EIP-0023 Oracle pool 2.0

README.md

@@ -17,8 +17,9 @@ Please check out existing EIPs, such as [EIP-1](eip-0001.md), to understand the
 | [EIP-0020](eip-0020.md) | ErgoPay Protocol |
 | [EIP-0021](eip-0021.md) | Genuine tokens verification |
 | [EIP-0022](eip-0022.md) | Auction Contract |
+| [EIP-0023](eip-0023.md) | Oracle pool 2.0 |
 | [EIP-0024](eip-0024.md) | Artwork contract |
 | [EIP-0025](eip-0025.md) | Payment Request URI |
 | [EIP-0027](eip-0027.md) | Emission Retargeting Soft-Fork |
 | [EIP-0031](eip-0031.md) | Babel Fees |
-| [EIP-0039](eip-0039.md) | Monotonic box creation height rule |
+| [EIP-0039](eip-0039.md) | Monotonic box creation height rule |

eip-0023/contracts/ballot_contract.es

@@ -0,0 +1,33 @@
+{ // This box (ballot box):
+  // R4 the group element of the owner of the ballot token [GroupElement]
+  // R5 the creation height of the update box [Int]
+  // R6 the value voted for [Coll[Byte]]
+  // R7 the reward token id [Coll[Byte]]
+  // R8 the reward token amount [Long]
+
+  val updateNFT = fromBase64("YlFlVGhXbVpxNHQ3dyF6JUMqRi1KQE5jUmZValhuMnI=") // TODO replace with actual 
+
+  val minStorageRent = 10000000L  // TODO replace with actual
+
+  val selfPubKey = SELF.R4[GroupElement].get
+
+  val outIndex = getVar[Int](0).get
+  val output = OUTPUTS(outIndex)
+
+  val isSimpleCopy = output.R4[GroupElement].isDefined                && // ballot boxes are transferable by setting different value here 
+                     output.propositionBytes == SELF.propositionBytes &&
+                     output.tokens == SELF.tokens                     && 
+                     output.value >= minStorageRent 
+
+  val update = INPUTS.size > 1                           &&
+               INPUTS(1).tokens.size > 0                 &&
+               INPUTS(1).tokens(0)._1 == updateNFT       && // can only update when update box is the 2nd input
+               output.R4[GroupElement].get == selfPubKey && // public key is preserved
+               output.value >= SELF.value                && // value preserved or increased
+               ! (output.R5[Any].isDefined)                 // no more registers; prevents box from being reused as a valid vote 
+
+  val owner = proveDlog(selfPubKey)
+
+  // unlike in collection, here we don't require spender to be one of the ballot token holders
+  isSimpleCopy && (owner || update)
+}

eip-0023/contracts/oracle_contract.es

@@ -0,0 +1,49 @@
+{ // This box (oracle box)
+  //   R4 public key (GroupElement) 
+  //   R5 epoch counter of current epoch (Int)
+  //   R6 data point (Long) or empty
+
+  //   tokens(0) oracle token (one)
+  //   tokens(1) reward tokens collected (one or more) 
+  //   
+  //   When publishing a datapoint, there must be at least one reward token at index 1 
+  //  
+  //   We will connect this box to pool NFT in input #0 (and not the refresh NFT in input #1)
+  //   This way, we can continue to use the same box after updating pool
+  //   This *could* allow the oracle box to be spent during an update
+  //   However, this is not an issue because the update contract ensures that tokens and registers (except script) of the pool box are preserved
+
+  //   Private key holder can do following things:
+  //     1. Change group element (public key) stored in R4
+  //     2. Store any value of type in or delete any value from R4 to R9 
+  //     3. Store any token or none at 2nd index 
+
+  //   In order to connect this oracle box to a different refreshNFT after an update, 
+  //   the oracle should keep at least one new reward token at index 1 when publishing data-point
+
+  val poolNFT = fromBase64("RytLYlBlU2hWbVlxM3Q2dzl6JEMmRilKQE1jUWZUalc=") // TODO replace with actual 
+
+  val otherTokenId = INPUTS(0).tokens(0)._1
+
+  val minStorageRent = 10000000L
+  val selfPubKey = SELF.R4[GroupElement].get
+  val outIndex = getVar[Int](0).get
+  val output = OUTPUTS(outIndex)
+
+  val isSimpleCopy = output.tokens(0) == SELF.tokens(0)                && // oracle token is preserved
+                     output.propositionBytes == SELF.propositionBytes  && // script preserved
+                     output.R4[GroupElement].isDefined                 && // output must have a public key (not necessarily the same)
+                     output.value >= minStorageRent                       // ensure sufficient Ergs to ensure no garbage collection
+
+  val collection = otherTokenId == poolNFT                    && // first input must be pool box
+                   output.tokens(1)._1 == SELF.tokens(1)._1   && // reward tokenId is preserved (oracle should ensure this contains a reward token)
+                   output.tokens(1)._2 > SELF.tokens(1)._2    && // at least one reward token must be added 
+                   output.R4[GroupElement].get == selfPubKey  && // for collection preserve public key
+                   output.value >= SELF.value                 && // nanoErgs value preserved
+                   ! (output.R5[Any].isDefined)                  // no more registers; prevents box from being reused as a valid data-point
+
+  val owner = proveDlog(selfPubKey)  
+
+  // owner can choose to transfer to another public key by setting different value in R4
+  isSimpleCopy && (owner || collection) 
+}

