fip | title | author | discussions-to | status | type | category | created |
---|---|---|---|---|---|---|---|
0080 |
Phasing Out Fil+ and Restoring Deal Quality Multiplier to 1x |
@Fatman13, @ArthurWang1255, @stuberman, @Eliovp, @dcasem, @The-Wayvy |
Draft |
Technical |
Core |
2023-08-03 |
This proposal eliminates the 10X multiplier associated with Fil+ deals, effectively restoring the deal multiplier to its raw byte value.
This proposal aims to reduce complexity and friction in the Filecoin ecosystem, encourage the onboarding of real data, and foster a healthier growth environment for the Filecoin network. It does this by setting the QAP multiplier to 1x for all new deals and sector extensions, so that the network is no longer dependent on a centralized intermediary to pick and choose what data to onboard. It follows decentralization best practices enacted by both Bitcoin and Ethereum, aligns with Filecoin's mission to provide useful storage, and maintains the network's core values of decentralization.
- The network is not dependent on any one party, e.g., not dependent on a company, foundation, or other organization to continue operating.
- No centralized parties can control, stop, or censor the network, its operation, or its participants.
- Users and providers are not controlled or governed by powerful intermediaries (unlike markets like Uber or Airbnb).
- Refers to the decentralization movement of 2015+, including IPFS, Bitcoin, Ethereum, and more.
The Fil+ program's current implementation has created complexities and challenges that hinder the growth trajectory of the Filecoin network. By phasing out the Fil+ multiplier, this proposal seeks to restore the integrity of the Filecoin blockchain and alleviate issues related to consensus overload, complexity, pledge availability, poor UX, loss of privacy/censorship resistance, and other problems.
Much of the details are outlined in the initial discussion, which can be summarized as following: by imposing a permissioned layer on top of an already cumbersome core protocol, the network is suffering from a rapid decline of RBP as a result of skewed incentives, which in turn compound the negative impact on network value and creating an environment that encourages SPs to collude and game the network incentives.
- Reset DC multiplier: Set the power/weight multiplier for verified deals to 1.
lazy_static! {
/// Quality multiplier for committed capacity (no deals) in a sector
pub static ref QUALITY_BASE_MULTIPLIER: BigInt = BigInt::from(10);
/// Quality multiplier for unverified deals in a sector
pub static ref DEAL_WEIGHT_MULTIPLIER: BigInt = BigInt::from(10);
/// Quality multiplier for verified deals in a sector
/// >>> Target value <<<
pub static ref VERIFIED_DEAL_WEIGHT_MULTIPLIER: BigInt = BigInt::from(10);
}
-
Existing Deals: For sectors with existing Fil+ deals (DC sectors), the current Quality Adjusted Power (QAP) will remain until these deals expire. Nothing technical is expected to be changed for this particular specification.
-
Sector Extension: Upon sector extension, the 10x multiplier will no longer be applicable after the upgrade.
There are many ways to achieve the stated goal of the FIP discussion. After filtering out some of the less practical ones, it comes down to either prevent DC from being minted or reduce the multiplier for DC deals. Multiplier reduction is chosen not only for its simplicity in implementation but also avoiding the debate of wether turning off DC minting should be governed by Fil+ program or not.
The proposed change would likely not detour the already downward decline of RBP in short term but would highly likely allow L1 to capture much more value in the long run in terms of tangible resources like hardwares and talents being employed to support RBP of the network.
The FIP may increase the likelyhood of reduction in power onboarding, consequent loss of RBP meaning further reduced blockrewards due to baseline minting model, the supply inflation resulting from expiring sectors with no onboarding and significantly lower initial pledge requirements due to QAP crossing baseline until the market finds equilibrium price again with new readjusted mining cost. Before then miners will likely be able to enjoy a higher Fil on Fil return to incentivize the return of RBP to catch up the baseline. The CEL report here shows the resilience properties of the Filecoin network in such case. Though we would like to point out that of course all such models have limitations.
Some of the incentive considerations are very similar to FIP0078 as the proposed change rooted from same core decentralization value they share.
The proposed change removes Fil+'s incentive for the onboarding of non-random data. As a result, it's anticipated that the onboarding rate of non-random data may decrease. It remains unclear how much of the data currently incentivized by Fil+ is not in compliance with the program's goals.
