#+TITLE: Spritely for Secure Applications and Communities
#+AUTHOR: Christine Lemmer-Webber, Randy Farmer, Jessica Tallon

*NOTE:* This is an early draft.  Has yet to be reviewed by the
technical review board.

Blah blah, talk about all three papers...
This paper isn'e even close to being ready yet, it's just being
outlined.
For now, [[file:spritely-core.org][The Heart of Spritely: Distributed Objects and Capability Security]]
is the document that needs your feedback.

* Introduction

* A peer-centric user environment

** Safe applications
** Persona management
** Application and context management
** Secure application cooperation
** Local indexing

* Social networks, reimagined

* TODO Stuff to incorporate
** Social layer

*** Personas, Context, Trust management

# anti-soylent-green: "Personas aren't necessarily people!!!"
#   anti-identity joke there ;)

Requirements (assuming existing ocap system):
 - Personas (Unums with user-exposed names/viewing/reference)
   - Profiles
     - General
     - Contextual
   - Notifications (big unpack)
 - Petname system
 - Credential system (mine the VC space)
 - Requirements/ToE system
 - Granted permissions tracking
 - Context management (giant unpack)
# - Relationship graphs

 - Login bridging (maybe move down)

*** Social Communities

 - Messaging "style"
   - Ephemeral (IM, slack, signal, IRC, etc)
   - Persistent (forums, blogposts, etc)

 - Relationships (social graph)
   - Types
     - Friends <->
     - Follows ->
     - ?
   - Per-persona
     - Per-context
   - Between objects (???)
   - "Communication entry paths": stamps and mutual friend, etc

 - Membership (hub and spoke)
   - Social context / "group"

   - Actions / Activities
     - Create
     - Administrate
     - Remove
     - Archive / Replicate
     - Join
     - Leave
     - Invites

 - Posts, threads, and artifacts (wiki)
   - All the AS2 stuff (Notes, Videos, Audio, etc)
   - Importantly, participants in the thread can help share content
     but participation in the thread is an essential capability, it's
     not ambient "what threads do you have, hmmmm?"

 - Content feedback and reputation

 - Moderation and governance
   - Flexible policies
     - Pre-approval
     - Post-moderation
     - Flagging and review
     - Majority vote / quorum
     - Free for all
     - Bulk/AI moderation
   - (JIT) Behavior facilitation/correction semantics
     - Poster-side pre-flagging assistance
     - Governance-enforced filtering

 - Analytics?! (privacy preserving?!)

"Do we use the same petname system for personas, apps, inventory,
currency types, webpage bookmarks, etc etc"

There are two types of links:

 - "Live object things": very behavior'y
   Sturdyrefs
 - "File-like (updateable) data things"
   (Encrypted) Portable Storage

 - URLs to HTTP stuff
   (screws up by mixing the two above things)
   (this is a bridge)

*** Discovery

Recognize the difference between these two:

 - Kinds of information
   - "fundamentally public content"
     - you expect/want this to be available to everyone
     - you can't prevent indexing of this anyway
     - social agreement SHOULD be: everyone can copy

   - "fundamentally private content"
     - readable to only those who have permission to read
     - social agreements / community guidelines of when people
       can/should copy information out
       (are these ever machine-readable, and does the system
       help comply eg MarkM's "admonishment systems"?)
     - voluntary oblivious compliance auto-expiry
       (eg "context /requests/ post removal after 30 days")

 - Finding personas
 - Finding services
 - Search
   - Internal, within your own agency: public and private
   - Public content indexing and search
 - App directory

 - Sitemap-style inclusion protocol (as opposed to robots.txt as an
   exclusion protocol) as part of bridge

*** Service bridging

 - ActivityPub
 - DID Auth, whatever

** Application layer

*** Distributed finance

 - Agoric's stuff
   - ERTP
 - Wallets blah blah

*** Peer-to-peer user agent ("The Agency")

#+BEGIN_SRC text
(agency: native, terminal, web)               (applandia)
         .---------.                :  .-----------.
         | display |<---------------:--| gc-canvas |
         '---------'                :  '-----------'
           ^                        :      in | ^ out
           |                        :         V |
   .-----------.                    :      .---------.  .--------.
   |   Navi    |--------------------:----->|         |->| #room1 |
   |coop kernel|                    :      | goblin- |<-'--------'
   |           |   .-----.          :      | chat    |  .--------.
   '-----------'<--|facet|<---------:------|         |->| #room2 |
     |^    |       '-----'          :      '---------'<-'--------'
     ||    '----------------.        ~~~~~~~~~~ | ~~~~~~~~~~~~~~~~~~
     V|                     |        .----------'
   .-------.                |        |
   | aurie |                V        V
   '-------'             .------.  .---------.
  (persistence)          | brux |->| persona |
                         '------'  '---------'
                  (id mgmt) |            |
                            |            V             .-------.
                            |         .-----------. .->| alice |
(handwave:                  '-------->|{"alice": O--'  '-------'
 kernel also                          | "bob":   O--.  .-------.
 gives access to:                     | ......}   | '->| bob   |
  - "OS" caps                         '-----------'    '-------'
  - inter-app coop)                        |
                                           V
(handwave:                            .-----------.
 permissions management gui)          | {...}     |
                                      '-----------'
#+END_SRC

 - Inter-app cooperative kernel
   - Capability grants between apps
   - Capability grants to "OS" caps
 - Permissions management gui
 - Petnames integration
 - Highly configurable display system
   - Per-app canvases
   - Petnames overlay tooling
   - Inter-app cooperation (with display)
 - Persona profile display/management
 - App persistence/storage
 - Context management interface
   - Persona selection
   - App/context selection
 - Flavors of the agency
   - Native
     - Linux (cross-binary support to OSX, Windows)
     - Mobile
   - Terminal
   - Web
 - App install (and permissions configuration)
 - Discovery integration (all kinds)
 - Invitations
 - Wallet/financial integration
 - Bridges (and can you make it clear that things get risky here?)
   - Crossposting
   - HTML rendering of documents
   - Single-sign-on/identity mapping
 - "Unum display and UI" (intentionally vague)
 - Dev tools
   - MUDdebug (MUD-ish debug tools)
   - Integrated debugger
   - Minimal code editor
   - Authority scope
     - Authority of present context
     - Top-capability authority

*** Possible demo applications

 - Basic social stuff
   - Ephemeral chat
   - Persistent, hostless message boards

 - Convergent app examples
   - opencroquet's desktop demo,
   - collaborative text editors)

 - Trading card game mockup (Sushimon)

 - SpritelyMUD

 - Graphical virtual world example (Liberated Pixel Cup)

 - Minimal (toy?) wallet

 - Introduction paths
   - Stamps
   - Friend-of-a-friend
     - Email as an introduction flow

 - Streaming videoconference


* Acknowledgements