§10b. Why Hold the Base Asset?

Jason St George. "§10b. Why Hold the Base Asset?" in Next Generation Stores of Value: Privacy, Proofs, Compute. Version v3.5. /v/3.5/read/part-ii/10b-why-hold-the-base-asset/

Why Hold the Base Asset?

§10: Work Credits: Reserved Service Claims fixed what a Work Credit is: a typed claim on reserved service, owed by a named provider. This chapter asks the question that remains once that is settled. A holder who wants verified service in a bad state can hold a Work Credit, can hold Bitcoin and buy what is needed when the need arrives, or can hold the base asset. The first two are well understood. The case for the third has to be made against them, and it is made here in the order a skeptical reader would demand: the strongest alternative first, then the channels through which service value reaches the asset, then the reasons that value might be monetary, then the instruments that would show it is not.

Why Hold Rather Than Convert on the Day?

Where payment requires the base asset, a Bitcoin balance remains dependent on acquisition until that acquisition has settled. A balance held in advance removes that dependency. That is the whole of the advantage, and it exists only in a band: where conversion is unavailable, too slow, or incompatible with the transaction’s required privacy and control conditions, while native settlement and the complete service path remain usable. Outside the band, the holder of Bitcoin buys what is needed when it is needed and carries none of the base asset’s risk in the meantime.

Two different advantages are easy to run together. The stack’s advantage is that it can deliver what the best institutional substitute cannot. Preholding’s advantage is that a holder can obtain that delivery when the best Bitcoin-funded strategy cannot. The first does not establish the second. §27: Risk Analysis & Failure Modes explains why a Work Credit hedges the wrong state and why Bitcoin does not itself produce a proof; neither argument defeats Bitcoin-funded procurement.

The two paths are

and the mechanism exists only where the extra dependency in the second path makes a material difference, not because the second path has one more arrow. For outright timing failure the condition is

where $s$ is the stress state; $W$ carries the workload, assurance tier, privacy requirements, and delivery terms; $\tau$ is its deadline; $T^{\ast}_{\text{BTC}}$ is the completion time of the best feasible Bitcoin-funded strategy; and both strategies start from the same purchasing-power budget. The broader case includes differences in cost and in the probability of failing, not only outright inability to transact, but every such difference must survive the cost and risk of holding the base asset beforehand.

Where the band might be.

The states in §10b: Why Hold the Base Asset? are hypotheses registered in advance, not examples of the mechanism working.

The last row gives the delegation buyer of §5b: The Delegation Economy: Who Buys Verification a concrete role, with a limit: it is a reason for prefunded transaction balances, not for monetary reserves.

What the balance buys there, and what it does not.

It buys payment capability that is immediately usable inside the service economy that survives. It does not buy a reserved quantity of compute, a fixed service price, a queue position, a provider’s continued existence, or protection against the asset losing purchasing power. Providers promise no capacity, price, or priority because a customer holds the asset. Those rights are sold through specified service contracts (§10: Work Credits: Reserved Service Claims), and the contract, not possession of the payment asset, defines the obligation. That is why the base asset carries no claim on historical or future work, and why it is compatible with a provider accepting payment at the moment of procurement. Acceptance by providers is part of the service path, not a separate guarantee: even universal acceptance leaves open why the holder should not acquire the accepted asset immediately before paying. The condition is not acceptance by every surviving provider but enough independently supplied, reachable capacity accepting native payment to fulfil the workload on its terms; a provider that stays powered and refuses the asset contributes nothing to it.

The counterfactual is allowed to win.

The comparison is against the best Bitcoin-funded strategy actually feasible in the state, not a weak one such as opening an exchange account during the crisis. That strategy may use prepared wallets, existing non-custodial routes such as the corridor of §20: Layer 5: Value & Settlement, direct payment to providers, funded payment channels, independent conversion providers, and diversified service reservations. Above all, it may let the provider do the conversion: a protocol that requires native fees does not thereby require the customer to hold the fee asset. Two results would damage the mechanism, and both must be visible if they occur. First, a provider or router may accept Bitcoin and pay the fee from its own native inventory. The system then needs native inventory somewhere, but not a durable reserve held by the end user. That is the bypass that Conditions 1 and 5 of the §10b: Why Hold the Base Asset? name, seen from the holder’s side, so this test is also the non-bypassability test. Second, providers that depend on selling native receipts to pay for power, hosting, and hardware may stop operating when the same acquisition market fails, so a disruption that first favours holders can then disable the service they hold for. The test therefore runs over the delivery horizon, not to the first successful payment, and the Pressure–Capacity Corridor (§6: The Triad and the Monetary Candidate) still governs: no balance insures access through a payment path whose suppliers stop during the same event.

The access experiment.

The holder service is tested before it is claimed. Equal-budget strategies are fixed before the disruption: a held native balance; Bitcoin with acquisition on the day; Bitcoin with provider-side conversion; an existing reserve asset plus diversified service reservations; and direct procurement where it exists. Each faces the same service request under the same adversarial scenario. The published readings are completed work, completion time, privacy and control failures, total procurement cost, and the losses borne during the holding interval, with balances held in anticipation of stress reported apart from balances acquired once the stress was obvious. A pass requires more than a native transaction succeeding. It requires a material advantage over the strongest alternative that was actually feasible. The failure condition is stated now: if Bitcoin-funded procurement reproduces the same service, within the same constraints, without a material disadvantage, the preholding mechanism is absent for that workload and state. The experiment is a Phase I deliverable of §32: Kardashev Labs: Build and Measure (§32: Kardashev Labs: Build and Measure), run first as an analog on an existing network whose fees must be paid in its own asset. It is not a counted red line. It is the evidence Red Line 16 stands on: the experiment asks whether holding changes what can be done, and the lending and basis series of Red Line 16 ask whether a mature market prices the holder service (§27: Risk Analysis & Failure Modes). Neither substitutes for the other.

A pass is not yet a reserve.

Even a positive result leaves the second question open: does the benefit support persistent, loss-bearing reserve demand, or only an operating buffer? Agent wallets, gas inventories, and precautionary balances do not become a monetary anchor by being added up; that is Premise 7, and it stands (§0: Introduction). Whether independent principals keep balances beyond their transaction windows, and bear the risk of them through stress, is what the Native Monetary Buyer Map (§23: Extended Telemetry) and Red Line 16 read.

The base asset is not a reservation on the machines. It is a balance that may remain spendable when acquiring that balance would no longer be feasible. Whether that difference survives the best Bitcoin-funded alternative, and supports anything beyond operating inventory, is the monetary experiment.

Economic Linkage: How Triad Demand Becomes Asset Value

This section answers the question that separates a systems manifesto from a monetary thesis: why does demand for Privacy, Proofs, and Compute raise the value of holding the asset, rather than merely rewarding consuming a service?

The familiar answer is a chain that runs from fee demand through burns to scarcity to price. That chain fails (§10b: Why Hold the Base Asset?) and is not used here in any form. The answer below is in four parts, of which the first is a cash-flow claim the thesis does not describe as monetary, and the remaining three are the monetary content.

1. What exactly is the asset?

The base asset is the protocol-internal unit in which fees may be required, collateral posted, and settlement denominated. It is a conditional monetary candidate and nothing in this section upgrades it. Work Credits are typed capacity or service claims; FCR, FER and PIDL artifacts are evidence; project notes are duration-bearing credit; LP and staking positions are derivatives or operating claims (§6: The Triad and the Monetary Candidate). Only the base asset is evaluated as money.

The strong phrasing — that all uses of the triad must flow through the asset — overstates the design. Core protocol operations are denominated in the asset by rule. Equivalent computational content is obtainable elsewhere, always, at a price; bypass is a magnitude rather than a switch (§10b: Why Hold the Base Asset?), and the design constrains what that magnitude is worth rather than abolishing the alternative.

