lichenblankie/tinyweb-forum
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

forum trust circle: trust-gated content exchange via subscription graph

Browse source 
readme: document trust circle design

readme: tone down trust circle language to match existing style

remove forum_enabled toggle: subscribing IS trusting, no intermediate state
This commit is contained in:
blankie 2026-06-17 19:10:32 +00:00
parent 6f700c213f
commit f680931c8c
5 changed files with 232 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

15
README.md
View file

@ -36,12 +36,21 @@ Enable it on TinyWeb's `/style` page under "Forum".
- Threads are auto-pruned after 30 days (configurable, or set to 0 to keep everything)
- Moderation is local: block authors, mute threads, keyword filters, and gossip block lists with peers (auto-block after 3 peer reports)
### Trust circle
Content exchange is gated by a trust graph derived from your TinyWeb subscriptions:
- Only peers you subscribe to (with forum enabled) are trusted sources of content
- Content from trusted peers propagates transitively: you see posts from their trusted peers, and theirs, and so on — no hop limit
- New identities have no trust path until a trusted peer vouches for them or you subscribe
- Trust is seeded from TinyWeb's subscription page — each subscribed peer's forum content (and their transitive trust network) enters your view automatically.
## Moderation
All moderation is local — it controls what you see:
- **Block author** — hides all content from that identity
- **Auto-block** — when 3+ of your peers have blocked the same identity, it blocks for you too
- **Block author** — hides all content from that identity and cascades: the blocked peer's downstream trust network (peers they vouched for) is also removed from your view. If a downstream peer has an alternate trust path from another source you trust, they survive the cascade.
- **Auto-block** — when 3+ of your peers have blocked the same identity, it blocks for you too (with cascade)
- **Mute thread** — hides a thread from the listing
- **Keyword filters** — hides threads matching keywords
- **Instance sync** — choose which peers to sync with; unsync at any time
@ -71,6 +80,7 @@ All moderation is local — it controls what you see:
- Retractions are voluntary — peers can ignore them
- Block gossip can be gamed (requires collusion by 3+ peers on Reticulum)
- Threads prune after 30 days by default
- Discovery is through the subscription graph rather than topic-based blooms
- Best-effort maintenance
## Security
@ -79,3 +89,4 @@ All moderation is local — it controls what you see:
- **Retractions are voluntary** — Retracting a thread or post sends a signal to peers, but any peer can ignore it. "Retract" is a polite request, not a guaranteed delete.
- **Block gossip can be gamed** — Auto-block triggers after 3 peer reports. On Reticulum this requires 3+ real instances to collude, which is impractical at mesh scale, but is not cryptographically enforced.
- **No rate limiting** — Forum POST endpoints have no throttling. Low risk since the HTTP port is localhost-only by default.
- **Trust circle** — Blocking a peer removes their downstream trust network from your view. A peer with multiple independent trust paths may survive a single block.