{"id":9610,"date":"2022-05-03T22:00:00","date_gmt":"2022-05-03T22:00:00","guid":{"rendered":"http:\/\/ci02a0423fd0002718"},"modified":"2022-05-03T22:00:00","modified_gmt":"2022-05-03T22:00:00","slug":"a-modest-bitcoin-improvement-proposal-proposal","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/culture\/a-modest-bitcoin-improvement-proposal-proposal","title":{"rendered":"A Modest Bitcoin Improvement Proposal, Proposal"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><p><strong><em>This is an opinion piece about BIP119 (OP_CTV). If you would like to submit a counter argument, please <a href=\"mailto:austin@btcmedia.org\">email<\/a> Bitcoin Magazine.<\/em><\/strong><\/p>\n<h2>We\u2019ve Got A Problem<\/h2>\n<p>Decentralized consensus isn\u2019t easy. There\u2019s a reason most companies have CEOs, and \u201cnon-hierarchical\u201d organizations tend not to function well for long. Bitcoin\u2019s decentralized governance is harder still: On top of decentralization, we layer a relative lack of official processes, standards and norms for group decision-making \u2014 we even lack clarity around when to make a decision at all.<\/p>\n<p>Jeremy Rubin\u2019s recent proposal of a <a href=\"https:\/\/rubin.io\/bitcoin\/2022\/04\/17\/next-steps-bip119\/\" target=\"_blank\" rel=\"noopener\">Speedy Trial consideration<\/a> for Bitcoin improvement proposal (BIP)119 (OP_CTV) has brought these issues to the fore, illustrating just how difficult and amorphous the Bitcoin decision-making process is.<\/p>\n<p>This problem is largely inevitable. Bitcoin would not be Bitcoin with central governance. But as the community scales and becomes more ideologically diverse, this problem gets worse and effective communication and decision-making become increasingly difficult.<\/p>\n<p>This article argues for two changes to the \u201cmeta\u201d process of BIP consideration, which I believe could significantly improve the quality of our debates:<\/p>\n<ol>\n<li>Raise a set of high standards for BIP documentation.<\/li>\n<li>Adopt these open standards as a de facto <em>minimum<\/em> quality bar for a BIP to be considered for wider discussion.<\/li>\n<\/ol>\n<p>I believe these standards could radically improve the quality of our decentralized decision-making about Bitcoin. But first, I\u2019d like to illustrate the problem in more detail.<\/p>\n<h2>Information And objectivity<\/h2>\n<p>Let\u2019s pick on an anonymous, highly indicative tweet:<\/p>\n<blockquote>\n<p>\u201cCTV isn\u2019t necessary and is very much in its infancy as a project. No one knows enough about it, no one has bothered to review it thoroughly. I\u2019m not a developer or technically trained but this feels rushed and that is a    for me.\u201d<\/p>\n<\/blockquote>\n<p>The claims made in this tweet exemplify two broad problems I see with the discussion about CTV: poor informational standards and unmoored subjectivity.<\/p>\n<h3>Poor Informational Standards<\/h3>\n<p>Our anon argues that CTV is \u201cvery much in its infancy as a project,\u201d but by reasonable or comparative standards, this is not true. CTV was under development <a href=\"https:\/\/www.mail-archive.com\/bitcoin-dev@lists.linuxfoundation.org\/msg08036.html\" target=\"_blank\" rel=\"noopener\">in 2019<\/a>. Its BIP number was assigned <a href=\"https:\/\/github.com\/bitcoin\/bips\/commit\/1db62a07c5a70fddc616a0f9bbabf02201a3a56b\" target=\"_blank\" rel=\"noopener\">over two years ago<\/a> and consistent work has been done on top of the essentially static BIP since. Its potential applications have been explored in the <a href=\"https:\/\/github.com\/sapio-lang\/sapio\" target=\"_blank\" rel=\"noopener\">programming language<\/a> and <a href=\"https:\/\/github.com\/sapio-lang\/sapio-studio\" target=\"_blank\" rel=\"noopener\">graphical user interface<\/a> that its author built to create, visualize and test covenants \u2014 including other BIPs.