DTN Custody · The simulated run · Code and results (Apache-2.0)

Solar System Internet on real Bundle Protocol agents

The same five operators and geometry as the simulated run, with every spacecraft and station a real Aalyria Hardy BPA that signs custody receipts inside the BPA, routes with its own time-variant routing agent, and holds bundles in its own store. The space links are emulated (contact windows, light time and rates); time is compressed 120 times, 24 scenario hours in 12 minutes.

10Hardy BPAs
20 / 20bundles delivered
50receipts signed inside Hardy
2 / 2forged claims refused
3bundles that picked up the revocation from a Hardy node

Who earned what

From the receipts alone, each statement signed by the clearing house. Paid on Bitcoin BSV in one transaction: 884c01fa6cbdb797f9e6be1c58be1b8c8249a6a816bdee1fd8989a34f3fb8793.

OperatorBundlesAmountRefusedSigned statement
Deep-space ground network190.21100xb65803a846263142…
Lunar relay operator A80.24840x696f74d32679cadd…
Lunar relay operator B (no custodian)000none
Mars relay operator10.400xe981db14ee720ba6…

A relay key is stolen

Lunar relay A-2's signing key is copied mid-run and revoked from that moment. Mission operations has the revocation at once and sends it out with its commands; Hardy nodes that carry it learn it and add it to every bundle they forward.

EndpointHeard the revocation after it was issued
Mission operationsat once
Lander payload3.5 h
Rover payload4.21 h

5 bundles arrived carrying the revocation; 3 of them had left their origin without it and picked it up from a Hardy node on the way (lander-tlm-14.5, lander-tlm-16.5, rover-img-17). Honest receipts A-2 cannot bill, signed between the theft and the revocation: 2.

Forged claim with the stolen keyClearing
appended, backdated before the theftrevoked_unwitnessed
signed after the theftsigned_after_revocation

Every bundle

solidsigned inside Hardy · dottedsigned by a JS endpoint · unsigned relays are named and sized from the receipts on either side

BundleTookCustodians, in orderAt destination
lander-tlm-0.50 hLander›Far-side lander›A-1›Goldstone›Mission operationsverified
cmd-lander-1.50.17 hMission operations›Goldstone›Far-side lander›Lander
unsigned: B-1, 1 node
verified
lander-tlm-2.50 hLander›Far-side lander›A-2›Goldstone›Mission operationsverified
cmd-rover-22.35 hMission operations›Madrid›Mars rover›Roververified
rover-img-13.4 hRover›Mars rover›Madrid›Mission operationsverified
lander-tlm-4.50.2 hLander›Far-side lander›Goldstone›Mission operations
unsigned: B-1, 1 node
verified
rover-img-50.27 hRover›Mars rover›Madrid›Mission operationsverified
lander-tlm-6.50 hLander›Far-side lander›A-1›Goldstone›Mission operationsverified
cmd-lander-7.50 hMission operations›Canberra›A-1›Far-side lander›Landerverified
cmd-rover-80.22 hMission operations›Madrid›Mars rover›Roververified
lander-tlm-8.50.5 hLander›Far-side lander›A-2›Hawaii›Mission operationsverified
rover-img-90.27 hRover›Mars rover›Goldstone›Mission operationsverified
lander-tlm-10.50.43 hLander›Far-side lander›A-2›Canberra›Mission operationssigned_after_revocation
lander-tlm-12.50 hLander›Far-side lander›A-1›Canberra›Mission operationsverified
rover-img-130.27 hRover›Mars rover›Goldstone›Mission operationsverified
cmd-lander-13.50 hMission operations›Canberra›A-1›Far-side lander›Lander
carried the revocation from its origin
verified
cmd-rover-140.22 hMission operations›Goldstone›Mars rover›Rover
carried the revocation from its origin
verified
lander-tlm-14.50 hLander›Far-side lander›A-1›Canberra›Mission operations
picked up the revocation on the way, from a Hardy node
verified
lander-tlm-16.50 hLander›Far-side lander›Madrid›Mission operations
unsigned: B-1, 1 node
picked up the revocation on the way, from a Hardy node
verified
rover-img-176.38 hRover›Mars rover›Mars relay orbiter›Canberra›Mission operations
picked up the revocation on the way, from a Hardy node
verified

Real: ten Hardy BPAs (custody-receipt filter, routing agents, storage). Emulated: the space links. Routes computed by contact graph routing from the geometry and loaded into Hardy's routing agents. Amounts in an abstract unit, paid in sats at a stated rate. Generated by ssi/hardy/explorer.mjs.