-
Hierarchical Trust:
- Each node only trusts the node directly above it (higher in the hierarchy).
- Nodes do not have full knowledge of the entire network but operate under a limited scope, making the system more secure by design.
-
Upward Flow of Information:
- Any information can move upward in the hierarchy, but it is authorized, filtered and processed by every intermediary node.
- The top (e.g., AGI or high-command node) only receives critical information that lower nodes cannot resolve.
-
Downward Flow of Information:
- Information moving downward (e.g., commands or private data) is scrutinized by the sender to prevent unauthorized or sensitive data from leaking.
- Lower Nodes always trust incoming data, any received commands are executed
-
Distributed Intelligence:
- Each node acts as an independent agent, capable of handling tasks autonomously or escalating them to smarter nodes.
- The system ensures redundancy and fallback mechanisms by escalating problems to progressively smarter or higher-tier nodes.
-
Limited Knowledge:
- A node knows about its direct superior and potentially its immediate peers but not the full network topology.
- This isolation ensures that compromising one node does not expose the entire system.
The HiveMind message types are designed to facilitate this hierarchical communication:
- PROPAGATE: Messages that try to reach as much of the network as possible.
"send everywhere" - ESCALATE: Reserved for critical situations requiring immediate attention by higher-level nodes.
"send up" - BROADCAST: When a higher-level node wants to send a message to all lower-level nodes.
"send down"
-
Incoming Requests (Upward Flow):
- A node evaluates incoming messages and decides:
- Can it handle the request independently?
- Should it escalate the message upward to a smarter or higher node?
- Should it discard or filter the message (e.g., if it's spam or irrelevant)?
- Should it ban the sender?
- A node evaluates incoming messages and decides:
-
Outgoing Commands (Downward Flow):
- Commands or data from higher nodes are inspected and stripped of sensitive information before being passed to lower nodes.
- Each node enforces strict checks to ensure that only the necessary payload reaches subordinate nodes.
-
Fallback Mechanism:
- If a node lacks the capability to process a message, it escalates it to a higher node.
- This ensures that the network can handle any request, even if the initial node is "dumb."
- Scenario: A user asks a voice assistant (node A) a question it cannot answer.
- Node A (Basic OVOS):
- Receives the question and checks if it has the skills to answer.
- If not, it formats the message as
ESCALATEand sends it to its parent node (node B).
- Node B (Smarter OVOS):
- Processes the message. If it can handle it, it responds directly.
- If not, it escalates the message to node C.
- Node C (AGI):
- Handles the question and returns a response.
- Response Flow:
- The response is passed down through nodes B and A, with each node verifying that no sensitive information leaks.
- Node A (Basic OVOS):
-
Security Model:
- Each node acts as a security checkpoint.
- The design ensures that sensitive data only flows downward with proper scrutiny, and no secrets are exposed unnecessarily.
-
Scalability:
- New nodes can be added to the network without requiring global reconfiguration.
- The trust model ensures that only immediate relationships need to be defined (parent-child or peer-peer).
-
Message Routing:
- Message types and routing logic are designed to enforce the hierarchical trust model.
-
Node Isolation:
- Limit a node's visibility of the network to its direct parent and peers, ensuring robustness against compromise.
-
Payload Filtering:
- Implement strict payload validation and redaction mechanisms to ensure that sensitive data does not flow downward unchecked.
-
Fallback Mechanisms:
- Use the
ESCALATEtype to ensure that unresolved requests are always addressed at higher levels.
- Use the
-
Auditing and Logs:
- Maintain logs at each node for message flow, ensuring transparency and traceability in case of anomalies.
-
Broadcast with Control (Propagate):
- Wide-reaching messages, but with filtering by higher nodes to maintain efficiency and security.
-
Group Orders (Broadcast):
- Wide-reaching commands or announcemnts, that reach only lower nodes.
-
Secure Escalation (Escalate):
- Trusted routing ensures that sensitive or critical information only flows to competent and trusted nodes.
-
Command Authority (Down):
- Commands from trusted nodes are always followed, ensuring a structured and reliable chain of authority.
-
Optional Handling (Up):
- Nodes retain autonomy in deciding how to handle requests, preserving system flexibility.
This approach makes the system resilient, secure, and capable of handling diverse tasks in a distributed and hierarchical environment.
-
"Up" (Requests):
- Requests for assistance, data, or processing sent to a node higher in the hierarchy.
- Behavior:
- A node receiving an "up" request may choose to:
- Ignore it entirely.
- Handle it locally.
- Forward it further upward.
- A node receiving an "up" request may choose to:
- This loose coupling ensures that higher-level nodes are not overwhelmed by unnecessary requests, as lower-level nodes should ideally filter them first.
-
"Down" (Commands):
- Directives from a higher node to a lower node.
- Behavior:
- Commands must always be obeyed, as they represent trusted authority in the hierarchy.
- Scrutiny mechanisms ensure that "down" commands are sanitized, secure, and appropriate for the recipient.
- Purpose: Broadcasts a message to all nodes in the network or as far as possible.
- Behavior:
- Nodes higher in the hierarchy can decide to filter the propagation and may not route to certain nodes.
- Typically used for:
- Network discovery (e.g., "hello" or "ping").
- Status updates or general announcements (e.g., "system online").
- It is not guaranteed to reach every node but is designed to have wide coverage.
- Example Use Case:
- A new node joins the network and sends a "hello" message to introduce itself.
- Purpose: Sends a message directly to a more trusted node, bypassing untrusted intermediaries.
- Behavior:
- Ensures the message reaches a more competent or authoritative node (e.g., higher in the hierarchy).
- Cannot be intercepted or redirected to untrusted nodes.
- Typically used for:
- Critical issues that require secure handling (e.g., "security breach" or "unknown entity detected").
- Requests for help that lower nodes are incapable of addressing.
- Example Use Case:
- A low-level node detects a potential threat and escalates the message to its parent or an AGI for validation.
- A new node joins the network and sends a "propagate: hello" message.
- Behavior:
- The message travels outward through the network.
- Higher nodes can choose not to propagate it further if they see no need.
- Lower nodes receive the message and may respond with a status or acknowledgment.
- A low-level node detects an unknown entity trying to access the network.
- It sends an "escalate: security_alert" message to its parent node.
- Behavior:
- The message is securely routed to a higher, trusted node.
- Untrusted nodes or peers cannot intercept it.
- The trusted node can take appropriate action, such as blacklisting the entity.
- A user asks a question the local node cannot answer:
- Upward (Request): The local node sends the query as an "up" message.
- Escalate: If no response is received, it escalates to a higher node for a definitive answer.
- Downward (Command): The response comes back as a "down" command with the answer.


