## 2 Preliminaries and Related Work
### Related Work
#### 2.2.2 Blockchain-Based Methodology  
Using blockchain can protect the source code from tampering and provide reliable traceability of records. [PERSON] et al. [40] proposed an extensible framework based on standard provenance model specifications and blockchain technology for capturing, storing,exploring and analyzing software provenance data. In [41], a public malware verification ecosystem based on blockchain was proposed to provide decentralized, transparent and immutable software audit management. However, experienced members are required to participate in the verification or the audit, with a high workload and cost. The value drivers supported by blockchain (a reputation-value system, data ownership, verification and tracking) [42] meet the incentive needs of OS governance. [PERSON] et al. [43] designed a blockchain-based OS contribution protection system that realizes the conversion of developers' contributions to intellectual properties and records their cumulative interests in the form of tokens. In [44], a distributed autonomous software organization model was proposed in combination with blockchain, which provides a continuously running virtual organization for the software community and users, improving incentives and the community experience through financing, citation, reputation, etc. There are few discussions on contribution, evaluation or inter-organization. The evaluation vulnerability may lead to the loss of credibility of the converted token or reputation. Blockchain has reshaped the trust model in the organization, trustlessness; thus, interaction and collaboration are easier. [PERSON] et al. [45] developed a fair bug county market based on blockchain to complete bug submissions and reward feedback without mutual trust. Combined with blockchain and open intercloud architecture, [PERSON] et al. [46] designed a self-evolving and coordinated OS community architecture, including organization management and team coordination. However, they ignored blockchain permissions and identity authentication in actual OS ecosystems. Too strict restrictions will affect the activity, and too relaxed policies will lead to the proliferation of malice. Blockchain and related technologies, such as smart contracts and oracles, can improve the transparency and trustworthiness of automation in software development, testing and delivery. [PERSON] et al. [47] proposed a system framework using blockchain and smart contracts to capture development activities and automatically evaluate compliance with governance policies. [PERSON] et al. [48] proposed a blockchain-based platform for outsourcing software among parties that distrust each other that can perform automatic tests and reward payments. However, it did not effectively solve the free rider behavior in the software reward. Requirements such as automatic testing and automatic delivery of OS rewards also exist in OS scenarios. OS code is public, so each process of OS reward must be coordinated to prevent others from stealing codes and obtaining the reward. The inherent decentralization of blockchain drives the rights and responsibilities in the governance process to be transparent and fair. In [49], a blockchain-enabled governance framework was proposed to build trustworthy software. Recording, monitoring and compliance analyses are mostly performed by pre-agreed smart contracts, which bring transparency and auditability. However, this framework is oriented to regulatory organizations and does not discuss fairness. [PERSON] et al. [50] proposed a blockchain-based crowdsourcing framework that replaces managers through smart contracts and realizes various policies with enhanced trustworthiness and fairness. Although the arbitration committee is randomly selected from the miners to resolve the dispute over evaluation, the consensus process and the credibility of the selected miners were not discussed. From the perspective of architecture, some studies tend to give too many functions to a single blockchain.