<\/p>\n<p>\u201c<em>[N]o one has bothered to review it thoroughly<\/em>,\u201d<em> <\/em>the anon adds, but<em> <\/em>a large number of Bitcoiners and developers have done so. The <a href=\"https:\/\/utxos.org\/signals\/\" target=\"_blank\" rel=\"noopener\">social \u201csignals\u201d<\/a> of their support or objection are listed on Rubin\u2019s CTV website, where he also links to <a href=\"https:\/\/utxos.org\/uses\/\" target=\"_blank\" rel=\"noopener\">implementations of numerous downstream uses<\/a> of CTV by himself and <a href=\"https:\/\/github.com\/jamesob\/simple-ctv-vault\" target=\"_blank\" rel=\"noopener\">others<\/a>.<\/p>\n<p>The author of said tweet has a reasonable model for decision-making \u2014 to oppose new or poorly reviewed proposals \u2014 but is applying that model incorrectly because he lacks essential context.<\/p>\n<p>The above two criticisms are not the only popular expressions of this problem. For example, concerns have been voiced about CTV\u2019s riskiness, but they are voiced in the absence of essential context \u2014 clarity around what constitutes a risk and comparison to previously accepted BIPs.<\/p>\n<p>By way of context, Taproot, a far riskier proposal in almost every way \u2014 with complex cryptography potentially subject to future quantum attack and a significantly greater footprint of code to debug and maintain \u2014 seemed to sail through with <a href=\"https:\/\/lists.linuxfoundation.org\/pipermail\/bitcoin-dev\/2022-April\/020238.html\" target=\"_blank\" rel=\"noopener\">comparatively little testing and scrutiny<\/a>, <a href=\"https:\/\/lists.linuxfoundation.org\/pipermail\/bitcoin-dev\/2021-November\/019589.html\" target=\"_blank\" rel=\"noopener\">causing bugs<\/a>, <a href=\"https:\/\/suredbits.com\/taproot-funds-burned-on-the-bitcoin-blockchain\/\" target=\"_blank\" rel=\"noopener\">losing funds<\/a> and involving <a href=\"https:\/\/unchained.com\/blog\/getting-taproot-ready-for-multisig\/\" target=\"_blank\" rel=\"noopener\">incompletely demonstrated applications<\/a>.<\/p>\n<p>(My argument is not, \u201cBecause Taproot, therefore CTV.\u201d I am merely pointing to the inconsistency resulting from a poorly informed mental model.)<\/p>\n<p>Most of us work for a living and keeping up with these things is hard. Epistemic constraint is a fundamental fact of human existence. But to amend a quote by Thomas Jefferson, \u201c<a href=\"https:\/\/www.monticello.org\/site\/research-and-collections\/educated-citizenry-vital-requisite-our-survival-free-people-spurious\" target=\"_blank\" rel=\"noopener\">An educated citizenry is a vital requisite for Bitcoin\u2019s survival as the global monetary standard.<\/a>\u201d<\/p>\n<p>The discussion about BIP119 could benefit from a much higher floor of understanding and context.<\/p>\n<h3>Unmoored Subjectivity<\/h3>\n<p>Our Twitter anon makes two further points: \u201cCTV isn\u2019t necessary\u201d and \u201c[T]his feels rushed and that is a    for me.\u201d Once again, the arguments are fair enough. As Rubin himself said, pointing to alternate covenant solutions, \u201c<a href=\"https:\/\/twitter.com\/JeremyRubin\/status\/1384689155465089025\" target=\"_blank\" rel=\"noopener\">I don&#8217;t give a single fuck if BIP-119 CTV specifically is activated or not.<\/a>\u201d<\/p>\n<p>But these two statements point squarely at another problem with the debate: Our unavoidably subjective standards have nothing tangible to latch onto \u2014 no objective measures and no clear comparisons. In the absence of clear and comparative evidence, how are we to assess what is \u201cnecessary\u201d or has been \u201crushed\u201d without resorting to emotion, group-think and <a href=\"https:\/\/twitter.com\/ProofOfKeags\/status\/1518664090209554432?s=20&amp;t=-NkuZDLjAXdjkefYpQD_tg\" target=\"_blank\" rel=\"noopener\">shifting, illogical argumentation<\/a>?<\/p>\n<p><a href=\"https:\/\/twitter.com\/francispouliot_\/status\/1122514639106072576\" target=\"_blank\" rel=\"noopener\">\u201cEternal toxicity\u201d may be \u201cthe price of consensus,\u201d<\/a> and subjectivity is fundamental and unavoidable. Permanent<em> <\/em>subjectivity detached from relevant facts, however, destroys the capacity for collective decision-making.<\/p>\n<h2>What To Do About It?<\/h2>\n<p>I propose the adoption of a set of public documentation<em> <\/em>standards for what constitutes the <em>bare minimum<\/em> a BIP must provide to be worthy of large-scale public debate. I am <em>not<\/em> advocating for a clear path to BIP acceptance or even to BIP discussion. I am advocating for a higher normative standard of public documentation without which we can agree to consider a BIP \u201crushed,\u201d \u201ctoo early\u201d and \u201cvery much in its infancy as a project.