Search papers, labs, and topics across Lattice.
This paper addresses the challenges of hidden-state authorization in Byzantine State Machine Replication (SMR) by isolating two critical requirements for the safe allocation of hidden consumable resources. The authors introduce a fair reserve/use protocol that ensures both authorization safety and first-arrival liveness, overcoming the limitations posed by the inability to reconstruct the policy state from the log. Key findings reveal that fair-ordering protocols can effectively constrain commit order, while an explicit authorization-witness interface can bind the validity of later requests to earlier commitments, ensuring robust resource management in Byzantine environments.
Fair-ordering protocols can ensure that conflicting requests are invalidated, even when the policy state is hidden and unrecoverable.
Validated Byzantine SMR assumes that replicas can evaluate the validity of an ordered command. Agent authorization creates a different regime: a command may be valid only relative to a committed policy state that validators cannot reconstruct from the log. A proof that an action was authorized at an old commitment is then only a historical attestation, it does not by itself reserve the hidden resource for later use. We isolate two independent requirements for safe live allocation of a hidden consumable resource under a Byzantine leader. First, arrival order at correct replicas must constrain commit order, the gap addressed by fair-ordering protocols. Second, a committed first request must bind later validity: it must make conflicting later requests invalid, not merely record that the first request was once authorized. The second requirement is non-vacuous precisely because the current policy state is hidden and not prefix-recoverable. Using an explicit authorization-witness interface, we characterize the two distinct obligations in this one-shot reservation model and give a fair reserve/use protocol satisfying both authorization safety and first-arrival liveness. Under trusted FIFO admission the two requirements collapse because admission and execution are atomic, Byzantine SMR separates request commitment from use.
