§10. Work Credits: Energy-Anchored Claims

Jason St George. "§10. Work Credits: Energy-Anchored Claims" in Next Generation Stores of Value: Privacy, Proofs, Compute. Version v3.2. /v/3.2/read/part-ii/10-work-credits/

Work Credits: Energy-Anchored Claims

Every era that mechanizes work eventually writes claims on it. Grain receipts became banking; warehouse receipts became money-market funds; and in each case the instrument was born useful and lived or died on one question — did the claim stay tethered to the thing in the warehouse? The tether is everything. A receipt that outruns its warehouse is a promissory note wearing a receipt’s reputation, and the bill arrives the day everyone redeems at once. This chapter builds the tether before it builds the claim.

The triad gives us three capacities. To make them tradable without confusing service with money, we need a unit of account for work: something that binds energy, hardware, delivery terms, and verification into a transferable typed claim.

Call these Work Credits (WC).

Informally:

A Work Credit is a claim on a standardized unit of triad work (privacy settlement, proof generation, or verified compute) that has been produced and attested under public SLOs.

Key distinction: Work Credits are energy-priced, not energy-pegged. They are denominated in work, not in kWh. Energy enters through Facility Energy Receipts (FERs) and VerifyPrice, not through a one-dimensional peg. See §10: Work Credits: Energy-Anchored Claims for the full treatment.

Clarification. Throughout this section, “Work Credits” are generic, notional service claims, not product branding and not the base asset. “AI Money” and “proof money” survive only as historical shorthand for service-instrument design spaces; the analytical objects are typed compute, proof, and settlement claims. That separation — claim versus money — is stated once here and defended twice, at §10: Work Credits: Energy-Anchored Claims and §10: Work Credits: Energy-Anchored Claims; it is not repeated as a caveat at every mention.

We can describe Work Credits along a few axes:

Definition: Work Receipts vs. Work Credits

A common source of confusion is conflating “proof that work was done” with “transferable claim on future capacity.” These are different financial objects. We split them cleanly:

Work Receipt (WR)

A Work Receipt is a PIDL artifact proving that a specific unit of work was completed under attested conditions.

• Content: Claim hash, proof hash, workload ID, SLA tier, timestamps, hardware profile, prover signature.

• Properties: Copyable, verifiable by anyone, not scarce.

• Analogy: A receipt from a completed transaction. It proves the past but confers no future rights.

Work Receipts are not money. They are evidence.

Work Credit (WC)

A Work Credit is a transferable instrument issued against Work Receipts under protocol-defined issuance rules.

• Issuance: Minted when (a) a valid Work Receipt is accepted by the network, and (b) telemetry confirms SLOs are met.

• Properties: Scarce (supply bounded by issuance rules), transferable, fungible within workload class.

• Rights: Depend on the design variant (see below).

Base asset and Work Credit separation:

Hierarchy rule: The base asset is the only object evaluated for monetary premium, and even then only conditionally. Work Credits are useful for service procurement and cost hedging and are explicitly not pitched as stores of value.

Issuance mechanics for Work Credits:

For a canonical workload $W$ (e.g., “MatMul of size $n$ with error bound $\varepsilon$,” “provenance proof for content type $C$,” “corridor settlement of size $S$ with anonymity set $\geq A$”), define:

• $p(W)$: production cost (energy + hardware amortization + opex) to generate one unit and produce a valid proof.

• $v(W)$: verification cost.

• $r(W) = v(W) / p(W)$: verification asymmetry.

A Work Credit of type $W$, tier $T$ is issued only when:

• A valid Work Receipt for workload $W$ at tier $T$ is accepted by the network.

• Telemetry confirms that VerifyPrice($W$,$T$) and other SLOs (latency, failure rate, decentralization) are within bounds.

• Issuance does not exceed the issuance envelope for the current period (see §10: Work Credits: Energy-Anchored Claims).

The credit represents only the service rights stated in its terms. A receipt can attest historical work and a voucher can promise future capacity; neither becomes the fee/staking medium or inherits the base asset’s conditional monetary candidacy.

Energy Anchoring

Like PoW, Work Credits are ultimately energy-anchored:

• The marginal cost of producing one more credit is bounded below by the energy and hardware required to produce work that passes the verification threshold.

• Where SHA-256 PoW has no buyer for its work, this work has one: it powers privacy settlements, proofs of provenance, and AI computation.

This anchoring gives Work Credits:

• Credible scarcity: You cannot mint Work Credits without expending real resources to produce proofs and settle flows.

• Economic meaning: One credit corresponds to a service somebody was willing to pay for (anonymized payrolls, authentic media, verified inference).

And the cost of the same property.

The buyer that gives a Work Credit its economic meaning is also an attack surface the hash puzzle does not have. Demand for SHA-256 work cannot be subsidized away, mandated, or sanctioned, because there is nobody to subsidize, mandate, or sanction; demand for verified inference can be all three. The energy anchor is therefore a service-cost and provenance anchor, not a monetary one. Bitcoin’s monetary objectivity and a Work Credit’s link to real activity are different properties (§30: Objections & Responses).

Layer 0 Maturity and Economic Consequences

Work Credits are only as trustworthy as the hardware that produces them. A world where all proving runs on opaque, vendor-controlled hardware is different from one with diversified, partially open designs.

§14: Layer 0: Verifiable Machines & Energy (Part III) defines a Layer 0 maturity ladder with grades L0-A through L0-D. Here we preview how those grades affect Work Credit economics:

How this affects issuance and pricing:

1. Tiered issuance caps: WC minted on L0-A profiles may face stricter issuance limits than L0-C/D profiles. This prevents the system from becoming dependent on opaque hardware.

2. Market pricing: WC from different L0 grades can trade at different prices if markets distinguish them. Treasuries and institutions may pay premiums for L0-C/D-backed capacity.

3. Risk disclosure: Every Work Receipt includes the hardware profile (HID) used. Aggregated telemetry shows what fraction of total WC is backed by each grade.

4. Deprecation impact: If an L0-A profile is compromised (TEE backdoor discovered), WC minted on that profile can be quarantined, discounted, or excluded from certain uses. This is the “bond downgrade” analog.

Why this matters for service-claim quality:

If 90% of Work Credits are minted on L0-A hardware and a major TEE is compromised, claim quality and DVC take a hit—not because the cryptography failed, but because the service path depended on a common hardware assumption.

By making L0 grade explicit and tying it to economic consequences, the system:

• Creates incentives to invest in open hardware.

• Bounds the impact of hardware compromises.

• Gives users and allocators the information to price risk appropriately.

This is covered in detail in §14: Layer 0: Verifiable Machines & Energy (Part III). The key point for Part II: hardware trust is not binary; it is graded, measured, and priced — and because it is priced, the service claim’s quality is legible without anyone having to take the word “typed” on faith.

Robots, AI, and the Demand for Work Money

In a robot- and AI-heavy economy the demand story for Work Credits becomes almost embarrassingly straightforward.

Consider a warehouse or factory where most of the physical activity is carried out by robots, and most of the planning and oversight is handled by models. The day-to-day budget splits into:

• Energy to power robots and data centers.

• Compute to run models and generate proofs.

• Privacy and settlement to pay workers, suppliers, tax authorities, and investors without leaking trade secrets or exposing everyone’s graph.

Each of those budgets expresses itself as a recurring need for receipts:

• Proof of correct inference for high-stakes decisions.

• Proof of compliance and risk calculations for regulators and insurers.

• Privately settled wages and vendor payments with lawful audit trails.

Today that flow is mediated through cloud bills, payroll files, bank wires, and audit PDFs. In the stack described here, it can be mediated through Work Credits and receipts. The robots and services are paid in typed claims; in exchange they produce receipts that can be verified cheaply and settled over privacy rails. High turnover can make the claims useful working balances. It does not establish reserve demand for them or for the base asset.

This is one concrete way to discipline remarks like “money will just be energy.” Energy, compute, and hardware are inputs; Work Credits denominate future access to verifiable, robot-mediated output. They do not become joules, reserve assets, or monetary anchors by denomination.

Why Work Credits Remain Service Claims

A claim can be honest and still not be money. Scarcity, transferability, public verification, censorship resistance, and recurring demand are together enough to make a Work Credit a high-quality commodity or forward service claim; none of them, singly or jointly, is enough to make it savings. The reason is physical rather than rhetorical: the credit stays exposed to workload basis, location, hardware, SLA, expiry, delivery, and common-cause risk, and a promise of future service may carry duration. It is a warehouse receipt with a date on it, and a savings instrument has to survive the day the warehouse is the problem. DVC and the evidence artifacts determine whether the claim is fulfillable; the Native Monetary Buyer Map determines whether the separate base asset has a holder constituency capable of bearing loss. Two different questions, two different instruments, and neither answer transfers.

Monetary Role

Work Credits sit at the junction between base capacity and service contracting:

• For operators, they are revenue in kind: miners/provers/routers earn credits by contributing triad capacity.

• For users, they can be pre-paid capacity: hold credits to secure future access to specified triad services, or trade expected scarcity.

Their service value depends on:

• Demand for specific workloads: Work Credits tied to high-value workloads (e.g., compliance proofs, LLM inference) may command higher premia.

• Governance & telemetry honesty: If VerifyPrice and decentralization metrics are falsified or gamed, the link between credits and real work weakens.

• Regime pressure and deliverability: Differential demand may rise as substitutes weaken, while DVC may fall; the Pressure–Capacity Corridor prevents a monotonic crisis claim.

In portfolio terms, Work Credits are typed service or capacity exposure. LP and staking positions are the equity-like or derivative layer; the base asset is evaluated separately.

Issuance: Tying Credits to Real Capacity

There are many possible issuance schemes; what matters here is not choosing a particular curve, but enforcing two principles:

1. Issuance is legible.

2. Issuance is constrained by real capacity.

One extreme is the Bitcoin model: a fixed schedule, regardless of demand, with the understanding that price will equilibrate. Another extreme is a pure capacity-linked model: Work Credits are minted only when new proving, compute, and settlement capacity comes online and is registered with telemetry; they behave almost like tokenized capacity reservations. In practice, a hybrid is likely: a predefined issuance envelope over time, modulated by capacity growth and burn.

In such a system, adding a new proving cluster, plant, or corridor is not just a marketing slide; it is an event that expands the envelope of Work Credits the system can credibly support. The converse is also true: if plant retires or corridors die and are not replaced, issuance that continues on autopilot will show up as VerifyPrice drift, SLA breaches, and deteriorating energy metrics. The governance layer’s job is not to guarantee any particular price, but to keep issuance and capacity in rough proportion and to make any departures visible.

From an allocator’s perspective this yields a familiar pattern: Work Credits look like equity in (or claims on) a portfolio of infrastructure (proving farms, AI chains, privacy corridors, and plants) rather than a purely arbitrary balance sheet. The difference from conventional “infra tokens” is the insistence on receipts and KPIs: if claimed capacity and observable behavior diverge, the discrepancy is not a rumor; it is a datapoint.

The Supply Balance Equation

Here is the question that kills most “energy-backed” tokens in the cradle: why does demand not simply expand supply, neutralizing scarcity? The mechanism sounds self-defeating. If Work Credits are minted whenever verified work is done, then every new customer who arrives mints new supply to serve them. The token is busy, the network grows, and the scarcity — the very thing that was supposed to make holding worthwhile — evaporates into its own success. Demand, on this reading, is not a source of scarcity but an exhaust valve for it.

That is not a bug in the design. It is the design, correctly read. Work Credits are minted against delivered service, so supply growing with demand is not leakage; it is the claim staying honest. A service claim whose supply could not grow to meet service demand would be a shortage instrument, not a savings instrument — and neither of those is a reserve asset. The interesting quantity is therefore not gross issuance but what remains after the service is delivered, and that is a balance, not a schedule.

The answer lies in the net supply dynamics. We can express this as a balance equation:

Lost or forgotten wallets do not leave the outstanding count — the units still exist on-chain — so they are not a term in this identity; the effective (circulating) supply additionally nets them out.

For Work Credit supply to remain aligned with deliverable service, the design must ensure:

Read that as a solvency test, not a scarcity test. It is the warehouse being asked to show that every receipt outstanding corresponds to something physically present and deliverable. It places no ceiling on how many receipts a busy system writes; it places a ceiling on how many can be outstanding at once, and the ceiling moves only when the physical world moves. That distinction carries the whole chapter:

• During growth: Work Credit issuance may grow with independently verified DVC and contracted demand.

• At maturity: Claims retire through delivery, expiry, or cancellation under published terms. Scarcity can affect service price without making the claim a reserve asset.

What prevents runaway issuance?

The same four doors, in the order an operator would try them:

1. DVC envelope: Total WC outstanding for each workload, tier, and horizon is capped by haircut stress-adjusted DVC.

2. Capacity evidence: The envelope expands only when FERs, FCRs, hardware profiles, and scenario flow support additional deliverable service.

3. Contract retirement: Delivery, expiry, cancellation, and default rules remove or impair claims explicitly.

4. Governance friction: Changes to service-claim rules require supermajority and are visible in dashboards before activation.

Telemetry that detects supply risk:

• Inflation rate: Issuance / circulating supply. Should decline over time.

• Retirement rate: retirements / issued. Should track delivered service and expiry terms.

• Net supply change: $\Delta$Supply per epoch. Positive during growth, flat or negative at maturity.

• Issuance vs. capacity: If issuance grows faster than verified capacity, this signals potential dilution.

If these metrics drift outside healthy ranges, it becomes visible in dashboards—holders and operators can respond before the SoV thesis is undermined. A system that mints against a warehouse cannot hide a shrinking warehouse; the drift shows up in the issuance numbers before anyone has to allege anything.

Energy-Priced, Not Energy-Pegged

In popular discourse one often hears that “money will just be energy,” especially in the context of robotics and AI. As shorthand, this is attractive: robots and data centers run on electricity, so why not quote everything in kWh and be done with it? The problem is that not all kilowatt-hours are created equal. Time of day, grid node, reliability, carbon intensity, and siting constraints all affect their economic and political meaning. A winter-peaking kWh on a stressed urban grid is not the same as a curtailed hydro kWh in a remote valley. If we pretend otherwise, we smuggle a lot of hidden politics and risk into the unit of account.

The discipline in this thesis is to admit that complexity and route around it with receipts.

Energy is measured and wrapped into Facility Energy Receipts (FERs), which record, for each facility and time window:

• kWh in,

• kWh delivered to IT,

• heat reused,

• PUE/ERE/WUE,

• water use,

• carbon intensity,

• and outages/curtailments.

On top of that, we measure verified work per kWh:

• $\eta_{\text{vFLOP}}$ for FLOPs,

• proofs-per-kWh for proof workloads,

• swaps-per-kWh for settlement.

VerifyPrice then tells us how much it costs, in time and money, for an independent verifier to check that a given amount of work was done.

