Today I read Kite’s developer docs end to end, and the part that stayed with me wasn’t speed or fees. It was how authority is split into three layers. The user holds root authority, each agent gets its own address derived from the user’s wallet via BIP-32, and every session runs on a random key that expires after use. Compromise a session and you lose one delegation. Compromise an agent and the damage stays inside the limits the user set. Only the root key carries unbounded loss, which is why the docs keep it in a local enclave.
The payment design follows the same logic. Instead of settling every request on-chain, two parties open a channel, exchange thousands of signed updates off-chain, and close it with a second transaction.
The docs cite sub-100ms latency at roughly $1 per million requests. Here is where I’d push back on my own enthusiasm. The docs also describe conditional rules, like cutting an agent’s limit when volatility spikes. A rule like that needs an outside data input, and I couldn’t find who supplies it or what happens if that feed is wrong. Also, the large testnet figures (hundreds of millions of transactions) came from a testing environment, so they say little about recurring demand on mainnet, which launched April 30, 2026.
What I’m tracking from here: the number of active Agent Passports on KiteScan, the share of agent transactions that are real service payments rather than test traffic, and whether the docs name the data source behind conditional spending limits.
An agent economy only works if a person can hand over a wallet and still sleep. That depends less on how fast agents pay and more on what the rules do when their inputs break.
#dusk $DUSK @Dusk Mucha gente que observa la capa de consenso de Dusk se hace primero una pregunta: ¿qué tan rápido es? Me quedé pensando que la velocidad es el lugar equivocado para empezar. La pregunta más interesante es contra qué protege realmente el diseño.
La Acreditación Concisa (Succinct Attestation) ejecuta cada bloque en tres pasos: Propuesta, Validación y Ratificación. Un proveedor crea un bloque candidato. Un comité seleccionado al azar comprueba su validez. Un segundo comité seleccionado, de forma separada, confirma el resultado de la validación y lo finaliza. Dos comités independientes, el mismo bloque, el mismo ciclo.
Lo que me frenó al leerlo fue la palabra "independientemente". La mayoría de los sistemas PoS usan un solo comité para proponer y aprobar. Dusk utiliza dos comités separados para la validación y la ratificación, lo que significa que un bloque necesita el acuerdo de dos grupos que fueron seleccionados al azar y por separado antes de que siquiera se considere definitivo. Un comité comprometido no puede hacer pasar por sí solo un bloque inválido.
La aleatoriedad importa más de lo que parece a primera vista. Los proveedores se seleccionan mediante sortición (sortition): ponderada por la participación (stake), pero no determinista. Nadie sabe de antemano qué nodos específicos formarán el próximo comité de validación o de ratificación. Esa incertidumbre es el mecanismo de seguridad. Un atacante no puede sobornar ni atacar a un comité que aún no existe.
La participación mínima para participar es de 1,000 DUSK. Ese número no es arbitrario: establece el piso económico de lo que cuesta convertirse en proveedor y, potencialmente, influir en la selección del comité. Cuanto mayor sea la participación total depositada, más costoso resulta acumular suficiente peso como para importar.
Lo que encuentro verdaderamente sin resolver es la relación entre la concentración de participación y los resultados de la sortición a lo largo del tiempo. Si un pequeño número de grandes proveedores domina el peso de la participación, la selección "aleatoria" empieza a producir patrones predecibles. La criptografía se mantiene, pero las suposiciones económicas subyacentes requieren vigilancia.
#dusk $DUSK @Dusk Many people who look at Dusk for the first time reduce Phoenix and Moonlight to a simple toggle - private mode and public mode. I kept thinking that framing misses what is actually interesting about how these two models sit inside the same protocol.
Phoenix is not just "private." It is a completely different transaction architecture. Funds do not live in balances - they live as encrypted notes. When you spend, you consume existing notes and create new ones, proving with zero-knowledge proofs that no double spend happened and that the amounts add up, without revealing who sent what to whom or how much moved. The receiver sees the note. Nobody else does, unless you share a viewing key.
Moonlight works the opposite way - account-based, fully transparent, sender and recipient and amount all visible on-chain. The kind of model most people already understand from Ethereum.
What caught my attention is that both models settle through the same Transfer Contract on DuskDS. They are not separate chains or separate ledgers. A Phoenix transaction and a Moonlight transaction can both exist inside the same block, finalized by the same consensus round, without either model needing to know about the other's internal logic.
The part worth sitting with is what this means for regulated assets. A securities transaction might need full transparency for the regulator and full privacy from the counterparty. Phoenix viewing keys make selective disclosure possible - you reveal exactly what you must, to exactly who requires it, nothing more. Moonlight handles flows where transparency is the requirement by default.
What I find harder to answer is whether regulators will accept viewing-key-based disclosure as equivalent to traditional audit trails. The cryptography works. Whether the legal frameworks catch up is a different question entirely.