Following this proposed change, the primary impetus for SPs to onboard data will originate from outside the protocol itself. It could include direct payments from storage clients or new incentive models implemented in FVM contracts.
Because all sectors will have the same multiplier (1x), we expect miners to charge more for storing user data. So users whose data is currently stored via Fil+ deals will probably have to pay more for storage after the sector containing their data expires. We suggest existing users discuss pricing changes with their SPs or the intermediary who handled deal-making for them. It is unlikely that user data will be dumped before sector expiry since a miner would have to pay a termination fee and re-seal a new sector.
It is hard to estimate how much user demand Filecoin will lose in the short run, (both demand for data already stored on the network and for data that potentially could have been onboarded in the future). There are two reasons for this: first, we don't know how much of the data stored via Fil+ deals has an actual user behind it; second, because Fil+ distorted price discovery, we don't know what users are willing to pay for Filecoin storage and what miners are willing to accept.
Fil+ team and many more customized deal markets will be developed on L2 of Filecoin in either permissioned or permissionless manners in an open and fair market competition.
By way of example. If the network continues to grow in the current trajectory, it will inevitably become a mostly DC network (70%+ DC). Then the proposed changes could be used to clamp down QAP to restore everthing back to 1x.
Depending on the school of thoughts one may think blockchain security consists of for Filecoin network, one may reach different security consideration.
If one's view on network consensus security aligns with the explorations released here and here. The proposed change may be perceived as lowering network consensus security because lowered pledge cost in the network attack strategy model of HDDCost + StoragePledge + FutureEarnings
. However, one potential outcome (still in debate) conditioned by tokenomics that lowers initial pledge requirements due to QAP crossing baseline might be able to mitigate security risk with means of reducing non-hardware costs so that more hardware will be onboarded to secure the network, which previously peaked at 17 Eib as opposed to 9 Eib right now.
There are also views that shared by many who see consensus seurity is POS agnostic as there are already large token holders like Protocol Labs, Filecoin Foundation, big whales that may become single point of failure to attacks. By that token, attack model is reduced to HDDCost + SealingCost + GasCost
, which the proposed change will likely to boost the network security as explained in the QAP crossing baseline scenario.
Additionally, by returning control over block reward distribution to those who contribute RBP, we reduce the chances that a small group of malicious or misguided actors (e.g., corrupt notaries) hijack the network to further a personal agenda. Changes to consensus participation must be rooted in physical reality; it’s far less likely that malicious actors will be able to acquire tens of thousands of HDDs necessary to conduct a 51% attack. Today, Fil+ derived % of consensus ( i.e., powered strictly by "human-granted staking licenses" ) is over 56%, while the same Fil+ derived power represents only 11.5% of the actual physical storage on the network.
CryptoEconLab, in an August 2023 report, examined Filecoin's resilience to power drops, as the protocol provides strong economic incentives for new storage providers (SPs) to join and for existing SPs to stay in the network after power loss. Again note that all models have limitations.
What does resilience mean? Merriam-Webster defines resilience as the ability to recover from or adjust easily to misfortune or change. Resilience is relevant to many aspects of a cryptoeconomy like Filecoin; examples include 51% attacks, Sybil attacks, and Finney attacks, to name a few.
However, it is critical to ensure that the transition is handled securely, particularly when dealing with existing sectors.
Why pick option1 over option2:
-#774 (reply in thread)
-#774 (reply in thread)
-#774 (comment)
Why 10x for all, a soft landing, is not ideal:
-#774 (reply in thread)
-#774 (reply in thread)
-#774 (reply in thread)
Why no more multiplier should be applied in the Filecoin core protocol:
-#774 (reply in thread)
-#774 (reply in thread)
-#774 (reply in thread)
-#774 (reply in thread)
This work is licensed under the Apache License, Version 2.0.
This FIP provides a detailed and structured plan to phase out Fil+ by changing the deal quality multiplier, adhering to the chosen option and the principles outlined in the initial discussion. Implementing this proposal will need careful planning and consideration to ensure a smooth transition and alignment with Filecoin's long-term objectives.