\u201d<\/p>\n<p>In a phrase, \u201cThe community will consider your BIP premature until it answers all the relevant questions clearly in one place.\u201d<\/p>\n<p>I see two significant benefits to this higher bar: It anchors the inevitably subjective debate to consistent objective measures and it raises a standard for documentation likely to lead to better-informed discussion.<\/p>\n<p>Absent the clarity to meaningfully align on the comparative standards for a given BIP, our decentralized debates descend into a purgatory of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Law_of_triviality\" target=\"_blank\" rel=\"noopener\">\u201ctrivial\u201d bikeshedding<\/a> \u2014 a hippie co-op from hell.<\/p>\n<p>The implications of this are deadly serious. As our community grows in scale, distribution and intellectual diversity, we very seriously risk becoming a modern Tower of Babel, an ambitious project that falls into disarray because of a fundamental inability to productively communicate and make intelligent collective decisions.<\/p>\n<p>This is as chill as it\u2019ll get. We\u2019re gonna need a better process. There are reasons to be wary of more processes, however, and I think it\u2019s important to address them first.<\/p>\n<h2>Objections<\/h2>\n<h3>On Ossification<\/h3>\n<p>My argument assumes the desirability of change at all. Many in the community argue against any change and for \u201cossification\u201d of Bitcoin\u2019s code, but even if we want to protect Bitcoin as it is, I believe this to be a mistake.<\/p>\n<p>Bitcoin\u2019s value lies in certain fundamental properties. Some of those properties require effective code stasis. The mining rewards enforcing the supply cap set in place by Satoshi \u2014 peace be upon him \u2014 provide the canonical example.<\/p>\n<p>Other core properties of Bitcoin, however, are dynamic functions of the broader environment, as well as of Bitcoin\u2019s usage over time. These can change even if Bitcoin Core\u2019s code doesn\u2019t.<\/p>\n<p>Consider privacy. Bitcoin\u2019s ledger is dismayingly open to <a href=\"https:\/\/medium.com\/oxt-research\/understanding-bitcoin-privacy-with-oxt-part-1-4-8177a40a5923\" target=\"_blank\" rel=\"noopener\">chain analysis<\/a>. <a href=\"https:\/\/stephanlivera.com\/episode\/363\/\" target=\"_blank\" rel=\"noopener\">Privacy advocates worry<\/a> that bitcoin\u2019s fundamental lack of default privacy opens it up to attacks that could eliminate fungibility and make the currency practically unusable for anything other than condoned, tracked and taxed purposes \u2014 a central bank digital currency (CBDC) by proxy.<\/p>\n<p>Privacy is not the only irreducible monad of bitcoin\u2019s value proposition. Rubin\u2019s <a href=\"https:\/\/rubin.io\/advent21\/\" target=\"_blank\" rel=\"noopener\">advent calendar series of articles<\/a> on covenants outlines a reasonable starting set of four such \u201cpillars\u201d beyond its constrained supply:<\/p>\n<ol>\n<li><a href=\"https:\/\/rubin.io\/bitcoin\/2021\/11\/29\/advent-2\/\" target=\"_blank\" rel=\"noopener\">Scalability<\/a>: The capacity for bitcoin to be used by a wide set of people, not merely serve as the monetary layer for bank and corporate final settlement.<\/li>\n<li><a href=\"https:\/\/rubin.io\/bitcoin\/2021\/11\/30\/advent-3\/\" target=\"_blank\" rel=\"noopener\">Self-custody<\/a>: The capacity for individuals in a variety of locations and conditions to easily secure their own funds, rather than rely on third parties (who can seize their funds or mint \u201cpaper bitcoin\u201d).<\/li>\n<li><a href=\"https:\/\/rubin.io\/bitcoin\/2021\/12\/01\/advent-4\/\" target=\"_blank\" rel=\"noopener\">Decentralization<\/a> &#8211; The dispersal of power across a wide range of actors, itself a proxy for fundamental censorship-resistance and user control.<\/li>\n<li><a href=\"https:\/\/rubin.io\/bitcoin\/2021\/12\/02\/advent-5\/\" target=\"_blank\" rel=\"noopener\">Privacy<\/a> &#8211; The ease with which bitcoin users can transact without their funds being tracked, seized, marked or blocked.