REVIEW 3 major objections 6 minor 2 cited by
Volition-Guarded Multiagent Atomic Transactions: Describing People and their Machines
T0 review · 3 major / 6 minor · reviewed 2026-07-12 · grok-4.5
Pith's one-line read People and their machines can be specified together: atomic machine steps fire only when the people who guard them are willing.
desk verdict Solid formal primitive for person+machine agents and a cleaner interleaving definition of grassroots; the two platform proofs go through, with the usual companion-paper and deferred-fault caveats. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
Volition-guarded multiagent atomic transactions—machine transactions that fire only when the guarding persons’ volitional states contain the transaction’s equivalence class—together with the syntactic guard condition that every multi-party transaction has a nonempty guard, which (via volitional containment) yields obliviousness and thus grassroots status when the protocol is also interactive.
What would settle it
Find a volitional transactions-based protocol in which every multi-party transaction has a nonempty guard, yet some interleaving of two correct solo runs enables a class spanning both groups; or exhibit a first safe inter-group interaction in the social-graph or coins protocol that is not guarded by a member of each side.
Extended reading notes
Core claim
The paper’s central claim is that systems of people operating machines are faithfully specified by volition-guarded multiagent atomic transactions: each agent state splits into a machine state and a volitional state, and a transaction runs only when machine preconditions hold and the guards will it. Under a new interleaving definition of grassroots and the stronger condition that the first interaction between any two groups is willed by a member of each, both the social-graph and coins-and-bonds platforms are volitionally grassroots; systems that rely on shared global data structures fail to be grassroots.
Load-bearing premise
That if every multi-person transaction has at least one guard, independent groups never enable a cross-group transaction class in any interleaving of their own correct runs, so they stay separate until someone willingly couples them.
Editorial extensions
If this is right
- Befriending and voluntary swaps couple groups only under mutual consent; unfriending, pay, and redeem remain one-sided once willed.
- Safety, liveness, implementation, and fail-stop resilience can be stated uniformly for platforms specified this way.
- The social-network and coins-and-bonds specs are already concrete enough for AI-derived working multiagent implementations.
- Bitcoin, DHTs, and IPFS fail the interleaving test and are formally excluded as non-grassroots.
- Richer guards (parental consent, supermajorities) fit the same framework without changing the core definitions.
Reading between the lines
- Persistent, inspectable volition (unlike point-of-choice nondeterminism) gives a natural formal setting for person–agent correspondence and sybil resilience once that map is fixed.
- Many systems marketed as decentralized may fail volitional grassroots if they can couple groups without any mutual first act of will.
- Realizing multi-party atomicity via offer/accept/confirm still leaves limbo and stuck offers as implementation problems the abstract model does not solve.
- Tying liveness to equivalence classes of transactions separates free personal choice (change of volition) from machine obligations in a way other concurrency models rarely make explicit.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes volition-guarded multiagent atomic transactions as a formal foundation for systems of people operating machines: each agent state decomposes into a machine state and a volitional state (sets of equivalence classes of machine transactions the person is willing to allow), and a transaction is enabled only when machine preconditions hold and the designated guards are willing. It develops the induced volitional multiagent transition systems, transaction equivalence for liveness, and notions of implementation and fault resilience; gives a new interleaving-based definition of grassroots protocols (oblivious + interactive) and a stronger volitionally-grassroots condition (first coupling of two groups must be willed by a member of each); and proves that two example platforms—social graphs via befriend/unfriend, and coins and bonds—are volitionally grassroots via a syntactic nonempty-guard condition (Corollary 3.11) plus platform-specific first-interaction arguments (Corollaries 4.3, 4.7). Appendix A argues that Bitcoin, DHTs, and IPFS are not grassroots under the new definition.
Significance. If the framework and proofs hold, the paper supplies a clean, reusable formal language for people-plus-machines systems that prior concurrency models treat only as external environment, together with a simpler grassroots criterion that cleanly excludes shared-global-resource systems and a natural mutual-consent strengthening. The short inductive proofs (friendship symmetry, conservation of money, Volitional Containment, obliviousness under nonempty guards) and the two fully worked platform specifications are concrete contributions; the companion AI-derived GLP implementations, if correctly linked, further increase impact. The work is of clear interest to distributed computing, concurrency theory, and peer-to-peer/platform design.
major comments (3)
- [Section 3.2] Section 3.2 (paragraph “Relation to the original grassroots definition”): the paper asserts a novel definition that “better captures the informal notion,” yet states that the old and new definitions are incomparable in general and only “informally claim[s]” agreement on the platforms here. For a foundational redefinition this is load-bearing: either prove that the two platforms (and, ideally, a natural class of volitional transactions-based protocols) satisfy both definitions, or replace the informal claim with a precise statement of what is gained (e.g., liveness, interleaving semantics) and what is lost relative to [41,46], without asserting superiority beyond what is shown.
