Skip to main content

Consensus

ULedger uses a Byzantine Fault Tolerant (BFT) consensus protocol. A fixed council of validator nodes agree on block order and content. Once a block is finalized by the council, it is immediately final - there is no probabilistic confirmation window.


The Council​

A council is the set of validator nodes for a chain. In the standard production configuration:

ParameterValue
Council size9 nodes
Fault toleranceUp to 3 Byzantine (malicious or failed) nodes
Consensus threshold66.67% (2/3) agreement required
Block finalityImmediate on commit
Max transactions per block200

Each node holds an independent copy of the full chain state. Nodes communicate via libp2p (QUIC transport, GossipSub messaging).


Block Production​

Leader node proposes a block
│
▼
Council members validate proposed transactions
(ancestry checks, capability checks, blacklist checks)
│
▼
Members cast votes (3-phase BFT)
│
▼
Quorum reached (6 of 9 nodes agree)
│
▼
Block committed to all nodes
│
▼
State changes applied: wallets, entities, contracts, tokens

The leader rotates deterministically across council members.


Multi-Chain Architecture​

A single council operates multiple independent chains simultaneously. In the standard deployment:

ChainAlgorithmPurpose
Principal chainsecp256k1Primary consensus chain
Member chain Asecp256k1Secondary member activity chain
Member chain Bmldsa87Post-quantum member chain

Each chain has its own BFT consensus instance. A checkpoint requires quorum agreement before it is written to the principal chain.


Helix STARK Checkpoints​

Beyond BFT consensus, ULedger produces cryptographic checkpoint proofs across epochs via the Helix sidecar. Each checkpoint:

  • Covers an entire epoch of block headers using a Plonky3 STARK proof.
  • Is recursively folded into the prior epoch's proof, producing a constant-size proof over arbitrary chain history.
  • Is anchored by both secp256k1 and mldsa87 signatures (cross-algorithm anchoring).

An auditor can verify the entire chain history from checkpoint proofs alone, without access to any live node.

For the full Helix proof pipeline see Helix: STARK Proof System.


Detailed References​