Protocol History
Why Bitcoin development moves slowly
Protocol referenceSource: Bitcoin Core contribution and review documentationThe review and testing expectations described here follow the project's own documentation.
The asymmetry of consensus change
Most software can be changed quickly because a mistake can be fixed in the next release. Bitcoin's consensus rules do not work that way. A rule is enforced by every validating node, and the chain that has already been built under the old rules is not rewritten when the rules change. If a change turns out to be wrong, the network cannot simply revert it: the blocks that were produced under it are part of the history, and the balances they established are part of the ledger.
That asymmetry means the cost of a mistake is not the cost of fixing it. It is the cost of the mistake itself, borne permanently by everyone who holds coins or runs a node. A rule that accidentally makes some outputs unspendable, or that allows a signature to be reused, or that creates an incentive to mine dishonestly, cannot be undone by a subsequent release. The only remedy is a hard fork that changes the rules again, which carries its own risk of splitting the network.
The conservatism follows from that. A change that is merely beneficial is not automatically worth making, because the expected gain has to be weighed against the possibility of an error that cannot be corrected. The bar is not "does this improve things" but "is this improvement worth the risk that it is wrong in a way we have not found".
What the review process is for
The review process exists to find the errors that would otherwise become permanent. A consensus change is read by people who did not write it, who look for edge cases the author did not consider, and who are expected to say so publicly. The discussion is adversarial by design: the useful contribution is not agreement but a concrete case in which the proposal behaves badly.
Testing is part of the same effort. A change is expected to come with tests that exercise the new rules, including the cases at the boundaries where the rules are least intuitive. Bitcoin Core maintains a functional test framework that runs a network of nodes against each other, and a consensus change is expected to be covered by it. The tests are not a formality; they are the mechanism by which a rule that behaves differently on different implementations is caught before it is deployed.
The process is also slow because it is open. Anyone can read a proposal, comment on it, or object to it, and there is no mechanism for closing a discussion that has not reached agreement. That makes the process inefficient in the ordinary sense, and it is the reason a change can take years to move from an idea to a deployed rule. It is also the reason a change cannot be pushed through by a group that happens to be in a hurry.
Adoption is a separate hurdle
Even a change that passes review is not deployed until the network adopts it. Node operators have to upgrade, miners have to signal and then produce blocks under the new rules, and the change takes effect only when enough of the network enforces it. That is a second filter, independent of the technical review, and it is the one that decides whether a proposal becomes a rule.
The mechanism for measuring that adoption is described on the version bits and soft-fork signalling page. Its significance here is that it makes adoption a deliberate act rather than a consequence of a release. A node operator who does not want a change can decline to enforce it, and the network has to reach a threshold without them.
The distinction between a proposal and a rule is set out on the how BIPs work page, and the difference between a change that tightens the rules and one that loosens them is the subject of the soft forks and hard forks page. Together they explain why the path from an idea to a deployed rule is as long as it is.
What the caution buys
The obvious cost is that Bitcoin is slow to improve. Features that other networks adopt in months take years here, and some never arrive. Proposals that would be uncontroversial elsewhere become multi-year arguments, and the arguments themselves consume attention that could go into building. Anyone who wants a network that iterates quickly will find this frustrating, and the frustration is legitimate.
What the caution buys is predictability. A holder of bitcoin can be confident that the rules governing their coins will not change without a process they can observe and participate in, and that no group — developers, miners, or large holders — can alter those rules unilaterally. That confidence is the thing the network is selling, and it is not separable from the slowness. A system that could change its rules quickly would be a system whose rules could be changed quickly by whoever held the most influence at the time.
The 2017 fork is the clearest evidence that the trade-off is real rather than theoretical. A substantial group wanted a different rule, could not persuade the rest of the network, and implemented it separately. The original chain continued unchanged. That outcome is the conservatism working as intended, and it is also the reason the conservatism persists: the episode showed both that a determined minority cannot force a change, and that leaving is possible for anyone who wants one.
Sources
- Bitcoin Core, Contributing to Bitcoin Core — the review, testing and release expectations for a change.
- Bitcoin Core, Developer documentation — the consensus and policy documentation a change must satisfy.
- BIP 2, BIP Process, revised — the stages a proposal must pass before it is considered complete.
- BIP 99, Motivation and deployment of consensus rule changes — why the deployment mechanism is chosen with the same care as the rule.
Related reading
- Protocol, Transactions & MiningThe supply schedule, transaction mechanics and mining economics behind the price.
- Proof of WorkThe hash puzzle, the target and nonce, and why accumulated work secures the chain.
- Difficulty AdjustmentThe 2,016-block retarget, its caps, and the ten-minute target it defends.
- HashrateWhat hashrate measures, why it is estimated, and how it differs from difficulty.
- Mining PoolsPooled hash rate, share accounting, payout schemes and centralisation.
- Miner RevenueThe block subsidy plus fees, and how the mix changes across subsidy epochs.