# Vision 2026 — Advisory Council Gap Report

**Date:** 2026-03-10
**Session:** Vision 2026 Full Simulation
**Council:** 12 advisors, 6 topics debated
**PQS:** 56.5/100 (design), 2 hard gate failures
**Total Gaps:** 20

---

## Gap Severity Scale

- **9-10:** Existential / immediate credibility risk
- **7-8:** Blocking / prevents core capability
- **5-6:** Critical / degrades quality significantly
- **3-4:** Important / notable but manageable
- **1-2:** Minor / polish items

---

## P0 — Existential (Fix Before Marketing or Wave 1)

| ID | Severity | Gap | Category | Advisor(s) |
|----|----------|-----|----------|-----------|
| GAP-02 | 9/10 | Relay marketed as "Noise NK encrypted" but M2 (Noise NK) is an open issue. Current relay is unencrypted WSS. Active trust violation. | Distributed Systems | Vega, Okonkwo |
| GAP-03 | 8/10 | `Mutex<Option<model>>` in lib.rs prevents concurrent requests. Continuous batching is architecturally impossible without replacing this with async-safe design. | Inference Engine | Vega, Bergström |
| GAP-01 | 7/10 | Collective intelligence privacy model fails on multiple dimensions: SHA-256(embedding) vulnerable to rainbow tables; k-anonymity k=100 insufficient; ε budget lacks sensitivity analysis; gradient leakage in federated LoRA. | Privacy/Security | Obi, Okonkwo |

## P1 — Critical (Wave 1-2)

| ID | Severity | Gap | Category | Advisor(s) |
|----|----------|-----|----------|-----------|
| GAP-04 | 8/10 | Python GIL held during Rust generation calls. Long-running inference blocks all other FastAPI request processing. `py.allow_threads()` required. | Inference Engine | Bergström |
| GAP-09 | 8/10 | BSL licensing at launch will suppress community growth 60-70% vs. Apache 2.0. Council recommends Apache 2.0 for inference engine; proprietary for router weights + HIM data. | IP Strategy | Marchetti, Al-Rashid, Nwosu |
| GAP-05 | 7/10 | "90-second install" creates false expectation. Full install + model download is 35-60 minutes. Replace with: "One command. First inference in < 10 min (model pre-downloaded) or 35-60 min (first-time setup)." | Developer Experience | Tanaka, Bergström |
| GAP-06 | 7/10 | Apple Silicon via CubeCL/WGPU is 50-65% of Ollama's Metal performance (which uses MPS). Marketing must be platform-specific: NVIDIA is first-class; Apple Metal is second-class; AMD consumer is experimental. | Cross-Platform GPU | Boateng |
| GAP-11 | 7/10 | GDPR lawful basis for collective intelligence is not established. Opt-out default requires legitimate interests balancing test. EU legal counsel review required before Wave 4 launch. | Privacy/Legal | Obi, Marchetti |
| GAP-13 | 7/10 | Collective intelligence aggregator is an undesigned high-value attack target receiving signals from 5,000+ nodes. Security design document required before Wave 4. | Security | Okonkwo |
| GAP-07 | 6/10 | VB-LoRA mentioned in planning as a future capability. VB-LoRA is a 2024 NeurIPS prototype with 200 GitHub stars. Remove from all planning documents. | Fine-Tuning | Kim |
| GAP-08 | 6/10 | llmhosts_core GGUF parser handles base models only. LoRA adapter GGUF format requires separate implementation (adapter rank matrices, scale factors). Must exist before Wave 5 fine-tuning. | Fine-Tuning | Kim |
| GAP-18 | 6/10 | Hatchling hook at pip install runs arbitrary code. Supply chain attack surface. Formal security model required: zero network calls, zero file writes, read-only hardware detection. | Security | Okonkwo |

