Developer
Run a commercial node
A restricted public node. Sync the chain and relay signed transactions. No identity access. No minting. No consensus participation.
Can do
- Sync the chain in real time
- Read public balances
- Read PII-scrubbed transaction history
- Read network status
- Relay signed transactions to the bootstrap node
Cannot do
- Access identity data, no service key, public role only
- Mint or burn currency
- Participate in consensus
- Validate or sign blocks
- Read any field hidden by the privacy layer
Why this design
Privacy enforced server-side
Even a malicious commercial node operator cannot read identity data. The core simply does not return it without a service key. You cannot extract what was never sent.
Sync gracefully. A commercial node handles a bootstrap outage without crashing. If the bootstrap is unreachable, the node reports 503 and keeps the last known state, resuming when connectivity returns.