<\/li>\n<\/ol>\n<p>Perhaps you don\u2019t really care about one or two of these \u201cpillars.\u201d Perhaps you want to add another of your own. But consider the following list and note how:<\/p>\n<ul>\n<li>For most Bitcoiners, some characteristics other than auditability and fixed issuance are highly valuable.<\/li>\n<li>Each of these fundamental values is a spectrum, all with significant room for improvement.<\/li>\n<li>Functionality which is prohibitively difficult to use \u2014 or which relies on a trusted custodial service acting off-chain \u2014 is a far cry from functionality which can be trustlessly executed with Bitcoin script.<\/li>\n<li>Bitcoin\u2019s \u201crating\u201d along these axes shifts naturally over time, as when China bans miners, chain analysis becomes more Orwellian, fees shoot up or down or UTXO space becomes too scarce for global use.<\/li>\n<li>The \u201crating\u201d for each pillar improves as more Bitcoiners improve their individual standing, as when more widespread private use increases the fungibility of bitcoin as a whole, or widespread self-custody limits exchanges\u2019 capacity to fractionally reserve it and manipulate the price.<\/li>\n<\/ul>\n<p>A 21-million hard-capped currency which cannot be accepted by any vendors \u2014 which is onerous to self-custody and remains predominantly in un-auditable company-held \u201cpaper bitcoin\u201d accounts, or which cannot scale to be used by most people in the world (Lightning Network is not a singular answer here) \u2014 will likely fail in its core mission of global emancipation from the horrors of a centrally controlled, inflationary currency.<\/p>\n<p>In other words, code ossification can mean the <em>erosion<\/em> of Bitcoin\u2019s core strengths.<\/p>\n<p>Bitcoin\u2019s adversaries are constantly improving, and as Lightning Labs CTO <a href=\"https:\/\/twitter.com\/roasbeef\" target=\"_blank\" rel=\"noopener\">Olaoluwa Osuntokun<\/a> put it in a <a href=\"https:\/\/podcasts.apple.com\/us\/podcast\/326-understanding-taro-with-olaoluwa-osuntokun\/id1292381204?i=1000558677242\" target=\"_blank\" rel=\"noopener\">recent TFTC interview<\/a>, we need to constantly level Bitcoin up for its \u201cnext big boss,\u201d since there are no \u201crespawns\u201d in Bitcoin.<\/p>\n<p>We cannot just sit back, complacent in our citadels, and watch Bitcoin nail the moon landing. Not code ossification, but ossification around a set of principles, along with strict standards for the changes necessary to keep us on track, should be our goal.<\/p>\n<p>Even if you disagree, you likely agree that change will, perhaps unfortunately, continue to occur. In a way, the question is whether that change meets high, public and well-communicated standards, including standards of stasis in essential ways, or if that change is pushed in relative private without assurances of quality. Again, this problem becomes increasingly difficult with time.<\/p>\n<h3>On Murkiness<\/h3>\n<p>There are many in the community who feel the lack of clarity in the BIP process is positive. Their argument is very much worth considering.<\/p>\n<p>In a <a href=\"https:\/\/tftc.io\/martys-bent\/issue-1198-op_ctv-and-rough-consensus\/\" target=\"_blank\" rel=\"noopener\">recent newsletter<\/a>, Marty Bent refers to this characteristic as \u201cmurkiness,\u201d and he argues that \u201cmurky rough consensus driving protocol changes\u201d is better than \u201ca well defined process that could potentially be socially attacked.\u201d Defending core developers\u2019 reluctance to clarify a process for BIP proposals, Marty argues that \u201cthose who have the keys to the machine that allows you to change the most commonly used client should be as impartial as humanly possible.\u201d<\/p>\n<p>This argument makes sense. Consider it by analogy: Knowledge of the precise machinery or protocols used in elections allows hackers or social engineers to more easily game them, but as security experts have turned into a refrain, \u201csecurity by obscurity\u201d is limited in its efficacy, and has significant drawbacks. More importantly, the argument for general murkiness implies that all forms of clarity are similarly likely to provide angles of attack and similarly unlikely to add value.