataCap you are requesting? • Which region do you intend to use DataCap in? If you plan to use DataCap in multiple regions, please specify. • How much DataCap do you plan to allocate to SPS? If you wish to allocate DataCap to specific SPS, please indicate. • Please outline your usage plan for DataCap, including but not limited to the allocation to SPS, usage ratios for each SP, etc.

13. Will you use a 3rd-party Know your client (KYC) service?: Yes, we plan to utilize third-party 'Know Your Customer' (KYC) services such as Trulioo and Thomson Reuters World-Check to ensure compliance. These services encompass identity verification, address verification, and risk monitoring for anti-money laundering, among other aspects. By leveraging these services, we aim to effectively verify the authenticity of customer identities and conduct comprehensive risk monitoring to meet compliance requirements.

14. Can any client apply to your pathway, or will you be closed to only your own internal clients? (eg: bizdev or self-referral): Yes,any client can apply in our pathway. We aim to serve every builder in the Filecoin storage network.

15. How do you plan to track the rate at which DataCap is being distributed to your clients?: Our team has a sophisticated program integrated with the Lotus API, enabling us to check the client's allocation status and usage rate at any time. The default checking period is one day.

Data Diligence

16. As an operating entity in the Filecoin Community, you are required to follow all local & regional regulations relating to any data, digital and otherwise. This may include PII and data deletion requirements, as well as the storing, transmit: Acknowledge

17. What type(s) of data would be applicable for your pathway?: Public Open Dataset (Research/Non-Profit), Public Open Commercial/Enterprise, Private Commercial/Enterprise, Private Non-Profit/Social Impact

18. How will you verify a client’s data ownership? Will you use 3rd-party KYB (know your business) service to verify enterprise clients?: For public datasets, we will verify their data sources to ensure they come from reliable, official, or widely recognized sources. This involves examining the dataset's publisher, source institution, and data acquisition methods. We will then analyze the dataset's consistency and completeness, ensuring that the provided dataset aligns with our client's specified requirements.

For individual datasets, we will conduct a detailed examination of the client's data samples to ensure that the sample data complies with local laws and regulations and has a strong correlation with the individual.

For enterprise datasets, we will use third-party KYB tools such as Trulioo or other tools to verify their corporate identity. We will confirm the legality of the data and ensure it aligns with the business operations of the respective enterprise.

19. How will you ensure the data meets local & regional legal requirements?: As a global trading platform, VSTAR has a professional legal team with a comprehensive understanding of legal regulations in various regions. Our legal team undergoes regular legal training to stay updated on local and regional regulatory requirements. We conduct thorough analysis of sample data to ensure compliance with local laws and regulations. This commitment ensures that all relevant personnel are well-informed about the legal requirements in each local and regional jurisdiction.

20. What types of data preparation will you support or require?: For inexperienced clients, we offer technical support, including guidance on using open-source third-party tools like go-car and go-swan-client to split data files and generate CAR files smaller than 32GB (32GB sectors) or 64GB (64GB sectors). Additionally, we have a comprehensive in-house program to handle the pre-sealing preparations for sectors. We are open to sharing and providing training on our processes if clients are interested.

21. What tools or methodology will you use to sample and verify the data aligns with your pathway?: We will use tools such as Boost Retrieve, Lotus Client, and HTTP retrieval to access data and identify whether the provided data has any correlation with sample data. In case of misuse detection, we reserve the right to cease the supply of allocations. We also have tools to gather information on the geographical distribution of each SP within our client base, the proportion of allocation usage, and the percentage of data duplicate sealing. If significant deviations from requirements are identified, we may suspend the allocation supply until the issues are resolved.

Data Distribution

22. How many replicas will you require to meet programmatic requirements for distribution?: 4+

23. What geographic or regional distribution will you require?: We hope to store data in 3-4 geographical regions that are not subject to legal restrictions or are free from disputes.

24. How many Storage Provider owner/operators will you require to meet programmatic requirements for distribution?: 5+

25. Do you require equal percentage distribution for your clients to their chosen SPs? Will you require preliminary SP distribution plans from the client before allocating any DataCap?: We require customers to provide a detailed allocation plan, disclosing the percentage of allocation assigned to each SP and the KYB information for each SP.

