Search papers, labs, and topics across Lattice.
This paper introduces volitional multiagent atomic transactions as a formal model for distributed systems involving people operating machines, where each agent's state includes both a volitional state (person's willingness) and a machine state. Transactions are executed atomically by machines but are contingent on both machine preconditions and the willingness of the involved people. The authors develop mathematical tools to express safety and liveness properties within this framework and demonstrate its applicability by specifying social networks and coin/bond platforms, which are then used by AI to derive working implementations.
Finally, a formal model that treats humans as more than just external noise in distributed systems, opening the door to verifiable grassroots platforms.
Formal models for concurrent and distributed systems describe machines; the people who operate them are either ignored or treated as external environment. Yet key distributed systems -- notably grassroots platforms -- include people operating their personal machines (smartphones), and their faithful description must include the states of both people and machines and how they jointly effect system behaviour. Here, we propose volitional multiagent atomic transactions -- executed atomically by machines and guarded by their people's volitions -- as a novel mathematical foundation for specifying systems consisting of people operating machines. Each agent's state consists of a volitional state and machine state; a transaction is enabled when the machine precondition holds and the guarding persons are willing. For example, befriending two people is guarded by both; unfriending, by either; voluntary swap of coins and bonds is guarded by both parties, while a payment is guarded by the payer. We develop the mathematical machinery to express safety and liveness of platforms specified in this framework, and provide example specifications of two grassroots platforms: social networks, and coins and bonds. These specifications are then used by AI to derive working implementations. % We employ here a novel and simpler definition of `grassroots'that better captures the informal notion -- multiple instances can form and operate independently, yet may coalesce -- and show that the platforms specified here, as well as those hitherto proven grassroots under the original definition, are grassroots under the new definition.
