[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-84534-en":3,"doc-seo-84534-105":29,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":13,"seo_description":14,"update_tm":27,"read_time":28},84534,34359740700684,"Finn","https://ap-avatar.wpscdn.com/avatar/1f400023980c374ae676?_k=1777273430885731487",8,"Research & Report","Federated Sovereign Transport Protocol (FSTP) Verifiable Coordination Without Disclosure","Federated Sovereign Transport Protocol (FSTP) proposes a synchronization boundary and transport layer for federated networks where each node has heterogeneous privacy obligations. FSTP closes a gap in existing federation protocols by making data confinement a structural protocol guarantee instead of an operator policy. A synchronization agent outputs only a formally closed set of typed cryptographic objects, enforced at compile time via Rust’s type system. A contextual identity model prevents cross-context correlation, while a Blocklace-based substrate enables tamper-evident logging with synchronization cost linked to state differences and supports data erasure without breaking the hash chain, enabling proof without exposure.","arXiv :2607 .00213v1 [ cs .CR] 30 Jun 2026  \nFederated Sovereign Transport Protocol (FSTP): Verifiable Coordination Without Disclosure  \nRamón Soto C.1 and Liz Soto2  \n1 Department of Accounting, University of Sonora, Hermosillo, Sonora, Mexico , [ramon. soto@unison. mx](ramon. soto@unison. mx)  \n2 Department of Mathematics, University of Sonora, Hermosillo, Sonora, Mexico  \nAbstract  \nThis paper introduces the Federated Sovereign Transport Protocol (fstp), a synchronization boundary and transport layer for federated networks in which nodes have heterogeneous privacy requirements. Existing federation protocols leave data confinement to operator policy: they define message formats and delivery semantics but impose no structural constraint on what a conforming server may emit. fstp addresses this gap by making data confinement a property of the protocol itself.  \nThe central mechanism is a synchronization agent whose output type set is formally closed. Raw internal data cannot appear in any federation message because the constraint is enforced by the Rust type system at compile time, not by a runtime check. A contextual identity model derives a separate, unlinkable identifier for each federation relationship, preventing cross-context correlation structurally. A Blocklace-based event substrate [4, 9] provides tamper-evident, partially ordered logging with synchronization cost proportional to the symmetric difference between node states, and supports data erasure without breaking the hash chain.  \nThe result is proof without exposure: a federation participant can verify that a process occurred, that a credential is authentic, and that an outcome is uncorrupted without accessing the internal data that produced these artifacts. fstp is developed asthe inter-node transport layer of Velyzor, a governance platform for institutions with demanding confidentiality requirements. The specification and reference implementation are released as open-source infrastructure under Apache 2.0; source code and figures accompany this paper.  \nKeywords: federated transport; data confinement; synchronization agent; contextual identity; verifiable credentials; Blocklace; privacy by design  \n1 Introduction  \n1.1 The Gap in Existing Federation Protocols  \nFederated social platforms have demonstrated that large-scale digital coordination does not require a central authority. Protocols such as ActivityPub [11] allow independently operated servers to form a coherent network while each retains administrative autonomy. This architecture rests on an implicit assumption: that all nodes are willing to expose their internal activity to the network. Messages may pass through intermediate nodes, user identities are globally resolvable, and participation is visible to any node that receives a copy of the relevant events.  \nFor many participants this exposure is acceptable. For entities operating under data protection regulations, sector-specific confidentiality obligations, or strong institutional privacy positions—trade unions, political parties, professional associations, regulated firms—it isnot. These entities need to interact with a broader network while retaining exclusive custody of their internal data: membership records, deliberation histories, identity attributes, and operational information.  \nExisting federation protocols do not address this requirement at the protocol level. They define message formats and delivery semantics; they do not constrain what a conforming server may emit, nor guarantee that internal data stays internal. Where trust in data confinement exists, it rests on operator policy rather than on protocol structure. ActivityPub provides visibility modifiers such as “unlisted” posts, but these are application-layer conventions: a conforming peer node may receive and redistribute content regardless of these markers because the protocol imposes no structural barrier to doing so. For institutional data—deliberation records, member votes, ident","cbCaia0lxwQAS7b3","https://ap.wps.com/l/cbCaia0lxwQAS7b3","pdf",1044038,1,26,"English","en",105,"# Abstract\n# Introduction\n## The Gap in Existing Federation Protocols\n## FSTP: Confinement as a Protocol Property\n## Motivating Context","[{\"question\":\"What limitation in existing federation protocols does FSTP address?\",\"answer\":\"Existing federation protocols define message formats and delivery semantics but do not constrain what conforming servers may emit, so data confinement relies on operator policy rather than protocol structure.\"},{\"question\":\"How does FSTP ensure data confinement without runtime checks?\",\"answer\":\"FSTP uses a synchronization agent whose output type set is formally closed, and the Rust type system enforces the restriction at compile time, rejecting attempts to embed internal data types into federation messages.\"},{\"question\":\"How does FSTP prevent linking user activity across different federation relationships?\",\"answer\":\"A contextual identity model derives relationship-specific, unlinkable identifiers, preventing cross-context correlation at a structural level.\"}]",1784196468,66,{"code":4,"msg":30,"data":31},"ok",{"site_id":24,"language":23,"slug":32,"title":13,"keywords":33,"description":14,"schema_data":34,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":27},"federated-sovereign-transport-protocol-fstp-verifiable-coordination-without-disclosure","",{"@graph":35,"@context":85},[36,53,68],{"@type":37,"itemListElement":38},"BreadcrumbList",[39,43,47,50],{"item":40,"name":41,"@type":42,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":44,"name":45,"@type":42,"position":46},"https://docshare.wps.com/document/","Document",2,{"item":48,"name":12,"@type":42,"position":49},"https://docshare.wps.com/document/research-report/",3,{"item":51,"name":13,"@type":42,"position":52},"https://docshare.wps.com/document/federated-sovereign-transport-protocol-fstp-verifiable-coordination-without-disclosure/84534/",4,{"url":51,"name":13,"@type":54,"author":55,"headline":13,"publisher":57,"fileFormat":60,"inLanguage":23,"description":14,"dateModified":61,"datePublished":62,"encodingFormat":60,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":56},"Person",{"url":40,"name":58,"@type":59},"DocShare","Organization","application/pdf","2026-07-22","2026-07-16",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What limitation in existing federation protocols does FSTP address?","Question",{"text":75,"@type":76},"Existing federation protocols define message formats and delivery semantics but do not constrain what conforming servers may emit, so data confinement relies on operator policy rather than protocol structure.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"How does FSTP ensure data confinement without runtime checks?",{"text":80,"@type":76},"FSTP uses a synchronization agent whose output type set is formally closed, and the Rust type system enforces the restriction at compile time, rejecting attempts to embed internal data types into federation messages.",{"name":82,"@type":73,"acceptedAnswer":83},"How does FSTP prevent linking user activity across different federation relationships?",{"text":84,"@type":76},"A contextual identity model derives relationship-specific, unlinkable identifiers, preventing cross-context correlation at a structural level.","https://schema.org",{"og:url":51,"og:type":87,"og:title":13,"og:site_name":58,"og:description":14},"article",{"robots":89,"canonical":51},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":45,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":46,"doc_module":4,"doc_module_name":45,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":52,"doc_module":4,"doc_module_name":45,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":45,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":45,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":45,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":45,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":45,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":45,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":45,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":45,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]