The result is an implicit conversion path:

energy $\to$ FERs $\to$ verified work (proofs/FLOPs/swaps) $\to$ receipts $\to$ Work Credits

We never pretend that one Work Credit is one kilowatt-hour; instead we make it easy for anyone to estimate, at any given time, how many kilowatt-hours of which quality and where in the world sit behind a portfolio of Work Credits, via the receipts.

Pricing in energy then becomes an inference problem for markets:

• Work Credits are implicitly energy-priced because their production and redemption depend on energy-intensive workloads whose cost curves are public.

• FERs and VerifyPrice make those curves legible without forcing a brittle kWh peg.

What distinguishes Work Credits from naive “energy tokens” is precisely this separation:

• The unit of account is denominated in work, not in kWh.

• Energy enters through FERs, $\eta_{\text{vFLOP}}$, and VerifyPrice, not through a one-dimensional peg.

Markets, regulators, and builders can look at those receipts and say, with some confidence, “a Work Credit currently corresponds to about this much capacity, with this energy and carbon profile, under these SLAs.” That is enough to make the asset priceable and analyzable without forcing it into a crude energy standard.

Why Work Credits Are Typed Service Claims, Not Presumed Money

It is equally easy to make the opposite error: to observe that Work Credits are scarce, transferable, and tied to necessary workloads, then promote them from service claims into money by vocabulary. This thesis no longer makes that move. A Work Credit is a typed claim on capacity or service whose quality depends on workload, location, hardware, SLA, delivery window, and the stressed path that can actually fulfill it. That case was made at §10: Work Credits: Energy-Anchored Claims; this section asks the harder question it left open. What would have to be true — not said, not branded, but observable — for a Work Credit to cross from service claim into money?

Four things, each visible in telemetry before it is visible in price:

1. Issuance is constrained by stress-deliverable capacity, not nameplate capacity.

   FERs, FCRs, and Delivered Verified Capacity bound claims by the service that survives scenario-specific minimum cuts. Gross installed hardware, energy procurement, or benign-state output is insufficient.

2. Demand can be budgeted without being monetary.

   Proofs, inference, settlement, and related workloads may sit on recurring OPEX lines. That supports a service market. It does not establish reserve demand, long holding periods, self-custody, loss-bearing capacity, or countercyclical accumulation.

3. Verification makes the claim legible, not monetary.

   A PIDL receipt can make fulfillment cheap to check and FCR/FER artifacts can make provenance auditable. Evidence reduces information asymmetry; it does not erase delivery, basis, counterparty, or temporal risk.

4. The claim must not absorb project duration by implication.

   A prepaid capacity claim, a claim on future service, and a project note are different instruments. If a Work Credit promises par, redemption, a coupon, or emergency support against construction failure, it has become duration-bearing credit and must be labeled and underwritten as such.

So what would the crossing actually look like? Not a marketing decision and not a milestone on a roadmap, but a change in holding behavior that the dashboards can see: holding periods lengthening rather than claims being redeemed at term, balances retained through drawdowns instead of recycled into service, and — the tell that would settle it — buyers acquiring the asset while the service it claims is cheap and available, which is the signature of savings rather than procurement. None of that is a design property. It is holder behavior, and it is exactly what the Native Monetary Buyer Map watches for on the base asset (§23: Extended Telemetry). Until those series move, Work Credits belong beside capacity vouchers and service contracts, not beside the base monetary candidate. They may trade at a premium for scarce delivery rights and may serve as collateral where their terms permit. Those are properties of typed service claims. Monetary treatment remains a separate empirical question answered, if at all, by the holder-side mechanism and buyer map (§10: Work Credits: Energy-Anchored Claims).

Economic Linkage: How Triad Demand Becomes Asset Value

This section answers the question that separates a systems manifesto from a monetary thesis: why does demand for Privacy, Proofs, and Compute raise the value of holding the asset, rather than merely rewarding consuming a service?

Earlier versions of this document answered it with a chain that ran from fee demand through burns to scarcity to price. That chain is withdrawn (§10: Work Credits: Energy-Anchored Claims) and is not restated here in any form. The answer below is in four parts, of which the first is a cash-flow claim the thesis no longer describes as monetary, and the remaining three are the monetary content.

1. What exactly is the asset?

The base asset is the protocol-internal unit in which fees may be required, collateral posted, and settlement denominated. It is a conditional monetary candidate and nothing in this section upgrades it. Work Credits are typed capacity or service claims; FCR, FER and PIDL artifacts are evidence; project notes are duration-bearing credit; LP and staking positions are derivatives or operating claims (§6: The Triad and the Monetary Candidate). Only the base asset is evaluated as money.

A phrasing used in earlier versions — that all uses of the triad must flow through the asset — overstated the design and is corrected here. Core protocol operations are denominated in the asset by rule. Equivalent computational content is obtainable elsewhere, always, at a price; bypass is a magnitude rather than a switch (§10: Work Credits: Energy-Anchored Claims), and the design constrains what that magnitude is worth rather than abolishing the alternative.

2. Why is it scarce in a monetary sense?

Scarce capacity does not imply a scarce asset. The design forges the link through capped or capacity-bounded issuance, fee retirement, collateral lockup, and energy-anchored minting of Work Credits against verified work rather than by decree.

Two precisions the earlier text elided. First, base-asset issuance follows the constitutional schedule and is independent of Work Credit dynamics; it is Work Credits that are bounded by delivered verified capacity. Second, whether burns exceed issuance at steady state — whether net supply actually falls as workloads grow — is an empirical outcome the fee-coverage and issuance boards report, not a property the design confers. Issuance discipline is real. Net deflation is a reading.

3. Why does demand for triad capacity raise the value of holding?

Four channels, stated in ascending order of monetary content, with the first two explicitly conceded not to be monetary at all.

1. A fee stream (not monetary). Every proof, private settlement and verified inference pays a fee in the native unit, and routing rules direct it to retirement, staking, and operator share. What the holder owns through this channel is a competitively priced claim on a cash-flow stream bounded above by differential value $\Delta$ and deflating with unit price (§10: Work Credits: Energy-Anchored Claims). A discounted-cash-flow valuation reproduces it exactly. A burn is a buyback and confers no moneyness.

2. A collateral floor (not monetary). Required lockup in the native unit supports a valuation from below and immobilizes float. §10: Work Credits: Energy-Anchored Claims bounds how large a fact this can be — large-cap-equity magnitudes, not monetary aggregates — and shows it is a slope effect on price impact rather than a level effect on price, because a lockup places no bid.

3. Pledgeability without due diligence (monetary). This is the first channel through which growing triad demand raises the value of holding rather than of receiving. As verified throughput grows and receipts accumulate, the cost to any counterparty of establishing what a pledged position actually is falls toward zero, and a position nobody must investigate can be accepted no questions asked (§10: Work Credits: Energy-Anchored Claims). The holder is not being paid; the holder is holding something that has become easier for everyone else to accept. Nothing is distributed through this channel, which is precisely why no discount rate reaches it.

4. A unit with something to denominate (monetary). A growing endogenous service economy gives counterparties a reason to reckon in the unit rather than merely settle in it, and denomination is the stickiest monetary function because it is a coordination device rather than a portfolio choice (§10: Work Credits: Energy-Anchored Claims). This channel is available to a service protocol and is not available to a bearer asset with no native goods.

A fifth channel, the state-contingent holder-side service flow, is argued separately at §10: Work Credits: Energy-Anchored Claims, because it is a property of the regime rather than of demand growth.

Channels 1 and 2 pay the holder. Channels 3 and 4 change what holding is. Only the second kind is monetary, and only the second kind survives a correctly specified discounted-cash-flow valuation.

The earlier version of this section described the holder as buying “a share of the fee stream from indispensable workloads,” and called the position “closer to equity in a utility than to a collectible.” That description was accurate for channels 1 and 2, and it was the reason the monetary reading had to be withdrawn: a utility equity earns its cost of capital and carries no monetary premium. Channels 3 and 4 are the reply, and they are a reply about the asset’s acceptability and denomination rather than about its cash flows. Neither is sized in this document.

4. What prevents capacity providers from capturing all value?

The classic “utility token trap”: if operators earn the fees and governance can inflate supply, holders are exit liquidity. The design’s answers are routing rules and they are stated as such — fees split between retirement, stakers and operators so no party takes the whole; base-asset issuance constitutionally scheduled; Work Credit minting bounded by verified capacity with overminting visible as an SLO breach; core operations denominated natively.

These govern where the fee goes, and none of them governs how large the fee can be, which is the question §10: Work Credits: Energy-Anchored Claims takes up and answers with a bound rather than a promise. Read this paragraph as a description of plumbing. The monetary argument is in channels 3 and 4 above and in §10: Work Credits: Energy-Anchored Claims, and it does not depend on any number in this paragraph.

Summary: the Value Capture Lemma in plain language

Demand for triad capacity becomes value accrual to the native asset only if five conditions hold at once: all core usage requires the asset, usage retires supply, capacity provision requires staking, issuance is constrained, and capacity cannot be cheaply bypassed. These conditions are necessary and not sufficient, and what they establish is accrual — a cash-flow claim and a floor — not moneyness. If any one fails, the system may be indispensable infrastructure whose economics accrue to operators or customers.

A related but separate claim. The five conditions are properties of the monetary design and say nothing about the durability of the demand being routed. That workload demand is structural rather than speculative is a distinct empirical claim whose failure the thesis treats as its own falsifier: a workload mix that becomes and remains predominantly speculative retires the store-of-value claim through Red Line 5, not through this lemma.

Which conditions the monetary channels actually use.

A reconciliation that the earlier text could not state, because it had only one candidate mechanism. Of the five conditions, four govern accrual, which is a discounted-cash-flow quantity. Issuance discipline is the exception, and §10: Work Credits: Energy-Anchored Claims explains why: an asset whose supply is discretionary is information-sensitive on supply, because a counterparty must maintain a private view of what the issuing body will do, and an asset requiring a private view cannot be accepted no questions asked. Condition 4 is therefore doing monetary work that Conditions 1, 2, 3 and 5 are not. That is the same conclusion §10: Work Credits: Energy-Anchored Claims reaches from the other direction, and the two now agree for a stated reason rather than by coincidence.

What the five conditions do not address.

Every one of them governs where fees go. None governs how large they can be, and a routing rule applied to a fee of nothing captures nothing. §10: Work Credits: Energy-Anchored Claims takes up the level question, finds that the standard objection to taxing a contestable market is wrong for a reason worth stating, and then finds that the correct answer supports a narrower conclusion than this Part had been drawing. The conditions themselves are unchanged.

The lemma has a frequently-missed converse. It states when native demand accrues economically to the asset. It does not state that movements in the asset’s observed market price are caused by that demand. Those are different machines, and conflating them is the most common way a monetary thesis fools its own author.

Value Capture vs. Price Capture

It is worth separating the two phenomena explicitly, because the thesis is routinely “confirmed” by the wrong one.

Value capture is the existing loop: triad usage $\rightarrow$ native fees $\rightarrow$ burns, collateral lockup, and operator demand $\rightarrow$ scarcity and cash-flow accrual to the asset. It is governed by §10: Work Credits: Energy-Anchored Claims. What it produces is a claim on a fee stream plus a collateral floor; whether the asset also carries monetary premium is a separate question, answered separately in §10: Work Credits: Energy-Anchored Claims.

Price capture is demand for exposure to the asset’s price, arriving through spot ETFs, exchange custody, treasury companies, margin products, options, futures, swaps, leveraged and inverse ETPs, passive indices, and systematic trading rules. Price capture can occur with no protocol use whatsoever.

Native value capture and observed price appreciation are neither equivalent nor mutually necessary. Only the top-left cell is monetary validation.

The diagonal is what makes the thesis falsifiable. A thesis that treats every price rise as confirmation and every price fall as noise cannot be wrong, and therefore cannot be right either.

Fee Incidence and the Level of the Fee

Every condition of the §10: Work Credits: Energy-Anchored Claims answers one question: where does the fee go? Required medium, supply reduction, collateral lockup, issuance discipline, and non-bypassability are all routing rules. None of them answers the question a valuation actually needs answered, which is how large the fee can be. A protocol that routes the whole of a fee of nothing into a burn address has satisfied five conditions and captured zero.

The gap has a sharp form, and it reached us as a fatal objection rather than as a note about an omission:

“You have deliberately engineered the most contestable market you could. Workloads are canonical and interchangeable, verification is cheap enough that no trust is required, admission is open, and there are no vendor chokepoints. A contestable market competes economic profit to zero. Zero profit means no surplus, and no surplus means nothing to burn.”

The objection is wrong. It is worth showing exactly why, because the correct answer rescues considerably less than it first appears to, and what survives is not the claim this Part started with.

Incidence: A Fee Is a Wedge on Turnover, Not a Claim on Profit

The objection conflates two different bases. A protocol fee is levied on transactions, not on residual profit. It is a tax wedge, and tax wedges do not require anybody to be earning rents.

Take the market the thesis is trying to build: many providers, free entry, roughly constant returns to scale in the relevant range, a canonical workload so that units are fungible. Long-run supply is then approximately horizontal at marginal cost $c$ (equivalently the protocol’s all-in unit cost $c_p$ of §10: Work Credits: Energy-Anchored Claims; write $c \equiv c_p$). Impose a per-unit protocol fee $f$ on that market and the supply curve the buyer faces shifts to $c+f$. The new equilibrium has buyers paying $c+f$, providers receiving $c$, and providers earning exactly the zero economic profit they earned before. The protocol collects $f \cdot Q$. Nothing about that revenue came out of operator margin, because there was no operator margin to take it from; in the long-run competitive case the entire statutory burden lands on the buyer.

Operator margin compression is irrelevant to fee revenue. The fee is a wedge on turnover. Turnover is what a contestable market maximizes.

This is standard incidence analysis, and it means the objection proves too much: if contestability destroyed fee bases, no commoditized market could ever be taxed, and every one of them is.

Incidence explains who bears a fee. It does not explain why a positive fee is sustainable, and the two should not be run together. Exchanges, clearing houses, and toll roads are lucrative on top of viciously competitive flows for a further reason: the flow is competitive but the fee layer is not. There is one place to clear the contract, one road across the water, one book where the trade is legally final — so the competition among users of the layer never becomes competition to be the layer. That inescapability is a property those venues possess and a protocol must earn; it is the subject of §10: Work Credits: Energy-Anchored Claims and §10: Work Credits: Energy-Anchored Claims, and the fork channel is precisely the case where it is not earned.

The short run is different, and the difference matters.

With installed capacity fixed, supply is not horizontal. Deployed hardware has already sunk its capital, so in the short run the supply curve slopes upward and part of the fee is absorbed as a reduction in quasi-rent to existing machines rather than passed to buyers. That is not a problem for this quarter’s fee revenue; it is a problem for the next round of capacity. Quasi-rent is what funds replacement, and an operator whose realized return on deployed hardware is being clipped by a fee re-prices the entry decision accordingly. The long-run pass-through result therefore describes the destination, not the transition, and the transition is where entry and capacity growth are decided. A fee schedule set as though incidence were instantaneously long-run will suppress the capacity it is trying to tax.

