Search papers, labs, and topics across Lattice.
The Federated Sovereign Transport Protocol (FSTP) introduces a novel synchronization boundary and transport layer designed for federated networks with varying privacy needs, addressing the limitations of existing protocols that rely on operator policy for data confinement. By leveraging the Rust type system, FSTP ensures that raw internal data cannot be included in federation messages, thus enforcing data confinement at compile time rather than at runtime. The protocol employs a contextual identity model to generate unlinkable identifiers for each federation relationship, alongside a Blocklace-based event substrate for tamper-evident logging, enabling verifiable coordination without compromising data privacy.
FSTP enables verifiable coordination in federated networks while ensuring that sensitive internal data remains completely undisclosed.
This paper introduces the Federated Sovereign Transport Protocol (FSTP), a synchronization boundary and transport layer for federated networks in which nodes have heterogeneous privacy requirements. Existing federation protocols leave data confinement to operator policy: they define message formats and delivery semantics but impose no structural constraint on what a conforming server may emit. FSTP addresses this gap by making data confinement a property of the protocol itself. The central mechanism is a synchronization agent whose output type set is formally closed. Raw internal data cannot appear in any federation message because the constraint is enforced by the Rust type system at compile time, not by a runtime check. A contextual identity model derives a separate, unlinkable identifier for each federation relationship, preventing cross-context correlation structurally. A Blocklace-based event substrate provides tamper-evident, partially ordered logging with synchronization cost proportional to the symmetric difference between node states, and supports data erasure without breaking the hash chain. The result is proof without exposure: a federation participant can verify that a process occurred, that a credential is authentic, and that an outcome is uncorrupted without accessing the internal data that produced these artifacts. FSTP is developed as the inter-node transport layer of Velyzor, a governance platform for institutions with demanding confidentiality requirements. The specification and reference implementation are released as open-source infrastructure under Apache 2.0; source code and figures accompany this paper.