ah, i fixed those links. thanks the basic construction is that the operator appends updates to the ledger, but a quorum that they chose controls the onchain reserves utxo. if the operator goes bad, the quorum gives the reserves to a random quorum member, and the ledger is now their responsibility if quorum members collude and do not reassign reserves in a timely manner, then the honest members of their own quorums will reassign their ledgers. the question is, how far does this scale. in my analyses and simulations, it is farther than expected there has been more interest today than for many months – i will write more soon