Distributed Trust Model

// Eve modifies her local code to bypass permission checks
// Her modified client accepts the role change locally
db.graph.set('user:0xEVE...', { role: 'admin' });

// But when Eve tries to use her "admin" powers:
await db.remove('someNode'); // Signed by Eve

// Alice's unmodified peer receives the operation:
// 1. Verifies Eve's signature ✓
// 2. Queries Eve's role in ALICE'S graph: 'guest'
// 3. can('guest', 'delete') = false
// 4. REJECTS the operation

// Result: Eve's local state is corrupted, but honest peers are unaffected

const db = await gdb('mydb', {
  sm: {
    superAdmins: ['0xALICE...', '0xBOB...'] // Immutable during runtime
  }
});

function getSenderRole(ethAddress) {
  // 1. Check STATIC superadmin list FIRST
  if (this.config.superAdmins.includes(ethAddress)) {
    return 'superadmin';
  }
  
  // 2. Query DISTRIBUTED role from graph
  const userNode = this.graph.get(`user:${ethAddress}`);
  return userNode?.value?.role || 'guest';
}