Shivya: A Consensus-Free Distributed Resource-Sharing Mesh
Shivya is a bare-metal, zero-dependency Rust runtime for load and state balancing across arrays of edge devices. It is not a replacement for Paxos or Raft; it does not provide linearizable global ordering. What it does provide is:
- A curl-projection reconciler (Hodge curl projector over a discrete simplicial state complex — specifically the coexact /
d₁ᵀβcomponent is solved for and subtracted; the gradient and harmonic components are not separately extracted) that lets concurrent edge writes settle to a single curl-free state after partitions heal, without a consensus round. - A multi-agent active-inference loop that diffuses load through symmetric Onsager couplings, so nodes redistribute work toward minima of a collective variational free-energy functional.
The underlying mathematics is cited in CITATIONS.md. When this regime is appropriate is discussed in docs/philosophy.md (it is not a fit for workloads that require linearizable consistency).
The 5-Layer Stack
graph TD
Layer4["Layer 4: Morphogenetic Topology (Reaction-Diffusion Split/Cull)"] --> Layer3["Layer 3: Onsager Ensemble (Reciprocal Flow Diffusion)"]
Layer3 --> Layer2["Layer 2: Register VM + Expression-Tree Hill-Climber"]
Layer2 --> Layer1["Layer 1: Variational Active Inference (Free-Energy Minimisation)"]
Layer1 --> Layer0["Layer 0: Hodge Mesh (Simplicial Boundary Reconciler)"]
Layer 0: Topological Fabric shivya-hodge
- What it is: A simplicial state complex (vertices = nodes, edges = oriented flows, triangles = concurrent contexts) with the Discrete Exterior Calculus boundary operators d0 and d1.
- What it does: Projects any 1-chain (edge-flow) delta onto the curl-free subspace. The coexact (curl) component
d₁ᵀβis isolated by solving the Laplacian systemL₂ β = d₁ ΔSwith an in-tree Conjugate Gradient solver (CG residual norm‖r‖ ≤ 1e-8, max 1000 iterations) and subtracted from the input. The gradient (d₀α) and harmonic (γ) components are not separately extracted — this is a curl projector, not a full Hodge decomposition. The remaining flow is curl-free and identical across all nodes that observe the same complex.
Layer 1: Variational Active Inference shivya-flux
- What it is: A Gaussian active-inference agent per node, with a generative model over internal beliefs
μ_q, sensory observationss, and active statesabounded by a Markov blanket. - What it does: Minimises Variational Free Energy
F = KL(q‖prior) + nll(s | g(μ_q))via gradient descent on the belief mean. Matrix inversions are ridge-stabilised (1e-6 diagonal regularisation) — degenerate covariances never crash the daemon; seeSubstrateErrorin crates/shivya-hodge/src/error.rs (re-exported fromshivya-flux).
Layer 2: Register-IR Interpreter + Expression-Tree Hill-Climber shivya-morphic
- What it is: A deterministic register-IR interpreter — sandboxed by a hard 500-instruction budget per evaluation — paired with a generative model that can grow its own latent dimension at runtime. The running code is not mutated mid-execution; the VM is plain, deterministic interpretation. The instruction stream and register slab are heap-backed
Vecs, not stack-resident — "fixed-budget", not "stack-allocated". - What it does: Compiles a small expression AST (
Const,Var,Add,Mul) to register-machine instructions and evaluates them under the 500-cycle ceiling. When the moving-average free energy crosses a novelty threshold, the agent's internal state space expands (e.g., from 2D to 3D), and a separate, offline stochastic 1+1 mutation hill-climber proposes a replacement symbolic update law (per-node mutation: subtree replacement at p=0.15, otherwise constant jitter / variable index toggle / operator swap; no crossover, no population, greedy accept-if-better against an MSE proxy). The new tree is accepted only if it lowers the free-energy proxy on a held-out window.
Layer 3: Thermodynamic Collective Ensemble shivya-onsager
- What it is: A coupled set of active-inference agents with a symmetric Onsager flow matrix
L_ij = L_jiand a Harsanyi-dividend computation over neighbourhood coalitions. - What it does: Migrates belief parameters between adjacent agents at a rate proportional to belief-distance and
L_ij. The collective free energyF_collective = Σ F_i − Σ Harsanyi dividendsrewards synergistic neighbourhoods and penalises antagonistic ones, biasing the ensemble toward cooperative configurations. Coalition masks are encoded asu8, capping local coalitions at ≤ 8 nodes; the ensemble itself scales beyond that, only the per-node coalition computation does not.
