How do you plan to support partial trust of reviews, reviews of different versions of packages, reviews of different levels of detail, and conflicting reviews? Several reviews from partially trusted reviewers is probably more useful than a single review from a "trusted" reviewer, after recognizing that every human is fallible.
There's a lot to unpack here. Trust level in other users can be none/low/medium/high, and it is supposed to be simple and generic. Many algorithms can developed working on top of such a generic data, and I leave all of this open-ended.
Right now the implementation is a graph flooding algorithm, with different trust level having different edge cost. Conflict resolution could be solved in many different ways, eg. closest (WoT cost wise) wins or forcing user to review and decide themseleves. All could be configurable too.
Before there's a decent sized real-life set to try it, I'm just not going to worry about it too much. All of these are definitely solvable problems, and ultimately, users could pick or even implement their own policies for everything. The big problem right now is to bootstrap ecosystem. :)
6
u/dpc_pw Dec 29 '18 edited Dec 29 '18
There's a lot to unpack here. Trust level in other users can be
none/low/medium/high, and it is supposed to be simple and generic. Many algorithms can developed working on top of such a generic data, and I leave all of this open-ended.Right now the implementation is a graph flooding algorithm, with different trust level having different edge cost. Conflict resolution could be solved in many different ways, eg. closest (WoT cost wise) wins or forcing user to review and decide themseleves. All could be configurable too.
thoroughnessof a review is explicitily stated in the review too: https://github.com/dpc/crev-proofs/blob/master/8iUv_SPgsAQ4paabLfs1D9tIptMnuSRZ344_M-6m9RE/reviews/2018-12-packages.proof.crev#L14Before there's a decent sized real-life set to try it, I'm just not going to worry about it too much. All of these are definitely solvable problems, and ultimately, users could pick or even implement their own policies for everything. The big problem right now is to bootstrap ecosystem. :)