That’s unfortunate 
At least you tried 
That info would have been very useful for both the canister owners, and those making decisions about the subnets they’re in.
I’ve voted to adopt.
I’ve taken a look at verifying the claims in the proposal and independently reproduced one below, using data retrieved from the CMC and IC API. On the far right I’ve included a ‘Proposal Actions and Claims’ column (which copies the claims from the table in the proposal summary), and a ‘Review Comments’ column which hopefully is self explanatory.
Verification Table
| Subnet id | Subnet Type | Public | Authorised Principals | Last Changed | Canisters | Memory Usage | Review Comments | Proposal Action and Claims |
|---|---|---|---|---|---|---|---|---|
| 2fq7c | Application | false | tu45y | 93,390 | 528.503 GB | Claims on the right checkout | Subnet Type: Application, Public: false, Description: Subnet has more than 60000 canisters | |
| 3hhby | Application | true | EVERYONE | 2024-09-13 by 132409 | 27,751 | 447.334 GB | Claims on the right check out (subnet is being made private as it’s surpassed the memory usage threshold) | Subnet Type: Application, Public: true ⇒ false, Description: Subnet has more than 300 GiB state size |
| 4ecnw | Application | true | EVERYONE | 2024-09-13 by 132409 | 6,808 | 162.452 GB | Subnet Type: Application, Public: true, | |
| 4zbus | Verified Application | false | pr42y | 104 | 0.002 GB | Subnet is being made public. It’s one of the smallest verified subnets, so seems like the lowest risk | Subnet Type: Verified Application, Public: false ⇒ true, | |
| 5kdm2 | Verified Application | false | 237hs | 10,337 | 184.282 GB | There are lots of cansiters in here, and lots of priviledged principals (are they expecting this subnet to be made public soon?) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| 3eyor | ||||||||
| 55s5q | ||||||||
| 5oynr | ||||||||
| 7qgkj | ||||||||
| avesb | ||||||||
| csecq | ||||||||
| ewj4h | ||||||||
| krrme | ||||||||
| pr42y | ||||||||
| 6pbhf | Application | true | EVERYONE | 2024-09-13 by 132409 | 34,729 | 346.706 GB | Claims on the right check out (subnet is being made private as it’s surpassed the memory usage threshold) | Subnet Type: Application, Public: true ⇒ false, Description: Subnet has more than 300 GiB state size |
| bkfrj | Application (European) | false | 22,596 | 146.001 GB | Claims on the right check out | Subnet Type: Application, Public: false, Description: Explicitly marked as non-public (European subnet) | ||
| brlsh | Application | true | EVERYONE | 2024-09-13 by 132409 | 32,788 | 61.778 GB | Claims on the right check out | Subnet Type: Application, Public: true, |
| pr42y | ← Redundant Authorisation? | |||||||
| csyj4 | Verified Application | false | 6yhjs | 719 | 23.366 GB | There are lots of cansiters in here, and lots of priviledged principals (are they expecting this subnet to be made public soon?) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| a5oei | ||||||||
| ai7i2 | ||||||||
| jjugn | ||||||||
| keqno | ||||||||
| p5c7b | ||||||||
| pr42y | ||||||||
| q4qi3 | ||||||||
| tpzpj | ||||||||
| udh3l | ||||||||
| w5bpc | ||||||||
| ykpqe | ||||||||
| zo34z | ||||||||
| cv73p | Application | true | EVERYONE | 2024-09-13 by 132409 | 51,020 | 237.518 GB | Subnet Type: Application, Public: true, | |
| e66qm | Application | true | EVERYONE | 2024-09-13 by 132409 | 35,407 | 196.088 GB | Subnet Type: Application, Public: true, | |
| ejbmu | Verified Application | false | 2mgs2 | 252 | 4.878 GB | Lots of priviledged principals here (are they expecting this subnet to be made public soon?) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| 3hlbk | ||||||||
| 6i6gh | ||||||||
| l3x6q | ||||||||
| m7b5y | ||||||||
| oyryp | ||||||||
| pr42y | ||||||||
| ruurp | ||||||||
| eq6en | Verified Application | false | 347of | 101,627 | 492.302 GB | This subnet has too many canisters and too much memory usage to be made public (@stefan.schneider has already identified this) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| dlsk6 | ||||||||
| pr42y | ||||||||
| tsqwz | ||||||||
| tu45y | ||||||||
| fuqsr | Application | true | EVERYONE | 2024-09-13 by 132409 | 19,841 | 216.395 GB | Subnet Type: Application, Public: true, | |
| gmq5v | Application | true | EVERYONE | 2024-09-13 by 132409 | 33,562 | 155.243 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorisation? | |||||||
| io67a | Verified Application | false | pr42y | 141 | 0.526 GB | Another small verified application subnet (seems like a preferable candidate for being made public soon compared to the larger ones) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| wyzjx | ||||||||
| xiwzc | ||||||||
| jtdsg | Application | true | EVERYONE | 2024-09-13 by 132409 | 26,766 | 211.069 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorization? | |||||||
| k44fs | Application | false | pr42y | 30,039 | 421.945 GB | Claims on the right check out | Subnet Type: Application, Public: false, Description: Subnet has more than 300 GiB state size | |
| lhg73 | Application | false | pr42y | 25,958 | 545.584 GB | Claims on the right check out | Subnet Type: Application, Public: false, Description: Subnet has more than 300 GiB state size | |
| lspz2 | Application | true | EVERYONE | 2024-09-13 by 132409 | 39,427 | 139.112 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorisation? | |||||||