The Base, and Why It Deflates

Fee revenue is not $f$. It is

and both terms are endogenous. Two consequences follow, and the second is the more serious one.

Quantity responds to the wedge.

The tollbooth analogy holds only where there is no parallel free road. Raising $f$ raises the delivered price, and at the margin some volume declines, defers, batches, or leaves. What the protocol can extract is bounded not by what buyers would pay for the service but by what they would pay through this channel rather than the next-best one, which is the subject of §10: Work Credits: Energy-Anchored Claims.

An ad valorem fee on a deflating unit price is a shrinking real toll.

For this paragraph the protocol’s fee is modeled as ad valorem — a share of unit price rather than the per-unit wedge $f$ used in the incidence analysis above; under a per-unit fee only the volume term below moves, and the deflation mechanism this paragraph isolates does not arise. §9: Compute Through the “AI Money” Lens argues that verified compute stays scarce even as raw compute deflates. Grant that argument entirely; it does not touch this one. Even if the verification premium is fully durable, a fee expressed as a percentage of a unit price that falls secularly collects fewer real resources per unit of service delivered every year. Real fee revenue then grows only if

That inequality is an empirical bet, not a theorem, and the thesis is making it. It may well be a good bet — the historical pattern in compute is that unit-cost decline is met by more than proportional volume expansion — but the thesis has nowhere stated it as a bet, measured it, or said what would settle it against us. Condition B of Red Line 14 (§27: Risk Analysis & Failure Modes) exists to settle it: deflation-adjusted gross native fee turnover that fails to grow while physical throughput grows is this bet losing, in public.

The bet has a macro frame.

The volume-over-deflation bet is usually argued from technology curves: unit costs fall, demand expands more than proportionally, revenue grows. That is the technological channel, and it is the one §9: Compute Through the “AI Money” Lens treats. There is a second channel with the same signature but a different driver: a financial clearing event that transfers installed capacity from weakly financed owners to strongly financed users at lower capital cost, collapsing the effective price of capacity without any change in the technology [Perez 2002]. The two channels are observationally distinct — the technological channel shows up as gradual unit-cost decline with stable utilization, the financial one as a step-change in the price of installed capacity with utilization resetting — and they have the same effect on the inequality above: both push the deflation term up. What the frame adds is timing. The technological channel is smooth; the financial channel is not, and a fee base built on the expectation of smooth deflation being outrun by volume will experience the financial channel as a shock to exactly the term it is betting on. The instrument is unchanged — Condition B reads on the same series either way — but a reader tracking it should know that the two channels are live simultaneously, and that the financial one can move a quarter’s reading by more than a year of Moore’s law.

The Bound on the Sustainable Fee

Incidence tells us the fee has a base. It does not tell us how high the fee can be set. That ceiling is not a function of operator margin either; it is a function of what the protocol channel is differentially worth.

Differential Value $\Delta$ and the Sustainable Fee Bound

Let $c_p$ be the protocol’s all-in cost of delivering canonical workload $W$ at tier $T$, and $c_b$ the all-in cost of the best bypass channel delivering the same computational content without protocol-grade verification. Let $\Delta$ be the marginal buyer’s willingness to pay for the protocol’s differential properties: cryptographic checkability, neutrality, credible non-discretion, and non-custodial exit.

The buyer routes through the protocol only if $c_p + f - \Delta \le c_b$, so the sustainable fee satisfies

Here $\Delta$ is a scalar wedge in price units, not the difference operator used elsewhere in this Part.

The first term is the one a protocol designer wants to think about. The second is the one that decides the outcome, and it is structurally positive: verified compute costs more to produce than unverified compute, because proving overhead and redundancy are real resources spent on top of the underlying work. So the protocol begins every negotiation with a cost handicap and must recover it out of $\Delta$ before it collects a single unit of fee.

The document’s own tier multipliers are cost pass-through, not evidence of willingness to pay.

§19: Layer 4: Truth & Work prices assurance on its own axis: Replicated at $1.0\times$, Replicated-plus-audit at $1.4\times$, Probabilistic (M2) at $1.6\times$, Succinct (M1) at $2.5\times$, with a latency multiplier of $1.0$/$1.3$/$1.6$ multiplied in. Read those against what each tier costs to supply. Replicated-plus-audit is three independent re-executions and a randomized audit, so its multiplier is set against roughly three times the production cost; the M1 multiplier is set against a proving overhead that Appendix E: Hardware Profiles publishes as a quarterly series and does not yet know. The multipliers are rationale-set to cover redundancy or proving overhead plus a margin, and the document nowhere establishes that they do. That is a question about $c_p$ and the margin above it, not about demand, and nothing in the document establishes that any buyer’s $\Delta$ for succinct assurance is $2.5\times$ its $\Delta$ for a committee’s word. If it is not, headroom narrows as assurance rises, and at the top of the axis $\Delta - (c_p - c_b)$ can be negative — a tier that is technically superior, honestly priced, and unsellable. That is a testable prediction against the thesis and it is now measured (§27: Risk Analysis & Failure Modes, Red Line 14), because it should not have been left as an inference from a table caption.

Bypass Is a Magnitude, Not a Binary

Condition 5 of the §10: Work Credits: Energy-Anchored Claims is written as an existence condition — users cannot obtain equivalent capacity through a bypass channel — and Red Line 6 is written as a direction condition: usage grows while native fees do not. Neither is wrong, and neither is changed here. But both are read, in practice, as though bypass were a switch.

It is not. Bypass is never impossible. It is priced. There is always a channel that delivers the same computational content without protocol-grade verification, and the only question is what the buyer gives up by using it — which is exactly $\Delta$. Condition 5 should therefore be read and measured as a magnitude claim: not “no bypass exists,” which is false everywhere, but “$\Delta$ is large enough, for enough of the volume, to support a fee worth burning.” The condition stands as stated. Its interpretation is what this section tightens, and its measurement is what Red Line 14 supplies.

This is why the chain-strength rating for non-bypassability is reduced from Strong to Medium in this version (§6: The Triad and the Monetary Candidate). The condition is well specified as a binary and the binary is well enforced. The economics requires a magnitude, and the magnitude is nowhere estimated. A rating of Strong was a rating of the enforcement machinery, not of the quantity the argument depends on.

What Determines $\Delta$, and Why It Is Probably Thin

To first order, the differential value of a proof is the loss it prevents, times the probability that loss survives the alternative:

where $\mathcal{L}$ is the loss from undetected misexecution or denial of service and $\varrho$ is the residual probability of that loss under the best bypass channel. This operationalization lower-bounds $\Delta$: it prices only loss-prevention, while the full definition in §10: Work Credits: Energy-Anchored Claims covers four properties — cryptographic checkability, neutrality, credible non-discretion, and non-custodial exit — so neutrality and non-discretion enter as additional terms the $\varrho\,\mathcal{L}$ form omits. ($\varrho$ and $\mathcal{L}$ are used rather than the conventional $\pi$ and $L$, which denote the inflation rate in §2: The World Forces New Monetary Primitives and the leverage multiple throughout VerifyFlow and Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture.)

$\Delta$ is a distribution, not a number.

Before evaluating either term it is worth fixing what object $\Delta$ is. Every buyer has their own $\varrho$ and their own $\mathcal{L}$, so $\Delta$ is a distribution across the buyer population, and the fee bound of §10: Work Credits: Energy-Anchored Claims binds at the marginal buyer — the last one the protocol wants to retain at the posted fee — not at the median one. These come apart, and the difference is the whole commercial question. A thin median is entirely consistent with a lucrative fee, provided the upper tail is deep enough to be worth serving: counterparties nobody will indemnify because they are sanctioned or pseudonymous, flows crossing jurisdictions where no single forum will hear the claim, regulated model-risk and audit functions that must evidence correctness to a supervisor rather than merely believe it. For those buyers $\varrho$ is not small, because the indemnitor substitute is unavailable rather than merely inferior. The protocol’s commercial problem is therefore not “is the median workload willing to pay,” which it plainly is not, but “is the high-$\Delta$ tail large enough, and reachable enough, to carry a fee.” That is a sizing question the thesis has not answered, and Red Line 14 measures it capacity-weighted across the served mix rather than assuming it.

And at the median the answer is unflattering.

Written as $\varrho\,\mathcal{L}$, the critical term is $\varrho$, and here the thesis has been flattering itself. The bypass channel is not “unverified.” It is reputationally and contractually verified. A hyperscaler’s alternative to a cryptographic proof is its balance sheet, its SOC 2 and ISO audit reports, its published incident history, and an indemnity clause enforceable in a court that will actually hear the case.

A creditworthy, suable indemnitor is an excellent substitute for a cryptographic proof.

For an ordinary commercial workload in a benign state, the buyer’s exposure to undetected misexecution is not $\mathcal{L}$; it is $\mathcal{L}$ net of a contractual recovery from a solvent counterparty under a legal system that functions. That makes $\varrho$ small, and therefore $\Delta$ thin over the bulk of the distribution. Thin $\Delta$ against a structurally positive $(c_p - c_b)$ is the strongest form of the objection this section opened with, and it is not answered by incidence analysis. It has to be stated plainly, because a critic will otherwise state it first and more crudely: for the median commercial workload in a working legal order, cryptographic verification is a premium product competing against a cheaper substitute that is good enough. What that sentence does not say — and what a fair reading of it must preserve — is that the median is the marginal buyer. It is not, and the fee is set against the tail.

The Tail Is Bimodal, and the Two Modes Are Mutually Corrosive

The fee is not set at the median. §10: Work Credits: Energy-Anchored Claims put it at the marginal buyer in the upper tail — counterparties nobody will indemnify, flows no forum will hear, supervised functions that must evidence correctness rather than merely believe it — and then asked whether that tail is large enough to carry a fee.

That is the wrong question, because the tail is not one population. It is two. They want opposite things, and the thesis has been quietly adding them together.

The Two High-$\Delta$ Segments

Segment S (supervised). Regulated model risk, audit, clinical and pharmaceutical attestation, regulated AI deployment, supply-chain provenance under statutory duty. $\varrho$ is high because the loss is regulatory rather than financial: “we relied on the vendor” is not an answer a supervisor accepts, and no indemnity cures a sanction. What Segment S requires is evidence: scoped disclosure, viewing keys, named counterparties, jurisdictional clarity, retention.

Segment X (unsuable). Cross-jurisdictional, pseudonymous, sanctioned, capital-controlled, or adverse to the forum itself. $\varrho$ is high because the indemnitor substitute is unavailable rather than inferior — there is no solvent counterparty a court will make pay. What Segment X requires is absence: large anonymity sets, no disclosure surface, no perimeter identification, nothing that constitutes a subpoena target.

Both have genuinely high $\Delta$. Each one’s requirement is the other’s disqualifier.

The corrosion is not about the rail. It is about the set.

An anonymity set is a room. Segment S cannot afford to be seen entering a room that contains Segment X; Segment X is worth nothing in an empty room. Both want the same room, and each wants different people in it.

The obvious objection is that the thesis has already solved this: lawful privacy is default-private with optional disclosure, so Segment S turns viewing keys on and Segment X leaves them off, and both use the same protocol. That answer is correct at the level of the rail and it does not reach the actual problem, which is one level down.

Privacy is a network good. What Segment X buys is not a cryptographic property of its own transaction but the size and composition of the crowd it is indistinguishable within, and that crowd is shared. So is the crowd’s legal character. The two segments do not merely coexist on a rail; they occupy one another’s anonymity set, and each one’s presence changes what the set is worth to the other:

• S needs X to be absent. A compliance function cannot knowingly transact into an anonymity set containing designated parties, because the commingling is the sanctions exposure. The disclosure it can make about itself does not discharge a duty about who else is in the pool.

• X needs S to be present. §27: Risk Analysis & Failure Modes, Red Line 7, already states the mechanism: privacy that only outlaws use is a shrinking set. It is precisely the ordinary, legitimate, high-volume users who make blending plausible, and Segment S is the largest available source of them.

The dependency therefore runs one way and the repulsion runs the other. Segment X wants Segment S in the pool; Segment S wants Segment X out of it. That is not a stable composition, and no cryptographic feature resolves it, because the quantity in dispute is the population rather than the protocol.

Price discrimination is available and it destroys the good it prices.

The standard response to two segments with different willingness to pay is to serve them in separate tiers at separate prices, and the tier machinery of §19: Layer 4: Truth & Work would support it. Applied here it fails in a specific and instructive way.

Separating the segments into tiers separates their anonymity sets, and set size is the product. Two pools of half the size are worth less than one pool to every participant in both. Price discrimination on an ordinary good extracts surplus from each segment at its own willingness to pay; price discrimination on a network good extracts surplus while simultaneously reducing the quantity being sold, and here the reduction falls hardest on the segment whose $\Delta$ is highest.

You cannot segment a network good without degrading it. The protocol can price the two tails separately or it can pool them, and pooling is the only configuration in which either tail gets what it is paying for.

The consequence for the fee, stated precisely.

§10: Work Credits: Energy-Anchored Claims binds the fee at the marginal buyer. With two segments sharing one pool, and price discrimination unavailable for the reason above, the protocol is not choosing between $\Delta_S$ and $\Delta_X$ and it is not collecting their sum. It is setting one fee against whichever segment it is unwilling to lose, and the achievable revenue is not additive across the tails:

Neither branch yields the quantity a naive reading of §10: Work Credits: Energy-Anchored Claims suggests. $f$ and $Q$ are anticorrelated through the same distribution: a fee set at the higher tail sheds the volume of the lower one, and a fee set to retain both is bounded by the lower. The document has been treating “is the tail large enough” as a sizing question with one answer. It has two, and they interact.

Which architecture serves which segment.

§6: The Triad and the Monetary Candidate compares three architectures without pre-selecting one, and this subsection supplies a discriminating criterion the comparison did not previously have:

• Architecture A (one native monetary asset) forces both segments into one pool, one governance, and one legal posture. It maximizes set size and maximizes the corrosion. It is the configuration in which an enforcement action against Segment X is an enforcement action against Segment S’s counterparties.

• Architecture B (neutral reserve plus typed service claims) allows the segments to sit in different service claims over a shared reserve. It is the only one of the three in which the pools can differ while the monetary object does not.

• Architecture C (shared settlement, modular domain collateral) separates the collateral but not necessarily the sets, so it inherits the corrosion without the containment.

This does not select an architecture. It states, for the first time in this document, what the selection would have to be made on: not cross-subsidy and governance scope alone, but whether the architecture can hold two mutually corrosive high-$\Delta$ populations without losing one of them.

The instrument, and why it cannot be the obvious one.