2. Why is it scarce in a monetary sense?

Scarce capacity does not imply a scarce asset. The design forges the link through scheduled issuance, fee retirement, collateral lockup, and Work Credits sold against committed, verifiable capacity rather than by decree.

Two precisions the earlier text elided. First, base-asset issuance follows the constitutional schedule and is independent of Work Credit dynamics; it is Work Credits that are bounded by delivered verified capacity. Second, whether burns exceed issuance at steady state — whether net supply actually falls as workloads grow — is an empirical outcome the fee-coverage and issuance boards report, not a property the design confers. Issuance discipline is real. Net deflation is a reading.

3. Why does demand for triad capacity raise the value of holding?

Four channels, stated in ascending order of monetary content, with the first two explicitly conceded not to be monetary at all.

1. A fee stream (not monetary). Every proof, private settlement and verified inference pays a fee in the native unit, and routing rules direct it to retirement, staking, and operator share. What the holder owns through this channel is a competitively priced claim on a cash-flow stream bounded above by differential value $\Delta$ and deflating with unit price (§10b: Why Hold the Base Asset?). A discounted-cash-flow valuation reproduces it exactly. A burn is a buyback and confers no moneyness.

2. A collateral lockup (not monetary). Required lockup in the native unit immobilizes float while operators remain solvent and choose to keep operating. §10b: Why Hold the Base Asset? bounds how large a fact this can be — large-cap-equity magnitudes, not monetary aggregates — and shows it is a slope effect on price impact rather than a level effect on price, because a lockup places no bid.

3. Pledgeability without due diligence (monetary). This is the first channel through which growing triad demand raises the value of holding rather than of receiving. As verified throughput grows and receipts accumulate, the cost to any counterparty of establishing what a pledged position actually is falls toward zero, and a position nobody must investigate can be accepted no questions asked (§10b: Why Hold the Base Asset?). The holder is not being paid; the holder is holding something that has become easier for everyone else to accept. Nothing is distributed through this channel, so a valuation of distributions alone omits it. Whether a holding service of this kind is monetary is what §10b: Why Hold the Base Asset? and Red Line 17 test.

4. A unit with something to denominate (monetary). A growing endogenous service economy gives counterparties a reason to reckon in the unit rather than merely settle in it, and denomination is the stickiest monetary function because it is a coordination device rather than a portfolio choice (§10b: Why Hold the Base Asset?). This channel is available to a service protocol and is not available to a bearer asset with no native goods.

A fifth channel, the state-contingent holder-side service flow, is argued separately at §10b: Why Hold the Base Asset?, because it is a property of the regime rather than of demand growth.

Channels 1 and 2 pay the holder. Channels 3 and 4 change what holding is. Only the second kind is monetary, and only the second kind survives a correctly specified discounted-cash-flow valuation.

A holder of channels 1 and 2 alone is buying “a share of the fee stream from indispensable workloads,” a position “closer to equity in a utility than to a collectible.” That description is accurate for those channels, and it is the reason they cannot carry the monetary reading: a utility equity earns its cost of capital and carries no monetary premium. Channels 3 and 4 are the reply, and they are a reply about the asset’s acceptability and denomination rather than about its cash flows. Neither is sized in this document.

4. What prevents capacity providers from capturing all value?

The classic “utility token trap”: if operators earn the fees and governance can inflate supply, holders are exit liquidity. The design’s answers are routing rules and they are stated as such — fees split between retirement, stakers and operators so no party takes the whole; base-asset issuance constitutionally scheduled; Work Credit sales bounded by reserved capacity, with overselling rejected and visible; core operations denominated natively.

These govern where the fee goes, and none of them governs how large the fee can be, which is the question §10b: Why Hold the Base Asset? takes up and answers with a bound rather than a promise. Read this paragraph as a description of plumbing. The monetary argument is in channels 3 and 4 above and in §10b: Why Hold the Base Asset?, and it does not depend on any number in this paragraph.

Summary: the Value Capture Lemma in plain language

Demand for triad capacity becomes value accrual to the native asset only if five conditions hold at once: all core usage requires the asset, usage retires supply, capacity provision requires staking, issuance is constrained, and capacity cannot be cheaply bypassed. These conditions are necessary and not sufficient, and what they establish is accrual — a cash-flow claim and a collateral lockup — not moneyness. If any one fails, the system may be indispensable infrastructure whose economics accrue to operators or customers.

A related but separate claim. The five conditions are properties of the monetary design and say nothing about the durability of the demand being routed. That workload demand is structural rather than speculative is a distinct empirical claim whose failure the thesis treats as its own falsifier: a workload mix that becomes and remains predominantly speculative retires the store-of-value claim through Red Line 5, not through this lemma.

Which conditions the monetary channels actually use.

A reconciliation that the earlier text could not state, because it had only one candidate mechanism. Of the five conditions, four govern accrual, which is a discounted-cash-flow quantity. Issuance discipline is the exception, and §10b: Why Hold the Base Asset? explains why: an asset whose supply is discretionary is information-sensitive on supply, because a counterparty must maintain a private view of what the issuing body will do, and an asset requiring a private view cannot be accepted no questions asked. Condition 4 is therefore doing monetary work that Conditions 1, 2, 3 and 5 are not. That is the same conclusion §10b: Why Hold the Base Asset? reaches from the other direction, and the two now agree for a stated reason rather than by coincidence.

What the five conditions do not address.

Every one of them governs where fees go. None governs how large they can be, and a routing rule applied to a fee of nothing captures nothing. §10b: Why Hold the Base Asset? takes up the level question, finds that the standard objection to taxing a contestable market is wrong for a reason worth stating, and then finds that the correct answer supports a narrower conclusion than this Part had been drawing. The conditions themselves are unchanged.

The lemma has a frequently-missed converse. It states when native demand accrues economically to the asset. It does not state that movements in the asset’s observed market price are caused by that demand. Those are different machines, and conflating them is the most common way a monetary thesis fools its own author.

Value Capture vs. Price Capture

It is worth separating the two phenomena explicitly, because the thesis is routinely “confirmed” by the wrong one.

Value capture is the existing loop: triad usage $\rightarrow$ native fees $\rightarrow$ burns, collateral lockup, and operator demand $\rightarrow$ scarcity and cash-flow accrual to the asset. It is governed by §10b: Why Hold the Base Asset?. What it produces is a claim on a fee stream plus a collateral lockup; whether the asset also carries monetary premium is a separate question, answered separately in §10b: Why Hold the Base Asset?.

Price capture is demand for exposure to the asset’s price, arriving through spot ETFs, exchange custody, treasury companies, margin products, options, futures, swaps, leveraged and inverse ETPs, passive indices, and systematic trading rules. Price capture can occur with no protocol use whatsoever.

Native value capture and observed price appreciation are neither equivalent nor mutually necessary. No cell is monetary evidence: that is a separate axis, read on Red Lines 16–18.

The diagonal is what makes the thesis falsifiable. A thesis that treats every price rise as confirmation and every price fall as noise cannot be wrong, and therefore cannot be right either.

Fee Incidence and the Level of the Fee

Every condition of the §10b: Why Hold the Base Asset? answers one question: where does the fee go? Required medium, supply reduction, collateral lockup, issuance discipline, and non-bypassability are all routing rules. None of them answers the question a valuation actually needs answered, which is how large the fee can be. A protocol that routes the whole of a fee of nothing into a burn address has satisfied five conditions and captured zero.

The gap has a sharp form, best stated as the objection it invites:

“You have deliberately engineered the most contestable market you could. Workloads are canonical and interchangeable, verification is cheap enough that no trust is required, admission is open, and there are no vendor chokepoints. A contestable market competes economic profit to zero. Zero profit means no surplus, and no surplus means nothing to burn.”

The objection is wrong. It is worth showing exactly why, because the correct answer rescues considerably less than it first appears to, and what survives is not the claim this Part started with.

