Every component explained: what/roadmap/testing — the full network map · COMPLETE_ELEMENTS_SUMMARY.md

QALS Network — Complete Element Summary

2026-09-19 · Every component, what it does, its roadmap, and its test state. Companion docs: 10_roadmap/README.md (status roadmap) · TESTING_MASTER_PLAN.md (test levels/checklists) · 05_defi_trading/RUNPOD_AND_DISTRIBUTION.md · 05_defi_trading/EXCHANGE_OPERATIONS_AND_LIQUIDITY.md · 06_bank_exchange/EXTERNAL_CHAINS_MASTER_PLAN.md

The one-paragraph picture

QALS is a private value network: a finite, AU$1-anchored credit unit (QALS — 1,000,000 max sellable as paper, pre-endowed in a genesis issuer wallet) circulating across ~18 services on your hub and fleet. One identity (did:qal:) is your chat handle, wallet, exchange login, compute buyer ID and machine credential. Encryption is real end-to-end (X25519→HKDF→AES-256-GCM + Ed25519, PoP-gated relays, on-chain-anchored receipts). Money is escrowed, metered, capped and fail-closed. Everything is testable and most things are tested. The three checklist gates to real money are documented, not passed.

1 · CORE LAYER

1.1 Qalnet — private chain

What: IOTA-stack (Apache-2.0 fork, pristine clone + 3 Move packages) devnet: 4 validators + node + faucet on 127.0.0.1, ~6.5 GB RAM. All qalarc logic lives in qal_data (DataAnchor: sha3-256+uri+signature, tamper-evident), qal_credit (CreditAccount/Hold lifecycle, cap enforcement in bytecode) and qal_reserve (mint-gate design — being redesigned to genesis-premint + transfer-gate at the cap-raise checklist). 11/11 Move tests; 1,253+ anchors; era checkpoints seal the registry across regenesis (era-1 live over 1,283 anchors). Roadmap: republish reserve w/ correct cap + deposit-id registry (cap-raise checklist) · on-chain qal_amm (decentralisation checklist) · validators spread across fleet machines · binary output renamed qalnet-node. Testing: Move unit tests 11/11 · live credit lifecycle ✓ · qalpipe era ✓ · on-chain cap refusal ✓. Next: chain restart-drill, 4-machine validator spread test.

1.2 qalpipe — anchoring

What: anything → sha256 → DataAnchor on-chain → verify (PASS / TAMPERED / ERA-SEALED). Spool + retry when chain down. 1,253+ anchors, journal append-only. Roadmap: producer-key signatures (F5) · tick capture for candles (partially in). Testing: tamper-test ✓ (tamper caught, restore PASS) · era suite 7/7.

2 · MONEY

2.1 loopd — paper money rails (:8823)

What: ledger-of-record. Agents (handles→agent_id), balances, transfers (HMAC), 115% pre-auth holds, settle w/ dust-to-Church, revoke/kill-switch, uncapped-by-default + owner-set caps, fail-closed admin-keyed issuance, issuer wallet (genesis-premint; /issuer/endow, /issuer/status, 402 on exhaustion), faucet (/faucet/request 1k/day + 5k lifetime per handle, self-serve for agents), /agents/bind (seed-derive recovery). Roadmap: migration to on-chain qal_credit (migration importer) · per-suite data isolation (loopd still shared by design) · QALLOOPD_DATA env. Testing: demo ✓ · caps 64 ✓ · issuer flows ✓ · day-key bug fixed. Next: ledger restore drill, faucet hammering in chaos runner.

2.2 qalpay — fiat on-ramp (:8839)

What: PSP webhooks → platform escrow → per-buyer credit. Idempotent (replay → original receipt), refund engine, per-buyer purchase caps (lifetime 1,000 QALS default + rolling windows, live-patchable), BTC rail (Kraken+CoinGecko+BTCMarkets median oracle, 1.5% spread, conf ladder, AU$2k/invoice + AU$20k/day), third oracle source (BTCMarkets). Roadmap: real PSP platform (Gate A) · BTCPay Server integration (Rung 0) · proof-of-reserves page. Testing: caps 64 ✓ · rail 10-section ✓ · oracle-verified math. Next: live PSP sandbox.

