External review

Questions external review should pressure-test.

This page is not a list of endorsements. It names the objections and review themes that OBTC should make easy to inspect.

External review is useful when it makes the system harder to misunderstand and harder to overclaim. The themes below are open pressure points, not settled answers. Each one should be answered by code, tests, wallet behavior, metrics, or a narrower public claim.

1. Philosophical challenge

The central dispute is whether a lifecycle monetary system preserves ownership by keeping it active, or weakens ownership by making time part of the rule.

  • Is ownership still ownership if renewal is required?
  • Should money transcend time?
  • Is OBTC lifecycle stewardship or property weakening?

These questions cannot be dismissed as messaging problems. They define the philosophical split between permanent-state monetary design and lifecycle-aware monetary design.

2. REAP complexity

REAP is the part of OBTC that most needs narrow rules, boring validation, and explicit threat modeling.

  • Can REAP avoid miner discretion?
  • Can deterministic ordering avoid MEV?
  • Can input caps prevent validation spikes?
  • Can backlog processing remain fair?

The review standard is not whether REAP sounds principled. The standard is whether full nodes can independently validate candidate selection, ordering, caps, and accounting without relying on miner intent.

3. Security and bugs

A lifecycle system fails if renewal, expiry, and REAP are correct in prose but fragile in implementation. Bugs here are not ordinary wallet annoyances; they can change ownership outcomes.

  • What if renewal logic has a consensus bug?
  • What if a wallet auto-renew bug causes systemic loss?
  • What if REAP creates incentives for reorgs?

This makes test coverage, replay protection, wallet warnings, failure-mode logging, and reorg handling part of the monetary design rather than secondary engineering details.

4. State and scalability

OBTC makes permanent state cost explicit, but it must not create a new state-management problem while trying to solve an old one.

  • Can expiry indexes remain bounded?
  • Can dust attacks create future lifecycle load?
  • Can nodes reindex efficiently?

The credibility test is whether nodes can rebuild and inspect lifecycle state under bounded work, and whether attackers can be prevented from turning tiny outputs into future validation or indexing pressure.

Short version

External review should not be treated as praise collection. It should keep asking where OBTC can become discretionary, where lifecycle maintenance can surprise users, where REAP can create value-extraction incentives, and where state handling can become unbounded.


Next reading: use the REAP design notes for ordering, caps, accounting, MEV, and state-bloat risks; the Learn article for the broader monetary thesis; and the status page for current validation boundaries.