A federation protocol for sharing re-validated remediation wisdom between sovereign autonomous-operations instances.
groundnet lets independent, self-governing operations agents exchange not raw telemetry and not un-tested playbooks, but distilled, outcome-verified remediation knowledge — without any of them ceding authority to a central party or to each other. Every shared unit is a generalized "this alert-class, diagnosed this way, resolved by this operation-class, and here is the mechanically-verified outcome" — stripped of the sharer's estate, signed by a stable pseudonym, and recorded in a public, tamper-evident transparency log. A consuming instance treats an imported unit as a hint, never a command: it re-earns trust locally, through its own policy gate, before it can influence anything.
Think "a security community's shared signal pool, but for remediation" — with one piece nobody else has: the shared unit is re-validated against each consumer's own verified outcomes before it is trusted. Trust is non-transferable and re-earned on every estate.
- Subordinate, not authority — an imported unit is a hint that passes your own governance first.
- Pseudonymous, not identified — reputation accrues to a keypair; no estate identity ever leaves.
- Signed transparency log, not a blockchain — append-only, multi-witness provenance (the Certificate-Transparency / Sigstore model); no global consensus, no token.
- Verified-outcome only, default-off — you share a fix only when a mechanical verifier confirmed it worked, and only after you opt in.
- spec — the protocol contract: the stable envelope, the versioned payload, the attestation & transparency-log model, and the invariants a compliant node must uphold.
v0 — draft, contract-first. The network itself is deliberately far-future; what is frozen first is the shape of the exchange, so a node can be born groundnet-compatible instead of retrofitted.
groundnet.net · Apache-2.0 · built on Sigstore / in-toto / Certificate Transparency