Layer 4: Morphogenetic Pattern Substrate shivya-turing
- What it is: A graph-Laplacian Gierer-Meinhardt reaction-diffusion system over the node mesh, with RK4 integration and an explicit CFL stability bound (
dt ≤ 0.45 / (D_max · degree_max)). - What it does: Picks up local "stress" hot-spots from the activator field. High-activation nodes can fire a split (pre-allocated object-pool mitosis with no runtime resize); low-utility, low-activation nodes are culled (apoptosis), gated on a minimum-cluster-size floor so the mesh can't collapse.
Decentralized P2P Transport shivya-p2p
The transport unifies geographically separated daemons into the same statistical field:
- Structural Kademlia K-bucket table (routing.rs): 160-bit
NodeId, 160 buckets indexed by leading-zero bits of XOR distance,K=4stack-resident peer slots per bucket ([Option<PeerInfo>; K]— no per-bucket heap allocation), LRU-on-touch ordering, and ping-oldest-first eviction (a full bucket pings its head; if the head doesn't re-touch within 500 ms, the candidate replaces it). Scope: direct neighbourhood tracking. Not a from-scratch RFC-grade Kademlia — see "What's not in scope" below. - Kademlia RPC (transport.rs):
PING/PONG/FIND_NODE/FOUND_NODES/STORE/FIND_VALUE/FOUND_VALUE, all single-MTU UDP frames with fixed-layout big-endian binary serialisation in protocol.rs (hand-written, noserde/bincode). A local DHT key/value store backsSTORE/FIND_VALUE. - What's not in scope: FIND_NODE fans out to every known peer rather than the canonical α-bounded shortlist of closest peers; there is no inflight set, no convergence termination, no formal iterative-lookup state machine. Convergence is bottom-up across ticks. IPv6 socket addresses are not yet supported on the wire. Treat the transport as "good enough for an edge mesh of dozens", not as a drop-in BitTorrent/IPFS replacement.
- Partition-test hook: Each transport exposes
block(addr)/unblock(addr)to silently drop frames to a given address. Used by tests/jepsen_partitions.rs and tests/chaos_ensemble.rs to inject controllable partitions and assert that the Layer-0 reconciler cancels the curl introduced by the split.
Native Edge Daemon (shivya-cli)
A Tokio multi-threaded daemon that samples real host telemetry via sysinfo (CPU load, NIC bytes RX/TX, memory pressure), steps the 5-layer stack on a 1 Hz interval, and bridges to the visualiser dashboard. The orchestrator owns a WorkloadMeshProxy (crates/shivya-cli/src/bridge.rs) that maps idiomatic application signals onto the substrate:
record_queue_len(node, q) → 0-simplex mass at vertex
record_offload(src, dst, rate) → oriented 1-chain entry on the edge
settle() → curl-free routing recommendation per edge
The bridge is live inside the 1 Hz loop: every tick the orchestrator pulls queue length from the Layer-4 activator field and offload rates from the Onsager coupling × belief differential, runs settle(), and writes the reconciled per-edge rates back into complex.edge_states and the Onsager l_matrix. The current curl norm and the full Vec<EdgeRecommendation> are exposed in the daemon's status JSON.
External callers can drive the bridge directly through the Unix domain socket at /tmp/shivya_cli_<port>.sock:
STATUS → SystemStatus JSON (default for empty input)
Q <node> <queue> → record_queue_len, return recommendations JSON
O <src> <dst> <rate> → record_offload, return recommendations JSON
SETTLE → settle + apply, return recommendations JSON
Use this if you don't want to read DEC papers — feed it queue lengths and offload rates, and settle() returns the substrate's recommendation for how to re-route work.
CLI commands
--port <PORT>: UDP listener port (default 8085).--peer <ADDR:PORT>: Bootstrap into an existing peer. Sends aPINGfollowed byFIND_NODE(self)to seed iterative discovery.--visualize: Spawns a non-blocking WebSocket server on127.0.0.1:9002streaming orchestrator status to the dashboard.--daemon(unix only):fork()and session-detach via thedaemonizecrate before the Tokio runtime is constructed. PID file at/tmp/shivya.pid; stdout/stderr at/tmp/shivya.{out,err}.
# Seed node with live visualisation
# Bootstrap a second peer
# Query substrate status via local UDS
SIGINT / SIGTERM triggers an orderly shutdown that unbinds the socket file and notifies peers.
Consistency Model
Shivya is not a CP system in the CAP sense. It does not give you linearizable reads, single-master semantics, or a transaction log.