The obvious measurement is anonymity-set composition by segment. That measurement is not available and must not be built, because a set whose composition is published is not an anonymity set — the instrument would destroy the property it measures, and a protocol that could report who is in its pool has already failed §3: First Principles: What a SoV Must Survive.

What is observable is departure, which is a behavioural series rather than a census:

• Compliance-side attrition after enforcement events. Supervised counterparty count and volume in the windows following a designation or enforcement action touching the protocol’s pools.

• Exit-side attrition after disclosure events. Shielded-pool activity and non-custodial share in the windows following the shipping or mandating of any disclosure surface, viewing-key requirement, or perimeter identification.

• The cross-correlation of the two series over rolling windows. A persistently negative correlation is the corrosion, measured without anyone being identified.

A protocol that shows both series declining together is losing the tail from both ends, which is the configuration in which the fee bound of §10: Work Credits: Energy-Anchored Claims goes to zero without any bypass channel being responsible.

Two Bypass Channels the Thesis Has Not Been Counting

Both of the following erode the base without tripping the instruments currently pointed at bypass.

Partial bypass at the intensive margin.

Bypass has been modelled as a routing decision — the buyer uses the protocol or does not. In practice the buyer uses less protocol per unit of underlying activity: batching many operations under one proof, aggregating proofs recursively, or using the protocol purely for attestation while executing the work elsewhere. Each is a legitimate engineering optimization, and each cuts native fees per unit of real economic activity. None of it registers as a Red Line 6 style “usage without fees” signal, because usage does still route through the protocol — just thinner. The correct denominator for fee intensity is the underlying economic activity being attested, not the count of protocol interactions, and the thesis has not been measuring it that way.

The protocol can be forked.

This is the more important omission. In an open-source, open-admission, canonically-specified market, the cheapest bypass channel is not a hyperscaler. It is this protocol, copied, with a lower fee and no burn. Every property the thesis is proud of — published workload specifications, open verifier implementations, permissionless participation, no vendor chokepoints — lowers the cost of producing that copy. A fork inherits the technology and discards the tax.

What actually prevents the fork from winning is not any of the five conditions. It is liquidity depth in the native asset, anonymity-set size in the privacy corridors, the installed collateral base and the operator relationships around it, the Schelling-point status of the workload registry, and the accumulated receipt history that makes one chain’s attestations worth citing. Those are network effects and coordination assets. They are not enforcement rules, and the thesis has been attributing the moat to enforcement rules. Stated honestly: §10: Work Credits: Energy-Anchored Claims explains why a user cannot get the service without the asset on this protocol. It does not explain why the user cannot get it on the copy. Whatever answer exists is a liquidity and coordination argument, it is empirical, and it belongs to link 7; whether holders then warehouse the asset’s risk belongs to link 8.

This is not purely hypothetical, and the one well-documented case ran exactly this experiment against exactly this kind of moat. In 2020, SushiSwap copied Uniswap’s open contracts and paid liquidity providers to migrate — a deliberate attack on a liquidity-and-coordination moat by an identical copy with better short-term incentives. The moat held. Liquidity depth, accumulated positions, and the receipt history a trader’s history lives in did not transfer with the code, and the copy won a share rather than the market. That is one observation in one corner of the design space, not proof — but it is evidence that the moat in question is real, and evidence about which moat: what defended the incumbent was not its technology, which was copied freely, but the coordination assets stacked on top of it. It is precisely those assets, and not the open specification, that a fork of this protocol would have to defeat.

The Fork Is an Equilibrium, Not a Competitor

The cheapest bypass is not a hyperscaler. It is this protocol, copied, with the fee removed.

§10: Work Credits: Energy-Anchored Claims concedes that, and concedes what actually stops the copy: liquidity depth, anonymity-set size, the installed collateral base, the registry everyone cites, the receipt history worth citing. Network effects, in other words, and not one of the five lemma conditions. The concession is correct. It was filed under the wrong heading.

Modelled as a bypass channel, the fork looks like the end of the fee. Modelled correctly, it changes what the fee is bounded by.

Two different bounds, and the binding one is not always the same.

The sustainable-fee bound of §10: Work Credits: Energy-Anchored Claims is $f \leq \Delta - (c_p - c_b)$, where $c_b$ is the all-in cost of the best bypass channel. Against a hyperscaler that expression carries the structurally positive cost handicap the section emphasizes: verified compute costs more to produce than unverified compute, and the protocol must recover the difference out of $\Delta$ before collecting anything.

Against a fork the arithmetic is different in a way worth stating explicitly. The fork runs the same technology, so $c_b = c_p$ and the handicap vanishes. What remains is

the differential value of transacting on this instance rather than on an identical copy — which is not a cryptographic property at all. It is liquidity depth, anonymity-set size, the installed collateral base and the operator relationships around it, whether the workload registry is the one everybody cites, and whether a receipt from this chain is worth citing because of what else is in its history.

The two bounds are separate quantities and the protocol is subject to both:

This is a real tightening of §10: Work Credits: Energy-Anchored Claims, which stated only the first term, and it is the correct place to put the concession the previous subsection made informally.

Contestable markets and coordination games give opposite predictions, and only one of them is the right model.

The objection that opened §10: Work Credits: Energy-Anchored Claims — a contestable market competes economic profit to zero — is the right model for the hyperscaler comparison and the wrong one for the fork. Contestability assumes entrants and incumbents are substitutes at the margin for each buyer independently. They are not, when the good’s value to each buyer depends on how many other buyers chose the same instance. That is a coordination game, it has multiple equilibria, and equilibria are not competed away by a better price. They are displaced by a focal point moving, which is a different and much slower mechanism.

A contestable market has one equilibrium and prices race toward it. A coordination game has several, and the incumbent’s advantage is not that it is better but that everyone is already there.

Openness cuts both ways, and the thesis has counted only one direction.

The previous subsection observed that every property the thesis is proud of — published workload specifications, open verifier implementations, permissionless participation — lowers the cost of producing the copy. True, and incomplete. Those same properties operate on the two bounds in opposite directions:

• Openness drives $\Delta_{\mathrm{tech}}$ against a fork to zero. There is no technical differentiator, by construction and by design commitment.

• Openness raises $\Delta_{\mathrm{coord}}$. A canonical workload registry that is public, stable, and cited by everyone is more focal than a proprietary one, not less. Schelling points are made of common knowledge, and publishing is how common knowledge is manufactured. The same is true of an open receipt history: its citability is a function of how many independent parties already read it.

So the honest statement of the trade-off, in the form §10: Work Credits: Energy-Anchored Claims uses for collateral:

Openness must be total for the technology and is the mechanism by which the coordination assets accumulate. You cannot have a defensible technical moat and an open specification. You can have an open specification and a focal point, and the second is the only moat this design is entitled to.

And the moat is buyable, which is the part that keeps it honest.

$\Delta_{\mathrm{coord}}$ is not a law of nature. A challenger can rent it: subsidize liquidity, pay operators to migrate, underwrite the anonymity set, and buy the switching costs down. This is the fork’s actual attack and it is a capital question rather than a technical one. The defensible claim is therefore narrow: the fee is bounded by what it costs a challenger to move the focal point, and that quantity is empirical, contestable by capital, and not guaranteed to exceed the fee.

The one case, in the right reference class and with its limits stated.

§10: Work Credits: Energy-Anchored Claims cites the 2020 SushiSwap attack on Uniswap: an identical copy of open contracts, paying liquidity providers to migrate, attacking a liquidity-and-coordination moat directly, and winning a share rather than the market.

Two corrections to how that case was used. First, the relevant reference class is not “forks” in general but coordination games in which an installed focal point is challenged by an identical copy with better short-term incentives — and in that class the observation is on point rather than cherry-picked, because it is a direct test of $\Delta_{\mathrm{coord}}$ against paid switching. Second, and stated plainly because the thesis holds itself to base rates elsewhere: it is one observation, it was selected after the fact, the incumbent survived, and a single surviving incumbent is not a base rate. It establishes that coordination assets can hold against a funded identical copy. It does not establish how often they do, or that they would here.

What this changes in the instruments.

Two additions, both small and both closing gaps that the bypass framing left open:

• Red Line 14’s reference panel gains a fork row. The pre-committed panel of §27: Risk Analysis & Failure Modes lists hyperscalers and GPU marketplaces — venues that measure $\Delta_{\mathrm{tech}}$ only. The lowest-fee protocol-grade fork offering the same canonical workload must be priced into $P^{\mathrm{byp}}$ on the same terms, because it is the channel with no cost handicap and therefore the one that binds first. A wedge measured only against unverified alternatives is measured against the weaker competitor.

• Acceptance breadth becomes a published series. The number of independent venues, corridors, and counterparties that quote, settle, and cite this instance rather than any other is the observable form of $\Delta_{\mathrm{coord}}$, and it belongs beside the denomination series of §10: Work Credits: Energy-Anchored Claims on the Value Capture Board (§23: Extended Telemetry). Both measure coordination; one measures whether people reckon in the unit and the other whether they converge on this instance of it.

Where this leaves link 7.

Non-bypassability was reduced from Strong to Medium in §6: The Triad and the Monetary Candidate because the economics requires a magnitude that is nowhere estimated. Nothing here raises it. The magnitude is now specified as two magnitudes rather than one, the second of which the document had been treating as an admission rather than a term, and both remain unestimated. What has changed is that there is now an instrument pointed at each.

What the Five Conditions Establish, and What They Do Not

Collecting the above, the lemma survives with its scope corrected downward.

What they establish.

That a contestable market can be taxed and the proceeds routed to a token. Specifically: (i) a competitively priced claim on a cash-flow stream $f \cdot Q$, bounded above by the per-unit wedge $\Delta$ applied to volume — $\bigl(\Delta - (c_p - c_b)\bigr) \cdot Q$ at the sustainable-fee bound of §10: Work Credits: Energy-Anchored Claims — and deflating with unit price; and (ii) a balance-sheet floor from collateral required in the native unit. Both are real. Both are also, precisely, quantities that a discounted-cash-flow valuation captures — a fee stream and a lockup.

What they do not establish.

Monetary premium. A monetary premium is by construction value in excess of discounted cash flows; it is what gold has and a pipeline does not. §10: Work Credits: Energy-Anchored Claims states the holder as buying “a share of the fee stream from indispensable workloads,” “closer to equity in a utility than to a collectible.” That description is accurate — and it is why this section withdraws the tokenomics inference made above it. A utility equity earns its cost of capital; it does not carry monetary premium. The two registers now stated side by side in this Part — routing rules on the one hand, price-mechanics claims on the other — are separated deliberately: the routing rules are design commitments that survive, and the price-mechanics claims are retired here.

Two corollaries follow that the thesis should have drawn earlier:

• A burn is a buyback. Economically, retiring supply with revenue is a pro-rata return of value to an existing claim. Buybacks change per-share value; they do not confer moneyness. No quantity of buyback has ever made an equity a store of value, and no burn schedule will do it either.

• Collateral is a floor, not a premium. A required lockup denominated in the asset supports a valuation from below. It is a balance-sheet fact, and §10: Work Credits: Energy-Anchored Claims bounds how large a fact it can be.

• A subsidy is a negative fee. Pass [Pass 2026] models proof-of-useful-work economies as three regimes: one in which the work is worthless and the token is pure seigniorage, one in which useful work is sold at cost, and one in which token issuance subsidizes the work below its compute cost. The fee-incidence bound places the second regime at $f \leq \Delta - (c_p - c_b)$ and the third at $f < 0$. A network in the third regime is buying volume with issuance; its receipts are real and its fee coverage is negative, and Red Line 5 and Red Line 14(B) are written to see it. Bitcoin’s work function, which has no external buyer, sits in the first regime by construction, and that is the content of the concession in §30: Objections & Responses.

The Test That This Reasoning Does Not Prove Too Much

If durable fee extraction from a commoditized flow made an asset money, the world would be full of monetary assets. CME clears standardized futures; DTCC settles equities; Visa takes a spread on card turnover; MSCI licenses indices that everyone benchmarks to; pipelines and port authorities meter physical throughput. All of them sit on flows more commoditized than canonical MatMul, all of them extract fees durably, several are structurally harder to bypass than any protocol will be, and not one of their equities is money. Visa’s take rate does not make Visa shares a store of value; it makes them a good business.

The comparison is the discipline. If the argument for the asset’s monetary premium is “recurring fees on indispensable throughput,” the argument is an argument for a high-quality utility equity, and it should be labelled as one. Something else has to be doing the monetary work.

Pledgeability Without Due Diligence

Nobody examines a banknote. That is not carelessness; it is the property that makes it money. A thing accepted only after inspection is being traded; a thing accepted without inspection is being spent, and the distance between those two — rather than any fact about scarcity or cash flow — is what the collateral literature means by moneyness.

This thesis has been engineering that property for six Parts and calling it a cost metric. §10: Work Credits: Energy-Anchored Claims established what the five conditions do not reach; §10: Work Credits: Energy-Anchored Claims relocates the claim to a holder-side flow. Between them sits the mechanism that arrives first and measures soonest.

The property that the collateral literature actually calls moneyness.

Outside the store-of-value framing, the working definition of a money-like asset in the study of collateral and short-term funding is not scarcity, not cash flow, and not convenience yield. It is information-insensitivity. An asset is money-like when no counterparty gains anything by investigating the particular unit tendered. Nobody looks, so it passes at face value, and a thing that passes at face value can be pledged without due diligence [Gorton & Pennacchi 1990] [Dang et al. 2020] [Holmström 2015]. Deposits, bills, and repo collateral circulate on that property. It is the property whose failure, rather than any change in fundamentals, is what a funding run consists of.

Two kinds of information, and only one of them is at issue.

The claim collapses immediately unless the object is specified, because transparency plainly does not produce insensitivity in general—equities are the most transparent securities in existence and among the most information-sensitive. The distinction that resolves this is between:

• Fundamental information—what the asset will be worth. Cheap verification does nothing to this, and this thesis claims nothing about it. A triad asset would remain fully information-sensitive on fundamentals, and so does gold.

• Unit-quality information—whether this unit, this receipt, this pledged position is what it purports to be. This is authentication and due diligence on the collateral itself rather than a forecast of its value.

The 2008 collapse in securitized funding is the reference case and it was the second kind. The question that stopped the market was not what housing would do; every participant held a view on that and had held one for years. It was whether a particular pool was good, nobody could answer it cheaply, and so lenders began producing private information about specific collateral, haircuts widened, and no-questions-asked acceptance ended [Gorton & Metrick 2012]. Moneyness failed along the unit-quality axis while the fundamental axis was already common knowledge.

Information-Insensitivity by Symmetric Knowledge

There are two routes to no-questions-asked acceptance, and they are opposites.

Symmetric ignorance is the historical route. Producing information about the specific collateral is expensive relative to the gain, so nobody produces it, and the asset trades at par. Opacity is the mechanism, not a defect of it.

