Peer.pm

Peer.pm is a distributed package manager — the supply chain that lets a declarative system like SpacesOS exist without a coordinating foundation behind it. Packages are content-addressed, identified by the hash of their own inputs rather than by whoever hosted them, so a package fetched from a friend, a stranger, or a build farm can be verified on arrival without needing to trust the channel it came through.

Requesting a package from peers you trust is direct and unremarkable. Requesting one from strangers is not, so the public-mode protocol adds privacy: a randomized store that keeps every machine trading in constant cover traffic, oblivious transfer for retrieving a specific package without revealing which one, and onion routing to conceal who's asking in the first place.

Trust in a package comes from attestation, not authority. Independent builders publish signed, bonded claims that a given specification produces a given output, challengeable by anyone through a Cartesi-style verification game that narrows any dispute down to a single, on-chain-checkable step. Confidence accumulates from many independent attestations instead of one central publisher's word.