bloom_clusters

Delineation of space

Records are points in n-dimensional space under a digest-pinned dimension contract. When a region grows past its bound, the boundary is localized where within-cluster variance is minimal — seek positions of minimum variance, where integrity is most stable — computed as an argmin and proven as an invariant, not asserted as a slogan.

The liminal area

put ──► open buffer ──seal──► segment payload (CIDv1)
                              └─ header: minimum-variance clusters
                                 {bounds, bloom} ──► signed chain
query ──► ephemeral region ── admits intersecting clusters only
             │ compute
             ├──► results + ONE signed receipt ──► signed chain
             └──► dissolve: zeroize, no residue, no cache

durable nucleus

append-only Ed25519 chain; content-addressed payloads; verify() from genesis

blooms

per-cluster filters — membership misses cost almost nothing

query regions

minted per read, dissolved after; a repeat re-computes to the same result hash

receipts

one signed line per query: digest, clusters touched, result hash

balance | flow

durable truth stays still; computation moves through and leaves only evidence

Proven, not promised

The proof battery regenerates its results from live runs: chain tamper detection, measured bloom false-positive bounds, the minimum-variance boundary invariant, dissolution without residue, and cross-build determinism of segment CIDs and result hashes. The bench reports what the engine wins at — scan avoidance and verifiability — and what a naive in-memory scan still wins at. Honest numbers, regenerated, never edited.

Pricing tied to use, not seats

Measures toggle independently — one over, one bills; all four over, all four bill. Beyond that pricing is not reactive: an upfront cushioned estimate for the next day/week/month/year, refund of the unspent balance less a 10–20% service fee. Prepaid licensing ahead of large runs; umbrella access (unlimited week $19 / month $59 / year $490, promotional, draft) suppresses charging, never metering. All commerce settles through the payment rail; entitlements verify offline.

Run it

node --test test/*.test.mjs      # 36 checks
node proofs/run-proofs.mjs       # regenerate RESULTS.md from a live run
bin/bloom init --db mydb --contract contract.json
bin/bloom put  --db mydb < points.ndjson
bin/bloom query --db mydb --shape '{"kind":"knn","at":{"x":10,"y":10},"k":5}'

Node 20+ built-ins only. No packages, no telemetry, no account. The daemon binds loopback exclusively; networks belong to relay tiers, never to the engine.