▸ RESERVEGRID OS · 2.0.0+ INVARIANT SHIELD

One verifier.
Two trust layers.
Zero ambiguity.

The operator-grade safety, verification, and audit layer for miner-built work. v1.x.x shipped the Operational Gateway. v2.0.0 adds the Invariant Shield — one feature with three check classes (S structural, D declared-vs-derived, M mempool ground truth) across two phases.

LAYER 01
RG-CONSENSUS
Operational Gateway
Declared-field thresholds. 59 gateway reason codes.
INGRESSVERDICT →L1coinbamerkleweightsigopstx_coufee_avheaderDECLARED FIELDS · INSPECTEDREASON CODES59POLICY KEYS69P99 LATENCY35ms
LAYER 02
RG-CONSENSUS
Invariant Shield
Re-derive consensus quantities. Cross-check the operator's mempool.
SDM01101011BLOCK11010100
PHASE 1 · 22 REASON CODES (CLASS S + D + M)
Class D · declared vs derived
Re-derive coinbase, merkle, witness, tx_count from raw bytes
v2_invariant_coinbase_value_mismatchv2_invariant_merkle_root_mismatchv2_invariant_mempool_tolerance_exceededweight_ratio_exceededv2_invariant_sigops_mismatchshare_replay_detectedv2_invariant_witness_commitment_mismatchavg_fee_below_minimumv2_invariant_tx_count_mismatchnoise_handshake_timeoutv2_invariant_coinbase_height_mismatchverifier_phase2_degraded_totalv2_invariant_coinbase_value_mismatchv2_invariant_merkle_root_mismatchv2_invariant_mempool_tolerance_exceededweight_ratio_exceededv2_invariant_sigops_mismatchshare_replay_detectedv2_invariant_witness_commitment_mismatchavg_fee_below_minimumv2_invariant_tx_count_mismatchnoise_handshake_timeoutv2_invariant_coinbase_height_mismatchverifier_phase2_degraded_totalv2_invariant_coinbase_value_mismatchv2_invariant_merkle_root_mismatchv2_invariant_mempool_tolerance_exceededweight_ratio_exceededv2_invariant_sigops_mismatchshare_replay_detectedv2_invariant_witness_commitment_mismatchavg_fee_below_minimumv2_invariant_tx_count_mismatchnoise_handshake_timeoutv2_invariant_coinbase_height_mismatchverifier_phase2_degraded_total
▸ THE THESIS

SV2 gives miners control. Pools lose implicit safety.

ReserveGrid restores operator control without undoing miner autonomy. That is the entire product. Two trust layers operationalize it; the second one — the Invariant Shield — is itself decomposable into three orthogonal check classes.

3.125 BTC
Cost of one orphaned block
plus fees, denominated in the only unit that doesn’t lie
26 %
Network hashrate from one template source
BTC.com, Poolin, Binance, EMCD, Rawpool — Sept 2024
5 – 10
Pool operators globally adopting SV2
Total addressable market right now
▸ INSIDE LAYER 02 · INVARIANT SHIELD

One shield. Three check classes. Two phases.

The Shield is one product feature. Internally it runs three orthogonal check classes — S, D, M — phased so the operator can adopt at the granularity of risk appetite. Phase 1.5 fills the remaining 7 Tier 3 invariants under the existing Phase 1 umbrella.

PHASE 1
Class S + Class D
shipped + Phase 1.5 queued
PHASE 2
Class M
shipped
PHASE 1 · SHIPPED

Class D · Declared vs Derived

Re-derive consensus quantities — coinbase value, template weight, merkle root, witness commitment, sigops cost — from the raw block bytes. Reject on declared-vs-derived mismatch.

↳ CATCHES

Templates whose declared fields don't match what the bytes actually encode. The whole F2Pool sigops + Antpool cached-coinbase class.

EXAMPLE REASON CODES
v2_invariant_coinbase_value_mismatch
v2_invariant_merkle_root_mismatch
v2_invariant_witness_commitment_mismatch
v2_invariant_template_weight_mismatch
v2_invariant_sigops_mismatch
▸ FLOW

One template enters. Two layers rule. One verdict ships.

Average verdict latency stays under 10ms even with the full Shield active. Miners connect over standard SV2 and notice nothing.

bitcoind:8332template-manager:8082pool-verifier:8081TWO-LAYER VERDICTL1 · GATEWAY59 codes · 69 keysL2 · INVARIANT SHIELD22 v2_invariant_* codesPhase 1 · Phase 2 wiredsv2-gateway → miners:3333CLASS M BACK-CHANNELgetrawmempool · poll 10s
:8082
template-manager
Fetches GBT from bitcoind. Posts to verifier.
:8081
pool-verifier
L1 + L2 (S/D/M) verdict. NDJSON to dashboard.
:3333
sv2-gateway
Noise NX transport. Hold-on-stale handoff to miners.
:8332
bitcoind (operator)
Independent mempool view for Class M.
▸ THREAT MODEL · INTERACTIVE

Five attacker classes. Tap to see which checks fire.

T3 · CONSISTENT TEMPLATE-MANAGER TAMPERING

Declared values and raw bytes are internally consistent — the template-manager has rewritten both. Layer 1 and Class S/D are blind to this by construction. Class M compares the template's tx set against the operator's independent bitcoind mempool view.

WHICH CHECKS FIRE
○ silent
Layer 1
Op. Gateway
○ silent
L2 · S
structural
○ silent
L2 · D
declared / derived
● FIRES
L2 · M
mempool truth
▸ TIMELINE

What ships. What's wired. What we won't claim until production data backs it.

v1.0.x
2025
Operational Gateway
● SHIPPED
Layer 1. Declared-field thresholds, 59 gateway reason codes, 69 TOML keys total (61 v1 + 8 [policy.mempool]). Noise NX transport. Two-event share lifecycle. Prometheus / Grafana / NDJSON / CSV export.
v1.1.0
2026 Q2
Operator Experience
● SHIPPED
Extended channels. Variable difficulty. Automatic inline-to-observe degradation on heartbeat loss. HMAC secret rotation without restart.
v2.0.0
2026-04-21
Invariant Shield · Phase 1 (S+D) + Phase 2 (M)
● WIRED · OBSERVATION CYCLE
Layer 2 Invariant Shield wired. Phase 1: Class S structural + Class D declared-vs-derived re-derivation, 22 canonical v2_invariant_* reason codes. Phase 2: Class M fail-stale state machine. The 'validated against real mainnet templates' claim awaits the multi-week observation cycle.
v2.0.x
next
Phase 1.5 · remaining Tier 3 invariants
● QUEUED
Seven Tier 3 invariants — coinbase_script_length, coinbase_output_count, weight_exceeds_max, sigops_exceed_max, nontcb_null_prevout, header_version_low, duplicate_tx — wire under Phase 1 after the 2.0.0 production observation cycle.
v3.x.x
design only
Selfish-mining detection (sketch)
● SKETCH
Time-series detection over per-tx-detail metric. Phase 2 ships the data shape. v3.x.x designs the detector. No protocol change required, no migration cost beyond enabling per-tx detail in operator policy.
▸ START

Try shadow.
Zero risk.

Spin up against curated edge cases. Verdicts within minutes. Miners connect over standard SV2 and notice nothing. ReserveGrid never touches private keys, coinbase outputs, or funds.

FREEShadow≈ 1 day
PAIDObserve≈ 1 week
PAIDInlineoperator-paced
© 2026 VELDRA, INC.RESERVEGRID OS · v1.1.0 · v2.0.0 INVARIANT SHIELD WIREDABOUT·PRIVACY·TERMS·DISCLAIMER