Quality-volume slice and activity-window eligibility (3.4.0)

[anderdc]

Incentive changes from the 09-08 standup: pay quality volume and replace the warm-up with an activity window. Validator-only; no program change, no allways-db migration.

Reward per miner and lane

eligible × pool × [ (1−β) × crown_share × capacity  +  β × qualified_volume_share ]

1. Quality-volume slice (β = 0.25)

• A completed fill qualifies iff the miner held the lane's crown at the instant it was reserved, judged at the fill's own size. fill_held_crown runs the same reconstruct + crown_holders_at_instant the live snapshot uses, with the reserved miner always a candidate and can-fund bound to the swap's collateral_amount (a fill the seam routed past a too-thin crown holder still counts). Crown movement after reservation never changes the answer.
• Anchor is the miner's last RESERVE_START on that hub before SwapCompleted (PoolResolved time); the 30 s pool window is the accepted tolerance. Flag is computed at ingest and stored on clearing_rates (new backing + qualified columns).
• The β slice is per lane: your qualified hub-leg notional over the lane's, trailing 24 h. Not capacity-scaled (a completed fill was backed by construction), still behind the eligibility gate. A lane with no qualified fills in the window recycles its β.
• Pools (the α blend) now read qualified volume only. Unqualified fills neither size a pool nor pay.
• Crown event tables keep 4 h (EVENT_RETENTION_SECS) instead of 1 h so a reservation instant is replayable at completion. Score rows write the qualified share into the existing nullable vol_share column.

2. Activity window replaces the warm-up

• MIN_SUCCESSFUL_SWAPS is gone. Eligible iff lifetime timeouts ≤ MAX_FAILED_SWAPS (unchanged, on-chain) and at least one completed fill in the trailing ELIGIBILITY_FILL_WINDOW_SECS (12 h), read off the clearing ledger. Any lane, any taker, qualified or not; timed-out and cancelled swaps don't count.
• Per purse: a lane is live only while its own backing delivered inside the window. is_eligible keeps the any-purse global reading (strikes + trace); direction_eligible adds the lane's purse via purse_active.
• A validator whose clearing ledger is younger than the window (fresh DB) applies strikes only, so it can't zero the network while catching up (clearing_ledger_since in relay_meta).

3. Capacity curve

Unchanged: the convex ramp (k=2) stays. A linear curve was drafted and reverted on review.

Not in this PR (decided)

• Paying FULFILLING miners: skipped. A busy purse isn't takeable, so it has no crown to pay; revisit with concurrent swaps per purse.

What to expect on deploy

• Distributed emission drops by roughly β on the first round (almost every lane has no qualified fill in a 24 h window today); the rest recycles until miners fill their own crowns.
• Miners will self-fill at min size on the lanes they hold, once per 12 h per purse at least (activity) and once per 24 h (β). Each fill pays the protocol fee + reservation fee to the treasury.
• One dust fill in a quiet family moves most of that family's pool through α (pre-existing behaviour, now gated on qualified). If that's too jumpy, the fallback is a hub-notional floor on the α term (the Remove MIN_DIRECTION_VOLUME dust floor from scoring #553 dust floor).
• A validator down > 4 h re-ingesting old completions judges them against pruned rate history; those fills read unqualified (fail-closed, ages out in a day).

Follow-ups

• Per-pair busy at the next program upgrade (the real BTC fix).
• compute_direction_pools family share is pair-count-weighted — must become fixed/volume-weighted before [BLOCKED: emissions redesign] Activate alpha-spoke pairs (PR3) #709 activates alpha-spoke pairs.
• alw miner status has no view of the activity window; the seam could serve last-fill-per-purse.

Tests

2147 passed. New: β slice (TestQualityVolumeSlice), ledger readers, TestFillHeldCrown (band, size-aware thin holder, busy competitor, crown moving after T, end-to-end ingest), activity window (helper, ledger age, edge of window, per purse e2e).

Sister docs PR: entrius/allways-docs-ui (same branch name).

https://claude.ai/code/session_017ZTCEjbjJwe6Te657adCap