diff --git a/docs/projects/tansu-decentralized-project-governance-on-stellar.md b/docs/projects/tansu-decentralized-project-governance-on-stellar.md new file mode 100644 index 0000000..ae508c6 --- /dev/null +++ b/docs/projects/tansu-decentralized-project-governance-on-stellar.md @@ -0,0 +1,268 @@ +--- +title: "Tansu - Decentralized project governance on Stellar" +parent: Public Good Projects +proposal_issue: 105 +proposer: tupui +category: "Governance Tools" +budget: "$50,000 in XLM" +--- + +# Tansu - Decentralized project governance on Stellar + + + +_Tansu provides cryptographic proof of code integrity and transparent governance for open-source +projects._ + + + +| | | +| -------------------- | -------------------------------------------------------------------------------------------------- | +| **Category** | Governance Tools | +| **Website** | | +| **Repository** | | +| **First Released** | October 2025 | +| **Intake** | | +| **Budget Requested** | 50000 | + +## Project Description + + + +Tansu is a governance and versioning layer for open source projects, built on the Stellar blockchain. +It brings transparency, security, and decentralized decision-making to software development by +combining on-chain project tracking, a powerful voting platform, and a flexible membership system. It +integrates well with the Neural Quorum Governance score making it a great tool for the Stellar +community. It is the first platform to offer anonymous voting on Stellar. + + + +## Team & Experience + + + +It's been mostly me, Pamphile Tupui Roy [LinkedIn](https://www.linkedin.com/in/tupui). I am a Pilot +and delegate. I have contributed to the Stellar developer documentation, helped with hackathons and +participated in multiple Stellar Enhancement Proposals (co-authored SEP-52 and SEP-53). I am also +active in the Python sphere, acting as maintainer of SciPy (2M+ daily downloads) and SALib, and +serving on the Scientific Python Steering Committee. I know what it means to develop open source +solutions, what backward compatibility and maintenance truly mean. + +I have been working on Tansu in my free time since around May 2024. I got some help there and there +from friends and hired a few people along the years mostly to do frontend related tasks. + +Now, I am a Principal Engineer at [The Aha Co](https://www.theaha.co/) +([GitHub](https://github.com/theahaco) | [LinkedIn](https://www.linkedin.com/company/aha-labs-dev)). +We are advising many projects on Stellar as an official integration partner as well as part of the +architect program. We are more than 15 devs and still growing strong. Depending on the task, I will +leverage 1 to 2 people from the team. Mostly, but not limited: + +- Chad Ostrowski ([GitHub](https://github.com/chadoh), + [LinkedIn](https://www.linkedin.com/in/chadoh), Discord @chadoh) on the architecutre and general + flow. +- Willem Wyndham ([GitHub](https://github.com/willemneal), + [LinkedIn](https://www.linkedin.com/in/willem-wyndham), Discord @sirwillem), to review my work on + smart contracts. +- Hugo Heer ([GitHub](https://github.com/hugo-heer), + [LinkedIn](https://www.linkedin.com/in/hugo-heer-b29a0419b)), a frontend guru. + + + +## Retroactive Impact + + + +In Q2 2026, Tansu operated the first SCF Public Goods Award round on its dedicated testnet project. +SCF Pilots voted anonymously with NQG-weighted ballots; 17 projects were funded and around $400,000 +was disbursed. Write-up: [blog](https://tansu.dev/blog/public-goods-award-q2), +[program docs](https://scf-public-goods-maintenance.github.io). + +Running the round drove several governance features: on-chain conflict-of-interest lists (and +management in the dApp), replacement of Soroban Domains with a collateral and unique on-chain names, +anonymous and token-weighted voting, outcome-contract hooks, and a malicious-proposal revoke flow. + +While the voting was running, some issues around computational cost required by the anonymous setup +where identified early enough that no-one was impacted. This also highlighted the need to rework the +collateral system during voting. + +On the infrastructure side, I had to migrate urgently away from Storacha (IPFS) as they close down +their operations. All was migrated to Filebase (with some optional pinning to Pinata in the code.) + +I participated in all Drips Waves and a lot of work went into stabilizing features and adding new +exciting things: a concept of evidence for SBOM/CVE/attestation CIDs; support for any forge including +Radicle; and a linking of Git identity with a G-address. Tansu is now seeing a few contributors +coming back and helping out which is a way to increase