Symmetric knowledge is the route a verification-native asset takes. Producing that information costs approximately nothing and the result is public, so no counterparty can come to hold an informational edge over another. The asset trades at par for the opposite reason.

Both deliver acceptance without due diligence. They differ in how they end. Symmetric ignorance is a knife-edge: it holds only while nobody looks, and the first agent to look acquires an advantage that every other agent must then defend against, which is the run. Symmetric knowledge has no such trigger, because there is no private information about unit quality available to produce; private views about fundamentals remain, and are priced as volatility rather than as due diligence. You cannot start a run by looking when looking is free and public, because looking buys nothing that everyone else could not have had for the same nothing.

The mechanism is deterrence, not audit, and the distinction is the one a critic will press first.

The formulation above deliberately does not claim that everyone has in fact looked. Universal audit is observed nowhere, including in the settings where looking is already close to free: public filings sit unread, open ledgers go unexamined, and the record is routinely both complete and unanalyzed — none of it hidden, and none of it examined ([Green 2026f], where the observation and its limits are attributed). An argument requiring every counterparty to have actually verified would be refuted by ordinary observation on its first day, and a version of this section that rested on one would deserve to be.

Nothing in the mechanism requires it. What removes the run trigger is the absence of a discoverable edge, and free public verification removes that whether or not anyone exercises it. The information is non-rival and non-excludable, so the agent who looks acquires nothing the agent who declines to look could not have had at the same cost. Symmetric ignorance fails because looking is privately profitable to the first mover; symmetric knowledge holds because looking is privately worthless to everyone—not because it is universally performed.

The discipline therefore operates on the claimant, before the claim is made, in the way the credible possibility of entry disciplines conduct in a contestable market without entry being observed [Baumol 1982]. A misrepresentation any counterparty could falsify at zero cost is not worth attempting, so it is not attempted, so nobody has to check. The equilibrium described here is one in which verification is constantly available and almost never used, and those two facts are the same fact. Two consequences follow that matter for how this thesis is read. The first is that the object to measure is the cost of verification and not the observed rate of it: Red Line 1 reads the standing threat, and a decline in measured verification activity is not by itself evidence against the mechanism provided verification cost has not moved. The second is that a system can be perfectly auditable and monetarily inert, because deterrence requires the claimant to believe that being caught would cost them something—a condition this thesis instruments separately, and takes up in §10: Work Credits: Energy-Anchored Claims and Red Line 14 rather than assuming.

This thesis has been describing that mechanism as a cost metric.

The touchstone image of Red Line 1—expensive to smelt, cheap to assay—is not an analogy about operational efficiency. It is a statement that gold is information-insensitive on unit quality, which is why any counterparty could accept a nugget from a stranger without investigating the stranger. Gold’s monetary career is better explained by that property than by a convenience yield it does not have (§10: Work Credits: Energy-Anchored Claims notes gold’s storage-theory convenience yield is near zero). The same substitution runs through the rest of the document: $r(W)$ (§19: Layer 4: Truth & Work), the PIDL receipt schema, the reproducibility contract, and the Layer 0 grade ladder are not merely cheaper ways to run an audit. They are machinery for removing the informational advantage that a counterparty could otherwise hold over the holder of a pledged position.

The clearest evidence that the thesis already believes this is that it already prices it. The collateral haircut schedule of §14: Layer 0: Verifiable Machines & Energy discounts a position by how legible its physical substrate is; risk haircuts (§22: Layer 6: Governance & Telemetry) discount it by sovereign optionality; bridge classes carry haircuts by trust assumption. Every one of those is a price on residual unit-quality uncertainty. The document derived an information-sensitivity schedule from engineering intuition without the monetary theory that explains what it was pricing.

What is made insensitive is the position, not the token.

A necessary precision, because the obvious version of this claim is trivial. That a unit of a public ledger is authentic is not a differentiator: it is true of every cryptocurrency and no counterparty has ever had to investigate whether a bitcoin is a bitcoin. That is table stakes and it has never made a token money.

The differentiator is the collateralized position. When the asset is pledged against an obligation to deliver a service—prover bonds, corridor collateral, SLA escrow—what a lender must assess is not the unit but the bundle: whether the capacity behind the obligation exists, whether the operator’s slashing exposure is what it claims, whether the physical substrate can deliver under the scenario the haircut assumes. That is where due diligence lives, that is what Facility Capacity Receipts, energy receipts, Delivered Verified Capacity (§14: Layer 0: Verifiable Machines & Energy) and the grade ladder make cheap, and it is the first argument in this document for why Layer 0 is a monetary requirement rather than an engineering preference. The thesis has asserted that Layer 0 matters monetarily since §3: First Principles: What a SoV Must Survive and has never said why. This is why.

Necessary, not sufficient—and the test that says so.

The discipline of §10: Work Credits: Energy-Anchored Claims applies to this section with equal force, and the counterexamples are the thesis’s own. Graded commodities are cheaply assayed and warehouse receipts never became money. Certified diamonds are authenticated to a published standard and are not money. Bearer bonds are authenticable at sight and are not money. Cheap unit verification is therefore not sufficient, and any argument that stops here proves far too much.

What separates the cases is a conjunction. Insensitivity on unit quality becomes monetary only alongside fungibility (certification tells you this stone’s grade; it does not make stones interchangeable), durability and portability (grain is gradeable, perishable, and bulky), and the absence of a counterparty (a warehouse receipt reintroduces the custodian whose solvency must then be assessed, and a bearer bond is somebody’s liability). Gold is the one historical object at that intersection: assayable, fungible, durable, portable, and nobody’s promise. The claim available here is narrow and it is the whole of what this section asserts:

A verification-native digital bearer asset is the second class of object to occupy that intersection—and the first whose assay cost does not scale with the size of the claim being assayed.

That last clause is the only genuinely new term. Assaying a larger quantity of metal costs more; destructive sampling scales with the lot. Verifying a succinct proof costs the same whether the claim underneath it is worth a dollar or a billion. The cost of establishing unit quality has been invariant to notional in no prior monetary object, and if information-insensitivity is what makes collateral money-like, an assay whose cost does not grow with what is at stake is a change in kind rather than in degree.

What this predicts, and what it does not.

A reader of Dang, Gorton and Holmström [Dang et al. 2020] will object that their insensitivity is a property of the payoff structure: a security is insensitive when the expected gain from producing private information about its payoff is below the cost of producing it, which is why over-collateralized debt—flat over the relevant states—is the natural money-like security, and why driving information cost to zero on a security with a state-dependent payoff makes it more sensitive, not less. The objection is correct, and it fixes the scope of this section. The argument made here is the adverse-selection argument on unit quality, not a claim about payoffs: free public verification removes the class of private information that concerns whether the pledged position is what it purports to be, and leaves the class that concerns what it will be worth untouched. Bitcoin is the control case. Its unit quality has been perfectly and freely verifiable since 2009, and its collateral haircuts nonetheless sit at 30–50% and vary widely across lenders, because those haircuts are pricing realized volatility and liquidation depth, which no verifier can compress. Cheap verification therefore cannot be expected to lower haircut levels on a volatile bearer asset, and the thesis does not predict that it will.

What it predicts is narrower and is the content of Red Line 17. Controlling for realized volatility and market depth, a position whose backing is publicly verifiable at VerifyPrice should show (i) lower dispersion of haircuts across lenders than an opaque comparable, because the due-diligence component that lenders price idiosyncratically has been removed, and (ii) faster convergence of haircuts after a shock, because there is no private information for the cautious lender to be waiting on. Pledgeability without due diligence attaches to the position—over-collateralized, DVC-backed, with a debt-like payoff over the states the haircut assumes—and not to the bare base asset; a lender who wants a flat payoff builds one out of the base asset and a haircut, and what Layer 0 sells that lender is the ability to size the haircut from public facts. Red Line 17 tests exactly that, and is specified so that Bitcoin’s own record—native units against wrapped and custodial representations of the same units—is a case it can pass or fail rather than one it fails by construction.

A second invariance, and the objection it answers.

The strongest available objection to any cheap-verification argument is that verification is not the only thing getting cheaper. If the cost of manufacturing plausible false claims falls at least as fast as the cost of checking them—synthetic corroboration, fabricated provenance, volume sufficient to exhaust the checker’s attention—then the informational balance is unchanged and nothing monetary follows. The objection is correct in general and it is fatal to arguments about verification conducted in natural language, where discrimination between a true and a false claim degrades as the adversary invests.

Cryptographic verification does not have that gradient, and this is the second respect in which it is unlike every prior assay. Under stated soundness assumptions a false proof is not expensive to produce; it is infeasible, and the verifier’s cost of rejecting one is identical to its cost of accepting a valid one. Attempts do not accumulate into pressure: a thousand forged proofs are rejected at a thousand times the cost of rejecting one, which is a thousand times approximately nothing, and no quantity of surrounding corroboration moves the outcome, because nothing outside the proof is consulted. Verification cost is invariant to the size of the claim and invariant to the effort of the adversary, and the second invariance is the one that survives contact with an opponent who is also getting better tools.

The bound on that claim is stated with equal force, and it is the bound already set out at the head of §8: Proofs as Attestation Money: a proof is a bounded attestation, not truth. It establishes that a computation followed a circuit or that a receipt descends from a signed chain. It establishes nothing about whether the workload was worth running, whether the operator’s off-ledger position is what they say, or whether the sentence a human attached to the artifact is honest. The class of claims over which this thesis’s verification is adversarially invariant is exactly the class that can be stated as a computation, and that class is considerably narrower than the class of claims on which trust is currently failing. Where the two do not overlap, this thesis has nothing to offer and should not be read as offering it.

Issuance discipline reappears here, and not as scarcity.

Condition 4 of the §10: Work Credits: Energy-Anchored Claims required issuance to be capped by schedule or capacity rather than by governance fiat, and §10: Work Credits: Energy-Anchored Claims observes that issuance discipline is the one lemma condition touching the monetary channel without explaining what distinguishes it. This section supplies the explanation. An asset whose supply is a discretionary decision is information-sensitive on supply: a counterparty must form and maintain a private view of what the issuing body will do, which is due diligence by another name, and an asset requiring due diligence cannot be accepted no questions asked. Credible non-discretion is not only a scarcity property. It is the condition under which the supply schedule stops being something anyone has to have an opinion about.

Who pays for verification, and why the free-rider problem does not bind here.

Grossman and Stiglitz [Grossman & Stiglitz 1980] established that a market cannot be both costlessly informative and informative at all: if prices already reflect everything knowable, no agent is compensated for the costly work of producing information, so the work is not done and the prices stop reflecting it. Informativeness has to be paid for by somebody, and an equilibrium in which nobody is paid is not an equilibrium. The same structure threatens the argument of this section in an obvious form. If verification is free, nobody earns a return on verifying; if nobody earns a return on verifying, what sustains the apparatus that makes verification possible, and why does the symmetric-knowledge regime not decay back into the ignorance it replaced?

The objection is a real one, and it is the reason this section does not rest on transparency in the general case—where it would bind, and where the historical record of unread disclosure suggests it does. What answers it is a property specific to proof systems and absent from the Grossman–Stiglitz setting: the cost of producing the information and the benefit of consuming it fall on different parties, and the party bearing the cost bears it voluntarily. In their model the same act, research, is simultaneously the expenditure and the source of the private return, which is what forces the informational rent that makes prices imperfectly informative. In a proof system the expenditure sits with the prover, who incurs it in order to be believed, and the result is consumed by every counterparty at negligible marginal cost. Verification is therefore not an underprovided public good waiting for a subsidy or a rent. It is a private good purchased by the party who wants their claim accepted, and its public checkability is a by-product that the purchaser cannot withhold without destroying the thing they were buying.

The same asymmetry, read from the financing side, is why the fee argument had to be conceded.

§19: Layer 4: Truth & Work states this separation as $r(W) = v(W)/p(W)$ and treats it as an engineering property. It is also an industrial-organization property, and reading it that way closes a loop this Part opened. Because the prover is buying credibility in a market where any competent competitor can sell the same credibility, the price of proving is competed toward the cost of proving. That is precisely the finding of §10: Work Credits: Energy-Anchored Claims: the fee stream is ordinary service revenue, competitively priced, and reproducible by a discounted-cash-flow valuation. The property that makes verification sustainably supplied is the same property that stops it from being a source of excess return, and the thesis should not have expected to keep both. The two results are one result seen from opposite sides, and their agreement is a constraint the argument has to live inside rather than a coincidence worth celebrating: whatever monetary premium exists is not in the proving business, which is why §10: Work Credits: Energy-Anchored Claims and §10: Work Credits: Energy-Anchored Claims look for it somewhere a valuation cannot follow.

How symmetric knowledge fails, stated before a critic states it.

The mechanism is not indestructible, and its failure modes are already red lines, which is the useful part. Symmetric knowledge reverts to ignorance whenever verification stops being free and universal: when verification affordability breaks (Red Line 1), when verification concentrates such that most participants are trusting a verifier rather than verifying (Red Line 3), or when the underlying receipt data becomes unavailable or proprietary (Red Line 4). Each of those has been treated in this document as a degradation of service. Each is also, on the argument above, a monetary run trigger, and should be read as one.

A fourth failure mode is not covered by any red line and is named here rather than deferred: scope drift between what is verified and what is exposed. A position can be perfectly legible on its proof and entirely opaque on the operator’s off-chain leverage, counterparty concentration, or rehypothecation. Verification that certifies the computation while the exposure sits elsewhere reproduces exactly the 2008 structure with better cryptography. The gap is measured as the off-ledger exposure disclosure series on the Value Capture Board (§23: Extended Telemetry, Appendix B: Practical KPIs & Telemetry Templates): the share of pledged-position notional whose operator publishes an attested disclosure of off-ledger leverage, counterparty concentration, and rehypothecation, bound to the position’s receipts. It carries no trigger of its own in this version; it feeds the RL17 lender panel and the RL10 opacity reading, and it exists so that the gap is a published number rather than a caveat.

What this section does not claim.

Four disclaimers, because the temptation to over-read this is considerable. It does not claim price stability: an information-insensitive asset can be violently volatile, and gold and Treasuries both are. It does not claim insensitivity on fundamentals, only on unit quality and pledged-position quality. It does not claim that acceptance follows automatically from measurability; whether any lender actually extends no-questions-asked terms is an empirical outcome, not a design consequence. And it does not raise any rating in §6: The Triad and the Monetary Candidate: this section supplies a mechanism and an instrument for link 9, not evidence that link 9 holds. Ratings that rise because an argument was added are self-congratulation.

The instrument: haircut level, and more sharply, haircut dispersion.

The mechanism is measurable well before the asset is anything, and one of the two available readings is much cleaner than the other. Haircut level confounds what this section is about with ordinary price volatility: a lender demands over-collateralization for both reasons and the level does not separate them. Haircut dispersion across lenders at a single point in time does separate them, because it differences out everything common—same asset, same volatility, same moment—so that any remaining spread between lenders is the price of private information, which is precisely the sensitivity at issue.