Incidence: A Fee Is a Wedge on Turnover, Not a Claim on Profit

The objection conflates two different bases. A protocol fee is levied on transactions, not on residual profit. It is a tax wedge, and tax wedges do not require anybody to be earning rents.

Take the market the thesis is trying to build: many providers, free entry, roughly constant returns to scale in the relevant range, a canonical workload so that units are fungible. Long-run supply is then approximately horizontal at marginal cost $c$ (equivalently the protocol’s all-in unit cost $c_p$ of §10b: Why Hold the Base Asset?; write $c \equiv c_p$). Impose a per-unit protocol fee $f$ on that market and the supply curve the buyer faces shifts to $c+f$. The new equilibrium has buyers paying $c+f$, providers receiving $c$, and providers earning exactly the zero economic profit they earned before. The protocol collects $f \cdot Q$. Nothing about that revenue came out of operator margin, because there was no operator margin to take it from; in the long-run competitive case the entire statutory burden lands on the buyer.

Operator margin compression is irrelevant to fee revenue. The fee is a wedge on turnover. Turnover is what a contestable market maximizes.

This is standard incidence analysis, and it means the objection proves too much: if contestability destroyed fee bases, no commoditized market could ever be taxed, and every one of them is.

Incidence explains who bears a fee. It does not explain why a positive fee is sustainable, and the two should not be run together. Exchanges, clearing houses, and toll roads are lucrative on top of viciously competitive flows for a further reason: the flow is competitive but the fee layer is not. There is one place to clear the contract, one road across the water, one book where the trade is legally final — so the competition among users of the layer never becomes competition to be the layer. That inescapability is a property those venues possess and a protocol must earn; it is the subject of §10b: Why Hold the Base Asset? and §10b: Why Hold the Base Asset?, and the fork channel is precisely the case where it is not earned.

The short run is different, and the difference matters.

With installed capacity fixed, supply is not horizontal. Deployed hardware has already sunk its capital, so in the short run the supply curve slopes upward and part of the fee is absorbed as a reduction in quasi-rent to existing machines rather than passed to buyers. That is not a problem for this quarter’s fee revenue; it is a problem for the next round of capacity. Quasi-rent is what funds replacement, and an operator whose realized return on deployed hardware is being clipped by a fee re-prices the entry decision accordingly. The long-run pass-through result therefore describes the destination, not the transition, and the transition is where entry and capacity growth are decided. A fee schedule set as though incidence were instantaneously long-run will suppress the capacity it is trying to tax.

The Base, and Why It Deflates

Fee revenue is not $f$. It is

and both terms are endogenous. Two consequences follow, and the second is the more serious one.

Quantity responds to the wedge.

The tollbooth analogy holds only where there is no parallel free road. Raising $f$ raises the delivered price, and at the margin some volume declines, defers, batches, or leaves. What the protocol can extract is bounded not by what buyers would pay for the service but by what they would pay through this channel rather than the next-best one, which is the subject of §10b: Why Hold the Base Asset?.

An ad valorem fee on a deflating unit price is a shrinking real toll.

For this paragraph the protocol’s fee is modeled as ad valorem — a share of unit price rather than the per-unit wedge $f$ used in the incidence analysis above; under a per-unit fee only the volume term below moves, and the deflation mechanism this paragraph isolates does not arise. §9: Compute Through the “AI Money” Lens argues that verified compute stays scarce even as raw compute deflates. Grant that argument entirely; it does not touch this one. Even if the verification premium is fully durable, a fee expressed as a percentage of a unit price that falls secularly collects fewer real resources per unit of service delivered every year. Real fee revenue then grows only if

That inequality is an empirical bet, not a theorem, and the thesis is making it. It may well be a good bet — the historical pattern in compute is that unit-cost decline is met by more than proportional volume expansion — and a bet must say what would settle it against the thesis. Condition B of Red Line 14 (§27: Risk Analysis & Failure Modes) does: deflation-adjusted gross native fee turnover that fails to grow while physical throughput grows is this bet losing, in public.

The bet has a macro frame.

The volume-over-deflation bet is usually argued from technology curves: unit costs fall, demand expands more than proportionally, revenue grows. That is the technological channel, and it is the one §9: Compute Through the “AI Money” Lens treats. There is a second channel with the same signature but a different driver: a financial clearing event that transfers installed capacity from weakly financed owners to strongly financed users at lower capital cost, collapsing the effective price of capacity without any change in the technology [Perez 2002]. The two channels are observationally distinct — the technological channel shows up as gradual unit-cost decline with stable utilization, the financial one as a step-change in the price of installed capacity with utilization resetting — and they have the same effect on the inequality above: both push the deflation term up. What the frame adds is timing. The technological channel is smooth; the financial channel is not, and a fee base built on the expectation of smooth deflation being outrun by volume will experience the financial channel as a shock to exactly the term it is betting on. The instrument is unchanged — Condition B reads on the same series either way — but a reader tracking it should know that the two channels are live simultaneously, and that the financial one can move a quarter’s reading by more than a year of Moore’s law.

The Bound on the Sustainable Fee

Incidence tells us the fee has a base. It does not tell us how high the fee can be set. That ceiling is not a function of operator margin either; it is a function of what the protocol channel is differentially worth.

Differential Value $\Delta$ and the Sustainable Fee Bound

Let $c_p$ be the protocol’s all-in cost of delivering canonical workload $W$ at tier $T$, and $c_b$ the all-in cost of the best bypass channel delivering the same computational content without protocol-grade verification. Let $\Delta$ be the marginal buyer’s willingness to pay for the protocol’s differential properties: cryptographic checkability, neutrality, credible non-discretion, and non-custodial exit.

The buyer routes through the protocol only if $c_p + f - \Delta \le c_b$, so the sustainable fee satisfies

Here $\Delta$ is a scalar wedge in price units, not the difference operator used elsewhere in this Part.

The first term is the one a protocol designer wants to think about. The second is the one that decides the outcome, and it is structurally positive: verified compute costs more to produce than unverified compute, because proving overhead and redundancy are real resources spent on top of the underlying work. So the protocol begins every negotiation with a cost handicap and must recover it out of $\Delta$ before it collects a single unit of fee.

The document’s own tier multipliers are cost pass-through, not evidence of willingness to pay.

§19: Layer 4: Truth & Work prices assurance on its own axis: Replicated at $1.0\times$, Replicated-plus-audit at $1.4\times$, Probabilistic (M2) at $1.6\times$, Succinct (M1) at $2.5\times$, with a latency multiplier of $1.0$/$1.3$/$1.6$ multiplied in. Read those against what each tier costs to supply. Replicated-plus-audit is three independent re-executions and a randomized audit, so its multiplier is set against roughly three times the production cost; the M1 multiplier is set against a proving overhead that Appendix E: Hardware Profiles publishes as a quarterly series and does not yet know. The multipliers are rationale-set to cover redundancy or proving overhead plus a margin, and the document nowhere establishes that they do. That is a question about $c_p$ and the margin above it, not about demand, and nothing in the document establishes that any buyer’s $\Delta$ for succinct assurance is $2.5\times$ its $\Delta$ for a committee’s word. If it is not, headroom narrows as assurance rises, and at the top of the axis $\Delta - (c_p - c_b)$ can be negative — a tier that is technically superior, honestly priced, and unsellable. That is a testable prediction against the thesis and it is now measured (§27: Risk Analysis & Failure Modes, Red Line 14), because it should not have been left as an inference from a table caption.

Bypass Is a Magnitude, Not a Binary

Condition 5 of the §10b: Why Hold the Base Asset? is written as an existence condition — users cannot obtain equivalent capacity through a bypass channel — and Red Line 6 is written as a direction condition: usage grows while native fees do not. Neither is wrong, and neither is changed here. But both are read, in practice, as though bypass were a switch.