- [Abstract; Sections 2.4, 6] Abstract and Sections 2.4, 6: the abstract claims the paper develops machinery “to implement one platform by another, and for an implementation to be resilient to faults,” and that the specifications “are then used by AI to derive working implementations.” Definitions 2.12–2.15 introduce implementation and fault resilience, but no platform is shown to implement another, no resilience theorem is proved for social graphs or coins/bonds, and the AI/GLP results are deferred to companion papers [47,29,45,48]. Either demonstrate at least one nontrivial implementation or resilience result inside this manuscript, or narrow the abstract/intro claims to what is actually proved here (specifications + grassroots/volitionally-grassroots theorems).
- [Definition 2.5; Sections 4.1–4.2 (Liveness paragraphs)] Section 2.3 / Definition 2.5 and the informal liveness prose in Sections 4.1–4.2: change-volition transitions lie outside the partial equivalence and can remove a class from a guard’s volitional state at any time. Consequently a class that is “enabled” only while volitions persist need not ever be taken if a person withdraws willingness. The formal liveness condition is consistent with this, but the informal statements (“once either person wills the class, the transaction becomes enabled and must eventually be taken”) overstate the obligation. Clarify in the main text that liveness is conditional on sustained willingness (and machine preconditions), so that readers do not misread volitions as irrevocable commitments.
minor comments (6)
- [Section 2.1] Definition 2.1–2.4: the mutually recursive setup is resolved bottom-up as promised, but a short “reading guide” diagram or dependency list (machine transactions → equivalence → agent states → volitional transactions → VMTS) would help readers navigate the dense notation.
- [Definition 3.2] Definition 3.2 (interleaving): the index conditions are correct but dense; a one-line example interleaving of two short runs would make the construction easier to check against Proposition 3.10.
- [Lemmas 4.2, 4.6] Lemma 4.2 and Lemma 4.6 proofs are by induction as expected; stating the induction hypothesis explicitly for the multiagent configuration (not only the local sets) would match the style of Lemma 3.9.
- [Appendix B] Appendix B’s binary-transaction realisation via offer/accept/confirm is useful but notes limbo under faults without connecting back to Definition 2.14–2.15; a forward pointer or one sentence on how fail-stop interacts with limbo would tighten the appendix.
- [References] Several companion arXiv numbers appear as placeholders (e.g., “arXiv XXXX.XXXXX” in the references for the present work’s dual submission). Replace with final identifiers before publication.
- [Abstract; throughout] Typographical: occasional missing spaces around math (e.g., “volitionallygrassroots” in the abstract’s emphasis line in the source) and inconsistent use of “\P” vs agent-set notation should be cleaned in copy-edit.
Circularity Check
No significant circularity: volitionally-grassroots proofs are direct syntactic consequences of the paper's own definitions and containment invariant, not reductions to fitted inputs or load-bearing self-citations.
full rationale
The strongest claim (Corollaries 4.3 and 4.7) is that the social-graph and coins-and-bonds protocols are volitionally grassroots under the new interleaving definition (Def. 3.4: oblivious + interactive) and the stronger first-interaction guard condition (Def. 3.12). The derivation is self-contained: Lemma 3.9 (volitional containment) is immediate from the agent-state construction in Def. 2.10; Prop. 3.10 and Cor. 3.11 reduce obliviousness to the purely syntactic nonempty-guard hypothesis on multi-participant transactions; the platform corollaries then add only the observation that the first interaction cannot be unfriend/pay/redeem (because those require a prior coupling already present by the invariants of Lemmas 4.2 and 4.6). The paper explicitly notes that the new grassroots definition is incomparable to the authors' prior ones, so the results are not forced by self-citation. Heavy citation of the multiagent-transition-system framework is present but supplies only the ambient setting; the volition layer, equivalence classes, liveness, and the two platform proofs are developed and discharged inside this manuscript. No fitted parameters, no uniqueness theorems imported as external facts, no ansatz smuggled via citation, and no renaming of a known empirical pattern. Score 1 reflects only the ordinary presence of self-citation that is not load-bearing for the central claim.
