Expand description
Distributed threshold signing coordinator.
The coordinator orchestrates threshold signing sessions across distributed signers. It provides:
- TCP server + client for network communication
- Multi-round protocol state machine
- Policy enforcement (time windows, rate limits, thresholds)
- Rate limiting, backpressure, circuit breaker
- Prometheus metrics, Grafana dashboards, OTLP tracing
- Health checks, graceful shutdown
- Persistent session store, WAL, event sourcing
- Admin API, diagnostics
- DKG coordination, share refresh
Modules§
- async_
event_ store - Async event-sourced store with batch writes and crash recovery.
- async_
session_ manager - Async session manager — non-blocking session lifecycle.
- chaos_
testing - Chaos testing harness — random failure injection.
- circuit_
breaker - Circuit breaker pattern — fail fast on downstream failures.
- config_
validator - Configuration validator — pre-flight checks for coordinator/daemon configs.
- coordinator
- Async session coordinator for distributed threshold signing.
- coordinator_
factory - Coordinator factory — builder pattern with dependency injection.
- coordinator_
proptest - Property-based tests for the coordinator state machine.
- di_
container - Dependency injection container for coordinator components.
- distributed_
lock - Distributed lock manager — TTL-based leases with fencing tokens.
- dkg_
coordinator - DKG coordinator protocol — distributed key generation.
- event_
sourced - Event-sourced session store.
- marketplace
- Plugin marketplace schema — discovery and registry format.
- noise_
transport - Noise Protocol transport implementation.
- perf_
baseline - Performance baseline manager — save/load/compare Criterion baselines.
- plugin_
manifest - Plugin manifest schema — typed metadata for Confium plugins.
- refresh_
coordinator - Proactive share refresh coordinator.
- request_
coalescing - Request coalescing — merge duplicate concurrent requests.
- resilience_
and_ circuits - Connection pool — TCP connection reuse. Health-check load balancer — route to healthy instances. Retry with jitter — improved backoff. Graceful degradation — serve stale data. WebSocket coordinator — real-time updates. Garbled circuits — secure 2PC. Efficient range proof — bulletproof-style. Bulk signing pipeline — high-throughput batching.
- retry
- Retry queue — exponential backoff for failed operations.
- round_
coordinator - Multi-round signing state machine.
- saga
- Saga pattern for multi-step ceremony management.
- shutdown
- Graceful shutdown — signal handling and session draining.
- wal
- Session write-ahead log — crash recovery via append-only log.