the pony factor. On that front, the team at +Aha is fully onboarded as maintainers. + + + +## Past Deliverables + + + +### P1: Q2 Public Goods Award on Tansu testnet + +Proof of completion: + +- Round completed on `stellarpg` (on the sub-project `stellarpga`) on testnet: + [testnet.tansu.dev](https://testnet.tansu.dev) +- [Q2 round blog post](https://tansu.dev/blog/public-goods-award-q2) +- [Program repository](https://github.com/SCF-Public-Goods-Maintenance/scf-public-goods-maintenance.github.io) + +First PG Award round with anonymous NQG-weighted pilot voting on testnet; 17 projects funded, more +than $400,000 disbursed. The work was done as part of a +[SCF Build Award](https://communityfund.stellar.org/project/pg-atlas-dse). + +### P2: Governance stack + +Proof of completion: + +- Conflict of interest: [#94](https://github.com/Consulting-Manao/tansu/pull/94), + [#151](https://github.com/Consulting-Manao/tansu/pull/151) +- Soroban Domains removed and collateral system: + [#157](https://github.com/Consulting-Manao/tansu/pull/157), + [blog](https://tansu.dev/blog/docs-update-collateral-forges-weights) +- Anonymous voting, token-weighted ballots, outcome contracts, malicious-proposal flow: + [governance docs](https://tansu.dev/docs/developers/governance) + +### P3: NQG + `scf-membership` + +Proof of completion: + +- `NqgProjectKey` and `contracts/scf-membership/`: + [#50](https://github.com/Consulting-Manao/tansu/pull/50) +- Viewer: https://scf.pgatlas.xyz https://github.com/Consulting-Manao/scf-member-explorer + +### P4: Supply chain and evidence + +Proof of completion: + +- Unified `set_evidence` API: [#186](https://github.com/Consulting-Manao/tansu/pull/186), + `tools/evidence/publish.sh` +- SBOM CI and on-chain recording: [#145](https://github.com/Consulting-Manao/tansu/pull/145), + .github/workflows/sbom.yml` +- Workflows improvements: `.github/workflows` + +### P5: Maintainance + +Proof of completion: + +- Storacha to Filebase IPFS: [#56](https://github.com/Consulting-Manao/tansu/pull/56), + [#139](https://github.com/Consulting-Manao/tansu/pull/139), + [#141](https://github.com/Consulting-Manao/tansu/pull/141) +- See the improved + [CONTRIBUTING.md](https://github.com/Consulting-Manao/tansu/blob/main/CONTRIBUTING.md). +- Migrating to + [radicle.consulting-manao.com](https://radicle.network/nodes/radicle.consulting-manao.com) + + + +## Proposed Impact + + + +Q3's objective is about making Tansu reliable and usable for our first users. The main goals are: + +1. **PG Award Q3 on Tansu:** same testnet stack as Q2, we are going to run the Q3 program on Tansu + and there are lots of things to figure out. + +2. **Stellar Registry:** this is our second use case, the registry has it's own set of constraints + and we need to see how to effectively support the project. + +3. **Governance:** there are many things to improve, from the collateral system overall to new + features around supply chain. Now that we have the first set of users, we have a better + understanding of the scope and what we should do and not. + +4. **Maintenance:** from the preparation to an audit, the migration to Radicle to many small code + adjustments, there is a lot of continuous work. + +**Conditional:** If +[Nouns Builder on Stellar](https://communityfund.stellar.org/dashboard/submissions/recinNIkq2DGjZ8Hq) +is funded, coordinate on NQG/Tansu per their [roadmap](https://hackmd.io/@dan13ram/r123BqdJMl). + + + +## Proposed Deliverables + + + +### D1: Public Goods Award + +Tansu hosts the PG Award program. + +- **Program NQG score:** with SDF engineering and SCF team on PG Award-specific scoring + [e07f96daae8e8bc9075dbe128b16e54357838f48](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/e07f96daae8e8bc9075dbe128b16e54357838f48); +- **SCF NFT:** workflow to sync the data with the source of truth and work on Neurons + [33d6cff5b33baf6171b686f51167eeb302407cd4](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/33d6cff5b33baf6171b686f51167eeb302407cd4); +- **Mid-grant reviews:** tranche-2 review flow can be moved to GitHub and Tansu (template, outcome + hooks); +- **Q3 round:** intake, D&R, on-chain vote, open office hours, execution with SDF Community; +- [Conditional **Nouns:**] Nouns Builder NQG alignment if their grant is approved + [32e2f0739c61e8b739fc45053848b0b59f74a19d](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/32e2f0739c61e8b739fc45053848b0b59f74a19d). + +Measure: Q3 vote on testnet at https://testnet.tansu.dev/project/?name=stellarpgq3 ; (conditional on +SDF) mainnet NFT/NQG populated; mid-grant template shipped or new process proposal documented. + +### D2: Stellar Registry + +Registry