## P2 — Important (Wave 2-4)

| ID | Severity | Gap | Category | Advisor(s) |
|----|----------|-----|----------|-----------|
| GAP-10 | 6/10 | Relay reconnection backoff lacks jitter. 10K nodes reconnecting simultaneously creates thundering herd. Add random jitter (0-30s) to all reconnection timers. | Distributed Systems | Vega |
| GAP-14 | 6/10 | Marketplace nodes serve Llama 3.3 at commercial scale. Meta's Llama 3 Community License has 700M MAU restriction (ambiguous for token counts). Legal review before marketplace GA. | Legal | Marchetti |
| GAP-15 | 5/10 | registry.py trusts third-party HuggingFace uploaders (e.g., "bartowski"). Add SHA-256 checksum verification from LLMHosts-controlled manifest. | Security | Okonkwo |
| GAP-12 | 5/10 | Training time estimate for 70B QLoRA on RTX 4090 stated as 6-8 hours. Empirical estimate: 12-20 hours. Correct in all documentation and implement dynamic estimation from first 100 steps. | Fine-Tuning | Kim |
| GAP-20 | 5/10 | HIM cold-start value requires 500+ opt-in nodes. Below that threshold, HIM provides no advantage vs. manual benchmarking. Marketing must not imply fleet-powered recommendations until threshold reached. | Business/DX | Al-Rashid, Ibrahim |

## P3 — Recommended (Wave 3-6)

| ID | Severity | Gap | Category | Advisor(s) |
|----|----------|-----|----------|-----------|
| GAP-16 | 5/10 | llama.cpp (70K stars) could ship relay + marketplace in 12-18 months. Add as R11 to risk matrix. Moat must be above the inference layer, not at it. | Competitive | Al-Rashid, Bergström |
| GAP-19 | 4/10 | 26 GB model downloads on residential connections frequently fail mid-download. Implement chunked download with resume from offset before Wave 3 onboarding launch. | Developer Experience | Tanaka |
| GAP-17 | 4/10 | Marketplace Operator (Stage 8) has weeks-long feedback gap before first payout. Design intermediate signals: first booking notification, estimated first payout date, earnings projection. | Customer Experience | Ibrahim |

---

## Gap Resolution Checklist

### Immediate Actions (Before Next Commit)
- [ ] Remove "encrypted with Noise NK" from all marketing/README until M2 is complete (GAP-02)
- [ ] Remove VB-LoRA from all planning documents (GAP-07)
- [ ] Correct 90-second install claim with honest timing (GAP-05)
- [ ] Add `py.allow_threads()` to Rust generation calls (GAP-04) — or open issue

### Wave 1 (Weeks 1-6)
- [ ] Replace Mutex<Option<model>> with async-safe concurrent design (GAP-03)
- [ ] Design hatchling hook security model (GAP-18)
- [ ] Platform-specific performance claims: NVIDIA first-class, Apple Metal second-class (GAP-06)
- [ ] Add jitter to relay reconnect backoff (GAP-10)

### Wave 2 (Weeks 6-12)
- [ ] SHA-256(embedding) → LDP-perturbed embeddings design document (GAP-01)
- [ ] Formal ε sensitivity analysis (GAP-01)
- [ ] k-anonymity minimum revised to k≥500 (GAP-01)
- [ ] Apache 2.0 license decision vs. BSL (GAP-09) — engage legal counsel
- [ ] GGUF adapter loading design for llmhosts_core (GAP-08)

### Wave 3 (Weeks 12-18)
- [ ] GDPR lawful basis documentation with EU counsel review (GAP-11)
- [ ] Llama 3 Community License legal review (GAP-14)
- [ ] SHA-256 checksum verification for model downloads (GAP-15)
- [ ] Chunked download with resume support (GAP-19)

### Wave 4 (Weeks 18-26)
- [ ] Aggregator security design document (GAP-13)
- [ ] Defer federated gradient aggregation pending security audit (GAP-01 sub-item)
- [ ] HIM marketing language: "fleet-powered recommendations available at scale" (GAP-20)
- [ ] Training time dynamic estimation (GAP-12)

### Wave 5-6 (Weeks 26-48)
- [ ] Operator intermediate feedback moments design (GAP-17)
- [ ] llama.cpp R11 risk entry in risk matrix (GAP-16)