Publish, per quarter, against a pre-committed panel of lending venues on the same custody and reproducibility terms as the Red Line 14 reference panel:

• Haircut level on the base asset and on pledged positions, by collateral class and Layer 0 grade.

• Haircut dispersion—the cross-lender interquartile range at a common timestamp—as the primary series.

• Due-diligence cost: the observable cost of onboarding the asset as collateral at a new venue, in time and fees, which should fall toward zero if the mechanism is working.

• Dispersion conditioned on stress, since the prediction with the most content is about the shape of failure rather than its level.

The prediction is specific enough to lose. An information-insensitive asset shows haircuts that are low and tight, and—this is the discriminating claim—dispersion that does not widen when the market does, because there is no private information for a stressed lender to price. The historical signature of a funding run is dispersion widening before level, as the better-informed lenders withdraw first. If that signature appears here with full receipt availability, symmetric knowledge did not hold, and the mechanism this section proposes is not present in the asset.

The falsifier. This mechanism is made falsifiable as Red Line 17 (§27: Risk Analysis & Failure Modes): cross-lender haircut dispersion that fails to decline as verification coverage rises, or that widens under stress while receipts remain available, is this section’s claim failing in public.

Two mechanisms, and they are complements.

This section and §10: Work Credits: Energy-Anchored Claims are not rival accounts, and the difference between them is worth stating in one line because they answer different questions. Information- insensitivity is why a counterparty would accept the asset without investigating it. The regime-contingent holder-side flow is why a holder would want it when other arrangements fail. Acceptance without demand is a payment rail; demand without acceptance is a collectible. A monetary asset requires both, and §10: Work Credits: Energy-Anchored Claims adds the third question — whether anyone will reckon in it. The thesis now argues all three, sizes none, and publishes an instrument for each.

Where a Monetary Premium Would Actually Come From

The constructive half. If fees, burns, and collateral yield a well-valued cash-flow claim rather than money, the monetary claim has to be relocated rather than abandoned — and the place it relocates to is one the thesis has already spent six Parts describing without noticing that it was the monetary argument.

$\Delta$ is not a constant; it is a function of regime pressure.

Write $\Delta(R)$, with $R$ the regime-pressure index of Stage A (§10: Work Credits: Energy-Anchored Claims). §10: Work Credits: Energy-Anchored Claims showed why $\Delta$ is thin in benign states: a solvent, suable indemnitor substitutes for a proof. Invert that sentence and it names exactly when $\Delta$ is large. The substitute fails when the counterparty:

• cannot be sued — cross-jurisdictional, pseudonymous, or sanctioned, so no forum will hear the claim;

• will not be solvent when it matters — the failure is correlated, and the indemnity is worth least in exactly the state that triggers it;

• is the adversary — a state, a platform, or a regulator, where the entity you would sue is the entity imposing the loss;

• inflicts a non-compensable loss — censorship, seizure, deplatforming, or disclosure, where damages do not restore the position because the position was never about money.

That list is the threat model of §4: Threat Model, restated as a demand curve. The thesis is therefore internally consistent — but the consequence is unflattering to fee accrual as a monetary argument and places the monetary burden on links 8 and 9:

$\Delta$ is small in benign states and large in the tail. The asset’s usefulness is state-contingent, and its distribution is skewed toward exactly the states everyone else’s arrangements stop working in.

State-contingency does two different things, and only one of them is monetary.

The tempting move here is to say that an asset whose usefulness rises in states where the marginal utility of wealth is high must be worth more than the discounted expectation of its cash flows, because those cash flows arrive weighted by a high state price. That move fails the test this section’s own demolition just set. §10: Work Credits: Energy-Anchored Claims defined a monetary premium as value in excess of discounted cash flows, and a discounted-cash-flow valuation carried out with the correct stochastic discount factor already weights every cash flow by its state price. State-price weighting is what a risk-adjusted discount rate summarizes — and a single discount rate summarizes it correctly only when payoffs are not heavily state-contingent, which ours are. A payoff this state-contingent needs the stochastic discount factor itself, not the single scalar that compresses it. An argument that stops there has relocated the monetary claim into the denominator of a DCF, which is not outside the DCF at all. The argument therefore has to be split into two mechanisms, one conceded and one kept.

Mechanism one: a negative beta on the fee stream. Real, valuable, and not monetary.

Because $\Delta(R)$ rises when the substitutes fail, the fee stream is countercyclical with respect to regime pressure: the protocol can charge most for its differential properties in the states where wealth is scarcest. A rational investor pays more per unit of expected cash flow for that stream than for a procyclical one, and should. But this is exactly a discount-rate effect. It lowers the cost of capital applied to the same fee stream, it is fully representable inside a discounted-cash-flow valuation, and it therefore produces no moneyness. A countercyclical utility is a better utility, not a monetary asset. Conceded, and set aside: nothing in the monetary claim below rests on it.

Mechanism two: a holder-side service flow. This is where the moneyness is.

The bearer of the asset obtains something that is not a cash flow at all, and so has no cash flows to discount: the ability to transact, prove, hold, and exit at the moment when the substitutes for proofs, courts, and custodians have stopped working. That service accrues to whoever holds the unit, by virtue of holding it, and not by virtue of any distribution from the protocol. Nothing is paid out, so there is no stream to place in a numerator and no discount rate — correct, risk-adjusted, or otherwise — that reaches it. This is the same category of thing as the value of holding a bearer instrument outside the banking system, and it is why an asset with no cash flows whatsoever can carry a price.

The mechanism is standard, and the analogy is to the mechanism only.

That a non-cash-flow service from holding a thing can carry a price no cash-flow model reproduces is the storage-theory account of convenience yield in consumption commodities ([Kaldor 1939]; [Working 1949]): the holder of physical inventory obtains an option against stockout that the holder of a claim on future delivery does not. The analogy drawn here is to that mechanism — a service flow accruing to the bearer rather than to a claimant — and not to the setting. A triad asset is not a storage commodity, it faces no stockout risk in the storage-theory sense, and no magnitude in this thesis derives from the commodity literature.

The distinction the mechanism turns on is easiest to see with a fire extinguisher and a contract for the delivery of one. Both have a price. Both can be bought today, valued, resold, and hedged. Only one of them works during the fire. The premium you pay for owning the extinguisher rather than a delivery claim on one is the amount by which the physical commands more than the discounted contract. No discounted-contract valuation reproduces that number. It is the quantity this thesis means when it says the holder-side flow has no cash flows to discount. In the moment of use, the contract and the extinguisher are not substitutes at any price, and every argument in this section about regime states is an argument about when the market is on fire.

Gold, which this thesis keeps comparing itself to, is a separate case and should not be filed under storage theory: gold’s convenience yield in the storage-theory sense is near zero in normal regimes, which is why its lease rates are ordinarily negligible and its forward curve essentially full cost of carry — the early-2025 episode, when tariff-driven physical flows into New York pushed one-month lease rates to multi-year highs and spot into backwardation, is the exception that shows what a storage-theory yield on gold looks like when it briefly exists. What is true of gold is the part that matters here. It has no cash flows, negative carry, and industrial demand far too small to explain its price; every constructible DCF for gold returns a number well below the market. On the standard account that residual is monetary and portfolio demand — what holders pay for a bearer holding that is useful when other arrangements are not — which is the holder-side category described above, arrived at from a different direction.

Regime-Contingent Convenience Yield

The monetary premium available to a triad asset is the holder-side service flow generated by the state-contingency of $\Delta(R)$ — the bearer’s ability to transact, prove, hold, and exit when the substitutes for proofs, courts, and custodians have stopped working — conditioned on credible non-discretion in issuance and on bearer holdability. Those two are not added terms but enabling conditions: the flow is only a monetary service while issuance discipline holds and the unit remains bearer-holdable, and it collapses if either fails. The service accrues by virtue of holding rather than as a distribution, so there is no stream to discount. That is what places it outside a discounted-cash-flow valuation rather than merely at a different discount rate inside one.

It is not the countercyclicality of the fee stream. That is a negative beta on cash flows: real, valuable, and captured exactly by a DCF using the correct stochastic discount factor, which is why it confers no moneyness.

It is also not generated by burns, by collateral, or by fee share. Those produce a cash-flow claim and a floor (§10: Work Credits: Energy-Anchored Claims).

Which conditions and which links this actually implicates.

The consequence of the split is immediate. If the monetary claim rests on the holder-side flow, then it rests on the properties that determine whether a holder can actually use the thing under pressure — and none of those are fee-routing properties. Of the five lemma conditions, only issuance discipline touches the channel at all, and it does so because credible non-discretion is part of the payoff rather than part of the accrual. The other four are conditions for value accrual, and accrual is a DCF quantity. Link 8 then requires a persistent self-custodied constituency capable of bearing loss. The premium itself hangs off link 9: liquidity, neutrality, verifiability, legal holdability, and agency preservation (§3: First Principles: What a SoV Must Survive). Those are the conditions under which a bearer can transact, prove, hold, and exit when it counts. No burn schedule reaches the premium: a burn operates on the claim, and the premium is not on the claim.

Now discount it honestly.

The hedge has a defect, and it is the same defect the thesis has already documented without drawing the monetary conclusion. The payoff is negatively correlated with the states you fear — that is the point — but the delivery is positively correlated with them. The states in which $\Delta(R)$ spikes are energy interdiction, hardware denial, network filtering, and jurisdictional pressure (§4: Threat Model, §14: Layer 0: Verifiable Machines & Energy), and those are precisely the states in which the protocol’s ability to supply privacy, proofs, and compute is impaired. §30: Objections & Responses half-concedes this and Red Line 13 makes the mechanism falsifiable, but both frame it as a threat to the hinge. It is also a discount on the hedging premium, which is the monetary consequence, and the honest statement of it is: you are being asked to pay a premium for insurance whose underwriter is exposed to the insured event.

Two further deductions from the same discount:

• The slots are occupied. Gold already holds “works when the network does not.” Bitcoin already holds “works when the state does not.” Neither requires a grid at the moment of use — gold requires none at all, and a Bitcoin key survives an outage even where settlement waits. A triad asset needs power, reachable networks, and obtainable reference hardware in order to deliver anything at all, which makes it a hedge against a narrower and more specific band of failure: adversarial conditions severe enough to need proofs and privacy, but not severe enough to take the grid.

• The band may still be the important one. That band — administrative repression, surveillance, synthetic media, platform and compute enclosure, financial repression without collapse — is the one Part I argues is most likely. Sovereign optionality (§14: Layer 0: Verifiable Machines & Energy) exists to widen it, and disruption-adjusted VerifyPrice (§14: Layer 0: Verifiable Machines & Energy) exists to price whether the widening is real.

And do not overclaim it.

The state-contingency argument establishes a mechanism. Non-cash-flow service flows accruing to a bearer are ordinary in asset pricing, and there is nothing exotic in claiming one here. The holder-side flow is nonetheless unsized: nothing in this document estimates how large a regime-contingent convenience yield a triad asset could command, and no honest estimate is available before there is a market in which to observe one. This is an empirical question the thesis has not answered. What it can do is refuse to smuggle the answer in — which is why the chain-strength rating for the store-of-value premium is Medium (conditional), why link 8 now asks who bears the asset’s loss, and why the relocated claim is attributed to link 9 rather than to fee accrual. The measurement instrument exists so that the question can be settled rather than asserted: §23: Extended Telemetry publishes the lending-rate, basis, and wrapper-basis series against the regime-pressure index, and a series flat across regime states is the null result, reported as such.

Collateral: Unit-Elasticity, Floor, and Wrong-Way Risk

Condition 3 requires operators to post the native asset as collateral, and the reference designs specify the requirement as a share of capacity value: “10–20% of capacity value” in §6: The Triad and the Monetary Candidate and a “10–15% collateral requirement” in Design A. That specification has a consequence the document has never drawn.

Collateral Unit-Elasticity

Let $K$ be the USD value of deployed capacity, $\chi$ the required collateral ratio, and $P$ the asset price. The number of units that must be locked is

The requirement fixes a value, not a quantity. Collateral demand is therefore unit-elastic in price: a doubling of $P$ halves the units required to satisfy the same obligation.

($\chi$ is used here for the collateral ratio because $\kappa$ already denotes net mechanical gain in Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture and facility capacity share in §14: Layer 0: Verifiable Machines & Energy.)

It is a level effect on free float, not a slope on demand.

The mechanism immobilizes a fixed dollar quantity of float — a level effect on the free float, not a buy order of any kind, since a lockup places no bid — and the valuation it supports grows only as deployed capacity $K$ grows, not as price grows. Describing it as “structural demand that scales with the network” is true only in the sense that it scales with physical build-out, and physical build-out is slow, capital-rationed, and observable.

And $K$ deflates too.

Capacity value is the replacement cost of deployed infrastructure. It therefore inherits the same deflation exposure as the fee base in §10: Work Credits: Energy-Anchored Claims: the same generation of throughput is worth fewer dollars of replacement capital each year. A collateral requirement pinned to $K$ shrinks in dollar terms unless deployed physical capacity grows faster than its unit cost falls. This is the same empirical bet, entering through a second door.

Reflexivity runs in both directions, and the second one is not in the document.

For small moves the mechanism is genuine negative feedback, and it is a real design achievement: price rises, fewer units are needed to cover the same $\chi K$, surplus collateral releases into float and meets the buying; price falls, operators must post more units, and they buy. An automatic stabilizer.

For large moves it inverts. Collateral denominated in the asset it insures loses value exactly when slashing risk and operator distress rise — textbook wrong-way risk, and in its dynamic form the familiar margin-spiral or leverage-cycle mechanism. The operator’s instruction in a drawdown is “post more units, at a moment when your existing holdings are worth less and your operating business is stressed.” A common answer is not to post; it is to exit capacity. Exiting reduces $K$, which reduces required collateral, which releases locked units into a falling market. The stabilizer becomes an accelerant, and it does so through the same equation that made it a stabilizer:

The value-leakage mitigations of §10: Work Credits: Energy-Anchored Claims do not contemplate this loop. Red Line 15 (§27: Risk Analysis & Failure Modes) does: it reads on exactly this sequence as a conjunctive condition — a material drawdown, collateral coverage falling below realized slashing exposure, operator exit or forced liquidation, stress-adjusted DVC declining, released collateral raising liquid float, and core SLOs failing to recover — and §27: Risk Analysis & Failure Modes requires the pure-native, mixed, and native-plus-insurance designs to be stress-tested against it before governance chooses among them. The metric the loop needs, collateral coverage against realized slashing exposure with capacity-withdrawal rates conditioned on drawdown, is the one Red Line 15 publishes.

The design tension, stated plainly.

