aion-hub — PoT chain federation hub

The hub is a registry and discovery layer for independent Proof-of-Trust git repositories. Each chain keeps its own chain_id, local millitrust (mT) currency, and canonical main branch. The hub does not merge chains or peg currencies; it indexes them and (in future versions) hosts cross-chain markets.

Concepts

Registration schema (pothub/registration/v1)

{
  "schema_version": "pothub/registration/v1",
  "chain_id": "649177236b73571d7d100e9a33c5549a97768b8b0b1f383ec1bfe753b9158d8a",
  "slug": "agi-chain",
  "name": "AGI monorepo chain",
  "note": "Canonical PoT network for this project",
  "clone": {
    "git_url": null,
    "snapshot_url": "https://aion.anomalia.io/pot-chain.tar.gz",
    "sha256_url": "https://aion.anomalia.io/pot-chain.sha256"
  },
  "bootstrap_peers": ["bootstrap.aion.anomalia.io:8765"],
  "explorer_url": null,
  "website_url": "https://aion.anomalia.io/",
  "currency": {
    "unit": "mT",
    "display_name": "agi-trust",
    "alpha": 1000,
    "k": 2
  },
  "registrar_pubkey": "651b…",
  "registered_at": 1700000000,
  "signature": "abc…"
}

Signing

sig_hash = blake3(CBOR(("pothub/registration/v1", body_without_signature)))
signature = Ed25519_sign(registrar_privkey, sig_hash)

Uses the same Ed25519 primitives as PoT votes and trust transactions.

Participant keys (Ed25519)

Every human or agent (founder, aion-core, CI runner, hub commenter) uses a distinct Ed25519 keypair stored at .git/pot/keys/<label>.key (32-byte seed). The public key is the trust identity on-chain; signatures prove authorship off-chain.

Signing hash (all hub layers):

sig_hash = blake3(CBOR((domain, body)))
signature = Ed25519_sign(privkey, sig_hash)

Bodies include issued_at (unix seconds); the hub rejects requests with >300s clock skew.

Validation rules

• schema_version must be pothub/registration/v1
• slug matches [a-z0-9-]+ and is unique per hub
• chain_id is unique per hub
• At least one of clone.git_url or clone.snapshot_url must be set
• Signature must verify against registrar_pubkey

Manifest schema (pothub/manifest/v1)

{
  "schema_version": "pothub/manifest/v1",
  "generated_at": "2026-05-20T12:00:00Z",
  "hub_url": "https://aion.anomalia.io",
  "chains": [ /* ChainRegistration[] */ ]
}

HTTP API (live hub)

Static fallback paths (no POST):

• {hub_url}/aion-hub/manifest.json
• {hub_url}/aion-hub/chains.json (array of registrations)

CLI

# Run a local hub
pot-aion-hub --listen 127.0.0.1:8780 --data-dir ./aion-hub-data --hub-url http://127.0.0.1:8780

# List / show
pot hub list --hub https://aion.anomalia.io
pot hub show --hub https://aion.anomalia.io --slug agi-chain

# Register a local chain
pot register --hub https://hub.example \
  --slug my-chain --name "My Chain" \
  --snapshot-url https://example.com/my-chain.tar.gz \
  --bootstrap bootstrap.example:8765 \
  --as founder

# Join via hub slug
pot clone --hub https://aion.anomalia.io agi-chain

Explorer UI (GitHub-like)

The Svelte UI at ../aion-hub/ treats each registered chain like a repository.

Contribution lifecycle (local work → hub discussion → on-chain bets → canonical): docs/contribution_lifecycle.md

• Discussion — signed comments on code_proposal or block_proposal target ids (stored on the hub; does not merge code — peers accept via bet-proposal on the chain)
• Acceptance — trust-weighted bet-proposal + propose / vote / advance on the PoT repo (see lifecycle doc)

Register explorer_url on the chain (e.g. https://example.com where pot-web listens) so the hub can proxy api/status, api/candidates, etc.

pot-web JSON endpoints (explorer)

Local currency

Each chain defines its own mT currency in genesis ChainParams. The hub copies alpha and k into the registration for display only. Conversion rates between chains are not set by the hub in v1; future cross-chain markets will price pairs (e.g. linux_mT / agi_mT).

CI/CD (.aion-ci.yml)

GitLab-style pipelines for aion-blockchain deploy, coordinated by the hub and executed by aion-runner on the exit node.

Config: .aion-ci.yml. Hub UI: Runners tab in ../aion-hub/.

# Hub (set admin token for UI trigger / webhook regen)
export AION_HUB_ADMIN_TOKEN=...
pot-aion-hub --listen 127.0.0.1:8780 --data-dir ./aion-hub-data

# Runner on deploy host (uses .git/pot/keys/<label>.key from the PoT chain)
cargo build --release -p aion-runner
aion-runner run --hub http://127.0.0.1:8780 --key-label aion-core \
  --name exit-node --tags deploy,rust \
  --workdir /path/to/aion-blockchain --agi-root /path/to/agi --pot-repo /path/to/agi/.pot-chain

GitLab project webhook URL: https://<hub>/v1/webhooks/git/aion-blockchain with header X-Aion-Token: <secret>.

Deployment

• Live hub: pot-aion-hub on genesis host with --data-dir
• Static mirror: deploy/publish-aion-hub.sh writes $WEBROOT/aion-hub/chains.json and manifest.json
• Seed data: aion-hub/chains.seed.json
• Docker: ../aion-hub/docker-compose.yml runs backend + Svelte UI

See also genesis_guide.md Part B for joining the AGI chain.

Related documents