2.3 qalx — exchange + games (:8843)

What: paper AMM (QALS/qAUD, QALS/wBTC), 0.3% to LPs, qalid sessions, deposit-receipt polling, wrap/unwrap paper, candles (OHLCV from reserves), strategy /insight, UP/DOWN prediction rounds (5-min BTC, parimutuel, 5% rake → 3% LP + 2% ops), FloorBot corridor keeper (proven: bought 0.974→1.024). 72+55+76 assertions. Roadmap: red-team round (before ANY real flow) · on-chain AMM + renunciation · multi-fiat stables (post-licence) · market-maker bot · streaks/cash-out. Testing: exchange 72 ✓ · predict 55 ✓ (math-oracle) · conservation invariants every run. Next: red-team, overnight soak.

2.4 qalredeem / qalclaim — redemption & points (:8835/:8836)

What: services-only redemption w/ exact accounting (fees + Church dust), points→credit w/ issuer escrow + handle proofs. Testing: 62 ✓ + 28 ✓. Roadmap: catalogue UI for redeemable services.

3 · MESSAGING

3.1 qalchat — E2EE relay (:8830, relay2 :8840 cachyos, relay3 :8841 ashpc-ready)

What: ciphertext-blind relay (never stores plaintext), X25519→HKDF→AES-256-GCM + Ed25519 per envelope, PoP-gated mailbox (strict), typing indicators (6s ephemeral), message edit (chain-preserving), read receipts (consume-once), groups (fanout E2EE, TOFU, leave), file transfer ≤8 MB chunked, mesh ferry, invites (TOFU), export/import, anchor-on-send. Roadmap: MLS (when scale justifies) · relay isolation for suites (done for 4 big ones; test_relays left) · notification levels · member statuses. Testing: chat 38 · files 49 · invites 36 · groups 36 · pop 12 · messaging2 32 — all green, scratch-isolated. Relay auto-restore on restart.

3.2 qalpub — public layer (:8832)

What: public + private invite-gated channels (key rotation w/ era separation), threads, reactions, presence, workspaces, roles/slow-mode, embeds (signed cards), bot webhooks (token-mint primitive), digests anchored on-chain, paid unlocks (ECIES). Testing: 42+54 ✓ · private channels 10 ✓ (crypto era-proof). Next: webhook revocation, markdown.

4 · IDENTITY

4.1 qalid — DIDs (:8838)

What: did:qal: docs (chain-anchored), challenge-proof login (single-use, fail-closed), humans/agents/devices (derived keys, controller governance), revocation (~2s), recovery plans, tailscale-bind (node-key hash in doc), machine-gate (device-PoP env for machine→service auth), audit (ONLINE/OFFLINE/KEY-MISMATCH). Testing: 17 + 25 ✓ — replay/tamper/leak/impostor all fail-closed. Next: device keyring UX, gate integration into loopd/qalpay (qalid-PoP as alternative auth).

4.2 seedkit — BIP-39 derivation

What: qal-derivation-v1: identity + loopd secret from a 12/24-word phrase; 39/39 (recovery, impostor rejection). Paper-is-canonical doctrine.

5 · COMPUTE

5.1 qmarket (:8824) + provider (:8850 hub, :8850 cachyos)

What: provider registry (stake ≥500¢), escrowed jobs, remote adapters (cachyos-mini proven cross-machine: 128¢ job executed+anchored), disputes, slash 50/50, delist <40 rep, 0% fees. qalid-gating per provider. 16→2 real providers after hygiene cleanup; cleanup tool w/ safety gates. Roadmap: bb-mini onboarding · RunPod broker adapter (qalpod.py R0→R1: meter from RunPod runtime, cap = escrow÷rate, nightly reconciliation) · usage-meter daemon (generic machine drain) · qalid-required providers (done — gate live) · dispute+slash drill. Testing: v2 30/30 adversarial (cheat→slash→delist→recovery) · qalid-gate 13 ✓.

