GitHub: https://xitter.cf/t.co/kRTlQki2HJ

Joined August 2024
Pocket Node v1.8.6 Wallet passphrase protection Simpler settings Clearer backup checks Better recovery guidance
2
8
2
36
746
Last week, I shared what I've been building with QuotaCell and how it could help teams manage spending without giving everyone unrestricted access to the treasury. Since then, I've been putting that idea to the test. Remember Alice and Ben? They were allowed to spend 100 tokens between them, even though the treasury held 200. Alice paid 60. Ben tried to pay 50, but only 40 was left in their shared allowance, so CKB rejected his payment. When he tried 40 instead, it went through. And that's exactly what I wanted to see. Both could make payments on their own, without the treasury owner approving every transaction. But neither could go beyond the spending rules the owner had set. Even with another 100 tokens sitting in the treasury, they couldn't touch them. It's one thing to describe how something should work. It's another to actually test it and see those rules hold. There's still work ahead before real teams can use it, but I'm happy with how far the implementation has come. GitHub: github.com/Ticoworld/QuotaCe… I also shared more about the progress on Nervos Talk: talk.nervos.org/t/quotacell-… @CKBdev @ckba_build @NervosNetwork @NervosCatalyst
You're running a project. Your team needs to pay people, but you can't be around to approve every transaction. One teammate needs to pay a designer. Another needs to pay a service provider. You trust them to do their jobs, but does that mean they should have unrestricted access to the project's treasury? That's the problem I'm building QuotaCell to solve on CKB. Imagine your project treasury holds 200 tokens. You want Alice to handle design payments and Ben to handle operational expenses, but you only want them to spend 100 tokens altogether. So you give Alice permission to spend up to 70 tokens on her approved recipient, and Ben permission to spend up to 50 on his. They each have their own signing authority. Neither needs your approval for every permitted transaction. Here's where it gets interesting. Alice and Ben aren't spending from separate budgets. They're drawing from the same 100-token allowance. Alice makes a payment of 60 tokens to her approved designer. Ben then tries to pay 50 tokens to his approved service provider. Even though Ben hasn't reached his personal limit, that payment is rejected. There are only 40 tokens left in their shared allowance. Ben can pay 40, but not 50. And once they collectively spend that 100, neither can make another delegated payment. The treasury still holds 100 tokens, but that doesn't mean they're authorized to spend them. Now imagine someone deposits another 200 tokens into the treasury. The delegated spending allowance is still exhausted. Even receiving a refund doesn't restore it. Only the owner can explicitly renew that authority. That's the distinction I wanted QuotaCell to enforce. A normal application can display a budget and track payments in a database. But what happens if someone bypasses that application and constructs a transaction using another tool? With QuotaCell, the spending restrictions are enforced by a native CKB policy protecting the funds. Having a valid signing key isn't enough to override those restrictions. If a transaction exceeds the shared allowance, pays an unauthorized recipient, or breaks the policy, CKB rejects it. The idea is to let teammates make legitimate payments independently while keeping the owner's treasury protected by rules that don't depend on QuotaCell's server. And this becomes even more interesting when the people making payments aren't people at all. Consider two AI agents working for the same project. One handles approved data purchases. Another handles payments for a different operational service. Each agent has its own signing key, permitted recipient and spending restrictions. Both operate within one shared allowance. The agents can independently request and construct payments, but they can't simply exceed the authority granted to them because an AI model decides to. We've already investigated this architecture alongside existing CKB agent, wallet and transaction-building infrastructure. Our current native policy can accommodate two independently controlled software signers without changing its core spending rules. Building and testing the agent-facing transaction integration is the next part of that work. The same foundation also opens possibilities for sponsored team budgets, contributor spending permissions and other applications built around shared financial authority. I've already implemented QuotaCell's native spending policy and run 89 local CKB verification cases, all producing their expected results. Those tests cover permitted payments, attempts to exceed the shared allowance, unauthorized state changes, owner administration and recovery. The current proof uses a synthetic xUDT asset with two delegates and fixed recipient rules. It's not yet deployed publicly or independently audited, and the application itself is still being built. The goal is to turn this into something real teams can use, while making the underlying native spending policy available for other CKB applications to build around. Because giving someone access to your treasury and giving them permission to spend a limited amount are two very different things. I shared the full breakdown on Nervos Talk, including the mechanism, current progress and where QuotaCell is heading. I'd welcome real-world use cases, integration ideas and technical feedback from other builders as the work continues. talk.nervos.org/t/quotacell-… @CKBdev @NervosCatalyst @NervosNetwork @ckba_build
3
6
100
Ticoworld retweeted
when you hear industry leaders talking about quantum computing, it is because bad players are leveraging it to threaten the security of so many blockchain networks. but @NervosNetwork already prepared from day 1. CKB is built with cryptographic abstraction which makes it possible to secure and replace security models without breaking the CKB fundamental rules.
