[R4R] BEP-127: Temporary Maintenance Mode for Validators

BEP127.md

@@ -0,0 +1,57 @@
+# BEP-127: Temporary Maintenance Mode for Validators
+
+- [BEP-127: Temporary Maintenance Mode for Validators](#bep-99-temporary-maintenance-mode-for-validators)
+    - [1. Summary](#1-summary)
+    - [2. Abstract](#2-abstract)
+    - [3. Status](#3-status)
+    - [4. Motivation](#4-motivation)
+    - [5. Specification](#5-specification)
+    - [6. License](#6-license)
+
+## 1. Summary
+This BEP introduces the **Temporary Maintenance** mode for validators on the BNB Smart Chain.
+
+## 2. Abstract
+**Temporary Maintenance** is supposed to last one or a few hours.  The validator seat will be temporarily dropped from the block producing rotation during the maintenance. Since long-time offline maintenance is not encouraged, the validator will still be slashed if the maintenance lasts too long. To lower the impact from poorly-operating validators who forget to claim its maintenance, they will be forced to enter **Temporary Maintenance** mode too.
+
+## 3. Status
+Draft.
+
+## 4. Motivation
+Due to the design of **Parlia** consensus, the absence of the validator, even if it is due to scheduled maintenance, will cause instability and capacity loss of BSC due to the extra waiting time and chain reorganization for other validators. Introducing **Temporary Maintenance** mode will stabilize the blocking rotation and maintain the capacity of BSC.
+
+## 5. Specification
+
+### Current Slash Mechanisms
+The [slash contract](https://bscscan.com/address/0x0000000000000000000000000000000000001001) will record the missed blocking metrics of each validator. 
+- Once the metrics are above the predefined threshold, the blocking reward for validator will not be relayed to BC for distribution but shared with other better validators.
+- If the metrics remain above another higher level of threshold, the validator will be dropped from the rotation, and put as “in jail”. This will be propagated back to BNB Beacon Chain, where a predefined amount of BNB would be slashed from the self-delegated BNB of the validator. 
+
+### Temporary Maintenance Mode
+
+#### Proactive Maintenance
+Validator can claim itself to enter scheduled maintenance by sending a transaction signed by the consensus key. The validator can claim itself to exit maintenance by sending another transaction. The slash cleaning work will be done within the exit transaction:
+
+**SlashCount =  (MaintenanceEndHeight - MaintenanceStartHeight)/len(currentValidatorSet)/Scale**
+
+**Scale** is a governable parameter, the initial setting is 2, usually it should be larger than 1.  If **SlashCount** is larger than a predefined value, the validator will still be slashed. The validator can get more time to bring the node back before being slashed if it claims itself to enter maintenance. Validator is encouraged to claim  itself to exit maintenance even if it will be put in jail, since it can send the unjail transaction earlier.
+
+#### Passive Maintenance
+Once the number of missed blocks is above a predefined threshold, the validator will enter maintenance automatically. The validator still gets a chance to catch up and claim itself online again. 
+
+### Limit
+1. The number of maintained validators has an upper limit at the same time. Once exceeded, the following proactive/passive claim request will be rejected.
+2. A validator can only enter maintenance once per day.
+
+### ValidatorSet Change
+The validators election will repeat every 24 hours, the maintenance will end immediately once election happens.
+
+### Impact to Validator Maintainers
+Validator maintainers can claim the validator to enter maintenance mode once the node runs into unexpected issues. Validator maintainers need to send transactions to exit maintenance mode even if the validator is enforced into maintenance, otherwise, the validator may be put in jail.
+
+## 6. License
+
+The content is licensed under [CC0](https://creativecommons.org/publicdomain/zero/1.0/).
+
+
+

README.md

@@ -26,4 +26,5 @@ Here are the list of subjects of BEPs:
 * [BEP-91](BEP91.md): Increase Block Gas Ceiling for Binance Smart Chain
 * [BEP-93](BEP93.md): Diff Sync Protocol on BSC
 * [BEP-95](BEP95.md): Introduce Real-Time Burning Mechanism
+* [BEP-127](BEP127.md): Temporary Maintenance Mode for Validators 
 * [BEP-128](BEP128.md): Improvement on BNB Smart Chain Staking Reward Distribution