26. What tooling will you use to verify client deal-making distribution?: datacapstats.io and the CID checker bot

27. How will clients meet SP distribution requirements?: client can reach out on their own or engage in community communication, and we are also available to provide support.

28. As an allocator, do you support clients that engage in deal-making with SPs utilizing a VPN?: We are willing to collaborate with VPN service providers, provided that they undergo KYB checks to confirm legal and other regulatory compliance. After all, some clients may require privacy and security.

DataCap Allocation Strategy

29. Will you use standardized DataCap allocations to clients?: Yes, standardized

30. Allocation Tranche Schedule to clients:: • First: Clients receive 5% of the total DataCap request or 50% of the weekly allocation rate. • Second: After utilizing at least 80% of the first round, clients can obtain 10% of the total DataCap request or 100% of the weekly allocation rate. • Third: Upon utilizing at least 80% of the second round, clients receive 20% of the total DataCap request or 200% of the weekly allocation rate. • Fourth: After utilizing at least 80% of DataCap in the third round, clients can obtain 40% of the total DataCap request or 400% of the weekly allocation rate. • Max per client overall: 200T for individuals, 5PiB for enterprises

31. Will you use programmatic or software based allocations?: Yes, standardized and software based

32. What tooling will you use to construct messages and send allocations to clients?: the existing notary registry tooling at https://filplus.fil.org/#/

33. Describe the process for granting additional DataCap to previously verified clients.: Using the open-source tool SA Robot to obtain reports on client DataCap usage, examining the client's utilization of the previous DataCap. When a client has used 80% of their DataCap, we will proceed to grant additional DataCap to the client.

34. Describe in as much detail as possible the tools used for: • client discoverability & applications • due diligence & investigation • bookkeeping • on-chain message construction • client deal-making behavior • tracking overall allocator health • disput: • client discoverability & applications - github、slack、official email  • due diligence & investigation - Trulioo  • bookkeeping - Google Docs,github • on-chain message construction - https://filplus.fil.org/#/ • client deal-making behavior - CID Checker, DataCapstats.io • tracking overall allocator health - CID Checker, DataCapstats.io • dispute discussion & resolution - Slack, GitHub, Email • community updates & comms * - Slack, GitHub

Tools and Bookkeeping

35. Will you use open-source tooling from the Fil+ team?: Yes, we will utilize open-source tools such as CID Checker, filplus, DataCapstats, etc. These tools will assist us in tracking specific allocations, while platforms like GitHub, and Google Docs will facilitate collaboration within our team.

36. Where will you keep your records for bookkeeping? How will you maintain transparency in your allocation decisions?: We disclose the allocation and usage of DataCap on GitHub, where anyone in the community can review it. Some sensitive data will be stored in our secure database, and if the official team needs to inspect it later, we can provide access.

Risk Mitigation, Auditing, Compliance

37. Describe your proposed compliance check mechanisms for your own clients.: We use CID Checker, DataCapstats.io, and other tools to analyze clients' usage of DataCap. If a client's usage does not comply with the specifications, we provide them with an opportunity to make corrections initially. Subsequently, we also hold regular meetings with clients to understand their progress and requirements, further enhancing the compliance checking mechanisms.

38. Describe your process for handling disputes. Highlight response times, transparency, and accountability mechanisms.: We ensure an immediate response within a short time frame, typically within 48 hours, upon the occurrence of a dispute. We initiate a detailed internal investigation, collecting relevant evidence and information to comprehensively understand the background of the dispute. The findings are then publicly disclosed to the community. In cases where there is deceptive or abusive use of DataCap, we strongly report and subsequently blacklist the involved parties. If the usage is found to be compliant, we vigorously defend and advocate for both our and the client's rights.

39. Detail how you will announce updates to tooling, pathway guidelines, parameters, and process alterations.: We will communicate updates to clients and the community through email, Slack, and GitHub. However, we will not provide frequent updates.

40. How long will you allow the community to provide feedback before implementing changes?: When there are changes in plans, we will promptly notify the community and relevant individuals, providing a one-week discussion period. We will carefully consider everyone's feedback and opinions and make reasonable adjustments to the changes based on the discussions.