<\/p>\n<p>A different analogy, of an engineering job application, makes clear that there are many different forms of \u201cclarity\u201d and \u201cmurkiness,\u201d and they enact different trade-offs:<\/p>\n<ul>\n<li><strong>An employer might publish the questions they plan to ask in an interview.<\/strong> This would allow applicants to prepare \u201cfor the test\u201d and undermine the value of testing. Lower quality employees would result.<\/li>\n<li><strong>An employer might have questions but not publish them.<\/strong> This encourages insiders like recruiters to share the questions with their clients, thereby creating a secret advantage and legitimately gaming the process. Lower quality employees with \u201cpolitical\u201d connections would result.<\/li>\n<li><strong>An employer might raise clear public standards for applicants.<\/strong><em> <\/em>For example, each applicant must demonstrate four years of relevant experience in a resume that reflects effort and organization. Higher quality employees would generally result, without skewing outcomes politically.<\/li>\n<\/ul>\n<p>If the standards are reasonably chosen, this last option does little but improve the quality of the interaction, saving employer and applicant time and improving average quality. Furthermore, the fully murky process often advocated for Bitcoin is more akin to a job application where the questions can\u2019t be gamed because there are none (because there is no consistent standard), and each applicant is judged arbitrarily based on the mood and individuals of the day.<\/p>\n<p>This points to two additional issues:<\/p>\n<ul>\n<li><strong>An arbitrary process invites inconsistency and even corruption.<\/strong> Ivy League schools can leverage unspecified and arbitrary standards to accept \u201cwell-rounded\u201d children of Hollywood stars or cash-cow legacies because \u201cunspecified\u201d is not \u201cunknowable\u201d or \u201cincorruptible.\u201d As Rubin noted on the bitcoin-devs mailing list, \u201c<a href=\"https:\/\/lists.linuxfoundation.org\/pipermail\/bitcoin-dev\/2022-January\/019739.html\" target=\"_blank\" rel=\"noopener\">the amount of work a BIP needs to do \u2026 to fully describe all applications and use cases<\/a>\u201d is unclear. In this present circumstance, centralized, arbitrary gatekeeping seems to define the line of \u201cenough\u201d for broader discussion.<\/li>\n<li><strong>Social trust is a short-term solution.<\/strong> We may trust the Core developers of today to make selfless and wise arbitrations. But Bitcoin should remain robust for ages, and trusted third parties are security holes. Moreover, as the last two years have made clear, leaning on centralized \u201cexperts\u201d leads to technocracy, and the corrosion and capture of the expert class itself.<\/li>\n<\/ul>\n<p>I am arguing for the equivalent of a resume standard to raise the bar for an entrant to discussion without setting any clear or gameable path for acceptance. It seems clear to me that this is not a security risk, but it is a contribution to the quality of applications and discussion. <\/p>\n<p>It is for a similar reason that a BIP process exists at all. Only the most thoroughly tested and explicated BIPs should be considered for activation and the community should be maximally equipped to productively discuss them.<\/p>\n<h2>The Proposal<\/h2>\n<p><a href=\"https:\/\/github.com\/bitcoin\/bips\/blob\/master\/bip-0002.mediawiki\" target=\"_blank\" rel=\"noopener\">A guide (BIP2) exists<\/a> for the proposal and creation of a narrow BIP \u201ctechnical specification\u201d document, but beyond that, there seems to be no standard for determining what is a \u201cgood\u201d or \u201ccomplete\u201d BIP. <\/p>\n<p>It is critical for the long-term health of Bitcoin that its community coalesce around a more robust set of public standards to which we can hold future BIPs. These standards should be maximally quantitative and address the full range of questions and concerns Bitcoiners might have about a proposal in as digestible and objective a manner as possible.