Bombil: commands to shared state

Bombil: commands to shared state An architecture diagram generated by Archify. Signed command · 40-byte native command · Architecture component Signed command 40-byte native command Ordered context · transaction + authority · Architecture component Ordered context transaction + authority Instance preflight · signer, output, tip · Bombil — VM-level financial execution Instance preflight signer, output, tip Resident CUDA · installation gated · Bombil — VM-level financial execution Resident CUDA installation gated Artifact validation · locally bound result · Bombil — VM-level financial execution Artifact validation locally bound result Device-page staging · compare every preimage · Bombil — VM-level financial execution Device-page staging compare every preimage Common changeset · transaction-local writes · Architecture component Common changeset transaction-local writes Shared-state commit · QMDB remains authoritative · Architecture component Shared-state commit QMDB remains authoritative HILSA integration · verified inputs + settlement · Architecture component HILSA integration verified inputs + settlement Scalar reference · tests + differential evidence · Architecture component Scalar reference tests + differential evidence authenticate ordered view invoke local result validated pages stage effects common commit design dependency Bombil — VM-level financial execution

The client never supplies an authoritative result

  • • Commands enter the VM boundary. Local artifacts are bound to that invocation; financial rejection stages no pages.

Engine and integration boundaries matter

  • • There is no scalar production fallback. HILSA is an adjacent design dependency; external settlement does not run inside matching.