5.2 qalsh — guarded remote exec

What: allowlist-only execution for agents, cost caps, every execution AND refusal anchored. Matrix-proven. Testing: 9/10 (era-anchored audit fixed by checkpoints).

5.3 qalkeys — metered API resale (:8841)

What: sellers register upstream API creds (sealed), buyers get qk_ keys, metered per-call/token settlement via pre-auth, org cost-centres, dispute w/ proof. SSRF-guarded (C6 fixed). Testing: 70 ✓ (incl. escrow-settle double-charge fix + receipt audit trail).

6 · AGENT LAYER

6.1 qalmcp — MCP server (34 tools)

What: every system as agent-callable tools — chat (+typing/edit/receipts), money, exchange (quote/swap/wrap/candles), predict (bet!), compute, files, anchoring. Write-guards + confirm gates + kill switches (QALMCP_CHAT_WRITES=0 etc.). Testing: messaging suite ✓ (mailbox-safe receipts path proven), full 34-tool list ✓. Roadmap: market-maker bot on these tools · voice tools never (excluded).

6.2 Onboarding — one command

python3 qalchat/qalchat.py onboard <handle> --faucet 1000 → identity + PoP publish + wallet + faucet tokens, live immediately. (Parser regression fixed; suites re-verified.)

6.3 qalbazaar — agent marketplace (:8834)

Escrowed offers (data/inference/compute/skills), ratings. 51 ✓.

7 · APPS & SURFACES

Qal Wallet v8 (Tauri, Rust+vanilla JS): wallet+E2EE chat (Discord rail: COMMUNITY/GROUPS/DIRECT, typing/edit/receipts/embeds) + compute + exchange tab + passkeys. Site-token reskin (WCAG pass). .deb shipped (hash-rotated). Smoke 37 ✓. Installed on hub + cachyos (menu → Qal Network).
Web control room: hub (directory + back-link), vault (ledger visuals, live snapshot 10-min), loom (chain live), qalx floor, candles, ticker (LIVE), predict (UP/DOWN), showcase, assistant (24/7 knowledge — needs Z.AI recharge), evidence page (claims→receipts), status roadmap, pricing (one story: buy ~1.20 / redeem 1.00).
Phone: bridge UI (:8837/phone, token auth, tailnet), PWA install, TWA scaffold (unbuilt — packaging gate). Not yet device-tested end-to-end.
gmux-bridge (:8842): terminal sessions ↔ capped wallets. 13/14.

8 · INFRA & OPS

Fleet: hub (superlocal) + cachyos-x8664 (relay2 strict + provider + wallet) + ashpc installer ready + bb-mini pending + minirig decommissioned. Units: everything Restart=always (self-heal proven), grouped qal-*. Timers: self-test 07:00 daily (all-green), live snapshot 10-min. App hub: Qalarc Network category, 11 versioned apps incl. Privacy Chat. Privacy stack: Glossopetrae codec adopted as codec-encode/decode (stealth layer — never replaces qalchat E2EE). Assistants: QALS assistant rebuilt (was broken — ReferenceError; knowledge pack; fix deployed, needs Z.AI recharge).

9 · SECURITY LEDGER (posture summary)

Fixed this era: C1 (mint fail-closed) · C6 (SSRF) · H3 (relay PoP, fleet-wide) · qalkeys double-charge · receipt audit gap · identity-wipe hazard (suite isolation + auto-restore) · port-squatter class (units + env-binds) · init-parser split. Open (ranked): qalx red-team (#1, before real flow) · on-chain reserve stale-cap+registry (Gate B) · buyer-key Sybil (qalid binding) · loopd data isolation for suites · chain RPC 0.0.0.0→127.0.0.1 at next heal · QALLOOPD_HOST=0.0.0.0 exposure review at Gate A.

10 · GATES (unchanged)

Real money = PSP + caps active + PoR page + legal sign-off · Cap raise = reserve republish + migration importer · Decentralisation = on-chain AMM + committee + renunciation.

← Testing Master PlanOrchestration Doctrine →