<\/p>\n<p>As a linked supplement to the BIP document, each BIP should be accompanied by a living artifact which addresses all of the requirements below, creating a single navigable repository of ongoing, version-controlled information about the proposal.<\/p>\n<p>Let\u2019s call it a \u201cproposal tracker\u201d \u2014 a first step for anyone looking to understand and participate meaningfully in debate. Each proposal tracker should have sections on: history, description, resources, costs and risks, benefits, alternatives, activation and a post-mortem.<\/p>\n<h3>History<\/h3>\n<p>To apply quantitative heft to concerns that a given BIP \u201cfeels rushed,\u201d the proposal tracker should include a full timeline of relevant events:<\/p>\n<ul>\n<li><strong>Date first proposed:<\/strong> Date idea was first brought up on the Bitcoin mailing list.<\/li>\n<li><strong>Date of BIP:<\/strong> When it was given an official BIP number.<\/li>\n<li><strong>Changelog<\/strong><\/li>\n<li><strong>Discussion log:<\/strong> Dated links to references in Bitcoin mailing lists or other public fora.<\/li>\n<li><strong>Review log:<\/strong> For each reviewer, their date of review and the substance of their review.<\/li>\n<\/ul>\n<p>Some of this information is already available for those who want to spelunk in BIP commit history, but a future which requires every Bitcoiner to use GitHub to be informed is not a future in which good decisions are made.<\/p>\n<h3>Description<\/h3>\n<h4>For The Nerds<\/h4>\n<p>A link to the BIP we see today: The condensed, technical proposal with real implementation details and references to concrete opcodes, fields and code.<\/p>\n<h4>For The Five-Year-Old Plebs<\/h4>\n<p>Not everyone who is invested in Bitcoin\u2019s future has the time or capacity to parse through the technical details of a proposed change. <\/p>\n<p>Each proposal tracker should include a high-level explanation that anyone who has read The \u201cBitcoin Standard\u201d (ok, <em>maybe<\/em> \u201cInventing Bitcoin\u201d) can grok. What does this BIP aim to do and how does it do it, broadly speaking? What, at a high level, are its costs and benefits? Maybe <a href=\"https:\/\/www.youtube.com\/watch?v=yogo8x2U8Z8\" target=\"_blank\" rel=\"noopener\">Lily<\/a> can explain.<\/p>\n<p>To engage in informed debate, the community needs to be \u2026 informed. Although a distributed community of journalists, podcasters and enthusiasts goes a long way, a collaboratively edited description for the layperson would significantly add to public understanding of the BIP.<\/p>\n<h3>Resources<\/h3>\n<p>An ongoing, version-controlled list of relevant links to news articles, podcasts and other external references to the proposal.<\/p>\n<h3>Costs And Risks<\/h3>\n<p>The Bitcoin community seems quite alive to the risks of change, but often in a vague way that shows <a href=\"https:\/\/twitter.com\/BobaBonanza\/status\/1520035887375175681\" target=\"_blank\" rel=\"noopener\">little conception of the specific risks posed by a specific change<\/a>. The risks of a given proposal to Bitcoin Core (<a href=\"https:\/\/bitcoin.stackexchange.com\/questions\/106851\/what-are-the-downsides-to-enabling-potentially-suboptimal-or-unused-opcodes-in-a\/106915#106915\" target=\"_blank\" rel=\"noopener\">and they are numerous)<\/a> should be listed explicitly. They include:<\/p>\n<ul>\n<li><strong>Protocol security risk:<\/strong> For example, does new cryptography add a risk of compromise by future quantum computing?<\/li>\n<li><strong>Maintenance cost:<\/strong> How complicated will this code be to maintain, year after year, for the length of Bitcoin\u2019s existence? Perhaps lines of code could be one measure of this cost along with discussion of scarcity of relevant expertise and inherent complexity.<\/li>\n<li><strong>Other complexity costs: <\/strong>Will this be hard for non-Bitcoin Core software to implement? Is this difficult to test?<\/li>\n<li><strong>Footgun risk:<\/strong> Does this change increase the chances of a Bitcoiner doing something stupid with their money? Is it hard to use correctly?