It is not. Bypass is never impossible. It is priced. There is always a channel that delivers the same computational content without protocol-grade verification, and the only question is what the buyer gives up by using it — which is exactly $\Delta$. Condition 5 should therefore be read and measured as a magnitude claim: not “no bypass exists,” which is false everywhere, but “$\Delta$ is large enough, for enough of the volume, to support a fee worth burning.” The condition stands as stated. Its interpretation is what this section tightens, and its measurement is what Red Line 14 supplies.

This is why the chain-strength rating for non-bypassability is reduced from Strong to Medium in this version (§6: The Triad and the Monetary Candidate). The condition is well specified as a binary and the binary is well enforced. The economics requires a magnitude, and the magnitude is nowhere estimated. A rating of Strong was a rating of the enforcement machinery, not of the quantity the argument depends on.

What Determines $\Delta$, and Why It Is Probably Thin

To first order, the differential value of a proof is the loss it prevents, times the probability that loss survives the alternative:

where $\mathcal{L}$ is the loss from undetected misexecution or denial of service and $\varrho$ is the residual probability of that loss under the best bypass channel. This operationalization lower-bounds $\Delta$: it prices only loss-prevention, while the full definition in §10b: Why Hold the Base Asset? covers four properties — cryptographic checkability, neutrality, credible non-discretion, and non-custodial exit — so neutrality and non-discretion enter as additional terms the $\varrho\,\mathcal{L}$ form omits. ($\varrho$ and $\mathcal{L}$ are used rather than the conventional $\pi$ and $L$, which denote the inflation rate in §2: The World Forces New Monetary Primitives and the leverage multiple throughout VerifyFlow and Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture.)

$\Delta$ is a distribution, not a number.

Before evaluating either term it is worth fixing what object $\Delta$ is. Every buyer has their own $\varrho$ and their own $\mathcal{L}$, so $\Delta$ is a distribution across the buyer population, and the fee bound of §10b: Why Hold the Base Asset? binds at the marginal buyer — the last one the protocol wants to retain at the posted fee — not at the median one. These come apart, and the difference is the whole commercial question. A thin median is entirely consistent with a lucrative fee, provided the upper tail is deep enough to be worth serving: counterparties nobody will indemnify because they are sanctioned or pseudonymous, flows crossing jurisdictions where no single forum will hear the claim, regulated model-risk and audit functions that must evidence correctness to a supervisor rather than merely believe it. For those buyers $\varrho$ is not small, because the indemnitor substitute is unavailable rather than merely inferior. The protocol’s commercial problem is therefore not “is the median workload willing to pay,” which it plainly is not, but “is the high-$\Delta$ tail large enough, and reachable enough, to carry a fee.” That is a sizing question the thesis has not answered, and Red Line 14 measures it capacity-weighted across the served mix rather than assuming it.

And at the median the answer is unflattering.

Written as $\varrho\,\mathcal{L}$, the critical term is $\varrho$, and here the thesis has been flattering itself. The bypass channel is not “unverified.” It is reputationally and contractually verified. A hyperscaler’s alternative to a cryptographic proof is its balance sheet, its SOC 2 and ISO audit reports, its published incident history, and an indemnity clause enforceable in a court that will actually hear the case.

A creditworthy, suable indemnitor is an excellent substitute for a cryptographic proof.

For an ordinary commercial workload in a benign state, the buyer’s exposure to undetected misexecution is not $\mathcal{L}$; it is $\mathcal{L}$ net of a contractual recovery from a solvent counterparty under a legal system that functions. That makes $\varrho$ small, and therefore $\Delta$ thin over the bulk of the distribution. Thin $\Delta$ against a structurally positive $(c_p - c_b)$ is the strongest form of the objection this section opened with, and it is not answered by incidence analysis. It has to be stated plainly, because a critic will otherwise state it first and more crudely: for the median commercial workload in a working legal order, cryptographic verification is a premium product competing against a cheaper substitute that is good enough. What that sentence does not say — and what a fair reading of it must preserve — is that the median is the marginal buyer. It is not, and the fee is set against the tail.

The Tail Is Bimodal, and the Two Modes Are Mutually Corrosive

The fee is not set at the median. §10b: Why Hold the Base Asset? put it at the marginal buyer in the upper tail — counterparties nobody will indemnify, flows no forum will hear, supervised functions that must evidence correctness rather than merely believe it — and then asked whether that tail is large enough to carry a fee.

That is the wrong question, because the tail is not one population. It is two. They want opposite things, and the thesis has been quietly adding them together.

The Two High-$\Delta$ Segments

Segment S (supervised). Regulated model risk, audit, clinical and pharmaceutical attestation, regulated AI deployment, supply-chain provenance under statutory duty. $\varrho$ is high because the loss is regulatory rather than financial: “we relied on the vendor” is not an answer a supervisor accepts, and no indemnity cures a sanction. What Segment S requires is evidence: scoped disclosure, viewing keys, named counterparties, jurisdictional clarity, retention.

Segment X (unsuable). Cross-jurisdictional, pseudonymous, sanctioned, capital-controlled, or adverse to the forum itself. $\varrho$ is high because the indemnitor substitute is unavailable rather than inferior — there is no solvent counterparty a court will make pay. What Segment X requires is absence: large anonymity sets, no disclosure surface, no perimeter identification, nothing that constitutes a subpoena target.

Both have genuinely high $\Delta$. Each one’s requirement is the other’s disqualifier.

The corrosion is not about the rail. It is about the set.

An anonymity set is a room. Segment S cannot afford to be seen entering a room that contains Segment X; Segment X is worth nothing in an empty room. Both want the same room, and each wants different people in it.

The obvious objection is that the thesis has already solved this: lawful privacy is default-private with optional disclosure, so Segment S turns viewing keys on and Segment X leaves them off, and both use the same protocol. That answer is correct at the level of the rail and it does not reach the actual problem, which is one level down.

Privacy is a network good. What Segment X buys is not a cryptographic property of its own transaction but the size and composition of the crowd it is indistinguishable within, and that crowd is shared. So is the crowd’s legal character. The two segments do not merely coexist on a rail; they occupy one another’s anonymity set, and each one’s presence changes what the set is worth to the other:

• S needs X to be absent. A compliance function cannot knowingly transact into an anonymity set containing designated parties, because the commingling is the sanctions exposure. The disclosure it can make about itself does not discharge a duty about who else is in the pool.

• X needs S to be present. §27: Risk Analysis & Failure Modes, Red Line 7, already states the mechanism: privacy that only outlaws use is a shrinking set. It is precisely the ordinary, legitimate, high-volume users who make blending plausible, and Segment S is the largest available source of them.

The dependency therefore runs one way and the repulsion runs the other. Segment X wants Segment S in the pool; Segment S wants Segment X out of it. That is not a stable composition, and no cryptographic feature resolves it, because the quantity in dispute is the population rather than the protocol.

Price discrimination is available and it destroys the good it prices.

The standard response to two segments with different willingness to pay is to serve them in separate tiers at separate prices, and the tier machinery of §19: Layer 4: Truth & Work would support it. Applied here it fails in a specific and instructive way.

Separating the segments into tiers separates their anonymity sets, and set size is the product. Two pools of half the size are worth less than one pool to every participant in both. Price discrimination on an ordinary good extracts surplus from each segment at its own willingness to pay; price discrimination on a network good extracts surplus while simultaneously reducing the quantity being sold, and here the reduction falls hardest on the segment whose $\Delta$ is highest.

You cannot segment a network good without degrading it. The protocol can price the two tails separately or it can pool them, and pooling is the only configuration in which either tail gets what it is paying for.

The consequence for the fee, stated precisely.

