meshnode

meshnode is the sovereign node runtime and peer daemon for Fleetmesh (fleetmesh.org).

It runs headless on a VPS, bare metal server, edge gateway, Raspberry Pi, laptop, or embedded device.

Core Compartments & Subsystems

• Autonomous Wire Transports: Multi-rung transport ladder across FIPS-140-3 native datagrams (Rank 5), Iroh QUIC (Rank 10), Rhio NATS JetStream (Rank 12), p2panda operation logs (Rank 15), libp2p (Rank 20), and Nostr WebSocket gift-wrap fallbacks (Rank 30).
• Pluggable Multi-Protocol Runtime (node/protocols/): Modular protocol packages (nostr, atproto, activitypub, ssb, p2panda, rhio) multiplexed over ProtocolHost with zero overhead when disabled.
• Signed Bilateral Accounting: Token-bucket rate limiting, signed consumption receipts, and automated AIMD strain recovery.
• Verifiable Execution Engines: Multi-runtime execution fabric: deterministic WASM/WASI, Groth16 & zkVM (RISC Zero/SP1) verifiers, Bacalhau compute-over-data, streaming AI/LLM inference, ReAct agents, and NIP-90 DVM gateway.
• Storage Fabric: Dual-engine SQLite WAL and PostgreSQL dialects, Blossom / CAR v1 / MST content-addressed stores, and Negentropy set reconciliation.
• Control Socket IPC: High-speed Unix domain socket (meshnode-control/1) consumed by meshctl for live, non-destructive hot-reconciliation.

Running Locally

# Initialize a new node
./bin/meshnode init /var/lib/fleetmesh

# Start the node runtime
./bin/meshnode run /var/lib/fleetmesh

# Check daemon health and compartments
./bin/meshnode health /var/lib/fleetmesh

Contributing

CONTRIBUTING.md says how changes land (the tripwires, pure moves, one workstream per commit series); SECURITY.md says where to report a vulnerability privately and what is and is not a security boundary.

Licence

CC0 1.0 Universal