<\/li>\n<li><strong>Political risk:<\/strong> Does this change add any surface for government attack? For example, some concern has been expressed that <a href=\"https:\/\/medium.com\/block-digest-mempool\/my-worries-about-too-generalized-covenants-5eff33affbb6\" target=\"_blank\" rel=\"noopener\">covenants might be used by governments to constrain bitcoin uses<\/a>. Are there sensible <a href=\"https:\/\/twitter.com\/JeremyRubin\/status\/1519338906671476738\" target=\"_blank\" rel=\"noopener\">responses to such concerns<\/a>?<\/li>\n<li><strong>Computing cost:<\/strong> Does computation of the new opcode add significant time to node transaction processing or blockchain parsing?<\/li>\n<li><strong>Space cost:<\/strong> Does this increase the size of blocks or transactions, increasing node hardware requirements and minimizing decentralization?<\/li>\n<li><strong>Non-pareto changes:<\/strong> Does this addition undermine the strength of any of the \u201ccore pillars\u201d of Bitcoin?<\/li>\n<li><strong>Deployment risk:<\/strong> Do existing nodes and wallets encounter blocks, transactions or addresses that they do not understand? If miners do not upgrade but claim to have upgraded, how is security reduced?<\/li>\n<li><strong>Developer confusion: <\/strong>If this change rolls out, will a similar change that has some better qualities get rejected as insufficiently useful?<\/li>\n<\/ul>\n<p>Beyond the above non-exhaustive list, each proposal should include a discussion of interactions with other proposals being considered. How does this particular BIP interact with other BIPs on offer? Rubin\u2019s aforementioned \u201c<a href=\"https:\/\/rubin.io\/advent21\/\" target=\"_blank\" rel=\"noopener\">advent calendar<\/a>\u201d attempts to <a href=\"https:\/\/rubin.io\/bitcoin\/2021\/12\/05\/advent-8\/\" target=\"_blank\" rel=\"noopener\">explore these interactions<\/a> and future proposals should follow suit \u2014 ideally in a clear, well-formatted manner such as a simple table accompanied by an explanation.<\/p>\n<p>A long-running bug bounty, such as that <a href=\"https:\/\/twitter.com\/JeremyRubin\/status\/1476007963403767808\" target=\"_blank\" rel=\"noopener\">on offer for CTV<\/a>, is strongly encouraged and could be community-sponsored in the future.<\/p>\n<h3>Benefits<\/h3>\n<h4>Solo<\/h4>\n<p>What are the implications and applications of this proposed change on its own? What does it make possible? What does it make easier? Each described \u201capplication\u201d should include:<\/p>\n<ul>\n<li><strong>A layperson explanation:<\/strong> How does this BIP make an application possible? For example, what is the basic logic by which BIP119, which tightly constrains how an output may be spent, makes \u201c<a href=\"https:\/\/utxos.org\/uses\/vaults\/\" target=\"_blank\" rel=\"noopener\">smart vaults<\/a>\u201d possible?<\/li>\n<li><strong>A technical explanation:<\/strong> On a level closer to pseudocode, what is going on with the code to make this application possible?<\/li>\n<li><strong>A technical implementation:<\/strong> Tested code, ideally illustrated in Sapio or some other explorable\/vettable \u201cplayground.\u201d<\/li>\n<li><strong>Discussion of degree of solution:<\/strong> Does the BIP make this application possible or just easier, clearer or more efficient?<\/li>\n<li><strong>Relevant pillar: <\/strong>Using Rubin\u2019s above taxonomy or some other system of value, what fundamental goal of Bitcoin\u2019s does this application address? Does it make it more scalable, easy to custody, censorship-resistant or private?<\/li>\n<li><strong>Urgency and stakeholders:<\/strong> What groups does this add value to and how much value? Does it address an extremely urgent issue?<\/li>\n<\/ul>\n<h4>Combined<\/h4>\n<p>Since BIPs are generally constructed as \u201csmall steps\u201d rather than \u201cbig leaps,\u201d they are often designed to become more powerful in conjunction with future proposals. What could be achieved in combination with future BIPs? (Note the discussion of combinatory risk above.)<\/p>\n<p>All of the above requirements for \u201csolo\u201d applications should apply here as well, minus the technical implementation, which depends on the other BIP\u2019s level of progress.