eip-0023/contracts/pool_contract.es

@@ -0,0 +1,16 @@
+{
+  // This box (pool box)
+  //   epoch start height is stored in creation Height (R3)
+  //   R4 Current data point (Long)
+  //   R5 Current epoch counter (Int)
+  // 
+  //   tokens(0) pool token (NFT)
+  //   tokens(1) reward tokens
+  //   When initializing the box, there must be one reward token. When claiming reward, one token must be left unclaimed   
+
+  val otherTokenId = INPUTS(1).tokens(0)._1
+  val refreshNFT = fromBase64("VGpXblpyNHU3eCFBJUQqRy1LYU5kUmdVa1hwMnM1djg=") // TODO replace with actual
+  val updateNFT = fromBase64("YlFlVGhXbVpxNHQ3dyF6JUMqRi1KQE5jUmZValhuMnI=") // TODO replace with actual
+
+  sigmaProp(otherTokenId == refreshNFT || otherTokenId == updateNFT)
+}

eip-0023/contracts/refresh_contract.es

@@ -0,0 +1,76 @@
+{ // This box (refresh box)
+  //   
+  //   tokens(0) refresh token (NFT)
+
+  val oracleTokenId = fromBase64("KkctSmFOZFJnVWtYcDJzNXY4eS9CP0UoSCtNYlBlU2g=") // TODO replace with actual
+  val poolNFT = fromBase64("RytLYlBlU2hWbVlxM3Q2dzl6JEMmRilKQE1jUWZUalc=") // TODO replace with actual 
+  val epochLength = 30 // TODO replace with actual
+  val minDataPoints = 4 // TODO replace with actual
+  val buffer = 4 // TODO replace with actual
+  val maxDeviationPercent = 5 // percent // TODO replace with actual
+
+  val minStartHeight = HEIGHT - epochLength
+  val spenderIndex = getVar[Int](0).get // the index of the data-point box (NOT input!) belonging to spender    
+
+  val poolIn = INPUTS(0)
+  val poolOut = OUTPUTS(0)
+  val selfOut = OUTPUTS(1)
+
+  def isValidDataPoint(b: Box) = if (b.R6[Long].isDefined) {
+    b.creationInfo._1    >= minStartHeight &&  // data point must not be too old
+    b.tokens(0)._1       == oracleTokenId  && // first token id must be of oracle token
+    b.R5[Int].get        == poolIn.R5[Int].get // it must correspond to this epoch
+  } else false 
+
+  val dataPoints = INPUTS.filter(isValidDataPoint)    
+  val pubKey = dataPoints(spenderIndex).R4[GroupElement].get
+
+  val enoughDataPoints = dataPoints.size >= minDataPoints    
+  val rewardEmitted = dataPoints.size * 2 // one extra token for each collected box as reward to collector   
+  val epochOver = poolIn.creationInfo._1 < minStartHeight
+
+  val startData = 1L // we don't allow 0 data points
+  val startSum = 0L 
+  // we expect data-points to be sorted in INCREASING order
+
+  val lastSortedSum = dataPoints.fold((startData, (true, startSum)), {
+        (t: (Long, (Boolean, Long)), b: Box) =>
+           val currData = b.R6[Long].get
+           val prevData = t._1
+           val wasSorted = t._2._1 
+           val oldSum = t._2._2
+           val newSum = oldSum + currData  // we don't have to worry about overflow, as it causes script to fail
+
+           val isSorted = wasSorted && prevData <= currData 
+
+           (currData, (isSorted, newSum))
+    }
+  )
+
+  val lastData = lastSortedSum._1
+  val isSorted = lastSortedSum._2._1
+  val sum = lastSortedSum._2._2
+  val average = sum / dataPoints.size 
+
+  val maxDelta = lastData * maxDeviationPercent / 100          
+  val firstData = dataPoints(0).R6[Long].get
+
+  proveDlog(pubKey)                                               &&
+  epochOver                                                       && 
+  enoughDataPoints                                                &&    
+  isSorted                                                        &&
+  lastData - firstData     <= maxDelta                            && 
+  poolIn.tokens(0)._1      == poolNFT                             &&
+  poolOut.tokens(0)        == poolIn.tokens(0)                    && // preserve pool NFT
+  poolOut.tokens(1)._1     == poolIn.tokens(1)._1                 && // reward token id preserved
+  poolOut.tokens(1)._2     >= poolIn.tokens(1)._2 - rewardEmitted && // reward token amount correctly reduced
+  poolOut.tokens.size      == poolIn.tokens.size                  && // cannot inject more tokens to pool box
+  poolOut.R4[Long].get     == average                             && // rate
+  poolOut.R5[Int].get      == poolIn.R5[Int].get + 1              && // counter
+  poolOut.propositionBytes == poolIn.propositionBytes             && // preserve pool script
+  poolOut.value            >= poolIn.value                        &&
+  poolOut.creationInfo._1  >= HEIGHT - buffer                     && // ensure that new box has correct start epoch height
+  selfOut.tokens           == SELF.tokens                         && // refresh NFT preserved
+  selfOut.propositionBytes == SELF.propositionBytes               && // script preserved
+  selfOut.value            >= SELF.value                       
+}

