privacy · proofs · compute
v3.2 · checksummed

Public instrument panel

The Trip Wires

16 kill conditions and 2 weakening conditions, each with its instrument and its clock.

These are not predictions. They are trip wires. A trip wire does not tell you when the intruder arrives; it tells you, forever after, whether you were watching.


Instrument status: not yet deployed — spec published. The measurement contracts for every trip wire below exist in the thesis record. Live readings begin when the reference panel and telemetry infrastructure are live. Until then, every status below reads spec published, and that is the honest state. The monthly log of public-proxy readings lives at /readings/ — reading #1 (September 2026) is up.
RL1

Verification Affordability Breaks

kills

Condition

Physical VerifyPrice p95 exceeds SLO bounds for core workloads for ≥3 consecutive months, with no credible remediation path.

Instrument

Physical VerifyPrice SLOs (cost of checking on reference hardware)

Clock

3-month persistence

Status

spec published

RL2

Refund Safety Breach

kills

Condition

Corridor refund_safe < 100% on any admissible route, with repeated incidents and no automatic delist + remediation.

Instrument

VerifySettle refund-safety telemetry

Clock

Incident-driven; automatic delist

Status

spec published

RL3

Verification Monoculture

kills

Condition

>70% of verifications on a single hardware profile, TEE vendor, or jurisdiction for ≥3 consecutive months.

Instrument

Verification source concentration

Clock

3-month persistence

Status

spec published

RL4

Telemetry Capture

kills

Condition

Receipt datasets become unavailable, unverifiable, or controlled by a single party.

Instrument

Reproducibility of raw receipt datasets

Clock

Continuous; breach on control

Status

spec published

RL5

Fee Coverage Collapse

kills

Condition

Fee+burn coverage falls below 10% of security budget and workload mix becomes >80% speculative for ≥12 months.

Instrument

FeeCoverage + workload composition

Clock

12-month persistence

Status

spec published

RL6

Value Capture Failure

kills

Condition

Triad usage grows but native-asset fee volume, burns, collateral lockups, and fee coverage do not grow with it for ≥12 months.

Instrument

Usage-vs-capture series divergence

Clock

12-month persistence

Status

spec published

RL7

Legal Incompatibility

weakens

Condition

Lawful users in major jurisdictions cannot use privacy rails without unacceptable compliance uncertainty for ≥12 months, and no lawful-privacy patterns are adopted.

Instrument

Corridor compliance receipts; viewing-key usage

Clock

12-month persistence

Status

spec published

RL8

Governance Capture

kills

Condition

Governance can alter issuance schedules, fee routing, or telemetry rules without hard constitutional constraints, timelocks, or supermajority requirements; or a single address family holds >20% of time-locked governance weight for ≥2 consecutive quarters; or the subtractive-only emergency path is invoked more than twice in four quarters or its scope is eroded to permit value redirection.

Instrument

Governance-weight concentration; emergency-path invocation count; constraint audit

Clock

2-quarter persistence (concentration); 4-quarter window (invocations)

Status

spec published

RL9

Wrapper Dominance Becomes Monetary Substitution

weakens

Condition

Wrapper Dominance Ratio rises for ≥2 consecutive quarters while native fee share, private settlement volume, and collateral lockups stagnate or decline. Both stock and flow components must rise.

Instrument

WDR (stock + flow pair); Wrapper–Native Growth Gap (unit-denominated)

Clock

2-quarter persistence

Status

spec published

RL10

Physical Infrastructure Opacity

kills

Condition

Physical VerifyPrice (FCR audit cost) exceeds 2× its frozen trailing-four-quarter baseline, or Facility Capacity Receipt data is unavailable or unverifiable for >20% of active capacity, for ≥2 consecutive quarters.

Instrument

FCR availability and verifiability; Physical VerifyPrice

Clock

2-quarter persistence

Status

spec published

RL11

AI Enclosure

kills

Condition

Top-3 hyperscalers, closed TEEs, or a single jurisdiction exceed 50% of VerifyPrice-tracked verified compute capacity, and the Enclosure Risk Flag triggers and persists.

Instrument

Enclosure Risk Flag; capacity concentration

Clock

Persistence required

Status

spec published

RL12

Agency Failure

kills

Condition

Forced Disclosure Incidence reaches ≥10% of surveyed employment, banking, housing, travel, or benefits onboarding events in any major jurisdiction, or the non-custodial share of settled native volume falls below 50% while institutional usage grows, for ≥12 months.

Instrument

Forced Disclosure Incidence; non-custodial share; participation-line telemetry

Clock

12-month persistence

Status

spec published

RL13

Energy Sovereignty Failure

kills

Condition

Network capacity-weighted sovereign optionality falls below threshold for ≥2 consecutive quarters, or >50% of VerifyPrice-tracked capacity sits in jurisdictions operating an active curtailment regime against verification workloads.

Instrument

Sovereign optionality O_s^net; curtailment jurisdiction share

Clock

2-quarter persistence

Status

spec published

RL14

The Capturable Wedge Closes

kills

Condition

Condition A: capacity-weighted ω across the canonical starter set falls below the realized take rate (ω < τ) for ≥2 consecutive quarters. Condition B: native fee turnover fails to grow over a trailing four-quarter window while physical throughput grows. Either condition breaching trips the red line.

Instrument

ω vs τ; deflation-adjusted native fee turnover vs. physical throughput

Clock

2-quarter persistence; RL14-B requires 2Q of trailing-4Q non-growth

Status

spec published

RL15

Native Collateral–Capacity Spiral

kills

Condition

A pre-declared material native-asset drawdown persists ≥30 days; collateral coverage falls below realized slashing exposure; operator exit exceeds threshold; stress-adjusted DVC declines; released collateral increases liquid float; and core service SLOs fail to recover within 90 days. Clauses are conjunctive.

Instrument

Drawdown + collateral coverage + DVC + SLO recovery

Clock

30-day drawdown; 90-day SLO recovery

Status

spec published

RL16

The Convenience-Yield Null

kills

Condition

With the maturity gate open, the regime-conditioned convenience-yield series shows no coefficient on regime pressure R distinguishable from zero across at least two distinct macro states for ≥4 consecutive quarters, with the specification and state classification pre-committed.

Instrument

Base-asset lending rates, forward and perpetual basis, wrapper basis — published against the regime-pressure index

Clock

4-quarter window; maturity-gated

Status

spec published

RL17

Information-Sensitivity Reversion

kills

Condition

Cross-lender haircut dispersion on the base asset and on pledged positions fails to decline as verification coverage rises; or dispersion widens materially during a declared stress episode while receipt availability and VerifyPrice remain within SLO.

Instrument

Haircut level and cross-lender dispersion against a pre-committed lender panel

Clock

2-quarter persistence

Status

spec published

RL18

The Denomination Null

kills

Condition

Condition A (weakens): Tier II/III free-choice denomination share, subsidy-adjusted, is flat or declining over four quarters while throughput and native fee turnover grow. Condition B (kills): Tier I free-choice denomination share is flat or declining while Tier I free-choice contract volume grows. An accounting carve-out for externally mandated quoting units is applied before either condition is evaluated.

Instrument

Free-choice denomination share by tier; quote/settle matrix; redenomination events

Clock

4-quarter window; maturity-gated

Status

spec published