Collateral must be the native asset in order to create native demand, which is the whole of Condition 3’s monetary contribution. Collateral should be uncorrelated with the risk it insures in order to be credible, which is the whole of prudential collateral design. You cannot have both. Any move toward external collateral — stablecoins, bonded fiat, over-collateralization in an uncorrelated asset — strengthens safety and weakens Condition 3’s monetary contribution by exactly as much. This is not a problem to be solved; it is a trade-off to be chosen deliberately and disclosed.

The magnitude bound.

$\chi K$ is bounded by an accounting identity, and the arithmetic is worth doing even roughly. The following is an order-of-magnitude illustration, not an estimate: the inputs are chosen to be generous rather than defensible, and no claim rests on their precision.

Order-of-magnitude ceiling on collateral lockup. Illustrative arithmetic on assumed capacity values, not a forecast; the point is the exponent, not the digits.

Those are large-cap-equity numbers. They are not monetary-aggregate numbers, and no choice of $\chi$ inside a plausible range changes the exponent. Collateral therefore cannot be the source of moneyness. At best it is a floor.

The one real contribution, stated in the document’s own notation.

Collateral does do something, and it is worth being precise about what. It creates a holding constituency whose supply is highly price-inelastic — operators cannot sell locked units at any price without exiting the business — which shrinks effective free float and steepens the price response to a given flow. In the Stage C decomposition (§10: Work Credits: Energy-Anchored Claims), that is an operation on the liquidity and market-impact state $\Lambda_t$, not on the native monetary impulse $\theta_t$.

Collateral is a slope effect on price impact, not a level effect on price. By immobilizing float (a level effect on free float), it changes how much price moves per unit of flow. It does not establish where price belongs, because it places no bid.

And a slope effect cuts both ways: a steeper response to buying is a steeper response to selling. Calling this “structural demand” overstates it in one direction while concealing the symmetry in the other.

From Utility Demand to Monetary Premium

Many indispensable services—electricity, bandwidth, compute instances, legal services, cloud storage—have recurring demand without being stores of value. The monetary argument requires explaining why this utility becomes monetized savings demand, not just operating expense.

The bridge has eight conditions. The middle five are the §10: Work Credits: Energy-Anchored Claims arriving early and informally; they are named here in one line each and stated formally at §10: Work Credits: Energy-Anchored Claims, not argued twice:

1. Utility demand is not enough. Recurring demand for a service does not automatically create a scarce, holdable asset. Bandwidth is indispensable, but claims on bandwidth do not become money.

2. The asset must be required for fees or settlement — required fee medium, Condition 1.

3. Fees must produce burns, retirement, or staking yield — supply reduction, Condition 2.

4. Operators must post the asset as collateral — Condition 3, whose worth §10: Work Credits: Energy-Anchored Claims bounds as a floor and a slope effect, not a source of premium.

5. Issuance must be capped or capacity-constrained — issuance discipline, Condition 4.

6. Users must not be able to bypass the asset at equal service quality — non-bypassability, Condition 5.

7. Telemetry must prove the loop is working. Fee coverage, burn rates, collateral lockups, and workload demand must be publicly verifiable—not asserted.

8. If any value-capture condition fails, the asset does not even capture its own service value. It becomes infrastructure exposure whose economics accrue to operators or customers rather than to holders. Meeting those five conditions makes service value accrue to the asset; it does not make the asset money, establish stress-deliverable service, or create a loss-bearing holder constituency.

This section is the “utility-token trap” defense. The thesis does not claim that useful things automatically become money; it claims that under specific, testable value-capture conditions, a useful asset accrues the value of its usefulness to its holders — a cash-flow claim and a collateral floor. Whether anything further, a monetary premium in excess of those, is available is argued separately and on different grounds in §10: Work Credits: Energy-Anchored Claims. The §10: Work Credits: Energy-Anchored Claims formalizes the accrual conditions; the telemetry regime (§22: Layer 6: Governance & Telemetry) makes them falsifiable.

Why Users Cannot Simply Bypass the Asset

The strongest economic objection to the thesis is simple: “Why can’t AWS, a ZK prover marketplace, or a privacy wallet sell the same service for fiat or stablecoins and bypass the base asset entirely?”

The monetary object at stake in this objection is the base asset — the fee, settlement, and collateral unit — not Work Credits. Work Credits are bypassable service claims by design, and their bypass threatens only service-claim economics, not the monetary thesis. What the thesis needs is that the base asset cannot be bypassed, and the objection is valid unless the protocol enforces native value capture. The required mitigations:

1. Core fees are denominated in the base asset. Provers, routers, and settlement corridors accept only the native asset for protocol-level fees. Fiat or stablecoin payment requires acquiring the asset first — for the seconds it takes to settle, which is transactional demand, not a savings motive.

2. Collateral must be posted in the base token. Operators cannot participate without holding significant quantities of the asset. Calling this “structural demand” overstates it in one direction while concealing the symmetry in the other (§10: Work Credits: Energy-Anchored Claims): it immobilizes a fixed dollar quantity of float, which steepens the price response to flow in both directions rather than establishing where price belongs.

3. Fee retirement is a pro-rata buyback tied to usage. A published share of fees is retired. This returns fee value to holders (Value-Capture Condition 2) and reduces net issuance only when retired fees exceed scheduled issuance; it is a cash-flow mechanism and carries no moneyness inference (§10: Work Credits: Energy-Anchored Claims).

4. SLA priority requires the asset. Gold-tier SLAs, governance participation, and priority access during congestion require holding or staking the asset.

5. Settlement paths are natively denominated. Privacy corridors and settlement rails denominate in the base asset; off-ramps exist but are not the default. Whether anyone keeps the unit after settling is the denomination question of Red Line 18, not a property of the rail.

Honest admission: If users can in practice bypass the asset—for example, if most operators accept stablecoins and immediately off-ramp, or if hyperscaler-hosted provers dominate the market and set prices in fiat—then the SoV thesis fails. The system may remain useful infrastructure, but the monetary claim collapses. The telemetry must track this: native-asset fee share, bypass channel volume, and operator off-ramp rates should be visible on the Economic Coverage Board (§23: Extended Telemetry).

The Incumbent Bypass Channel Is Not Hypothetical

The five mitigations above answer a proposal. They do not answer a precedent, and a precedent exists: stablecoins already settle a large fraction of the value the thesis is targeting, at scale, at near-zero cost, with no native monetary asset anywhere in the loop. Tron and Ethereum carry stablecoin transfer volumes at national-payment-system scale; in the emerging-market currency episodes Chainalysis documents [Chainalysis 2024] — Argentina, Turkey, Nigeria — dollar-stablecoin wallets, not Bitcoin and not Zcash, were the observed instrument of savings flight and censorship-adjacent settlement. That is a decade of revealed preference in exactly the states of the world this thesis calls State 3 (§26: Adoption Curve & Ecosystem Dynamics), and it is not engaged anywhere in the design.

The stablecoin channel is a live test of Condition 5 that has already been run, and the honest reading is unfavorable in three of four respects:

• Where stablecoins beat the triad: benign and mid-band repression. A stablecoin settles in seconds, costs cents, has no learning curve, and — the uncomfortable part — offers practical censorship resistance to the median user, because freezing a Tron address is harder than freezing a bank account even though it is easier than censoring a shielded pool. For payments-motivated flight, the bearer-asset properties this thesis prices (privacy by default, portable proofs, verified compute access) are mostly not on the buyer’s list.

• Where the triad can still differ: the upper band. The stablecoin’s weakness is structural and appears exactly where the thesis’s services begin: it is a claim on a custodian’s reserve and an issuer’s goodwill, it freezes under sanctions enforcement, it carries no proof or compute service, and its censorship resistance is borrowed from its host chain rather than owned. As repression crosses from financial into administrative and epistemic forms — compelled disclosure, platform deplatforming, attestation demands — the stablecoin inherits the substitutability of its issuer, not of cryptography. That is the band in which a triad asset’s $\Delta$ over a stablecoin is nonzero, and §10: Work Credits: Energy-Anchored Claims already prices the premium as regime-contingent.

• The uncomfortable arithmetic. None of that changes the base fact: for the median settlement need in the states most likely to occur, the incumbent bypass channel is cheaper, faster, and already deployed. The thesis’s five mitigations make bypass harder on this protocol; they do nothing about bypass around it. Red Line 6 is therefore best read as already having an empirical prologue: every stablecoin-settled triad-adjacent payment is a data point that the capturable wedge must be measured against, not assumed above.

The design implication is not despair but precision: the asset’s fee-bearing services must be ones a stablecoin cannot express — private settlement where the stablecoin is a custodial IOU, proofs where the stablecoin is silent, verified compute where the stablecoin has nothing to verify. Where the triad service is interchangeable with a stablecoin payment, Condition 5 should be presumed failed, and the Value Capture Board’s stablecoin-denominated fee share series (§23: Extended Telemetry) is the instrument that watches it fail or hold.

Co-option as Bypass

The bypass threat is not always a competing product. It can also be institutional co-option: ETFs, treasury companies, margin loans, and regulated custody that deliver exposure to the asset’s price without requiring users to interact with the protocol’s privacy, proof, or settlement rails. If the majority of demand is satisfied by custodial wrappers that bypass the fee-burn-collateral loop, the asset’s price may rise while its monetary thesis weakens. The telemetry must distinguish between custodial exposure (which does not exercise value capture) and protocol-native usage (which does).

Wrapper Dominance Risk

Co-option as bypass is dangerous enough to warrant a named, top-tier risk rather than a sidebar. A protocol asset can succeed as a financial product while failing as money. If ETFs, custodians, treasury companies, broker-dealers, lending desks, and stablecoin wrappers satisfy most demand for exposure, the asset’s price may rise even as native settlement, privacy usage, fee burns, collateral lockups, and non-custodial flows stagnate. This is not a contradiction. It is the signature of wrapper dominance.

Wrapper dominance is dangerous because it turns a monetary network into a reference price. It creates holders without users, exposure without settlement, and liquidity without sovereignty. The asset can moon while the monetary thesis dies.

Wrapper Dominance Ratio (WDR)

Wrapper dominance has a stock component and a flow component, and they must not be divided into one another: exposure is measured at an instant, usage over an interval, so a single ratio would scale with the arbitrary length of the measurement window. WDR is therefore reported as a pair.

Stock form — what share of economic exposure sits in custodial or synthetic form, where $E^{\text{wrapper}}_t$ and $E^{\text{native}}_t$ are exposures at time $t$:

Flow form — how activity divides over a stated horizon $h$, where $V_{t-h:t}$ is volume across that window:

The stock form is bounded in $[0,1]$. The flow form is not: it divides one volume by another, so it is bounded below by zero and unbounded above, and it is undefined when native volume is zero. Both are window-explicit. A rising stock share with a rising activity ratio indicates the asset may be financializing faster than it is becoming money. The horizon $h$ must always be published alongside the flow form.

Inputs to track: ETF/wrapper AUM; custodied balances; exchange balances; wrapped token supply; native fee share; non-custodial settlement volume; shielded/private settlement volume; staking/collateral lockups; fee-burn coverage.

Why wrappers come first, and why that is not reassuring.

The observation that first-generation use of a new medium wears the old medium’s form [McLuhan 1964] — early print looked like manuscripts, early television like radio with pictures — supplies the intellectual lineage of this ratio, and it changes what a rising WDR should be read as. It is not, on its own, evidence of pathology: during a medium transition, consumption of the new asset through the old form is the expected initial condition, not an anomaly. What it means is that the WDR is measuring a phase, and that the thesis’s claim is specifically about whether the transition completes. Wrapper dominance in year three is the manuscript stage of the bearer asset. Wrapper dominance in year twenty is a medium that never finished forming. The failure gate above exists precisely because the frame does not promise completion: first-generation use is always the old content, and the red lines, not the analogy, decide when waiting has become failing.

Gold ran this experiment already.

The financial lineage is a century old, and it is worth naming because it removes any temptation to treat wrapper dominance as a novel crypto pathology. Paper claims on gold grew until they dwarfed the metal: unallocated bullion accounts, gold certificates, and eventually exchange-traded products came to represent exposure-to-gold on a scale that holding-of-gold never matched — the vault holds a fraction of what the paper promises, and the fraction is the finding. A shareholder in a gold ETF owns a claim on a trust that owns gold; a holder of unallocated bullion owns, in the stress-relevant sense, a deposit at whoever holds it. Both are exposure. Neither is a coin in a vault, and on the day it matters — the redemption run, the allocation freeze, the jurisdictional block — the difference between allocated and unallocated is the entire difference. Paper gold did not destroy gold. It demonstrated the exact pattern this ratio watches for: the financial claim outgrowing the bearer object it references, prospering for decades, and leaving the underlying’s monetary character unchanged while the exposure stack did the volume. That is the precedent the WDR tracks, and the reason it is a stock and a flow rather than a single number.

Failure gate: If WDR rises for multiple quarters while native fee share, private settlement, and collateral lockups stagnate, the asset may remain investable but its SoV-as-protocol thesis is weakening. This gate is added to the Red Lines in §27: Risk Analysis & Failure Modes and tracked on a dedicated Wrapper Dominance Board (§23: Extended Telemetry).

The Market Realization Plane

The Wrapper Dominance Ratio is a pair — a stock share and a flow ratio — reported side by side and never divided into one another. The stock component measures how much ownership has migrated into custodial and synthetic form; it does not explain the flow mechanics by which those wrappers set prices. That requires one more construct.

Market realization is deliberately not an eighth layer of the stack. Layers 0–6 produce privacy, proofs, compute, settlement, and governance. Market realization produces none of those; it is the conventional financial machinery that represents claims on the resulting monetary object. It is orthogonal to the stack, so we model it as a plane around the stack rather than a layer within it.

Market Realization Plane

The set of external institutions and instruments through which claims on the native monetary object are represented, financed, allocated, and priced: exchanges and custody, spot ETFs, corporate treasury vehicles, index products, options and futures, leveraged and inverse ETPs, dealer swaps, prime-broker financing, passive mandates, systematic trend strategies, and rules-based or agentic treasury systems.

The result is two nested loops, and the thesis needs both to be instrumented.

The inner protocol loop determines whether the stack works:

The outer market-realization loop determines how the stack is financially represented:

The inner loop determines native monetary function. The outer loop determines market-price realization. Either loop can strengthen while the other weakens, and the outer loop can run for years on narrative alone.

A Three-Stage Model

The combined thesis can now be stated as three linked but separable processes.

Stage A — regime pressure creates structural need. Let $R_t$ index financial repression, surveillance, synthetic media, and AI concentration. Compute demand is deliberately not a component of $R_t$: it is a demand driver in its own right, entering alongside regime pressure rather than as part of the pressure index, so that $D_t^{\text{triad}} = g(R_t)$ is not partially defined in terms of its own output. Regime pressure generates demand for triad capacity:

This is the causal layer developed in Part I.