| mpubz | Application | true | EVERYONE | 2024-09-13 by 132409 | 54,937 | 290.793 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorisation | |||||||
| nl6hn | Application | true | EVERYONE | 2024-09-13 by 132409 | 31,132 | 231.95 GB | Subnet Type: Application, Public: true, | |
| o3ow2 | Application | true | EVERYONE | 2024-09-13 by 132409 | 56,203 | 271.3 GB | Subnet Type: Application, Public: true, | |
| opn46 | Application | true | EVERYONE | 2024-09-13 by 132409 | 39,400 | 282.24 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorisation? | |||||||
| pae4o | Verified Application | false | hepun | 2,892 | 16.135 GB | There are lots of cansiters in here, and lots of priviledged principals (are they expecting this subnet to be made public?) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| ilqei | ||||||||
| m3m6n | ||||||||
| mcoor | ||||||||
| pr42y | ||||||||
| wl2xv | ||||||||
| y5mgz | ||||||||
| pjljw | Application | true | EVERYONE | 2024-09-13 by 132409 | 31,728 | 224.531 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redundant Authorisation? | |||||||
| pzp6e | Application (Fiduciary) | false | 719 | 23.149 GB | Claims on the right check out | Subnet Type: Application, Public: false, Description: Explicitly marked as non-public (Fiduciary subnet) | ||
| qdvhd | Application | true | EVERYONE | 2024-09-13 by 132409 | 52,412 | 51.137 GB | Subnet Type: Application, Public: true, | |
| pr42y | ← Redudant Authorisation? | |||||||
| qxesv | Verified Application | false | 2yjpj | 142 | 0.346 GB | Another small verified application subnet (seems like a preferable candidate for being made public soon compared to the larger ones) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| hepun | ||||||||
| ilqei | ||||||||
| m3m6n | ||||||||
| mcoor | ||||||||
| pr42y | ||||||||
| y5mgz | ||||||||
| shefu | Verified Application | false | 65bcw | 592 | 86.91 GB | Interesting that this concession needs to be made for a known team on this verified subnet. What about the numerous unkown principals on the verified subnets that will be made public soon (or the one being made public in this proposal?) | Subnet Type: Verified Application, Public: false, Description: Distrikt subnet cannot be public before migrating away from ICQC | |
| 76do6 | ||||||||
| aotw3 | ||||||||
| auw2h | ||||||||
| bn6wo | ||||||||
| bxywk | ||||||||
| cuih4 | ||||||||
| dwfft | ||||||||
| mrnwe | ||||||||
| ow6ai | ||||||||
| pr42y | ||||||||
| yv2jo | ||||||||
| snjp4 | Verified Application | false | bl7vf | 157 | 3.988 GB | Lots of priviledged principals here (are they expecting this subnet to be made public soon?) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| hepun | ||||||||
| ilqei | ||||||||
| kr2dh | ||||||||
| m3m6n | ||||||||
| mcoor | ||||||||
| pr42y | ||||||||
| y5mgz | ||||||||
| zcmil | ||||||||
| tdb26 | System | false | 14 | 20.272 GB | Claims on the right check out | Subnet Type: System, Public: false, Description: System subnets should not have public access | ||
| uzr34 | System | false | 7 | 14.735 GB | Claims on the right check out | Subnet Type: System, Public: false, Description: System subnets should not have public access | ||
| w4asl | Verified Application | false | pr42y | 168 | 0.002 GB | Another small verified application subnet (seems like a preferable candidate for being made public soon compared to the larger ones) | Subnet Type: Verified Application, Public: false, Description: Subnet will be opened up soon | |
| qdjzi | ||||||||
| w4rem | System | false | 6 | 306.916 GB | Claims on the right check out | Subnet Type: System, Public: false, Description: System subnets should not have public access | ||
| x33ed | Application | false | 231 | 33.845 GB | Claims on the right check out | Subnet Type: Application, Public: false, Description: Explicitly marked as non-public (SNS subnet) | ||
| yinp6 | Application | true | EVERYONE | 2024-09-13 by 132409 | 4,207 | 308.197 GB | Claims on the right check out. Subnet is being made private as it’s crossed the memory usage threshold | Subnet Type: Application, Public: true ⇒ false, Description: Subnet has more than 300 GiB state size |
My main comments are:
-
I’ve verified the threshold claims made about the 3 subnets that are being made private
In each case memory usage is above 300 GB -
The verified application subnet being made public (4zbus) is one of the small ones, so seems like one of the lowest risk subnets (there’s also only one principal with authorisation at the moment - pr42y-f6vp7-lbhgk-qt4oq-524yv-yabkq-6bhr7-nludh-bbbpj-aiuhu-xqe, so all in all seems like a low risk subnet to make public)
-
There are numerous cases of redundant authorisation (principals that have explicit authorisation for subnets that are actually public anyway). Not really as issue with this proposal as such, but would be good to tidy up in a future proposal.
The legacy code for ICQC (inter-canister query calls), aka predecessor of composite queries, is still enabled in system and verified application subnets. There’s only one actual user of this legacy feature and it’s Distrikt
- The fact that a concession is being made for the new Distrikt team is interesting, given that there are lots of unknown principals (with unknown dapps) in the various verified system subnets. Given that, how can we be sure their dapps don’t have this dependency too?