§10b: Why Hold the Base Asset? binds the fee at the marginal buyer. With two segments sharing one pool, and price discrimination unavailable for the reason above, the protocol is not choosing between $\Delta_S$ and $\Delta_X$ and it is not collecting their sum. It is setting one fee against whichever segment it is unwilling to lose, and the achievable revenue is not additive across the tails:

Neither branch yields the quantity a naive reading of §10b: Why Hold the Base Asset? suggests. $f$ and $Q$ are anticorrelated through the same distribution: a fee set at the higher tail sheds the volume of the lower one, and a fee set to retain both is bounded by the lower. The document has been treating “is the tail large enough” as a sizing question with one answer. It has two, and they interact.

Which architecture serves which segment.

§6: The Triad and the Monetary Candidate compares three architectures without pre-selecting one, and this subsection supplies a discriminating criterion the comparison did not previously have:

• Architecture A (one native monetary asset) forces both segments into one pool, one governance, and one legal posture. It maximizes set size and maximizes the corrosion. It is the configuration in which an enforcement action against Segment X is an enforcement action against Segment S’s counterparties.

• Architecture B (neutral reserve plus typed service claims) allows the segments to sit in different service claims over a shared reserve. It is the only one of the three in which the pools can differ while the monetary object does not.

• Architecture C (shared settlement, modular domain collateral) separates the collateral but not necessarily the sets, so it inherits the corrosion without the containment.

This does not select an architecture. It states, for the first time in this document, what the selection would have to be made on: not cross-subsidy and governance scope alone, but whether the architecture can hold two mutually corrosive high-$\Delta$ populations without losing one of them.

The instrument, and why it cannot be the obvious one.

The obvious measurement is anonymity-set composition by segment. That measurement is not available and must not be built, because a set whose composition is published is not an anonymity set — the instrument would destroy the property it measures, and a protocol that could report who is in its pool has already failed §3: First Principles: What a SoV Must Survive.

What is observable is departure, which is a behavioural series rather than a census:

• Compliance-side attrition after enforcement events. Supervised counterparty count and volume in the windows following a designation or enforcement action touching the protocol’s pools.

• Exit-side attrition after disclosure events. Shielded-pool activity and non-custodial share in the windows following the shipping or mandating of any disclosure surface, viewing-key requirement, or perimeter identification.

• The cross-correlation of the two series over rolling windows. A persistently negative correlation is the corrosion, measured without anyone being identified.

A protocol that shows both series declining together is losing the tail from both ends, which is the configuration in which the fee bound of §10b: Why Hold the Base Asset? goes to zero without any bypass channel being responsible.

Two Bypass Channels the Thesis Has Not Been Counting

Both of the following erode the base without tripping the instruments currently pointed at bypass.

Partial bypass at the intensive margin.

Bypass has been modelled as a routing decision — the buyer uses the protocol or does not. In practice the buyer uses less protocol per unit of underlying activity: batching many operations under one proof, aggregating proofs recursively, or using the protocol purely for attestation while executing the work elsewhere. Each is a legitimate engineering optimization, and each cuts native fees per unit of real economic activity. None of it registers as a Red Line 6 style “usage without fees” signal, because usage does still route through the protocol — just thinner. The correct denominator for fee intensity is the underlying economic activity being attested, not the count of protocol interactions, and the thesis has not been measuring it that way.

The protocol can be forked.

This is the more important omission. In an open-source, open-admission, canonically-specified market, the cheapest bypass channel is not a hyperscaler. It is this protocol, copied, with a lower fee and no burn. Every property the thesis is proud of — published workload specifications, open verifier implementations, permissionless participation, no vendor chokepoints — lowers the cost of producing that copy. A fork inherits the technology and discards the tax.

What actually prevents the fork from winning is not any of the five conditions. It is liquidity depth in the native asset, anonymity-set size in the privacy corridors, the installed collateral base and the operator relationships around it, the Schelling-point status of the workload registry, and the accumulated receipt history that makes one chain’s attestations worth citing. Those are network effects and coordination assets. They are not enforcement rules, and the thesis has been attributing the moat to enforcement rules. Stated honestly: §10b: Why Hold the Base Asset? explains why a user cannot get the service without the asset on this protocol. It does not explain why the user cannot get it on the copy. Whatever answer exists is a liquidity and coordination argument, it is empirical, and it belongs to link 7; whether holders then warehouse the asset’s risk belongs to link 8.

This is not purely hypothetical, and the one well-documented case ran exactly this experiment against exactly this kind of moat. In 2020, SushiSwap copied Uniswap’s open contracts and paid liquidity providers to migrate — a deliberate attack on a liquidity-and-coordination moat by an identical copy with better short-term incentives. The moat held. Liquidity depth, accumulated positions, and the receipt history a trader’s history lives in did not transfer with the code, and the copy won a share rather than the market. That is one observation in one corner of the design space, not proof — but it is evidence that the moat in question is real, and evidence about which moat: what defended the incumbent was not its technology, which was copied freely, but the coordination assets stacked on top of it. It is precisely those assets, and not the open specification, that a fork of this protocol would have to defeat.

The Fork Is an Equilibrium, Not a Competitor

The cheapest bypass is not a hyperscaler. It is this protocol, copied, with the fee removed.

§10b: Why Hold the Base Asset? concedes that, and concedes what actually stops the copy: liquidity depth, anonymity-set size, the installed collateral base, the registry everyone cites, the receipt history worth citing. Network effects, in other words, and not one of the five lemma conditions. The concession is correct. It was filed under the wrong heading.

Modelled as a bypass channel, the fork looks like the end of the fee. Modelled correctly, it changes what the fee is bounded by.

Two different bounds, and the binding one is not always the same.

The sustainable-fee bound of §10b: Why Hold the Base Asset? is $f \leq \Delta - (c_p - c_b)$, where $c_b$ is the all-in cost of the best bypass channel. Against a hyperscaler that expression carries the structurally positive cost handicap the section emphasizes: verified compute costs more to produce than unverified compute, and the protocol must recover the difference out of $\Delta$ before collecting anything.

Against a fork the arithmetic is different in a way worth stating explicitly. The fork runs the same technology, so $c_b = c_p$ and the handicap vanishes. What remains is

the differential value of transacting on this instance rather than on an identical copy — which is not a cryptographic property at all. It is liquidity depth, anonymity-set size, the installed collateral base and the operator relationships around it, whether the workload registry is the one everybody cites, and whether a receipt from this chain is worth citing because of what else is in its history.

The two bounds are separate quantities and the protocol is subject to both:

This is a real tightening of §10b: Why Hold the Base Asset?, which stated only the first term, and it is the correct place to put the concession the previous subsection made informally.

Contestable markets and coordination games give opposite predictions, and only one of them is the right model.

The objection that opened §10b: Why Hold the Base Asset? — a contestable market competes economic profit to zero — is the right model for the hyperscaler comparison and the wrong one for the fork. Contestability assumes entrants and incumbents are substitutes at the margin for each buyer independently. They are not, when the good’s value to each buyer depends on how many other buyers chose the same instance. That is a coordination game, it has multiple equilibria, and equilibria are not competed away by a better price. They are displaced by a focal point moving, which is a different and much slower mechanism.

A contestable market has one equilibrium and prices race toward it. A coordination game has several, and the incumbent’s advantage is not that it is better but that everyone is already there.

Openness cuts both ways, and the thesis has counted only one direction.

The previous subsection observed that every property the thesis is proud of — published workload specifications, open verifier implementations, permissionless participation — lowers the cost of producing the copy. True, and incomplete. Those same properties operate on the two bounds in opposite directions:

• Openness drives $\Delta_{\mathrm{tech}}$ against a fork to zero. There is no technical differentiator, by construction and by design commitment.

• Openness raises $\Delta_{\mathrm{coord}}$. A canonical workload registry that is public, stable, and cited by everyone is more focal than a proprietary one, not less. Schelling points are made of common knowledge, and publishing is how common knowledge is manufactured. The same is true of an open receipt history: its citability is a function of how many independent parties already read it.

