yakmesh
v1.4.0
Published
YAKMESH: Yielding Atomic Kernel Modular Encryption Secured Hub - Post-quantum secure P2P mesh network for the 2026 threat landscape
Maintainers
Readme
YAKMESH is a high-resiliency, decentralized networking layer designed for the 2026 threat landscape. Built with quantum-resistant cryptography at its core and anchored by PCIe atomic timing synchronization, YAKMESH provides a "sturdy" substrate for distributed systems that cannot afford to fail.
Why YAKMESH?
In an era where traditional ECDSA is increasingly vulnerable and network jitter can desynchronize global state, YAKMESH offers a three-pillar solution:
🌿 Yielding Resilience: A self-healing mesh topology that adapts to node failure and adversarial interference without central authority.
⚛️ Atomic Precision: Integrated support for PCIe atomic clock hardware, enabling hardware timestamping with support for high-precision time sources for low-latency synchronization.
🔐 Quantum Hardened: Fully compatible with Project Zond and the QRL (Quantum Resistant Ledger) ecosystem, utilizing stateless lattice-based signatures (ML-DSA) from Genesis.
The Y.A.K.M.E.S.H. Philosophy
| Letter | Principle | Description | |--------|-----------|-------------| | Y | Yielding | Not brittle; flexible enough to absorb network shocks | | A | Atomic | Grounded in the absolute truth of physical time | | K | Kernel | The essential, innermost part of the secure stack | | M | Modular | Swap out encryption primitives or transport layers as tech evolves | | E | Encryption | Privacy and integrity by default | | S | Secured | Hardened against both classical and quantum vectors | | H | Hub | A nexus for decentralized data and peer-to-peer logic |
Features
- 🔒 Post-Quantum Secure - ML-DSA-65 (NIST FIPS 204) signatures
- 🔮 Self-Verifying Oracle - Deterministic validation without external trust
- 🌐 Mesh Networking - P2P WebSocket communication with gossip protocol
- ⏱️ Precision Timing - Support for atomic clocks, GPS, PTP, NTP
- 🔌 Plugin Architecture - Adapters for any database or API
- 🛡️ Phase Modulation - Time-based anti-replay protection
Quick Start
npm install yakmeshimport { YakmeshNode } from 'yakmesh';
const node = new YakmeshNode({
node: { name: 'My Node' },
network: { httpPort: 3000, wsPort: 9001 },
});
await node.start();CLI
# Initialize a new node
npx yakmesh init
# Start the node
npx yakmesh start
# Check status
npx yakmesh statusDocumentation
Full documentation available at yakmesh.dev
Architecture
yakmesh/
├── oracle/ # Self-verifying validation engine
├── mesh/ # WebSocket P2P networking
├── gossip/ # Epidemic-style message propagation
├── identity/ # Post-quantum key management
├── database/ # SQLite replication engine
├── adapters/ # Platform integration plugins
├── webserver/ # Embedded Caddy web server
└── server/ # HTTP/WS serverNetwork Identity
Each YAKMESH network has a unique identity derived from configurable salts:
import { setIdentityConfig } from 'yakmesh/oracle/network-identity.js';
setIdentityConfig({
networkPrefix: 'my', // Network ID prefix
identitySalt: 'my-app-v1', // Unique network salt
});
// Different salt = different network (cannot interoperate)Time Source Trust Levels
| Level | Source | Tolerance | Oracle Capable | |-------|--------|-----------|----------------| | ATOMIC | PCIe atomic clock | ±100ms | ✅ Yes | | GPS | GPS with PPS | ±500ms | ✅ Yes | | PTP | IEEE 1588 (Meinberg) | ±500ms | ⚠️ Partial | | NTP | Standard NTP | ±5000ms | ❌ No |
Adapters
Create custom adapters by extending BaseAdapter:
import { BaseAdapter } from 'yakmesh/adapters/base-adapter.js';
class MyAdapter extends BaseAdapter {
async init() { /* Connect to your database */ }
getSchema() { return { tables: ['users', 'orders'] }; }
async fetchChanges(since) { /* Return changed records */ }
async applyChange(table, record, op) { /* Write to database */ }
}Official Adapters
@yakmesh/adapter-peerquanta- PeerQuanta phpBB marketplace
API Endpoints
| Endpoint | Method | Description |
|----------|--------|-------------|
| /health | GET | Node health status |
| /node | GET | Node identity info |
| /peers | GET | Connected peers |
| /oracle/status | GET | Oracle integrity check |
| /network/identity | GET | Network identity (hash obfuscated) |
| /time/status | GET | Time source detection |
| /time/capabilities | GET | Time oracle eligibility |
| /connect | POST | Connect to a peer |
Pro Features
YAKMESH Pro includes additional security features:
- 🔐 WebSocket Authentication - Challenge-response auth with signatures
- 🔒 Message Encryption - XChaCha20-Poly1305 encrypted messages
- 📋 Peer Allowlist/Blocklist - Access control for private networks
- 🛡️ Connection Rate Limiting - DDoS protection
License
- Community Edition: MIT License (see LICENSE)
- Pro Edition: Proprietary License
See TRADEMARK.md for trademark usage policy.
