burstnet

Network membership and constrained placement primitives, plus the authenticated ciphertext storage service/client and burstnode command.

Placement considers network membership, quarantine, region, capacity and failure domains. The control service reserves capacity and revalidates at commit. Storage uses generated gRPC over mTLS, verifies exact SPIFFE identities, isolates network/space/object paths, acknowledges durable immutable blobs, validates digests and persists deletion tombstones.

Run go test -race ./...; see ecosystem setup. Relay/NAT traversal, discovery automation and public participation are not implemented. Local sibling dependencies and provisional module paths remain publication blockers.

The storage command reloads validated node credentials on new TLS handshakes. Storage supports bounded, authenticated chunk streams alongside unary methods; Dialer.Streaming selects streaming, and the control executable enables it.