41. Regarding security, how will you structure and secure the on-chain notary address? If you will utilize a multisig, how will it be structured? Who will have administrative & signatory rights?: We will create a multi-signature address to ensure the security of the custody address. The multi-signature address will be shared among several key members of the organization, all of whom must have a comprehensive understanding of the Filecoin network. Signatures will be executed using hardware wallets, and wallet operations will not be performed in other situations, ensuring the prevention of private key theft.

42. Will you deploy smart contracts for program or policy procedures? If so, how will you track and fund them?: We will not deploy smart contracts.

Monetization

43. Outline your monetization models for the services you provide as a notary allocator pathway.: VSTAR aims to contribute to the real storage development of FILECOIN, and thus, we do not charge any fees during the customer review and approval process. If customers face challenges in preparing and distributing data, we are willing to assist by providing experienced personnel for relevant training. Considering the associated manual costs, we may reasonably charge service fees, typically at 120 USDT/person/day or 25 FIL/person/day. If customers prefer us to handle tasks such as data preparation and distribution on their behalf, we will charge 0.2 FIL/T.

44. Describe your organization's structure, such as the legal entity and other business & market ventures.: VSTAR (site: https://www.vstar.com/) is a part of the global multi-asset financial technology group V&S HOLDING, an internet retail brand created by a team of professionals with extensive industry experience. We have a profound understanding of traders' needs. VSTAR provides users with an institutional-grade trading experience, competitive trading costs, and a product team committed to excellence. We expand our core products to new and existing markets, support advanced tools, and deepen our engagement with customers to meet their needs. The company has obtained licensing in multiple countries worldwide: Vstar & Soho Markets Ltd (Cyprus) Soho Markets Global Limited (Mauritius) Soho Markets LLC (St. Vincent and the Grenadines)

45. Where will accounting for fees be maintained?: All fees will be settled in the form of Filecoin or USDT, and we will publicly disclose our organization's on-chain address. The community can review detailed transaction records on the blockchain. Additionally, we have an excellent finance team, and our internal financial system will also backup all transaction records. If the community wishes to inspect, we can fully and transparently disclose the financial information related to the fees.

Past Experience, Affiliations, Reputation

46. If you've received DataCap allocation privileges before, please link to prior notary applications.: none

47. How are you connected to the Filecoin ecosystem? Describe your (or your organization's) Filecoin relationships, investments, or ownership.: As a global multi-asset trading platform, we are also dedicated to promoting awareness in the field of digital currencies, including leading storage projects like FILECOIN. You can find more information on this topic on our official website: https://www.vstar.com/education/crypto In late 2021, our platform entered the field of filecoin as a storage provider, and our storage power has currently reached around 100P. Since the end of 2021, we have been actively contributing to the FILECOIN ecosystem.

48. How are you estimating your client demand and pathway usage? Do you have existing clients and an onboarding funnel?: As an emerging technology leader in the trading platform industry, VSTAR has garnered support from users in 100+ regions worldwide. We boast a vast customer base, including many high-quality clients. We stay in constant communication with our customers, regularly conducting online and offline activities to engage with them and collectively strive towards the ambitious goals of FILECOIN storage.

DDUPA commented 4 months ago

Hello, @Kevin-FF-USA

Our team has switched to a new Ledger wallet and requests that the signature address be updated to: f1h3fwbql5ctvvtargtcivfd4yenqbcybyw6cfghi

galen-mcandrew commented 3 months ago

Datacap Request for Allocator

Address

f2i2j6cizkwslawsl2xey4axnytkmmrkbaostw6ey

Datacap Allocated

5PiB

filplus-bot commented 3 months ago

The request has been signed by a new Root Key Holder

Message sent to Filecoin Network

bafy2bzacebyvpk7sytmoytzsg5nkpl3id6fiv7npreghd3iyueye7hooz7ryc

You can check the status of the message here: https://filfox.info/en/message/bafy2bzacebyvpk7sytmoytzsg5nkpl3id6fiv7npreghd3iyueye7hooz7ryc

galen-mcandrew commented 3 months ago

@DDUPA You need to set up a new dedicated repo inside your organization: https://github.com/FIL-VSTAR

The link you provided is to your organization, but there is only 1 public repo currently. Please provide a specific link to a new bookkeeping repo.

DDUPA commented 3 months ago

Hello @galen-mcandrew the new bookkeeping repo link: https://github.com/FIL-VSTAR/v5-notary