Athanor #

Cooperative zero-config [[Nix]]-based [[Spindle (Tangled)|spindles]] for [[Tangled]], at https://athanor.build. Modeled after https://cocore.dev.

Workflow #

• Define your entire repo's builds, tests, and deployments in flake.nix, completely runnable locally.
• Use as your repos' spindles either a la carte or automatically on repo creation.
• Inspired by Tangled's [[MicroVM]] architecture

Cooperation #

• Receive 400 build minutes/month of free compute, perfectly suitable for small web projects like blogs.
• Become a compute provider by hooking up any machine as a spindle! Provide compute, get compute in return.
• Machines' benchmarks and metrics are used to keep track of their compute capability relative to the rest of the collective. Compute requests then get routed to appropriate machines based on their intensity.
• Your repos' requests are routed to your own hardware where applicable for free (it's your hardware after all). Optionally disallow repos from even touching other providers.

Signing and trust #

• Providers must publish a build.athanor.provider.signingKey of the form <method>-<did/handle>-<iteration> (e.g. plc-zviscnpwyvj6y32agi5davn5-1) that can be used to verify that a binary was built by the provider it claims to have been.
• Athanor provides live "trustfiles" that can be fetched to get the state of what's trusted at the moment:
  • /trust/verified: The tree of verified providers. Athanor acts as a root authority and can verify individual providers, grant Trusted Verifier permissions to others (who can then verify providers themselves), and explicitly untrust subtrees of the network.
  • /trust/did:method:*: Your transitive network of trusted providers. Works via [[Tangled]]'s vouch system, and includes every provider you trust as well as every provider those providers trust.
  • /trust/did:method:*/explicit: ONLY providers that you trust.
• New lexicons:
  • build.athanor.provider.signingKey
  • build.athanor.graph.verification
  • build.athanor.graph.trustedVerifier

Compensation #

• Can't provide hardware? Pay the collective for build time at market rate and providers receive a payout based on their completed minutes, compute capability, and availability.

References #

[!quote] Original capture [[Nix|Nix]] [[Continuous integration|CI]] auto-enrollment for [[Tangled|Tangled]]