5
10
2
47
991
Happy to share some news from @ckba_build CKBA’s DevRel and Ecosystem Support teams: our paper on CCC (github.com/ckb-devrel/ccc/), When EVM Defaults Break: Three SDK Patterns for UTXO-Family Wallets, has been accepted for poster presentation at IEEE International Conference on Distributed Ledger Technologies (ICDLT) 2026! Through this collaboration, @Hanssen0 (@CKBDevrel) and I (Ecosystem) built on the CCC team’s existing engineering work to distill three reusable design patterns: • Transaction composition: helping applications handle inputs, change, and fees. • Unified signing: providing a common interface across different wallet signing methods. • Reusable wallet connectors: sharing wallet connection and onboarding components across applications. The conference brings together academia and industry, with organizers from Nova School of Business and Economics, NOVA Information Management School, and the IEEE Portugal Section. It is part of BLOCKCHAIN. PT, a project funded through Portugal’s Recovery and Resilience Plan and the EU’s NextGenerationEU programme. For us, this is an opportunity to bring CKB’s experience in developer tooling and application development into a broader conversation with researchers and builders. Thanks to Hanssen and everyone who has contributed to CCC!
10
34
8
91
4,110
Ticoworld retweeted
[1/3] Oct 19: gave the CKB Community Fund DAO dashboard a “less is more” makeover. Wider search, smaller filters, cleaner proposal pages & progress reports, and improved UI/UX. ckbcommunityfunddao.xyz
1
3
28
404
🔥
Line clear. Names that get paid. cellula.id
3
46
Ticoworld retweeted
You can swap native CKB for native USDC right now using Perun atomic swaps 🙀
7
33
8
109
4,226
Ticoworld retweeted
Live GitHub activity of the CKB ecosystem, drawn in 3D. Each project is a block that lights up when people work on it. Live, last 24 hours or last 7 days. English, 中文, Português. pulse-lab.lusocryptolabs.com…
2
14
2
55
1,877
You're running a project. Your team needs to pay people, but you can't be around to approve every transaction. One teammate needs to pay a designer. Another needs to pay a service provider. You trust them to do their jobs, but does that mean they should have unrestricted access to the project's treasury? That's the problem I'm building QuotaCell to solve on CKB. Imagine your project treasury holds 200 tokens. You want Alice to handle design payments and Ben to handle operational expenses, but you only want them to spend 100 tokens altogether. So you give Alice permission to spend up to 70 tokens on her approved recipient, and Ben permission to spend up to 50 on his. They each have their own signing authority. Neither needs your approval for every permitted transaction. Here's where it gets interesting. Alice and Ben aren't spending from separate budgets. They're drawing from the same 100-token allowance. Alice makes a payment of 60 tokens to her approved designer. Ben then tries to pay 50 tokens to his approved service provider. Even though Ben hasn't reached his personal limit, that payment is rejected. There are only 40 tokens left in their shared allowance. Ben can pay 40, but not 50. And once they collectively spend that 100, neither can make another delegated payment. The treasury still holds 100 tokens, but that doesn't mean they're authorized to spend them. Now imagine someone deposits another 200 tokens into the treasury. The delegated spending allowance is still exhausted. Even receiving a refund doesn't restore it. Only the owner can explicitly renew that authority. That's the distinction I wanted QuotaCell to enforce. A normal application can display a budget and track payments in a database. But what happens if someone bypasses that application and constructs a transaction using another tool? With QuotaCell, the spending restrictions are enforced by a native CKB policy protecting the funds. Having a valid signing key isn't enough to override those restrictions. If a transaction exceeds the shared allowance, pays an unauthorized recipient, or breaks the policy, CKB rejects it. The idea is to let teammates make legitimate payments independently while keeping the owner's treasury protected by rules that don't depend on QuotaCell's server. And this becomes even more interesting when the people making payments aren't people at all. Consider two AI agents working for the same project. One handles approved data purchases. Another handles payments for a different operational service. Each agent has its own signing key, permitted recipient and spending restrictions. Both operate within one shared allowance. The agents can independently request and construct payments, but they can't simply exceed the authority granted to them because an AI model decides to. We've already investigated this architecture alongside existing CKB agent, wallet and transaction-building infrastructure. Our current native policy can accommodate two independently controlled software signers without changing its core spending rules. Building and testing the agent-facing transaction integration is the next part of that work. The same foundation also opens possibilities for sponsored team budgets, contributor spending permissions and other applications built around shared financial authority. I've already implemented QuotaCell's native spending policy and run 89 local CKB verification cases, all producing their expected results. Those tests cover permitted payments, attempts to exceed the shared allowance, unauthorized state changes, owner administration and recovery. The current proof uses a synthetic xUDT asset with two delegates and fixed recipient rules. It's not yet deployed publicly or independently audited, and the application itself is still being built. The goal is to turn this into something real teams can use, while making the underlying native spending policy available for other CKB applications to build around. Because giving someone access to your treasury and giving them permission to spend a limited amount are two very different things. I shared the full breakdown on Nervos Talk, including the mechanism, current progress and where QuotaCell is heading. I'd welcome real-world use cases, integration ideas and technical feedback from other builders as the work continues. talk.nervos.org/t/quotacell-… @CKBdev @NervosCatalyst @NervosNetwork @ckba_build