What it does give you:
| Property | What's guaranteed | What's not |
|---|---|---|
| Curl-free convergence | After partitions heal, every node's edge-flow state projects to the same curl-free 1-chain. The Hodge projector is idempotent (the integration test asserts this to 1e-7). | Per-step ordering of writes between nodes. |
| Continuous belief diffusion | Adjacent agents exchange belief parameters at rate proportional to L_ij, biased by Harsanyi dividends. |
Bounded staleness. Diffusion is asymptotic, not bounded-time. |
| Free-energy minimisation | Across the chaos→recovery cycle in tests/chaos_ensemble.rs, the cool-down (post-recovery) F average beats the pre-chaos warm-up average under 15% packet loss + random per-node isolation + a hard programmatic partition. Asserts global stabilisation immediately following partition recovery. | Monotonic descent step-by-step. F may transiently rise during the chaos window before stabilising in cool-down. |
| Survival under telemetry degeneracy | Singular covariance matrices fall back to ridge-regularised (1e-6) inversion, then to the identity matrix. No panic! on the main path. |
Numerical "quality" once telemetry collapses — you'll get a finite recommendation, but it carries less information. |
| Network partition heal | The Kademlia layer reconverges after split-brain. Chaos test confirms ≥ N/2 peers visible per node after recovery. | An explicit re-election. Recovery is bottom-up: peers find peers, then the math reconverges. |
Use Shivya when "eventually identical edge-flow state" is acceptable and you care about avoiding the latency and complexity tax of consensus. Don't use it when you need linearizable per-key semantics, an authoritative transaction log, or strict bounded staleness.
Performance Envelope
Numbers below are from the workspace's own tests on a single laptop (Apple M-class, macOS). Take them as order-of-magnitude indicators, not benchmarks — there is no comparison to Raft/gossip yet.
| Operation | Cost / scale |
|---|---|
ensemble.step (7 nodes, 2-D beliefs, full L0-L4 with chaos) |
~7-8 ms per step |
reconcile_state_delta (6-edge bowtie complex, 2 triangles) |
< 0.1 ms (CG solver converges in ≤ 10 iterations) |
UDP transport send_to (per frame) |
tens of µs (kernel-bound) |
| Full-mesh discovery, 7 real-UDP nodes on localhost | ~1.5 s to converge to N−1 peers, with retry |
| K-bucket capacity | K=4 per bucket × 160 buckets per node |
| Coalition mask (Harsanyi dividend computation) | u8 ⇒ ≤ 8 nodes per local coalition |
| Morphic VM instruction budget | hard cap, 500 cycles per program |
Convergence behaviour:
- Curl projector: idempotent. After one pass the residual
‖d₁ · S_reconciled‖is below the CG tolerance (1e-8 by default). - Belief update (gradient descent on μ_q): monotonic on smooth observations; converges in ≤ 10 iterations to a 1e-4 gradient norm in the test cases.
- Onsager ensemble F: in the chaos test (7 nodes, 15% drop, hard partition, ~80 steps), the COOLDOWN-phase trailing-10 average (sampled after every block is cleared and a fresh full-mesh discovery has restored N-1 peer visibility) beats the WARMUP-phase leading-10 average — i.e. F stabilises below its pre-chaos baseline immediately after recovery. Step-by-step monotonic descent during the chaos window itself is not asserted; F may transiently rise while partitions are active.
Rust Integration Example
use SimplicialStateComplex;
use GibbsFluxAgent;
use ;
use OnsagerCollectiveEnsemble;
use thread;
use Duration;
For an application-level integration that doesn't require knowing what a 1-chain is, use shivya-cli's WorkloadMeshProxy (bridge.rs).
Crates
The crates split cleanly into two tiers — math (zero-dependency, stack-allocated, WASM-native) and runtime (native binaries on top of Tokio):
Math + simulation tier — Layers 0-4. Zero external dependencies, stack-allocated where possible, build cleanly for wasm32-unknown-unknown. This is what powers the in-browser simulation cockpit (docs/index.html):
crates/shivya-hodge— Layer 0: simplicial DEC operators + curl projectorcrates/shivya-flux— Layer 1: variational free-energy agentcrates/shivya-morphic— Layer 2: deterministic register-IR interpreter (500-cycle cap) + stochastic 1+1 mutation hill-climber over expression treescrates/shivya-onsager— Layer 3: multi-agent thermodynamic ensemblecrates/shivya-turing— Layer 4: reaction-diffusion topology adaptationcrates/shivya-telemetry—wasm-bindgenglue that re-exports the math tier into the browser orchestrator
Runtime tier — native targets only. These depend on Tokio for asynchronous I/O and the host kernel's socket API, so they are not WASM-portable and are not meant to be:
crates/shivya-p2p— Kademlia XOR routing + UDP transport (Tokio + UDP sockets)crates/shivya-cli— native daemon + UDS CLI +WorkloadMeshProxy(Tokio runtime,sysinfo, optionaldaemonize)
License
Distributed under the terms of both the MIT license and the Apache License (Version 2.0). See LICENSE-MIT and LICENSE-APACHE for details.