eip-0023/contracts/update_contract.es

@@ -0,0 +1,55 @@
+{ // This box (update box):
+  // Registers empty 
+  // 
+  // ballot boxes (Inputs)
+  // R4 the pub key of voter [GroupElement] (not used here)
+  // R5 the creation height of this box [Int]
+  // R6 the value voted for [Coll[Byte]] (hash of the new pool box script)
+  // R7 the reward token id in new box 
+  // R8 the number of reward tokens in new box 
+
+  val poolNFT = fromBase64("RytLYlBlU2hWbVlxM3Q2dzl6JEMmRilKQE1jUWZUalc=") // TODO replace with actual 
+
+  val ballotTokenId = fromBase64("P0QoRy1LYVBkU2dWa1lwM3M2djl5JEImRSlIQE1iUWU=") // TODO replace with actual 
+
+  val minVotes = 6 // TODO replace with actual
+
+  val poolIn = INPUTS(0) // pool box is 1st input
+  val poolOut = OUTPUTS(0) // copy of pool box is the 1st output
+
+  val updateBoxOut = OUTPUTS(1) // copy of this box is the 2nd output
+
+  // compute the hash of the pool output box. This should be the value voted for
+  val poolOutHash = blake2b256(poolOut.propositionBytes)
+  val rewardTokenId = poolOut.tokens(1)._1
+  val rewardAmt = poolOut.tokens(1)._2
+
+  val validPoolIn = poolIn.tokens(0)._1 == poolNFT
+
+  val validPoolOut = poolIn.tokens(0) == poolOut.tokens(0)                && // NFT preserved
+                     poolIn.value == poolOut.value                        && // value preserved
+                     poolIn.R4[Long] == poolOut.R4[Long]                  && // rate preserved  
+                     poolIn.R5[Int] == poolOut.R5[Int]                    && // counter preserved
+                     ! (poolOut.R6[Any].isDefined)
+
+
+  val validUpdateOut = updateBoxOut.tokens == SELF.tokens                     &&
+                       updateBoxOut.propositionBytes == SELF.propositionBytes &&
+                       updateBoxOut.value >= SELF.value                       &&
+                       updateBoxOut.creationInfo._1 > SELF.creationInfo._1    &&
+                       ! (updateBoxOut.R4[Any].isDefined) 
+
+  def isValidBallot(b:Box) = if (b.tokens.size > 0) {
+    b.tokens(0)._1 == ballotTokenId       &&
+    b.R5[Int].get == SELF.creationInfo._1 && // ensure vote corresponds to this box by checking creation height
+    b.R6[Coll[Byte]].get == poolOutHash   && // check proposition voted for
+    b.R7[Coll[Byte]].get == rewardTokenId && // check rewardTokenId voted for
+    b.R8[Long].get == rewardAmt              // check rewardTokenAmt voted for
+  } else false
+
+  val ballotBoxes = INPUTS.filter(isValidBallot)
+
+  val votesCount = ballotBoxes.fold(0L, {(accum: Long, b: Box) => accum + b.tokens(0)._2})
+
+  sigmaProp(validPoolIn && validPoolOut && validUpdateOut && votesCount >= minVotes)  
+}