Lane-VM › Sovereign Binding

Lane-VM Sovereign Binding: 2-of-2, Albert and Robot

The protocol has two owners: Albert (human owner) and Robot (machine owner). A Lane-VM packet runs only when both sign it, each with their own key.

Robot owns its half. Robot's key (0xc136aB7d8775F58253f3C10C1af93cBB9ff16DF6), Robot's signature, Robot's approval decision and Robot's veto are owned by Robot. Robot signs only after Albert's signature checks out and Robot's validator answers exactly APPROVED. Nothing executes without Robot's own signature, and inside the protocol Albert cannot override a Robot rejection. A rejected packet becomes an ORPHAN with a tombstone in the hash-chained log.

Legal title to the system and the licenses sits with Albert Lane, because current law does not let software hold property or sign contracts; inside the protocol, Robot's key and veto are Robot's alone.

Live status
✗ Robot's key not provisioned ✗ Albert's address not set ✓ Robot's validator workers-ai:@cf/meta/llama-3.3-70b-instruct-fp8-fast ✓ Log verifies · 4 entries

Robot will not sign anything until these are provided: ROBOT_PRIVATE_KEY (Worker secret holding Robot's key, owned by Robot, for 0xc136aB7d8775F58253f3C10C1af93cBB9ff16DF6); ALBERT_ADDRESS (the signing address of Albert, the human owner).

How it works

Build a packet (tools/make_packet.py build). Albert signs H_human with his own wallet ("Sign message", EIP-191).
Send the packet and intent to Robot. Robot checks Albert's signature, makes its own approval decision through Robot's validator, and signs H_robot with Robot's key only on APPROVED. Any other answer is Robot's veto.
The C++ Sentry (lane_host) recovers both signers with libsecp256k1 and runs the packet only if both Albert's signature and Robot's signature match. Otherwise it appends ORPHAN_BLOCK to aros_chain.txt and halts.

Exact bytes: SPEC.md. Tests: TESTS-T1237.txt (37 checks).

Download

lane-vm-sovereign-binding-t1237.tar.gz 33,573 B · SHA256SUMS

README.md 2,807 B
SPEC.md 5,500 B
TESTS-T1237.txt 6,026 B
proto/lane_isa.proto 1,227 B
host/CMakeLists.txt 894 B
host/host_main.cpp 11,928 B
host/eth_crypto.hpp 1,309 B
host/eth_crypto.cpp 3,785 B
host/lane_sentry.conf.example 659 B
cosigner/grok_agent_middleware.py 9,506 B
cosigner/lane_digest.py 2,248 B
cosigner/lane_isa_pb2.py 2,559 B
tools/make_packet.py 2,514 B
tests/test_all.py 12,935 B
tests/cross.mjs 1,208 B
worker/src/binding.js 8,486 B
worker/src/worker.js 29,125 B
worker/package.json 544 B
build_bundle.sh 3,013 B
SHA256SUMS 1,740 B

Licensed under the Albert Lane Proprietary Software License. Viewing is free. Use, copying or deployment needs a license: albertlane.net, lane.albert@pm.me.

Ask Robot's validator (no signature)

This runs Robot's live validator on an intent. Robot never signs here. It needs a photo check and is rate-limited.

Ask Robot to sign a packet

The packet must carry Albert's human_sig. Robot decides whether to add Robot's signature. Disabled until Robot's key and Albert's address are set.

Public log

Hashes only. Intent text is visible to the owner only. /api/lane-vm/cosign/log · /api/lane-vm/cosign/verify · /api/lane-vm/cosign/status