So the honest statement of the trade-off, in the form §10b: Why Hold the Base Asset? uses for collateral:

Openness must be total for the technology and is the mechanism by which the coordination assets accumulate. You cannot have a defensible technical moat and an open specification. You can have an open specification and a focal point, and the second is the only moat this design is entitled to.

And the moat is buyable, which is the part that keeps it honest.

$\Delta_{\mathrm{coord}}$ is not a law of nature. A challenger can rent it: subsidize liquidity, pay operators to migrate, underwrite the anonymity set, and buy the switching costs down. This is the fork’s actual attack and it is a capital question rather than a technical one. The defensible claim is therefore narrow: the fee is bounded by what it costs a challenger to move the focal point, and that quantity is empirical, contestable by capital, and not guaranteed to exceed the fee.

The one case, in the right reference class and with its limits stated.

§10b: Why Hold the Base Asset? cites the 2020 SushiSwap attack on Uniswap: an identical copy of open contracts, paying liquidity providers to migrate, attacking a liquidity-and-coordination moat directly, and winning a share rather than the market.

Two corrections to how that case was used. First, the relevant reference class is not “forks” in general but coordination games in which an installed focal point is challenged by an identical copy with better short-term incentives — and in that class the observation is on point rather than cherry-picked, because it is a direct test of $\Delta_{\mathrm{coord}}$ against paid switching. Second, and stated plainly because the thesis holds itself to base rates elsewhere: it is one observation, it was selected after the fact, the incumbent survived, and a single surviving incumbent is not a base rate. It establishes that coordination assets can hold against a funded identical copy. It does not establish how often they do, or that they would here.

What this changes in the instruments.

Two additions, both small and both closing gaps that the bypass framing left open:

• Red Line 14’s reference panel gains a fork row. The pre-committed panel of §27: Risk Analysis & Failure Modes lists hyperscalers and GPU marketplaces — venues that measure $\Delta_{\mathrm{tech}}$ only. The lowest-fee protocol-grade fork offering the same canonical workload must be priced into $P^{\mathrm{byp}}$ on the same terms, because it is the channel with no cost handicap and therefore the one that binds first. A wedge measured only against unverified alternatives is measured against the weaker competitor.

• Acceptance breadth becomes a published series. The number of independent venues, corridors, and counterparties that quote, settle, and cite this instance rather than any other is the observable form of $\Delta_{\mathrm{coord}}$, and it belongs beside the denomination series of §10b: Why Hold the Base Asset? on the Value Capture Board (§23: Extended Telemetry). Both measure coordination; one measures whether people reckon in the unit and the other whether they converge on this instance of it.

Where this leaves link 7.

Non-bypassability was reduced from Strong to Medium in §6: The Triad and the Monetary Candidate because the economics requires a magnitude that is nowhere estimated. Nothing here raises it. The magnitude is now specified as two magnitudes rather than one, the second of which the document had been treating as an admission rather than a term, and both remain unestimated. What has changed is that there is now an instrument pointed at each.

What the Five Conditions Establish, and What They Do Not

Collecting the above fixes what the lemma’s conditions can deliver.

What they establish.

That a contestable market can be taxed and the proceeds routed to a token. Specifically: (i) a competitively priced claim on a cash-flow stream $f \cdot Q$, bounded above by the per-unit wedge $\Delta$ applied to volume — $\bigl(\Delta - (c_p - c_b)\bigr) \cdot Q$ at the sustainable-fee bound of §10b: Why Hold the Base Asset? — and deflating with unit price; and (ii) a balance-sheet lockup of collateral required in the native unit. Both are real. Both are also, precisely, quantities that a discounted-cash-flow valuation captures — a fee stream and a lockup.

What they do not establish.

Monetary premium. A monetary premium is by construction value in excess of discounted cash flows; it is what gold has and a pipeline does not. A holder who buys a share of the fee stream from indispensable workloads owns something closer to equity in a utility than to a collectible, and a utility equity earns its cost of capital; it does not carry monetary premium. The routing rules of §10b: Why Hold the Base Asset? are design commitments; nothing in this thesis claims that they set a price.

Three corollaries follow:

• A burn is a buyback. Economically, retiring supply with revenue is a pro-rata return of value to an existing claim. Buybacks change per-share value; they do not confer moneyness. No quantity of buyback has ever made an equity a store of value, and no burn schedule will do it either.

• Collateral is a lockup, not a premium. A required lockup denominated in the asset immobilizes float while operators remain solvent and choose to stay, and it places no bid. It is a balance-sheet fact, and §10b: Why Hold the Base Asset? bounds how large a fact it can be.

• A subsidy is a negative fee. Pass [Pass 2026] models proof-of-useful-work economies as three regimes: one in which the work is worthless and the token is pure seigniorage, one in which useful work is sold at cost, and one in which token issuance subsidizes the work below its compute cost. The fee-incidence bound places the second regime at $f \leq \Delta - (c_p - c_b)$ and the third at $f < 0$. A network in the third regime is buying volume with issuance; its receipts are real and its fee coverage is negative, and Red Line 5 and Red Line 14(B) are written to see it. Bitcoin’s work function, which has no external buyer, sits in the first regime by construction, and that is the content of the concession in §30: Objections & Responses.

The Test That This Reasoning Does Not Prove Too Much

If durable fee extraction from a commoditized flow made an asset money, the world would be full of monetary assets. CME clears standardized futures; DTCC settles equities; Visa takes a spread on card turnover; MSCI licenses indices that everyone benchmarks to; pipelines and port authorities meter physical throughput. All of them sit on flows more commoditized than canonical MatMul, all of them extract fees durably, several are structurally harder to bypass than any protocol will be, and not one of their equities is money. Visa’s take rate does not make Visa shares a store of value; it makes them a good business.

The comparison is the discipline. If the argument for the asset’s monetary premium is “recurring fees on indispensable throughput,” the argument is an argument for a high-quality utility equity, and it should be labelled as one. Something else has to be doing the monetary work.

Pledgeability Without Due Diligence

Nobody examines a banknote. That is not carelessness; it is the property that makes it money. A thing accepted only after inspection is being traded; a thing accepted without inspection is being spent, and the distance between those two — rather than any fact about scarcity or cash flow — is what the collateral literature means by moneyness.

This thesis has been engineering that property for six Parts and calling it a cost metric. §10b: Why Hold the Base Asset? established what the five conditions do not reach; §10b: Why Hold the Base Asset? relocates the claim to a holder-side flow. Between them sits the mechanism that arrives first and measures soonest.

The property that the collateral literature actually calls moneyness.

Outside the store-of-value framing, the working definition of a money-like asset in the study of collateral and short-term funding is not scarcity, not cash flow, and not convenience yield. It is information-insensitivity. An asset is money-like when no counterparty gains anything by investigating the particular unit tendered. Nobody looks, so it passes at face value, and a thing that passes at face value can be pledged without due diligence [Gorton & Pennacchi 1990] [Dang et al. 2020] [Holmström 2015]. Deposits, bills, and repo collateral circulate on that property. It is the property whose failure, rather than any change in fundamentals, is what a funding run consists of.

Two kinds of information, and only one of them is at issue.

The claim collapses immediately unless the object is specified, because transparency plainly does not produce insensitivity in general—equities are the most transparent securities in existence and among the most information-sensitive. The distinction that resolves this is between:

• Fundamental information—what the asset will be worth. Cheap verification does nothing to this, and this thesis claims nothing about it. A triad asset would remain fully information-sensitive on fundamentals, and so does gold.

• Unit-quality information—whether this unit, this receipt, this pledged position is what it purports to be. This is authentication and due diligence on the collateral itself rather than a forecast of its value.

The 2008 collapse in securitized funding is the reference case and it was the second kind. The question that stopped the market was not what housing would do; every participant held a view on that and had held one for years. It was whether a particular pool was good, nobody could answer it cheaply, and so lenders began producing private information about specific collateral, haircuts widened, and no-questions-asked acceptance ended [Gorton & Metrick 2012]. Moneyness failed along the unit-quality axis while the fundamental axis was already common knowledge.

