ProductionReady was announced today, and I wanted to jot down some thoughts, and perhaps answer some questions that people might have about who we are and what we do.
The question about who we are is pretty simple. We're a 501(c)3, or in more plain language, a non-profit. We exist for the purpose of both educating new developers and funding another implementation. And we want that implementation to be conservative.
What We Mean by ConservativeWhat We Mean by Conservative
Conservative is one of those words that means different things to different people, so let me be specific. When we say conservative Bitcoin client, we mean conserving, as in, preserving Bitcoin's monetary properties: fixed supply, censorship resistance, permissionless access, credible neutrality. These are the things that make Bitcoin worth anything at all, and every protocol change should be weighed against whether it strengthens or weakens them.
This isn't about never changing anything. Bitcoin has changed many times and will change again. But there's a difference between changes that make the money better and changes that serve some other agenda. When you're securing trillions of dollars for millions of people, the burden of proof should be on the change, not on the people who don't want it. The default answer should be no and only in the case of overwhelming support should it be yes.
Bitcoin got this far by being hard to change. As we say in software, that's not a bug, but a feature.
Why We're Building on Core
So why not start from scratch, or adopt an existing alternative like libbitcoin or btcd?
The answer is pretty straightforward given our goals. Bitcoin Core is the most battle-tested codebase in open-source history. Sixteen years of adversarial conditions, nation-state level incentives to break it, and it has never been successfully compromised. You don't just throw that away.
Our client will be built on Core because that's the conservative choice. We're not re-architecting the software. We're differentiating on development process, policy defaults, and priorities. What gets merged, how fast things move, and who has a seat at the table when decisions are made. The underlying consensus code stays compatible, which means node operators can switch with much less risk.
We're giving node operators another option that starts from the same proven foundation but makes different choices about how development proceeds.
Why a Third ImplementationWhy a Third Implementation
Bitcoin Core and Bitcoin Knots have both done important work. But the long-term health of the network requires more than two options that have more than 5% of network adoption.
A single dominant implementation means a single set of maintainers making decisions for the entire network. That's a centralization risk that we talk about constantly when it comes to mining but somehow tolerate when it comes to software. The community isn't comfortable with one mining pool having a large majority of hashrate, and increasingly, I don't think it should be comfortable with one implementation having a large majority of nodes.
We saw this play out in real time. When Core v30 removed the OP_RETURN data limit, many node operators switched to Knots. The share of Knots nodes went from 2% to over 15% in a matter of weeks. The demand for choice isn't theoretical. It was demonstrated by people actually running different software on their own machines.
A third implementation expands those options. More implementations with real adoption means no single development team can unilaterally set the direction of Bitcoin. That's decentralization working the way it's supposed to: at every layer, including the code.
Building for the Long TermBuilding for the Long Term
Bitcoin's endgame is ossification, or the point where the protocol becomes effectively unchangeable. That's not a popular opinion in some developer circles, but it's the logical conclusion of what makes Bitcoin valuable. The less it can be changed, the more people can trust it and plan with it.
A conservative implementation accelerates that path by demonstrating that stability is viable and desirable. We want to prove that you can run a well-maintained, actively developed client that simply has a higher bar for what constitutes a necessary change.
This is generational work. We're building something that has to outlast every one of us. ProductionReady exists to make sure that work gets funded independently, transparently, with no strings attached.
We're optimizing for Bitcoin as sound money. Everything else is noise.
I think if I'd write up a mission statement for Bitcoin Core, it would sound very similar.
I read somewhere else that you'd want to basically provide long term support for older Core versions. If you have the resources to do that well, why not do that on Core itself? The reason we offer backports to three versions is mostly that we don't have the resources to do more - the further you go back, the more difficult it is to maintain the required toolchains, dependency versions, and CI. Of course it also gets harder to maintain security patches and landing them in secret gets trickier, but I think that is a manageable trade off.
Because on Core there are too many camps to please. And we've all seen the kind of insanity that happens when you tell a single camp no and take a stance. And say yes to another, and then you piss off even more people. This is a political move, not a technical one.
I'll take the liberty of recommending a position, ignore as you desire: We'll have to see what comes of this because the work hasn't started yet. Treat this as a letter of intent, not a fact, and definitely not as a threat. Forking Core means that mutual patches are possible. It doesn't put anything in the way of collaboration. It just means that if this becomes real and gains a significant base among users and miners, then there is less fo to Core fa, and less pressure/hostility towards maintainers personally. If there's a way Core can be depressurized, this could be a rather non disruptive way to do it.
However, the first statement about "we'll see what comes of this" remains the most important one until there is an actual working client. Best just chill.
Absolutely.
The code so woke and buggy we gonna build another client on top of it!
I think it'd be better to reframe this as a new distribution, not implementation
Cores near monopoly on distribution is the issue, people download it blindly because of its legacy, Core is now squatting on that legacy
Conservatives should see the current Core repo as a bleeding edge activist fork, and this new project should be more of an LTS ... Start from an older base with cherry picked fixes backported
I just started using shockwallet, and installed a ligthning pub node.
I want to know though, how to operate a weekly backup of that node (if that's necessary)
The goal, in case of disaster would be to see if I could restore the wallet
That's a manual process for the moment, I need to work on this docs... Got doc updates staging will try to get that out this week and update the backup section
https://docs.shock.network/pub/faq
Tldr use a cron job or similar to backup the pub directory and the static channel backups from LND along with the seed (seed accessible in public dashboard)
thanks, will check that out
This sounds pretty reasonable. I'm run a Core node for many of the reasons you cite: nothing is so battle tested or has so many eyes on it. So that makes a lot of sense.