Assumptions & free parameters
assumptions (4)
- domain assumption Agents are finite nonempty subsets of a potentially infinite set; each agent state is a pair (volitional state, machine state) with designated initial machine state.
- ad hoc to paper Equivalence on machine transactions preserves participants; partial equivalence classes induce liveness obligations only for transitions in the domain.
- ad hoc to paper A protocol is grassroots iff it is oblivious (interleavings of correct runs of disjoint groups remain correct) and interactive (some correct run of the union couples the groups).
- domain assumption Standard multiagent transition-system closure and safety/liveness notions from the authors’ prior framework [40].
invented entities (3)
-
Volitional state (set of equivalence classes of machine transactions a person is willing to allow)
-
Volition-guarded multiagent atomic transaction
-
Volitionally grassroots protocol
Cite this review
Pith. "Pith review of Volition-Guarded Multiagent Atomic Transactions: Describing People and their Machines." pith.science (2026). https://pith.science/paper/35NPC75S
@misc{pith2026260425596,
author = {Pith},
title = {Pith review of: Volition-Guarded Multiagent Atomic Transactions: Describing People and their Machines},
year = {2026},
howpublished = {\url{https://pith.science/paper/35NPC75S}},
note = {Machine review of arXiv:2604.25596}
}
read the original abstract
Formal models for concurrent and distributed systems describe machines; the people who operate them are either ignored or treated as external environment. Yet, key distributed systems -- notably grassroots platforms -- include people operating their personal machines (smartphones), and their faithful description must include the states of both people and machines and how they jointly effect system behaviour. Here, we propose volition-guarded multiagent atomic transactions -- executed atomically by machines and guarded by their people's volitions -- as a novel mathematical foundation for specifying systems consisting of people operating machines. Each agent's state consists of a volitional state and machine state; a transaction is enabled when the machine precondition holds and the guarding persons are willing. For example, befriending two people is guarded by both; unfriending, by either; voluntary swap of coins and bonds is guarded by both parties, while a payment is guarded by the payer. We develop the mathematical machinery to express safety and liveness of platforms specified in this framework, to implement one platform by another, and for an implementation to be resilient to faults; and provide example specifications of two grassroots platforms: social networks, and coins and bonds. These specifications are then used by AI to derive working implementations. We employ here a novel and simpler definition of `grassroots' that better captures the informal notion -- multiple instances can form and operate independently, yet may coalesce -- and show that the platforms specified here are grassroots under the new definition. We further introduce \emph{volitionally grassroots} protocols, in which two groups can become connected only by mutual consent -- the first transaction coupling them must be willed by a member of each -- and show that both platforms are volitionally grassroots.
Forward citations
Cited by 2 Pith papers
-
Volition Elicitation: Operational Semantics for People and Their Machines
vGLP extends GLP so that program reductions can be guarded by a person's expressed volition, with the UI derived from the semantics and correctness proofs for soundness, liveness, and compilation.
-
GLP: A Grassroots, Multiagent, Concurrent, Logic Programming Language for AI
GLP is a single-assignment concurrent logic language whose multiagent semantics is claimed to guarantee that any program using cold-calls yields a grassroots platform, with the proof deferred to the full paper.
Reference graph
Works this paper leans on
-
[1]
Sok: The evolution of sybil defense via social networks
4 Lorenzo Alvisi, Allen Clement, Alessandro Epasto, Silvio Lattanzi, and Alessandro Panconesi. Sok: The evolution of sybil defense via social networks. InProceedings of the 2013 IEEE symposium on security and privacy, pages 382–396. IEEE,
2013
-
[2]
Ipfs-content addressed, versioned, p2p file system.arXiv preprint arXiv:1407.3561,
7 Juan Benet. Ipfs-content addressed, versioned, p2p file system.arXiv preprint arXiv:1407.3561,
-
[3]
Reconfigurable atomic transaction commit