Security Council vote on Tansu and further support +[3111b944792c0b5da9f6c8f88e52cdeebd1a3d82](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/3111b944792c0b5da9f6c8f88e52cdeebd1a3d82). + +- **`registry-tansu-manager` factory:** authorization contracts governed via Tansu + ([stellar-registry/contracts](https://github.com/stellar-registry/contracts/tree/main/contracts/registry-tansu-manager)); +- **Proposal and outcome templates:** registry publish, flag, namespace, etc. +- **Registry name to address:** outcome contracts reference registry names; dApp resolves at + creation/execution; +- **Contract lifecycle:** document register, propose, vote, deploy, version with Tansu in the loop; + +Measure: Testnet demo: Tansu vote executes a registry action; templates in dApp; name resolution +works. + +### D3: Governance features + +- **Evidence in dApp:** SBOM/CVE/Attestation usable + [#204](https://github.com/Consulting-Manao/tansu/issues/204)[#196](https://github.com/Consulting-Manao/tansu/issues/196) +- **Governance configuration:** rethink a per-project configuration for membership, weight mode, + rethink the outcome flow; +- **Collateral rework:** Merkle-based collateral or other mechanism to alleviate the contract + constraints + [c6a71ed20bd6bfd9af5f34c838135919c21ac2f4]([https://github.com/Consulting-Manao/tansu/issues/111)[#112](); +- **Endorsement:** mechanism to attest a specific commit + [8dea8085473cec6026e3a5c1126011fc4071e96a](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/8dea8085473cec6026e3a5c1126011fc4071e96a). +- **Discussions:** improve the integration on Tansu of the discussions from GitHub + [850a9420a6a4ac1fc0f091677455764fce3ab5b0](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/850a9420a6a4ac1fc0f091677455764fce3ab5b0) + +Measure: Evidence on project pages and management in the dApp itself; Nido support with a transparent +on-boarding and usage of Tansu; per-project config documented; yes/no approach documented; better +management of discussions and other artifacts. + +### D4: Maintenance, Security and Operations + +- **Nido wallet support:** passkey smart accounts with [nido.fyi](https://nido.fyi) + [62fa73dfad0c043a58c90feb9ad92ea7310656b7](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/62fa73dfad0c043a58c90feb9ad92ea7310656b7) + and considering to use Blux; +- **Result types** across contract, SDK, and dApp. Evaluate the change from panics; +- **Storage / TTL:** rent bump and TTL policy for Soroban storage + [40170febe4f792b0c802c79130e9d778f1cea7c4](https://radicle.network/nodes/radicle.consulting-manao.com/rad:zssaAF91kxuquZmZCV2SiK2FNX6s/issues/40170febe4f792b0c802c79130e9d778f1cea7c4); +- **Audit-bank prep**: perimeter map, risk notes, runbook; +- **Dependencies:** Soroban SDK, Stellar JS, CI deps kept current; +- **Drips Wave:** continue to promote Stellar and the Drips Wave platform; +- **Radicle:** assess gaps and use more + ([radicle.consulting-manao.com](https://radicle.network/nodes/radicle.consulting-manao.com)). + +Measure: UX improved with passkey based account supported, result types consistency documented; TTL +strategy documented and applied; runbook published; audit assessment addendum; dependencies +up-to-date; Radicle usage with some patches and issues. + + + +## Metrics loaded from PG Atlas + +[![PG Atlas](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fapi.pgatlas.xyz%2Fprojects%2Fdaoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning&query=%24.activity_status&label=PG+Atlas&color=914CFF)](https://www.pgatlas.xyz/projects/daoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning) +[![90d Contributors](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fapi.pgatlas.xyz%2Fprojects%2Fdaoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning&query=%24.active_contributors_90d&label=90d+Contributors&color=00B578)](https://www.pgatlas.xyz/projects/daoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning) +[![Pony Factor](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fapi.pgatlas.xyz%2Fprojects%2Fdaoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning&query=%24.pony_factor&label=Pony+Factor&color=0090FF)](https://www.pgatlas.xyz/projects/daoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning) +[![Adoption](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fapi.pgatlas.xyz%2Fprojects%2Fdaoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning&query=%24.adoption_score&label=Adoption&color=FF9900)](https://www.pgatlas.xyz/projects/daoip-5%3Ascf%3Aproject%3Atansu_-_soroban_versioning) + +## Legal Acknowledgements + +- [x] As the project representative, I agree to the Legal Acknowledgements.