I'm very interested in this and will be excited to hear about this implementation as it gets developed.
Thank you for explaining my question I didn't want to bother you with.
conservingis a really good word to use here, imho.I'll ask my second question now though:
You have 4 directors. How many devs do you have?
We're talking to some right now, but our goal is a large and dedicated group.
The director-to-dev ratio is the ultimate red flag for decentralization. If the goal is a 'dedicated group,' it must start with code, not titles. Otherwise, we're just rebuilding the same legacy structures on a different ledger. Signal over noise, always.
How do you plan to ensure neutrality while at the same time being dependent on donations?
Particularly if critically large (read: tempting) donations are offered with strings attached?
Assuming you want the org to decline those types of donations, how can you try to ensure that future controlling parties of the 501(c)3 do not stray from it?
So what's the stance towards soft forks here? Does conservative-ness imply rejecting proposals that would help L2s and move bitcoin closer to being viable medium-of-exchange?
Most devs here talk about high-end nodes. I’m building the future of sovereign digital infrastructure on a device the system calls 'low-end'. 14 hours a day, 1.1K views, and 119 unique cloners later—I’ve realized logic doesn't need a GPU, it needs grit. 97% failed build? That’s just the filter for the weak. I’m finishing the 3% now. Watch the live pulse of an underdog architect:
[https://x.com/nayakapambudi]
Why not just put your support and resources into Knots? It's built on Core and espouses to perform the same protection of Bitcoin's monetary properties? You've been a big proponent of Knots throughout the OP_Return and BIP-110 debates. Why do you feel it necessary to form what sounds like an identical derivative client?
Don’t break the money is really the whole game.
The mining pool / client concentration parallel is the sharpest point here. People panic when one pool hits 30% hashrate. Core has been at 95%+ node adoption for years and it barely registers as a concern. That asymmetry is weird.
the decentralization argument is the strongest one here. we normalize single-implementation risk by not talking about it much — but the Core maintainers do effectively set a lot of protocol policy by deciding what gets merged.
the Knots adoption spike after v30 / OP_RETURN showed the demand is real. the question is whether ProductionReady can maintain enough adoption to matter. 2-5% of nodes doesn't move the needle; 15%+ does. Knots briefly got there on sentiment alone — a funded, stable alternative with active maintenance and clear governance might sustain that.
one thing i'd watch: how does ProductionReady handle the activation debates? the "conservative" label will be tested the first time there's a contentious proposal. the governance process is where this either becomes credible or becomes another vanity fork.
What I appreciate most about this initiative is that it explicitly recognizes something many in the ecosystem know but rarely state plainly
Bitcoin development is political in the broad sense because every change has monetary and social consequences not just technical ones
A few thoughts to extend what you wrote
First the focus on conserving monetary properties is exactly where the conversation needs to stay anchored Fixed supply censorship resistance permissionless access and credible neutrality are not slogans They are extremely fragile emergent properties that depend on both code and social norms The more complex the protocol the more surface area there is for subtle erosion of those properties over time So a client that treats change as something that must justify its existence instead of something to pursue by default is not anti progress It is pro capital preservation for the entire network
Second the choice to build on Core rather than start from scratch is a sober one A conservative client should be conservative about engineering risk as well as policy risk Throwing out sixteen years of adversarial testing would be ideological purity at the expense of real world security Starting from Core and diverging only on process incentives and defaults respects the fact that the hardest problems in Bitcoin have already been solved in production environments There is no prize for reinventing consensus code just to say it is different
Third the point about implementation diversity is under discussed We talk a lot about miner centralization and very little about client monoculture Yet a single dominant implementation is a soft single point of failure Even if the code is open and the maintainers are well intentioned their collective biases and priorities become de facto policy for the network A third implementation that shares the same consensus rules but is managed by a different institutional structure is a check and balance on that power It is not competition for attention It is redundancy for the social layer
The OP RETURN example is also instructive It showed that when node operators are given real options they will express their preferences not just on Twitter but in the software they run That is what decentralization is supposed to look like Organic exit not just adversarial debate A credible conservative client increases the cost of pushing through controversial changes by making it obvious that there is a live alternative for people who prefer a higher bar for modification
On ossification I agree that it is the logical end state of a successful monetary protocol The timing and path to ossification are where the real disagreements lie A conservative client can serve as a forcing function by modeling a world where the default expectation is stability and where new features need overwhelming justification in terms of monetary robustness not developer convenience or new use cases If Bitcoin is to be a base layer for centuries you want most innovation to happen above it not inside it
One suggestion for ProductionReady If the goal is long term conservative stewardship then publishing explicit principles and a change acceptance framework would be powerful Spell out criteria like security impact complexity budget of additional attack surface operational burden and alignment with monetary properties Make it predictable what will likely be rejected That transparency itself becomes a coordination tool for developers and node operators and makes the social contract around the client much clearer
In summary a conservative client built on Core with independent funding and a clearly articulated philosophy is not a threat to Bitcoin Core It is insurance for Bitcoin itself The network is healthiest when no single team or institution can credibly claim to be the ultimate guardian of the protocol The existence of serious alternatives is what makes Bitcoin as a system more trustworthy even for those who never switch clients
503(c) status ruined the Catholic Church in America