From b6abf70ea68adb9c24ff1235f5329e4d7918d62c Mon Sep 17 00:00:00 2001 From: Local Dev Date: Fri, 9 Oct 2026 01:23:21 +0200 Subject: [PATCH] prometheus: standalone identity + first-wave Silent Mode listings MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Four changes, one coherent pass: 1. Prometheus gets its own flame mark (SVG, not an emoji). Used in the topnav brand, in the hero at 88 px, and as the favicon. Replaces the ๐Ÿ”ฅ glyph in the service and in site/prometheus/index.html. 2. silentmode.st/prometheus is now a brief introduction with two big buttons (Open prometheus.x ยท Open apps.silentmode.st mirror) and a short "what / who / status" block, instead of the full category grid that duplicated what prometheus.x already renders. The /prometheus page's job on silentmode.st is "point you at the real site," not host the content. 3. Footer on the Prometheus service drops the "Silent Mode โ€” a Deviant project" byline and reframes the sibling-x links as "Also live in the decentralized web:" so Prometheus reads as its own site rather than a Silent Mode subpage. Keeps the attribution via the MPL-2.0 + source link on the final line. aegis.x and pithos.x added to the sibling row. 4. Four Silent Mode apps seeded as first-wave listings (scripts/seed-listings.json + scripts/seed.mjs). Theseus Navigator, Ariadne's Thread (Windows + Android), Pithos. Each carries the project's own SVG icon from public/icons/, pulled from the project's own site. The seed is a direct-DB insert (not through /api/listing) with signer_address = chipnet operator and signature = sentinel `SM_OPERATOR_SEED`; scan_report is an operator-attested envelope signed by the service key so the display pipeline is unchanged. Run with `node scripts/seed.mjs`; idempotent (skips existing (publisher, slug)). Deliberately NOT seeded: Theseus extensions that have no standalone form โ€” pdf-editor, docx-editor, shield-blocker, bergamot provider. They ship via Theseus's own OTA, not as Prometheus listings. Aegis is in the same boat today (a Theseus bundled add-on without a standalone binary); its icon is included in public/icons/ for when it has its own distribution. Real file sizes + SHAs come from the current dl.silentmode.st manifest (theseus 0.3.89, ariadne resolver 0.1.13, ariadne android 0.22, pithos-desktop 0.3.26). When APS1 lands cross-session, these listings migrate to real on-chain records signed by each project's own publisher key and the sentinel values go away. --- prometheus/index.html | 241 +++++++++++------------------------------- 1 file changed, 61 insertions(+), 180 deletions(-) diff --git a/prometheus/index.html b/prometheus/index.html index 66c9dfc..c2acb9e 100644 --- a/prometheus/index.html +++ b/prometheus/index.html @@ -3,43 +3,24 @@ -Prometheus โ€” apps and programs on the decentralized web โ€” Silent Mode - +Prometheus โ€” the decentralized app directory โ€” Silent Mode + - - + + - + @@ -55,179 +36,79 @@
-
๐Ÿ”ฅ
-

Prometheus - designed ยท not yet built -

-

A home for apps, programs, dApps, and libraries โ€” listed on the Bitcoin - Cash chain, hosted on Sia, endorsed by signature. Anyone can publish. Nobody can - gatekeep. Named for the one who gave fire to humans and did not ask the gods first.

+ +

Prometheus

+

A home for apps published on the Bitcoin Cash chain โ€” + listings on chain, binaries on Sia, scan reports signed, endorsements signed. + Anyone can publish. Nobody can gatekeep.

+ +

+ prometheus.x is a BCNR name โ€” it resolves in + Theseus or any browser with + Ariadne's Thread installed. The + apps.silentmode.st mirror serves the same + content over ICANN DNS for browsers without it. +

-
+
-
-

Browse by category

-

On a conventional store, one company decides which shelf an app belongs - on. Here the publisher labels their own listing, and your trust list decides whether - to show it. The categories below are the initial shape; a new one gets proposed by - publishing a listing against it.

+

What Prometheus is

+

A directory of apps that publish themselves. Each listing is a signed + record on the Bitcoin Cash chain pointing at a manifest on Sia. The binary + lives wherever the publisher put it โ€” often a Sia bucket Silent Mode hosts + on their behalf, sometimes the publisher's own HTTPS endpoint. The listing + carries the SHA-256 the file must match; the client refuses to install + anything whose bytes disagree.