Information-Insensitivity by Symmetric Knowledge

There are two routes to no-questions-asked acceptance, and they are opposites.

Symmetric ignorance is the historical route. Producing information about the specific collateral is expensive relative to the gain, so nobody produces it, and the asset trades at par. Opacity is the mechanism, not a defect of it.

Symmetric knowledge is the route a verification-native asset takes. Producing that information costs approximately nothing and the result is public, so no counterparty can come to hold an informational edge over another. The asset trades at par for the opposite reason.

Both deliver acceptance without due diligence. They differ in how they end. Symmetric ignorance is a knife-edge: it holds only while nobody looks, and the first agent to look acquires an advantage that every other agent must then defend against, which is the run. Symmetric knowledge has no such trigger, because there is no private information about unit quality available to produce; private views about fundamentals remain, and are priced as volatility rather than as due diligence. You cannot start a run by looking when looking is free and public, because looking buys nothing that everyone else could not have had for the same nothing.

The mechanism is deterrence, not audit, and the distinction is the one a critic will press first.

The formulation above deliberately does not claim that everyone has in fact looked. Universal audit is observed nowhere, including in the settings where looking is already close to free: public filings sit unread, open ledgers go unexamined, and the record is routinely both complete and unanalyzed — none of it hidden, and none of it examined ([Green 2026f], where the observation and its limits are attributed). An argument requiring every counterparty to have actually verified would be refuted by ordinary observation on its first day, and a version of this section that rested on one would deserve to be.

Nothing in the mechanism requires it. What removes the run trigger is the absence of a discoverable edge, and free public verification removes that whether or not anyone exercises it. The information is non-rival and non-excludable, so the agent who looks acquires nothing the agent who declines to look could not have had at the same cost. Symmetric ignorance fails because looking is privately profitable to the first mover; symmetric knowledge holds because looking is privately worthless to everyone—not because it is universally performed.

The discipline therefore operates on the claimant, before the claim is made, in the way the credible possibility of entry disciplines conduct in a contestable market without entry being observed [Baumol 1982]. A misrepresentation any counterparty could falsify at zero cost is not worth attempting, so it is not attempted, so nobody has to check. The equilibrium described here is one in which verification is constantly available and almost never used, and those two facts are the same fact. Two consequences follow that matter for how this thesis is read. The first is that the object to measure is the cost of verification and not the observed rate of it: Red Line 1 reads the standing threat, and a decline in measured verification activity is not by itself evidence against the mechanism provided verification cost has not moved. The second is that a system can be perfectly auditable and monetarily inert, because deterrence requires the claimant to believe that being caught would cost them something—a condition this thesis instruments separately, and takes up in §10b: Why Hold the Base Asset? and Red Line 14 rather than assuming.

This thesis has been describing that mechanism as a cost metric.

The touchstone image of Red Line 1—expensive to smelt, cheap to assay—is not an analogy about operational efficiency. It is a statement that gold is information-insensitive on unit quality, which is why any counterparty could accept a nugget from a stranger without investigating the stranger. Gold’s monetary career is better explained by that property than by a convenience yield it does not have (§10b: Why Hold the Base Asset? notes gold’s storage-theory convenience yield is near zero). The same substitution runs through the rest of the document: $r(W)$ (§19: Layer 4: Truth & Work), the PIDL receipt schema, the reproducibility contract, and the Layer 0 grade ladder are not merely cheaper ways to run an audit. They are machinery for removing the informational advantage that a counterparty could otherwise hold over the holder of a pledged position.

The clearest evidence that the thesis already believes this is that it already prices it. The collateral haircut schedule of §14: Layer 0: Verifiable Machines & Energy discounts a position by how legible its physical substrate is; risk haircuts (§22: Layer 6: Governance & Telemetry) discount it by sovereign optionality; bridge classes carry haircuts by trust assumption. Every one of those is a price on residual unit-quality uncertainty. The document derived an information-sensitivity schedule from engineering intuition without the monetary theory that explains what it was pricing.

What is made insensitive is the position, not the token.

A necessary precision, because the obvious version of this claim is trivial. That a unit of a public ledger is authentic is not a differentiator: it is true of every cryptocurrency and no counterparty has ever had to investigate whether a bitcoin is a bitcoin. That is table stakes and it has never made a token money.

The differentiator is the collateralized position. When the asset is pledged against an obligation to deliver a service—prover bonds, corridor collateral, SLA escrow—what a lender must assess is not the unit but the bundle: whether the capacity behind the obligation exists, whether the operator’s slashing exposure is what it claims, whether the physical substrate can deliver under the scenario the haircut assumes. That is where due diligence lives, that is what Facility Capacity Receipts, energy receipts, Delivered Verified Capacity (§14: Layer 0: Verifiable Machines & Energy) and the grade ladder make cheap, and it is the first argument in this document for why Layer 0 is a monetary requirement rather than an engineering preference, which is the role §3: First Principles: What a SoV Must Survive assigns it.

Necessary, not sufficient—and the test that says so.

The discipline of §10b: Why Hold the Base Asset? applies to this section with equal force, and the counterexamples are the thesis’s own. Graded commodities are cheaply assayed and warehouse receipts never became money. Certified diamonds are authenticated to a published standard and are not money. Bearer bonds are authenticable at sight and are not money. Cheap unit verification is therefore not sufficient, and any argument that stops here proves far too much.

What separates the cases is a conjunction. Insensitivity on unit quality becomes monetary only alongside fungibility (certification tells you this stone’s grade; it does not make stones interchangeable), durability and portability (grain is gradeable, perishable, and bulky), and the absence of a counterparty (a warehouse receipt reintroduces the custodian whose solvency must then be assessed, and a bearer bond is somebody’s liability). Gold is the one historical object at that intersection: assayable, fungible, durable, portable, and nobody’s promise. The claim available here is narrow and it is the whole of what this section asserts:

A verification-native digital bearer asset is the second class of object to occupy that intersection—and the first whose assay cost does not scale with the size of the claim being assayed.

That last clause is the only genuinely new term. Assaying a larger quantity of metal costs more; destructive sampling scales with the lot. Verifying a succinct proof costs the same whether the claim underneath it is worth a dollar or a billion. The cost of establishing unit quality has been invariant to notional in no prior monetary object, and if information-insensitivity is what makes collateral money-like, an assay whose cost does not grow with what is at stake is a change in kind rather than in degree.

What this predicts, and what it does not.

A reader of Dang, Gorton and Holmström [Dang et al. 2020] will object that their insensitivity is a property of the payoff structure: a security is insensitive when the expected gain from producing private information about its payoff is below the cost of producing it, which is why over-collateralized debt—flat over the relevant states—is the natural money-like security, and why driving information cost to zero on a security with a state-dependent payoff makes it more sensitive, not less. The objection is correct, and it fixes the scope of this section. The argument made here is the adverse-selection argument on unit quality, not a claim about payoffs: free public verification removes the class of private information that concerns whether the pledged position is what it purports to be, and leaves the class that concerns what it will be worth untouched. Bitcoin is the control case. Its unit quality has been perfectly and freely verifiable since 2009, and its collateral haircuts nonetheless sit at 30–50% and vary widely across lenders, because those haircuts are pricing realized volatility and liquidation depth, which no verifier can compress. Cheap verification therefore cannot be expected to lower haircut levels on a volatile bearer asset, and the thesis does not predict that it will.

What it predicts is narrower and is the content of Red Line 17. Controlling for realized volatility and market depth, a position whose backing is publicly verifiable at VerifyPrice should show (i) lower dispersion of haircuts across lenders than an opaque comparable, because the due-diligence component that lenders price idiosyncratically has been removed, and (ii) faster convergence of haircuts after a shock, because there is no private information for the cautious lender to be waiting on. Pledgeability without due diligence attaches to the position—over-collateralized, DVC-backed, with a debt-like payoff over the states the haircut assumes—and not to the bare base asset; a lender who wants a flat payoff builds one out of the base asset and a haircut, and what Layer 0 sells that lender is the ability to size the haircut from public facts. Red Line 17 tests exactly that, and is specified so that Bitcoin’s own record—native units against wrapped and custodial representations of the same units—is a case it can pass or fail rather than one it fails by construction.

