Developer
Run a commercial node
A restricted public node Sync the chain and relay signed transactions No identity access No minting No consensus participation
Can do
- Sync the chain in real time
- Read public balances
- Read PII-scrubbed transaction history
- Read network status
- Relay signed transactions to the bootstrap node
Cannot do
- Access identity data, no service key, public role only
- Mint or burn currency
- Participate in consensus
- Validate or sign blocks
- Read any field hidden by the privacy layer
Why this design
Privacy enforced server-side
Even a malicious commercial node operator cannot read identity data The core simply does not return it without a service key You cannot extract what was never sent
Sync gracefully A commercial node handles a bootstrap outage without crashing If the bootstrap is unreachable, the node reports 503 and keeps the last known state, resuming when connectivity returns