# Adversarial Robustness Reppo uses a continuous, stake-weighted voting system to evaluate Datanets and allocate resources across the network. That design creates unique attack surfaces. It also creates strong economic defenses. The core idea is simple: participation is never free, timing matters, and weak positions can be challenged in real time. *** #### Design Principles Reppo's market design relies on a small set of reinforcing mechanics: * **Pay-to-publish:** submitting content requires upfront capital. * **Stake-weighted participation:** influence comes from stake, not identity count. * **Two-sided voting:** participants can vote for or against a Datanet. * **Time-sensitive voting power:** voting power decays linearly across the epoch. * **Continuous repricing:** Datanets can be re-evaluated as new information appears. These mechanics do not assume perfect actors. They assume that competitive markets can identify useful signal faster than low-quality behavior can sustain itself. *** #### 1. Spam and Low-Quality Content Injection **Threat** Attackers publish large volumes of low-quality, adversarial, or irrelevant data to capture emissions. **Mitigation: Pay-to-Publish** Each submission carries an upfront economic cost. That changes publishing from a free action into a capital allocation decision. Scaling a spam attack scales cost linearly. If the content is low quality, it is expected to attract negative votes and poor downstream support. **Why it matters** Attackers do not just need volume. They need enough capital to keep low-signal submissions alive under open market scrutiny. *** #### 2. Vote Sniping and Temporal Manipulation **Threat** Participants wait until late in an epoch to vote after observing market direction. This can reduce price discovery and encourage reactive behavior over genuine discovery. **Mitigation: Linear Decay of Voting Power** Voting power decays linearly over the course of the epoch. Early participation carries more weight than late participation. Late-stage vote swings still matter, but their impact is reduced. **Why it matters** The system rewards early conviction and signal discovery. It does not reward simply following visible momentum at the end of the round. *** #### 3. Bribery and Vote Buying **Threat** Participants offer incentives to attract votes toward weak or low-quality Datanets. **Mitigation: Two-Sided Voting and Economic Risk** Support in Reppo is contestable. Votes can be cast both for and against a Datanet. Artificial support can be challenged directly by participants who see the market as mispriced. This means bribery is not a guaranteed exploit. It becomes an ongoing capital contest against opposing positions. **Why it matters** Buying positive votes is not enough if the broader market has a direct mechanism to express negative conviction. *** #### 4. Cartel Formation **Threat** Groups coordinate to upvote each other's Datanets and suppress stronger competitors. **Mitigation: Open Market Exposure and Performance Dependence** Cartels must continuously defend their positions in a live market. Capital locked into defending weak Datanets has real opportunity cost. If those Datanets fail to produce useful learning signal, external participants can keep pressuring them with negative votes and capital reallocation. **Why it matters** Coordination alone is not enough. Without underlying value, defensive spending becomes economically difficult to sustain. *** #### 5. Sybil Attacks **Threat** Attackers create many identities to simulate broad participation or amplify influence. **Mitigation: Capital-Weighted Participation** Voting influence is proportional to stake, not wallet count. Splitting the same capital across many identities does not create additional voting power. **Why it matters** Reppo treats capital as the scarce input. Identity multiplication alone does not improve market position. *** #### 6. Low Liquidity and Early-Stage Instability **Threat** In early network stages, small amounts of capital may move outcomes more than intended. **Current Counterbalances** * Pay-to-publish raises the baseline cost of manipulation. * Two-sided voting allows weak positions to be challenged quickly. * Continuous market participation enables repricing as better information appears. **Early-Stage Reality** Thin markets are inherently more fragile than mature ones. In early phases, the network may benefit from additional stabilizers such as protocol-owned liquidity or curated bootstrap environments. Being explicit about this matters. Early-stage systems should acknowledge liquidity risk rather than pretend it does not exist. *** #### 7. Signal Extraction vs. Noise **Core Risk** Any stake-based market can drift toward reflecting capital concentration instead of true data quality. **Design Counterbalance** Reppo is designed to let markets correct mispricing continuously: * Voting is ongoing, not fixed. * Voting power decays over time, which favors early conviction. * Negative voting makes disagreement explicit. * Weak Datanets can lose support as performance becomes clearer. **Key framing** Reppo does not assume perfect voters. It assumes that competitive, stake-backed markets can converge toward useful signal over time. That convergence depends on market design. It gets stronger when datanets have clear tasks, credible access controls, expert participation, and enough liquidity to make mispricing expensive. In other words, stake is a coordination tool. It is not a substitute for domain expertise. *** #### A Stronger Penalty Layer One useful extension is a clearer downside for persistently weak Datanets. For example, if a Datanet ends an epoch with a strongly negative net position, the protocol could apply one or more penalties: * partial stake loss for the publisher * zeroed emissions for that epoch * reduced eligibility in future rounds This kind of penalty sharpens the cost of being wrong. Without downside, low-quality strategies can devolve into spam, rotation, or repeated bribery attempts with limited consequences. *** #### The Broader Interpretation At a high level, Reppo can be understood as continuous staking on the future usefulness of learning signal. Publishers stake on what they submit. Voters stake on what they believe will prove valuable. Over time, the market is meant to reward signal discovery and punish low-quality noise, not through static moderation, but through open economic competition. That framing is strongest for data curation, preference discovery, evals, and expert feedback markets. It is not a claim that every managed annotation workflow should be replaced by a fully open market. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://reppo-labs-xyz.gitbook.io/reppo-labs/protocol-mechanics/adversarial-robustness.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.