Port onto @anyone-protocol/ao-client (D15/D16/D17)

README.md

@@ -216,9 +216,15 @@ All configuration is provided via environment variables.
 | --- | --- | --- |
 | `OPERATOR_REGISTRY_PROCESS_ID` | yes | AO process ID of the Operator Registry. |
 | `OPERATOR_REGISTRY_CONTROLLER_KEY` | yes | EVM private key used to sign AO messages. **Secret.** |
-| `CU_URL` | live | AO Compute Unit URL. |
-| `GATEWAY_URL` | live | Arweave gateway URL for AO. |
-| `GRAPHQL_URL` | live | Arweave GraphQL URL for AO. |
+| `HB_URL` | yes | Our HyperBEAM node, e.g. `https://hb.anyone.tech`. No default — the service refuses to start without it. |
+
+AO access goes through [`@anyone-protocol/ao-client`](https://github.com/anyone-protocol/ao-client):
+writes are ANS-104 DataItems signed with the controller key and pushed to our own node,
+reads are plain unsigned HTTP GETs against the process's own device.
+
+`CU_URL`, `GATEWAY_URL` and `GRAPHQL_URL` are **gone**. They configured `@permaweb/aoconnect`,
+and two of them pointed at `ar-io.net` — a third party in the critical path. Every endpoint is
+now explicit and ours, with no fallback.
 
 ### Hardware verification (EVM + Vault)
 

operations/operator-registry-controller-live.hcl

@@ -51,13 +51,14 @@ job "operator-registry-controller-live" {
         GEODATADIR="/geo-ip-db/data"
         GEOTMPDIR="/geo-ip-db/tmp"
         DO_CLEAN="true"
-        BUNDLER_GATEWAY="https://ar.anyone.tech"
-        # BUNDLER_NODE="https://ar.anyone.tech/bundler"
-        BUNDLER_NODE="https://upload.ardrive.io"
-        BUNDLER_NETWORK="ethereum"
-        CU_URL="https://cu.anyone.tech"
-        GATEWAY_URL="https://ar-io.net"
-        GRAPHQL_URL="https://ar-io.net/graphql"
+        # Our own node once /~bundler@1.0/tx is edge-allowed + the signer is faff-allow-listed:
+        #   BUNDLER_NODE="https://hb.anyone.tech"
+        BUNDLER_NODE="https://up.arweave.net"
+        # Our own HyperBEAM node — replaces CU_URL/GATEWAY_URL/GRAPHQL_URL (D17).
+        # Two of those pointed at ar-io.net, a third party in the critical path.
+        # The edge whitelists `/~meta@1.0` and `^/{contract-pid}`, which covers both
+        # the `~process@1.0/now/...` reads and the `~process@1.0/push` writes.
+        HB_URL="https://hb.anyone.tech"
         IS_LOCAL_LEADER="true"
         CPU_COUNT="1"
         CONSUL_HOST="${NOMAD_IP_http}"

operations/operator-registry-controller-stage.hcl

@@ -51,13 +51,14 @@ job "operator-registry-controller-stage" {
         GEODATADIR="/geo-ip-db/data"
         GEOTMPDIR="/geo-ip-db/tmp"
         DO_CLEAN="true"
-        BUNDLER_GATEWAY="https://ar.anyone.tech"
-        # BUNDLER_NODE="https://ar.anyone.tech/bundler"
-        BUNDLER_NODE="https://upload.ardrive.io"
-        BUNDLER_NETWORK="ethereum"
-        CU_URL="https://cu-stage.anyone.tech"
-        GATEWAY_URL="https://ar-io.net"
-        GRAPHQL_URL="https://ar-io.net/graphql"
+        # Our own node once /~bundler@1.0/tx is edge-allowed + the signer is faff-allow-listed:
+        #   BUNDLER_NODE="https://hb.anyone.tech"
+        BUNDLER_NODE="https://up.arweave.net"
+        # Our own HyperBEAM node — replaces CU_URL/GATEWAY_URL/GRAPHQL_URL (D17).
+        # Two of those pointed at ar-io.net, a third party in the critical path.
+        # The edge whitelists `/~meta@1.0` and `^/{contract-pid}`, which covers both
+        # the `~process@1.0/now/...` reads and the `~process@1.0/push` writes.
+        HB_URL="https://hb-stage.anyone.tech"
         IS_LOCAL_LEADER="true"
         CPU_COUNT="1"
         CONSUL_HOST="${NOMAD_IP_http}"