simplified version ↗

II / the net · dreggnet

the host
cannot lie.

Every cloud asks for your trust. This one hands you a proof instead. On DreggNet, the bytes you're served and the price you're charged are each a cell you re-witness against a committed root. No ID, no card — the chain is your account. A five-year-old clicks deploy; an adept checks the proof.

what you can check yourself

Not a promise — a proof you re-run.

the bytes

Served byte-for-byte from a published site cell (hello.dregg.works is live), the publish sealed in a signed receipt chain. Named open, one lane: moving that commitment onto the public ledger itself, and the visitor-side re-hash — independent of the host, so it cannot be stripped (the extension).

the bill

Value moves Σδ = 0, in-band, per request — the meter is the ledger. Metering and conservation are the same theorem; there is no mystery invoice to dispute.

the account

A capability you attenuate, not a password you surrender. granted ⊆ held — and you can revoke.

And underneath: the runtime is durable, crash-resumable, exactly-once-metered, receipted. You pay for what ran — and can prove what ran is what you paid for.

the workload that transacts

A function, grown a voice.

Your code, mid-request, reaches back through the cap-gated bridge: invoke a service, move value, read and write its own cell — each call weighed against its lease, charged, and signed into the ledger. Not a function that just returns — an agent that can pay, call, and answer for what it spent.

running today — reproducible from runbooks
  • run a verified node and drive it — real committed turns through the Lean kernel; nothing is a mock
  • federations finalize — a re-runnable 3-node BFT federation; a real external client's attested transfer stream-finalized cross-node on n=4
  • publish a trust commitment — a cap-gated turn commits your site's hash on-ledger (live example); visitor-side re-hash = the named open half
  • billing that can't surprise you — invoices are views over settled receipts; an over-cap charge is a real in-band refusal
the money layer, welded shut
  • metered-but-unpaid is unrepresentable — the meter advance and the reserve draw are one atomic write; drift isn't forbidden, it's inexpressible
  • pay() is one kernel move — every charge desugars to exactly one conserving, signature-gated transfer; settlement is exactly-once per period
  • a lapsed lease is a 402 — in-band, from the executor, with the lease named

the service catalog

What the cloud is made of — each entry grounded in the tree, with its seam named. The repo labels its own remainders in the source; this table keeps that discipline.

Verified storageContent-addressed buckets under one committed root, k-of-n erasure coding, availability sampling, and retrieval stitched from untrusted peers. The verification layer is Lean-proven down to one standard hash assumption — and the erasure math carries no crypto assumption at all. What you can check: the root binds the exact object set (no ghost objects), anything that opens against it IS what was committed, any k shards reconstruct and the decoder provably can't be tricked into a wrong blob. A 7-beat demo runs it all, forgery and slash included. Named seam: the over-the-wire serving gateway.~250 tests
Durable, forkable machine imagesAn execution image over the kernel's real committed heap — checkpoint it, fork it, wake it byte-exact. Tampering fails the root; forks are provably independent. A sleeping cell is a checkpoint you don't pay for.shipped
Rent a confined agentThe full spine passes end-to-end in-repo: rent provisions an OS-jailed grain under a prepaid lease; drive mints real committed kernel turns; the budget running dry refuses the next step in-band, world frozen. The jail proves its own confinement from inside — file denied, socket denied, exactly one door. Renters climb a verification ladder: tamper-evident chain → countersigned checkpoints → every receipt a view over a committed kernel turn (a fake grain fails this with a 422 — tested) → light-client finality. The whole-history STARK rung is the named top.spine real; not yet operated
Site publishingThe commitment half runs today: a cap-gated turn commits your site's hash on-ledger, and a visitor re-hashes what they're served against it. The wildcard byte-serving gateway for everyone's *.dregg.works names is the opening half.commit real; serving opening
Webcells — code answering HTTP as turnsThree proven pieces awaiting fusion: sandboxed JS whose only power is firing cap-gated verified turns (no ambient fetch/fs/clock — an unauthorized call commits nothing); a multi-tenant leased HTTP front door routing by hostname where a lapsed lease answers 402; and content-addressed published web bundles with transclusion. The fusion — your JS handler serving requests as verified turns under a lease — is the opening.pieces real; fusion opening
Sandstorm .spk compatibilityA verified install pipeline for the Sandstorm package format: real Ed25519 signature checks (both the embedded hash and an independent recompute), decompression bombs refused before allocation, and grain capabilities as real attenuate-only credentials — forged, cross-grain, leaked, and re-amplified caps all confer nothing. Honest framing: format-and-capability compatibility today; executing the packaged apps is the named next distance.install real; hosting next
Matrix homeserver as a grainThe design on the table right now: a full real homeserver (federation, E2EE, any client) running as a jailed, metered, receipt-audited grain — dregg hosting its own membrane. Three new confinement doors specced against the proven jail substrate. Actively being built.designed; in motion

dreggnet cloud

The hosted offering being assembled on this substrate — opening soon.

The shape: git push → built in a sandbox → published as a cell → live at your domain, with a real cert, paid in $DREGG. Durable agent execution, hosting, domains, compute — metered per-turn, receipted. Services, not features: the code stays open source either way. What the coin is and isn't →

Where it stands, plainly: the rails are in the tree with end-to-end tests — the site-commitment turn, the jailed-grain rental spine, the metering and spend-cap refusals. What's not yet operated as a public service: the byte-serving gateway for everyone's *.dregg.works names, public grain rental, and the durable-compute tier. Built ≠ operated, and we say which is which.

honest floor ▓  the devnet is a test network, not a mainnet: committee restart-durability is the named hardening item riding in front of the verifier-epoch flip and the next genesis. Bridge-in mechanics ($ → in-protocol credit) will be announced once, with a fixed mechanism, before they activate.
test net, said plainlyno retroactive sweetening