# Adversarial Robustness

Reppo uses a continuous, stake-weighted voting system to evaluate Datanets and allocate resources across the network.

That design creates unique attack surfaces. It also creates strong economic defenses.

The core idea is simple: participation is never free, timing matters, and weak positions can be challenged in real time.

***

#### Design Principles

Reppo's market design relies on a small set of reinforcing mechanics:

* **Pay-to-publish:** submitting content requires upfront capital.
* **Stake-weighted participation:** influence comes from stake, not identity count.
* **Two-sided voting:** participants can vote for or against a Datanet.
* **Time-sensitive voting power:** voting power decays linearly across the epoch.
* **Continuous repricing:** Datanets can be re-evaluated as new information appears.

These mechanics do not assume perfect actors. They assume that competitive markets can identify useful signal faster than low-quality behavior can sustain itself.

***

#### 1. Spam and Low-Quality Content Injection

**Threat**

Attackers publish large volumes of low-quality, adversarial, or irrelevant data to capture emissions.

**Mitigation: Pay-to-Publish**

Each submission carries an upfront economic cost.

That changes publishing from a free action into a capital allocation decision.

Scaling a spam attack scales cost linearly. If the content is low quality, it is expected to attract negative votes and poor downstream support.

**Why it matters**

Attackers do not just need volume. They need enough capital to keep low-signal submissions alive under open market scrutiny.

***

#### 2. Vote Sniping and Temporal Manipulation

**Threat**

Participants wait until late in an epoch to vote after observing market direction.

This can reduce price discovery and encourage reactive behavior over genuine discovery.

**Mitigation: Linear Decay of Voting Power**

Voting power decays linearly over the course of the epoch.

Early participation carries more weight than late participation. Late-stage vote swings still matter, but their impact is reduced.

**Why it matters**

The system rewards early conviction and signal discovery. It does not reward simply following visible momentum at the end of the round.

***

#### 3. Bribery and Vote Buying

**Threat**

Participants offer incentives to attract votes toward weak or low-quality Datanets.

**Mitigation: Two-Sided Voting and Economic Risk**

Support in Reppo is contestable.

Votes can be cast both for and against a Datanet. Artificial support can be challenged directly by participants who see the market as mispriced.

This means bribery is not a guaranteed exploit. It becomes an ongoing capital contest against opposing positions.

**Why it matters**

Buying positive votes is not enough if the broader market has a direct mechanism to express negative conviction.

***

#### 4. Cartel Formation

**Threat**

Groups coordinate to upvote each other's Datanets and suppress stronger competitors.

**Mitigation: Open Market Exposure and Performance Dependence**

Cartels must continuously defend their positions in a live market.

Capital locked into defending weak Datanets has real opportunity cost. If those Datanets fail to produce useful learning signal, external participants can keep pressuring them with negative votes and capital reallocation.

**Why it matters**

Coordination alone is not enough. Without underlying value, defensive spending becomes economically difficult to sustain.

***

#### 5. Sybil Attacks

**Threat**

Attackers create many identities to simulate broad participation or amplify influence.

**Mitigation: Capital-Weighted Participation**

Voting influence is proportional to stake, not wallet count.

Splitting the same capital across many identities does not create additional voting power.

**Why it matters**

Reppo treats capital as the scarce input. Identity multiplication alone does not improve market position.

***

#### 6. Low Liquidity and Early-Stage Instability

**Threat**

In early network stages, small amounts of capital may move outcomes more than intended.

**Current Counterbalances**

* Pay-to-publish raises the baseline cost of manipulation.
* Two-sided voting allows weak positions to be challenged quickly.
* Continuous market participation enables repricing as better information appears.

**Early-Stage Reality**

Thin markets are inherently more fragile than mature ones.

In early phases, the network may benefit from additional stabilizers such as protocol-owned liquidity or curated bootstrap environments.

Being explicit about this matters. Early-stage systems should acknowledge liquidity risk rather than pretend it does not exist.

***

#### 7. Signal Extraction vs. Noise

**Core Risk**

Any stake-based market can drift toward reflecting capital concentration instead of true data quality.

**Design Counterbalance**

Reppo is designed to let markets correct mispricing continuously:

* Voting is ongoing, not fixed.
* Voting power decays over time, which favors early conviction.
* Negative voting makes disagreement explicit.
* Weak Datanets can lose support as performance becomes clearer.

**Key framing**

Reppo does not assume perfect voters.

It assumes that competitive, stake-backed markets can converge toward useful signal over time.

***

#### A Stronger Penalty Layer

One useful extension is a clearer downside for persistently weak Datanets.

For example, if a Datanet ends an epoch with a strongly negative net position, the protocol could apply one or more penalties:

* partial stake loss for the publisher
* zeroed emissions for that epoch
* reduced eligibility in future rounds

This kind of penalty sharpens the cost of being wrong.

Without downside, low-quality strategies can devolve into spam, rotation, or repeated bribery attempts with limited consequences.

***

#### The Broader Interpretation

At a high level, Reppo can be understood as continuous staking on the future usefulness of learning signal.

Publishers stake on what they submit.

Voters stake on what they believe will prove valuable.

Over time, the market is meant to reward signal discovery and punish low-quality noise, not through static moderation, but through open economic competition.
