parrhesia/PROGRESS_MARMOT.md

PROGRESS_MARMOT (ephemeral)

Marmot-specific implementation checklist for Parrhesia relay interoperability.

Spec source: ~/marmot/README.md + MIP-00..05.

M0 — spec lock + interoperability profile

• Freeze target profile to MIP-00..03 (mandatory)
• Keep MIP-04 and MIP-05 behind feature flags (optional)
• Document that legacy NIP-EE is superseded and no dedicated transition compatibility mode is planned
• Publish operator-facing compatibility statement in docs

M1 — MIP-00 (credentials + keypackages)

• Enforce kind 443 required tags and encoding (encoding=base64)
• Validate mls_protocol_version, mls_ciphersuite, mls_extensions, relays, and i tag shape
• Add efficient #i query/index path for KeyPackageRef lookup
• Keep replaceable behavior for kind 10051 relay-list events
• Add conformance tests for valid/invalid KeyPackage envelopes

M2 — MIP-01 (group construction data expectations)

• Enforce relay-side routing prerequisites for Marmot groups (#h query path)
• Keep deterministic ordering for group-event catch-up (created_at + id tie-break)
• Add guardrails for group metadata traffic volume and filter windows
• Add tests for #h routing and ordering invariants

M3 — MIP-02 (welcome events)

• Support wrapped Welcome delivery via NIP-59 (1059) recipient-gated reads
• Validate relay behavior for unsigned inner Welcome semantics (kind 444 envelope expectations)
• Ensure durability/ack semantics support Commit-then-Welcome sequencing requirements
• Add negative tests for malformed wrapped Welcome payloads

M4 — MIP-03 (group events)

• Enforce kind 445 envelope validation (#h tag presence/shape, base64 content shape)
• Keep relay MLS-agnostic (no MLS decrypt/inspect in relay hot path)
• Add configurable retention policy for kind 445 traffic
• Add tests for high-volume fanout behavior and deterministic query results

M5 — optional MIP-04 (encrypted media)

• Accept/store MIP-04 metadata-bearing events as regular Nostr events
• Add policy hooks for media metadata limits and abuse controls
• Add tests for search/filter interactions with media metadata tags

M6 — optional MIP-05 (push notifications)

• Accept/store notification coordination events required by enabled profile
• Add policy/rate-limit controls for push-related event traffic
• Add abuse and replay protection tests for notification trigger paths

M7 — hardening + operations

• Add Marmot-focused telemetry breakdowns (ingest/query/fanout, queue pressure)
• Add query-plan regression checks for #h and #i heavy workloads
• Add fault-injection scenarios for relay outage/reordering behavior in group flows
• Add docs for operator limits tuned for Marmot traffic patterns
• Final mix precommit before merge