<\/p>\n<p>These requirements raise a high and expensive bar for any proposal \u2014 which is the idea. Ideally, a fully etched-out sense of both costs and benefits will permit more Bitcoiners to form accurate assessments of the <a href=\"https:\/\/twitter.com\/jamesob\/status\/1518694482782429186?s=20&amp;t=n6Dx6x2e7NdPrBSNAkdYAw\" target=\"_blank\" rel=\"noopener\">risk-benefit ratio of a given change<\/a>.<\/p>\n<h3>Alternatives<\/h3>\n<p>BIP119 is a covenant and has some overlap with other covenants. Each proposal tracker should try to tackle the question of \u201cwhy this proposal\u201d and not others like it. How does it fit into the ecosystem of other BIPs?<\/p>\n<h3>Activation<\/h3>\n<p>How do the authors propose activating this BIP and why? What is their ideal schedule and their fallback plan? Should activation precede merging into Bitcoin Core? Should it ever not? Ideally, over time, the Bitcoin community can arrive at some preemptive consensus around which activation methods are ideal based on governance features and a <a href=\"https:\/\/ryanthegentry.medium.com\/a-theory-of-bitcoin-governance-13510eff42a6\" target=\"_blank\" rel=\"noopener\">balance of powers<\/a>.<\/p>\n<h3>Post-Mortem<\/h3>\n<p>If the BIP becomes part of Bitcoin Core, the author or authorial group should track its integration over the coming months and years. What worked and didn\u2019t work? Was the process successful? Was the process incomplete? <\/p>\n<p>If rejected, what lessons were learned?<\/p>\n<h2>Where To Go From Here?<\/h2>\n<p>Much rigor and measurement could be added to the above, but I hope it\u2019s a useful start.<\/p>\n<p>We will learn from this process. Perhaps we will find that CTV meets these minimal requirements, but isn\u2019t urgent or powerful enough to include in Bitcoin Core. Perhaps we\u2019ll discover, to our dismay, that Taproot faced a much easier standard and was even \u201crushed\u201d in \u201cits infancy.\u201d Regardless, we should discover a reasonable baseline for review, explanation and testing. By applying a more consistent and documented process, we raise the quality of both proposals and debates.<\/p>\n<p>The Bitcoin community\u2019s focus on defending its fundamentals from change is essential, but this adversarial posture is mostly outward-facing and can miss subtle threats from within. If we are unable to handle debate without descending into aimless factionalism, we may fail to handle the wider usage and greater political pressure coming our way.<\/p>\n<p>Decentralized consensus isn\u2019t easy. We should take it very seriously.<\/p>\n<p>If you are interested in helping move this idea forward, please <a href=\"https:\/\/twitter.com\/sashafklein\" target=\"_blank\" rel=\"noopener\">reach out<\/a> and share.<\/p>\n<p><em>This is a guest post by Sasha Klein. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc. or <\/em>Bitcoin Magazine<em>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Decentralized consensus is required to make changes to the Bitcoin code. Clear processes, standards and norms can ease decision-making in the future.<\/p>\n","protected":false},"author":3046,"featured_media":3515,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[1927,227,2291,57,2351,59,2354],"class_list":{"0":"post-9610","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-culture","8":"tag-bip119","9":"tag-bitcoin-core","10":"tag-checktemplateverify","11":"tag-consensus","12":"tag-jeremy-rubin","13":"tag-opinion","14":"tag-proposals"},"author_data":{"id":3046,"name":"Sasha Klein","nicename":"sasha-klein","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/12\/headshot-full-96x96.jpg"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/20220424_btcfinal_decentralized-law-vs-centralized-legislation-jimmy-song.png","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/9610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/3046"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=9610"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/9610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/3515"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=9610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=9610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=9610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}