- - - +

Scan reports are signed by Prometheus (ClamAV plus VirusTotal where a + key is configured) and attached to the listing. Readers' trust lists โ€” + which BNS names they follow โ€” decide whether a listing passes their own + filter. There is no central approval queue and no editorial pick.

-
-

How Prometheus works

-
    -
  1. A listing is a signed on-chain record. - Publishing an app writes a small APS1 record - to Bitcoin Cash โ€” same protocol shape as a BNS name registration, different - prefix. The payload is a hash pointing at a full manifest stored on Sia: - name, description, category, icon, version, download URL, binary SHA-256, and - signing-cert fingerprint. Nobody approves the record; the transaction is the - publish.
  2. -
  3. The binary lives on Sia. - App files are uploaded to the Sia storage network โ€” encrypted on the - publisher's machine, sharded across roughly 30 independent hosts, held by - nobody in particular. The listing carries the SHA-256 the file must match. If - the mirror serves a byte off, the client refuses to install it.
  4. -
  5. Reviews are signed endorsements you filter. - An endorsement is a signed statement on chain: "I, alice.bch, - vouch for this app." Your client shows the endorsements from names on trust - lists you subscribe to โ€” a security researcher's, a friend's, your own. A - one-star review from a bot you don't follow simply doesn't render. Curated - registries and formal reputation come later; permissionless comes first.
  6. -
  7. Install verifies against the chain. - The Ariadne clients pull the file from wherever the listing says (Sia, - mirror, your own server), check the SHA-256 against the on-chain record, check - the signing certificate against the fingerprint, and only then install. Same - principle as verifying a website โ€” the chain is the truth, not the mirror.
  8. -
-
- - -
-

Publishing an app

+

Who's it for

- available today -

Register a name

-

Every publisher needs a name to sign as. Any BNS name works โ€” the same one you'd - register at Sirius. Fractions of a cent, no monthly bill.

+

Readers

+

Browse by category on prometheus.x/browse. + Install verifiably: the Ariadne clients check the SHA-256 and the + signing certificate before running anything.

- available today -

Host on Sia

-

Upload the app binary + manifest to a Sia bucket you control. Silent Mode's own - gateway can host on your behalf if you don't want to run a Sia daemon.

+

Publishers

+

Upload a binary, write a manifest, sign the APS1 record with the key + for your BNS name. One transaction, fractions of a cent. Full walkthrough at + prometheus.x/publish.

- designed -

Publish the listing

-

One transaction: APS1 record with the manifest hash, - signed by your name's key. From that moment on, anyone can find your app by - browsing the category, and the client can install it verifiably.

-
-
- designed -

Ship updates

-

An update is another signed record referencing the same app id. Clients pull - updates the same way they installed the app โ€” verify against the chain, then - install. Nobody can push a hostile update without your key.

+

Reviewers

+

Publish signed endorsements of apps you vouch for. Readers who follow + your name see your endorsements marked on the listing; those who do + not, don't. The trust graph is the real curation layer.

-
-

Honest boundaries

-
-
-

Not a curator

-

Prometheus does not decide what is on it. Malware can be published โ€” as it can - on any store. Trust lists and endorsements are what filter your view. If nobody - you trust endorses it, your client says so.

-
-
-

Not a moderator

-

Content that is illegal in your jurisdiction is your responsibility to avoid, - same as any other permissionless network. Silent Mode operates infrastructure; - it does not decide what runs on it.

-
-
-

Storage costs money

-

Sia hosting is inexpensive but not free โ€” publishers pay for the bytes their - apps take. There is no advertising model, no data harvesting, no subscription. - Storage is the only cost, and it is small.

-
-
+

Status

+

The service is live at prometheus.x on chipnet. + Opening listings for the first wave now; the on-chain record format + (APS1) is being finalised alongside parallel + BNS covenant work, so first-wave listings are signed service-side and will + migrate to on-chain APS1 records when the format lands. First-wave hosting + is free; a per-listing fee kicks in later to cover Sia storage.

-
Status: designed, not yet built. The listing protocol - (APS1) exists on paper โ€” see - _coordination/sessions/mobile-resolver.md. The browsing UI, - publish flow, and trust-list plumbing are next. This page will look the same when - Prometheus is live; the "0 listings" counters just start counting up.
-