2
6
1
21
441
Ticoworld retweeted
🚲 Fiber Dev Log 39 🚲 More groundwork for Fiber v0.10 this cycle, with improvements to database migration, payment settlement, and channel recovery. Here's what's new: - v0.10 migration: Database migration code has merged, helping existing channels retain their settlement format as Fiber moves toward v0.10. - Payment handling: Forwarded payments are now kept separate from local invoices, preventing incorrect settlement updates. - Channel V2: Work continues on signing and recovery, making it easier to resume interrupted channel operations. - Hosted LSP: More progress on recovering interrupted updates, handling failed payments, and improving signer reliability. Full dev log: github.com/nervosnetwork/fib…
9
27
494
Ticoworld retweeted
A different kind of building at #CKCon 2026! 🇲🇾🌺 We're in Kuala Lumpur this week! Catching up, sharing ideas, and talking about what's next for CKB. Great to hear updates and fresh ideas from people across the ecosystem, including @RunningCKB, @ckbsamurai, @JackyLHH, @aaaaaaaalive24, @kashortgirl, @aszepieniec, @teaplusplus11, @BitcoinLightApp, with @ebubedev and @rypto joining remotely. Lots of interesting work and discussions about what's next! And finally we put the laptops aside and built miniature cities together. 🏙 Turns out we've got some pretty good city builders on the team too! 😄
17
50
1,001
Love to see it 🔥
Good ideas don't stop at the hackathon or the first grant. We're seeing Fiber builders revisit earlier projects, try new things, and improve their work with feedback from the community: Twine refined its P2P trading design after security feedback, FiberLatch extended its grant-funded work with a new FiberFlow integration, and FiberSurvivors turned a browser game experiment into a reusable Unity SDK. ⚡ See how these projects are evolving in Pulse 16: fiber.world/blog/pulse/issue…
6
92
Ticoworld retweeted
Finally squeezed the esp32s3 HMI into the Blackbox prototype, battling hardware feels nostalgic in the AI era. Loving the increased viewing angle. The new MCU let's me run a $CKB light client on-board with headroom to incorporate stuff like the NFC reader thats also now inside.
Blackbox companion wallet generates capped spend auth tokens for the terminal, first sub threshold auto-approval refund confirmed🎉
11
1
46
1,183
After shipping FiberLatch, I kept testing where it actually fits instead of just adding more features. One of those tests was FiberFlow. I finally closed the full loop with a real Fiber testnet payment: Fiber payment → FiberFlow invoice.paid → FiberLatch entitlement → signed receipt → protected API. The receipt allowed 3 uses and blocked the 4th as expected. The webhook also retried once after the first delivery timed out, and the same payment still produced only one entitlement. The integration work also exposed repeated Postgres logic around atomic receipt redemption, so I extracted that into @fiberlatch/[email protected]. Still a fork integration, not upstream FiberFlow adoption, but FiberLatch has now gone from a standalone access package to a real payment-to-access integration running end to end on Fiber testnet. talk.nervos.org/t/dis-fiberl… @NervosCatalyst @CkbDaoUpdates @ckba_build
FiberLatch Access is now complete. @fiberlatch/[email protected] is live on npm, with a reusable Node.js access-receipt package, paid-resource example, documentation, and final verification. It focuses on the part that comes after a trusted payment decision: what the user can access, for how long, and how reuse is controlled. Final completion report: talk.nervos.org/t/dis-fiberl…
3
61
Been working on Waymark — a recovery experiment for CKB wallets. Restoring your seed gives you access back, but the wallet may still have to rebuild a lot of useful local state from zero. Waymark tests recovering that safe state too, then letting the wallet continue and catch up normally. Tested end-to-end on Pocket Node ✅ Full write-up: talk.nervos.org/t/waymark-re… @NervosCatalyst @ckba_build @NervosNation @NervosNetwork
1
5
28
385
Ticoworld retweeted
Aba showed up and showed out! 🇳🇬🚀 Last Saturday, we teamed up with @NervosCatalyst And @Abia_Web3Net to bring CKB Off Chain to Aba for the very first time. The rain came down heavy, but the builders came through anyway. The room was alive with curiosity, good conversations, and a genuine hunger to learn and build. We , heard from CKB developers sharing real projects, and watched new connections form right in front of us. This is what it looks like when a community comes together. Not just to talk, but to build something real. Aba is now part of the global CKB story. And we are just getting started. Until next time, Aba! 🧡🖤 #CKB #Nervos #Aba #Web3 #CKBuilders #Blockchain
2
8
37
954
Been testing whether already-synced CKB Script state can move between light-client installs instead of rebuilding the same history from scratch. While testing across Pocket and iBytes, I ran into an interesting light-client edge case around the historical sync boundary. Wrote up what I found here: talk.nervos.org/t/ckb-script… Related upstream PR: github.com/nervosnetwork/ckb… @NervosCatalyst @NervosNetwork @ckba_build @PocketNodeCKB
6
26
308