State
Signing Info
Every block includes a set of precommits by the validators for the previous block, known as the LastCommit. A LastCommit is valid so long as it contains precommits from +2/3 of voting power.
Proposers are incentivized to include precommits from all validators in the LastCommit by receiving additional fees proportional to the difference between the voting power included in the LastCommit and +2/3 (see TODO).
Validators are penalized for failing to be included in the LastCommit for some number of blocks by being automatically unbonded.
Information about validator activity is tracked in a ValidatorSigningInfo
.
It is indexed in the store as follows:
- SigningInfo:
0x01 | ValTendermintAddr -> amino(valSigningInfo)
- MissedBlocksBitArray:
0x02 | ValTendermintAddr | LittleEndianUint64(signArrayIndex) -> VarInt(didMiss)
The first map allows us to easily lookup the recent signing info for a
validator, according to the Tendermint validator address. The second map acts as
a bit-array of size SIGNED_BLOCKS_WINDOW
that tells us if the validator missed the block for a given index in the bit-array.
The index in the bit-array is given as little endian uint64.
The result is a varint
that takes on 0
or 1
, where 0
indicates the
validator did not miss (did sign) the corresponding block, and 1
indicates they missed the block (did not sign).
Note that the MissedBlocksBitArray is not explicitly initialized up-front. Keys are
added as we progress through the first SIGNED_BLOCKS_WINDOW
blocks for a newly
bonded validator.
The information stored for tracking validator liveness is as follows:
type ValidatorSigningInfo struct {
StartHeight int64 // Height at which the validator became able to sign blocks
IndexOffset int64 // Offset into the signed block bit array
JailedUntilHeight int64 // Block height until which the validator is jailed,
// or sentinel value of 0 for not jailed
Tombstoned bool // Whether a validator is tombstoned or not
MissedBlocksCounter int64 // Running counter of missed blocks
}
2
3
4
5
6
7
8
9
Where:
StartHeight
is set to the height that the candidate became an active validator (with non-zero voting power).IndexOffset
is incremented each time the candidate was a bonded validator in a block (and may have signed a precommit or not).JailedUntil
is set whenever the candidate is jailed due to downtimeTombstoned
is set once a validator's first double sign evidence comes inMissedBlocksCounter
is a counter kept to avoid unnecessary array reads.MissedBlocksBitArray.Sum() == MissedBlocksCounter
always.