Stage B — protocol design converts need into native value. Let $\phi_t \in [0,1]$ measure the effectiveness of the monetary design: required fees, burn share, collateral, issuance discipline, and non-bypassability. Then native captured demand is

As $\phi_t \rightarrow 0$, the system can remain enormously useful while the monetary object fails. This is not the §10: Work Credits: Energy-Anchored Claims restated as a coefficient: the lemma is an AND-gate on five conditions, while $\phi_t$ is an empirical capture fraction those conditions constrain. The lemma says partial capture is possible only when the gate is open; $\phi_t$ measures how much of the triad demand actually flows through once it is.

Stage C — market structure realizes native value as a price path. Observed price depends not only on native demand but on aggregate exposure flows and the liquidity available to absorb them:

where $\theta_t$ is the non-flow fundamental or native monetary drift — defined to exclude flow effects, so that all flow impact enters once, through the $I(Q_t, \Lambda_t)$ term, rather than twice — $Q_t$ is aggregate exposure demand (a flow over the interval $[t-1, t]$), $\Lambda_t$ is the liquidity and market-impact state, and $\eta_t$ is residual. Aggregate demand decomposes by source:

Only the first term is monetary evidence. The remaining four can dominate the price for extended periods, in either direction. Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture develops the flow mechanics formally — holder flow elasticity, the net mechanical gain coefficient, the recycling boundary, market impact, and volatility drag — and §23: Extended Telemetry defines the telemetry that makes the plane observable.

Why a protocol should care about external market structure. A designer might object that this is someone else’s problem. It is not. External wrappers affect treasury behavior, collateral demand, governance concentration, liquidity-provider incentives, public understanding, security-budget expectations, regulatory pressure, and the price that the protocol’s own participants use when making decisions. The protocol should not manage its price. It must nonetheless instrument the structures through which its monetary claims are represented, for the same reason it publishes VerifyPrice: unmeasured dependencies are where theses go to die quietly.

The Numeraire Is Not Fixed

Everything above measures the price path in units of account whose own value is assumed constant. That assumption is doing more work than it appears to.

§10: Work Credits: Energy-Anchored Claims establishes that price is not evidence of monetary adoption. The point here is adjacent and independent: even a price series that is informative about the numerator can mislead through the denominator. A rising quotation may report an appreciating asset, a depreciating unit of account, or any combination of the two, and the series alone cannot distinguish them.

Numeraire-Dependence

The property that a measured price path is jointly determined by the asset and by the unit in which it is quoted, such that the same series can support opposite conclusions about real command over resources depending on the denominator chosen.

For this thesis the consequence is a measurement requirement rather than a philosophical observation. The Market Realization Plane exists to prevent financialization from being narrated as adoption. A plane instrumented only in the sovereign unit of account is blind to the case where wrapper-led appreciation and currency depreciation move together—which is precisely the regime §2: The World Forces New Monetary Primitives argues is likely.

Requirement.

The core market-realization series—the Wrapper Dominance Ratio (§10: Work Credits: Energy-Anchored Claims), the Wrapper–Native Growth Gap, and the native fee, burn, collateral, and settlement series—should be published in at least one non-fiat numeraire alongside the fiat series. A reference basket of energy, compute, shelter, and gold is sufficient and has the advantage that each component is a thing the holder might actually need. Where the two numeraires disagree in sign, the disagreement is the finding and should be surfaced rather than reconciled.

A sharper definition of the objective.

The thesis has so far spoken of purchasing power, which inherits the numeraire problem it is trying to escape. The more precise statement of what a store of value is for:

Wealth is durable, transferable command over necessary capacity under adversarial conditions.

Each term is load-bearing. Durable excludes claims that survive only while an issuer chooses to honor them. Transferable excludes capacity that cannot be moved or bequeathed. Necessary capacity names the denominator explicitly—energy, shelter, compute, mobility, time—rather than leaving it implicit in a currency. Under adversarial conditions is the requirement of §3: First Principles: What a SoV Must Survive and the reason §3: First Principles: What a SoV Must Survive is a design constraint rather than a preference. This is the definition the rest of the document should be read against.

Worked example: structure does not determine behavior.

A useful illustration, because it is easy to get backwards. An asset can be genuinely bearer-oriented, scarce, censorship-resistant, and independently settleable at the protocol layer, and simultaneously trade as leveraged technology beta at the wrapper layer—held through exchange-traded products, pledged as collateral, sized by volatility-targeting mandates, and sold first in a de-grossing episode. Both descriptions are accurate. They describe different planes.

The error in either direction is the same error. Concluding from correlated selloffs that the protocol properties are illusory mistakes the plane for the stack. Concluding from the protocol properties that the price will behave defensively mistakes the stack for the plane. Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture supplies the machinery for keeping them apart, and §23: Extended Telemetry the telemetry.

A related precision, since the language is routinely abused: a proof-of-work asset is energy-linked, not energy-backed. Its issuance and security consume energy; it is not redeemable for a fixed quantity of electricity, and no holder has a claim on a joule. The distinction matters because a genuine claim on capacity—a generation asset, a storage system, a Facility Capacity Receipt—has a payoff structure that an energy-linked bearer asset does not, and conflating them overstates the latter’s hedging properties.

Technology success is not incumbent success.

One further reading of the same distinction, which the thesis has stated elsewhere in monetary terms and which generalizes. A technology can transform an economy while destroying the equity, debt, and tokens of everyone who financed its first build-out; railways and long-haul fiber are the standard cases. This is §10: Work Credits: Energy-Anchored Claims pointed at infrastructure rather than at protocols: the social return and the return to the first capital structure are different quantities, and the second is the one an investor actually receives.

Denomination: The Function the Thesis Has Never Measured

Ask a merchant in Buenos Aires what a thing costs and the answer comes in dollars, whatever ends up crossing the counter. That is the whole of the unit-of-account question, and it is the one monetary function this thesis has never measured.

§10: Work Credits: Energy-Anchored Claims treats the numeraire as a measurement hazard: our own series are quoted in a unit whose value moves, so they must also be published in a non-fiat one. This subsection points the same word the other way, and asks a monetary question rather than a hygiene one — is anyone choosing to quote in ours?

Denomination is the strongest of the monetary functions and the one nobody instruments.

A store of value can be abandoned in an afternoon: the holder sells and is out. A unit of account cannot. It is welded into contracts whose counterparties would all have to move at once, and each of whom eats the basis if they move alone. That mutual dependence is what makes denomination sticky: it is a coordination device rather than a portfolio choice, and coordination devices are hard to acquire and correspondingly hard to lose [Doepke & Schneider 2017]. Assets that achieve denomination rarely lose it. Assets that achieve only holding lose it routinely.

The thesis measures fees, burns, collateral, settlement, holder cohorts, wrapper exposure, capacity, reachability, and verification cost. It does not measure whether a single contract anywhere is priced in the unit. That is the largest gap in a five-family measurement programme, and it is a gap on the monetary side rather than the service side.

The trap, stated first, because the obvious metric is worthless.

A naive denomination share would read one hundred per cent on the day the network launches and would mean nothing. §6: The Triad and the Monetary Candidate specifies that all triad services are priced in the base token; Condition 1 of the §10: Work Credits: Energy-Anchored Claims requires it. Denomination that the protocol mandates is a routing rule — the same routing rule already stated, already conceded to be a design commitment rather than a finding, and already excluded from carrying monetary weight by §10: Work Credits: Energy-Anchored Claims. Counting it as evidence of adoption would be the tokenomics inference in a new costume.

Everything of interest is therefore in the complement.

Free-Choice Denomination Share

Let $\mathcal{C}_{\text{free}}$ be the set of contracts in which the parties were not required by protocol rule to express price terms in the base asset — forward and term capacity purchases, SLA agreements above the mandated fee, bilateral prover–buyer contracts, corridor quotes, over-the-counter blocks, service retainers, employment and vendor agreements among operators, and any obligation denominated between counterparties rather than by the protocol.

Free-choice denomination share is the fraction of $\mathcal{C}_{\text{free}}$ whose price terms are written in the base asset, reported by contract count, by notional, by tenor bucket, and by counterparty class.

The mandated complement — fees, required collateral postings, protocol-set tier pricing — is published separately and is never added to it. It is a design commitment and reads as one.

Quoting and settling are different acts, and the crypto record turns on the difference.

A contract has two units and they need not agree. It can be quoted in dollars and settled in the asset; quoted in the asset and settled in the asset; or, rarely, quoted in the asset and settled in dollars. Only the second is a unit-of-account observation. The first — quoted in fiat, settled in the asset — is a payment-rail observation, and it is the configuration essentially all crypto commerce has actually taken.

This is worth stating at full strength because it is the strongest evidence against this thesis’s own expectations. Bitcoin is the most successful new store of value of the last century on the measures this thesis uses—credible scarcity, verification cost, censorship resistance, and capitalization—and after seventeen years it denominates almost nothing. Bitcoin-native businesses quote in dollars and settle in bitcoin. Salaries described as paid in bitcoin are, with few exceptions, dollar salaries settled in bitcoin. Whatever monetary premium bitcoin carries, it did not come with denomination attached and has not produced it since.

Two readings are available and the thesis should not pretend the choice is obvious. Either denomination is not necessary for moneyness — in which case this subsection measures something real but not load-bearing — or bitcoin’s moneyness is incomplete along a specific, measurable axis. This document takes the second reading and concedes it is contestable.

The one structural asymmetry that makes the second reading defensible.

Bitcoin has no native economy of goods. The things bought with it are produced by an economy that prices in dollars, so a bitcoin quote imports basis risk against every input the seller must pay for, and no coordination is available to remove it. A triad protocol is different in one respect that is not a matter of degree: the goods are produced by the system that issues the unit. A proof, a verified inference, a corridor settlement, and a unit of delivered verified capacity are priced, produced, collateralized, and settled inside the same accounting perimeter. A prover paid in the unit, posting collateral in the unit, buying capacity priced in the unit, has a naturally two-sided position and faces the basis risk that keeps bitcoin quotes in dollars only on the legs that reach outside.

That is the whole of the structural argument, and it is narrow. It says a service protocol has a coordination path to denomination that a pure bearer asset does not. It does not say the path will be taken.

The walled-garden test, before a critic applies it.

Internal denomination proves nothing on its own, and there are unflattering precedents. Airline miles are denominated, transferable, and priced against a schedule the issuer sets; in-game currencies denominate large and genuinely productive internal economies. None is money, and each would score highly on a share computed only over contracts internal to its own economy. The discriminating cut is therefore not free choice alone but where the counterparty stands:

• Tier I — inside contracts. Both legs are protocol services. Free choice, but the parties are already inside the accounting perimeter. This is where in-game currencies score one hundred per cent.

• Tier II — boundary contracts. One leg is a protocol service, the other is not: an enterprise buying verified inference, an operator’s power contract, a hardware purchase.

• Tier III — outside contracts. Neither leg is a protocol service, and the unit was chosen anyway.

The monetary content rises strictly from I to III, the three are published separately and never blended, and Tier I is reported as context rather than as evidence. A protocol scoring highly on Tier I alone has built a company scrip with excellent telemetry.

The volatility objection, which is the serious one.

Nothing prices in a volatile unit if it can avoid it, and this is the standard and correct explanation for the bitcoin record. It bounds where denomination can appear, and the bound is useful precisely because it makes the prediction specific rather than directional. Denomination should appear first at short tenor, where the parties’ exposure to unit variance over the contract’s life is small, and first in two-sided positions, where a counterparty’s costs and revenues are in the same unit and the variance nets. It should appear last, or never, in long-dated one-sided contracts, which is exactly where a naive story would expect a strong monetary asset to show up first.

That is a shape prediction across the tenor and sidedness buckets, and a shape is harder to fake than a level. A denomination share that rose uniformly across all buckets would be evidence of subsidy or mandate rather than adoption, and should be read that way.

And it couples to the previous mechanism.

The reason volatility is prohibitive is not variance itself but the cost of carrying and hedging the exposure that variance creates over a contract’s life. That cost falls when positions in the unit can be financed cheaply and pledged without investigation — which is what §10: Work Credits: Energy-Anchored Claims argues cheap universal verification supplies. The two mechanisms are not parallel additions to the same list. Information-insensitivity lowers the carrying cost of denomination, and denomination is what converts an accepted asset into a coordination device. Acceptance without denomination is a settlement rail; denomination without acceptance does not occur.

An ordering caveat the thesis should carry rather than discover.

The currency-substitution literature finds a consistent sequence when populations abandon a domestic unit: asset substitution first, unit of account second, means of payment last. Savings dollarize years before prices do. If that ordering holds here, free-choice denomination is a confirming indicator of monetary adoption rather than a leading one on the macro path, and this subsection should not be read as promising an early warning of anything.

The claim it does support is narrower and survives the caveat: denomination is leading with respect to the protocol’s own contract layer, because Tier I and Tier II contracts exist from Phase I onward and can be counted long before any external population is substituting anything. What is early here is the measurement, not the phenomenon.

Instrument.

Publish quarterly on the Value Capture Board (§23: Extended Telemetry), under the custody and reproducibility terms of Red Line 14 — the party collecting the fee may not classify the contracts:

• Free-choice denomination share, by contract count and by notional, split across Tiers I/II/III, and never aggregated with the mandated complement.

• Quote/settle matrix. The four-cell table of quoting unit against settling unit, by notional. The fiat-quoted, natively-settled cell is the payment-rail null and is reported as the headline denominator, not hidden in a total.

• Tenor and sidedness decomposition. Share by tenor bucket and by whether the counterparty’s position is one- or two-sided in the unit, so the shape prediction above can fail visibly.

• Subsidy disclosure. Any fee rebate, tier privilege, or incentive conditioned on native denomination, with the share recomputed excluding subsidized contracts. A purchased quote is not a chosen one.

• Redenomination events. Contracts that switch units in either direction at renewal, which is the cleanest available revealed preference and the series a critic will ask for first.

The falsifier. This mechanism is made falsifiable as Red Line 18 (§27: Risk Analysis & Failure Modes), in two conditions with different severities: outsiders declining to reckon in the unit weakens the thesis, and protocol participants declining to reckon in it on unmandated contracts kills it.

What this subsection does not claim.

It does not claim denomination is necessary for moneyness — bitcoin is the standing counterexample and it is named above rather than managed. It does not claim the protocol’s endogenous service economy makes denomination likely, only that it makes a coordination path available that a pure bearer asset lacks. It does not raise any rating in §6: The Triad and the Monetary Candidate: a new instrument on link 9 is an instrument, not a finding. And it does not promise an early warning on the macro path, for the ordering reason stated above.

What it does supply is the answer to a question the thesis could not previously answer at all: what would we see, at Phase I, that distinguishes this from every service token that ever shipped? The answer is a contract nobody was required to write in the unit, written in the unit anyway, with a counterparty outside the perimeter, at a tenor long enough to matter, without a rebate.

New here? Start with the one-minute version.

Tip: hover a heading to reveal its permalink symbol for copying.