10 Manuel Bravo and Alexey Gotsman. Reconfigurable atomic transaction commit. InProceedings of the 2019 ACM Symposium on Principles of Distributed Computing, pages 399–408,
2019
-
[4]
Spidercast: a scalable interest-aware overlay for topic-based pub/sub communication
14 Gregory Chockler, Roie Melamed, Yoav Tock, and Roman Vitenberg. Spidercast: a scalable interest-aware overlay for topic-based pub/sub communication. InProceedings of the 2007 inaugural international conference on Distributed event-based systems, pages 14–25,
2007
-
[5]
18Carl Ellison
Springer. 18Carl Ellison. Ceremony design and analysis. Technical Report 2007/399, IACR,
2007
-
[6]
Rodríguez-Aguilar, Carles Sierra, Pere Garcia, and Josep Lluís Arcos
19 Marc Esteva, Juan A. Rodríguez-Aguilar, Carles Sierra, Pere Garcia, and Josep Lluís Arcos. On the formal specification of electronic institutions. InAgent-Mediated Electronic Commerce (AMEC), volume 1991 ofLNCS, pages 126–147. Springer,
1991
-
[7]
20 Daniel Halpern, Ariel D Procaccia, Ehud Shapiro, and Nimrod Talmon. Federated assemblies. Proc AAAI 2025; arXiv preprint arXiv:2405.19129,
arXiv 2025
-
[8]
Constitutional consensus.arXiv preprint arXiv:2505.19216,
23 Idit Keidar, Andrew Lewis-Pye, and Ehud Shapiro. Constitutional consensus.arXiv preprint arXiv:2505.19216,
Show all 20 references
-
[9]
Grassroots flash: A payment system for grassroots cryptocurrencies.arXiv preprint arXiv:2309.13191,
28 Andrew Lewis-Pye, Oded Naor, and Ehud Shapiro. Grassroots flash: A payment system for grassroots cryptocurrencies.arXiv preprint arXiv:2309.13191,
-
[10]
30 Nancy Lynch, Michael Merritt, William Weihl, and Alan Fekete
Submitted, arXiv XXXX.XXXXX. 30 Nancy Lynch, Michael Merritt, William Weihl, and Alan Fekete. A theory of atomic trans- actions. InICDT’88: 2nd International Conference on Database Theory Bruges, Belgium, August 31–September 2, 1988 Proceedings 2, pages 41–71. Springer,
1988
-
[11]
Kademlia: A peer-to-peer information system based on the xor metric
20 Describing People and their Machines 34 Petar Maymounkov and David Mazières. Kademlia: A peer-to-peer information system based on the xor metric. InPeer-to-Peer Systems: First International Workshop, IPTPS 2002, pages 53–65, Cambridge, MA, USA, March
2002
-
[12]
40 Ehud Shapiro
Springer, Springer. 40 Ehud Shapiro. Multiagent transition systems: Protocol-stack mathematics for distributed computing.arXiv preprint arXiv:2112.13650,
-
[13]
Grassroots distributed systems: Concept, examples, implementation and applications (brief announcement)
41 Ehud Shapiro. Grassroots distributed systems: Concept, examples, implementation and applications (brief announcement). In37th International Symposium on Distributed Computing (DISC 2023). (Extended version: arXiv:2301.04391), pages 47:1, 47:7, Italy,
2023
-
[14]
43 Ehud Shapiro
���������������������������. 43 Ehud Shapiro. Grassroots currencies: Foundations for grassroots digital economies.arXiv preprint arXiv:2202.05619,
-
[15]
Glp: A grassroots, multiagent, concurrent, logic programming language.arXiv preprint arXiv:2510.15747,
44 Ehud Shapiro. Glp: A grassroots, multiagent, concurrent, logic programming language.arXiv preprint arXiv:2510.15747,
-
[16]
Grassroots bonds: A grassroots foundation for market liquidity.arXiv preprint arXiv:2603.13671,
45 Ehud Shapiro. Grassroots bonds: A grassroots foundation for market liquidity.arXiv preprint arXiv:2603.13671,
-
[17]
���� �����������������������
arXiv preprint arXiv:2502.11299. ���� �����������������������. 47 Ehud Shapiro. Implementing grassroots logic programs with multiagent transition systems and ai.arXiv preprint arXiv:2602.06934,
-
[18]
Types for grassroots logic programs.arXiv preprint arXiv:2601.17957,
48Ehud Shapiro. Types for grassroots logic programs.arXiv preprint arXiv:2601.17957,
-
[19]
Grassroots federation: Fair governance of large- scale, decentralized, sovereign digital communities.Proc
49 Ehud Shapiro and Nimrod Talmon. Grassroots federation: Fair governance of large- scale, decentralized, sovereign digital communities.Proc. of AAMAS’26; arXiv preprint arXiv:2505.02208,
-
[20]
whose motion is only partially determined by the configuration
introducedchoice machines(c-machines), “whose motion is only partially determined by the configuration”—at designated states, the machine “cannot go on until some arbitrary choice has been made by an external operator.” The external operator is a person who freely chooses betw...
1939
Reviewed July 12, 2026 · model on record in the stance chip above.
Discussion (0). Sign in to comment.