A second invariance, and the objection it answers.

The strongest available objection to any cheap-verification argument is that verification is not the only thing getting cheaper. If the cost of manufacturing plausible false claims falls at least as fast as the cost of checking them—synthetic corroboration, fabricated provenance, volume sufficient to exhaust the checker’s attention—then the informational balance is unchanged and nothing monetary follows. The objection is correct in general and it is fatal to arguments about verification conducted in natural language, where discrimination between a true and a false claim degrades as the adversary invests.

Cryptographic verification does not have that gradient, and this is the second respect in which it is unlike every prior assay. Under stated soundness assumptions a false proof is not expensive to produce; it is infeasible, and the verifier’s cost of rejecting one is identical to its cost of accepting a valid one. Attempts do not accumulate into persuasion: a thousand forged proofs are a thousand rejections, and no quantity of surrounding corroboration moves the outcome, because nothing outside the proof is consulted. Verification cost is invariant to the size of the claim and invariant to the effort of the adversary, and the second invariance is the one that survives contact with an opponent who is also getting better tools.

The bound on that claim is stated with equal force, and it is the bound already set out at the head of §8: Proofs as Attestation Money: a proof is a bounded attestation, not truth. It establishes that a computation followed a circuit or that a receipt descends from a signed chain. It establishes nothing about whether the workload was worth running, whether the operator’s off-ledger position is what they say, or whether the sentence a human attached to the artifact is honest. The class of claims over which this thesis’s verification is adversarially invariant is exactly the class that can be stated as a computation, and that class is considerably narrower than the class of claims on which trust is currently failing. Where the two do not overlap, this thesis has nothing to offer and should not be read as offering it.

Issuance discipline reappears here, and not as scarcity.

Condition 4 of the §10b: Why Hold the Base Asset? required issuance to be capped by schedule or capacity rather than by governance fiat, and §10b: Why Hold the Base Asset? observes that issuance discipline is the one lemma condition touching the monetary channel without explaining what distinguishes it. This section supplies the explanation. An asset whose supply is a discretionary decision is information-sensitive on supply: a counterparty must form and maintain a private view of what the issuing body will do, which is due diligence by another name, and an asset requiring due diligence cannot be accepted no questions asked. Credible non-discretion is not only a scarcity property. It is the condition under which the supply schedule stops being something anyone has to have an opinion about.

Who pays for verification, and why the free-rider problem does not bind here.

Grossman and Stiglitz [Grossman & Stiglitz 1980] established that a market cannot be both costlessly informative and informative at all: if prices already reflect everything knowable, no agent is compensated for the costly work of producing information, so the work is not done and the prices stop reflecting it. Informativeness has to be paid for by somebody, and an equilibrium in which nobody is paid is not an equilibrium. The same structure threatens the argument of this section in an obvious form. If verification is free, nobody earns a return on verifying; if nobody earns a return on verifying, what sustains the apparatus that makes verification possible, and why does the symmetric-knowledge regime not decay back into the ignorance it replaced?

The objection is a real one, and it is the reason this section does not rest on transparency in the general case—where it would bind, and where the historical record of unread disclosure suggests it does. What answers it is a property specific to proof systems and absent from the Grossman–Stiglitz setting: the cost of producing the information and the benefit of consuming it fall on different parties, and the party bearing the cost bears it voluntarily. In their model the same act, research, is simultaneously the expenditure and the source of the private return, which is what forces the informational rent that makes prices imperfectly informative. In a proof system the expenditure sits with the prover, who incurs it in order to be believed, and the result is consumed by every counterparty at negligible marginal cost. Verification is therefore not an underprovided public good waiting for a subsidy or a rent. It is a private good purchased by the party who wants their claim accepted, and its public checkability is a by-product that the purchaser cannot withhold without destroying the thing they were buying.

The same asymmetry, read from the financing side, is why the fee argument had to be conceded.

§19: Layer 4: Truth & Work states this separation as $r(W) = v(W)/p(W)$ and treats it as an engineering property. It is also an industrial-organization property, and reading it that way closes a loop this Part opened. Because the prover is buying credibility in a market where any competent competitor can sell the same credibility, the price of proving is competed toward the cost of proving. That is precisely the finding of §10b: Why Hold the Base Asset?: the fee stream is ordinary service revenue, competitively priced, and reproducible by a discounted-cash-flow valuation. The property that makes verification sustainably supplied is the same property that stops it from being a source of excess return, and the thesis should not have expected to keep both. The two results are one result seen from opposite sides, and their agreement is a constraint the argument has to live inside rather than a coincidence worth celebrating: whatever monetary premium exists is not in the proving business, which is why §10b: Why Hold the Base Asset? and §10b: Why Hold the Base Asset? look for it somewhere a valuation cannot follow.

How symmetric knowledge fails, stated before a critic states it.

The mechanism is not indestructible, and its failure modes are already red lines, which is the useful part. Symmetric knowledge reverts to ignorance whenever verification stops being free and universal: when verification affordability breaks (Red Line 1), when verification concentrates such that most participants are trusting a verifier rather than verifying (Red Line 3), or when the underlying receipt data becomes unavailable or proprietary (Red Line 4). Each of those has been treated in this document as a degradation of service. Each is also, on the argument above, a monetary run trigger, and should be read as one.

A fourth failure mode is not covered by any red line and is named here rather than deferred: scope drift between what is verified and what is exposed. A position can be perfectly legible on its proof and entirely opaque on the operator’s off-chain leverage, counterparty concentration, or rehypothecation. Verification that certifies the computation while the exposure sits elsewhere reproduces exactly the 2008 structure with better cryptography. The gap is measured as the off-ledger exposure disclosure series on the Value Capture Board (§23: Extended Telemetry, Appendix B: Practical KPIs & Telemetry Templates): the share of pledged-position notional whose operator publishes an attested disclosure of off-ledger leverage, counterparty concentration, and rehypothecation, bound to the position’s receipts. It carries no trigger of its own in this version; it feeds the RL17 lender panel and the RL10 opacity reading, and it exists so that the gap is a published number rather than a caveat.

What this section does not claim.

Four disclaimers, because the temptation to over-read this is considerable. It does not claim price stability: an information-insensitive asset can be violently volatile, and gold and Treasuries both are. It does not claim insensitivity on fundamentals, only on unit quality and pledged-position quality. It does not claim that acceptance follows automatically from measurability; whether any lender actually extends no-questions-asked terms is an empirical outcome, not a design consequence. And it does not raise any rating in §6: The Triad and the Monetary Candidate: this section supplies a mechanism and an instrument for link 9, not evidence that link 9 holds. Ratings that rise because an argument was added are self-congratulation.

The instrument: haircut level, and more sharply, haircut dispersion.

The mechanism is measurable well before the asset is anything, and one of the two available readings is much cleaner than the other. Haircut level confounds what this section is about with ordinary price volatility: a lender demands over-collateralization for both reasons and the level does not separate them. Haircut dispersion across lenders separates them better, but not by itself: lenders differ in funding costs, balance-sheet limits, liquidation capacity, and terms, and lenders running one shared model can agree while sharing its error. The comparison that isolates the sensitivity at issue is relative — dispersion on the native asset against dispersion on an opaque comparable of similar volatility, quoted by the same lenders at the same moment — because whatever is particular to each lender enters both quotes and differences out. What remains is evidence about unit-quality information under that comparison, not an identity with it, and agreement produced by a shared underwriting model is not counted (Red Line 17).

Publish, per quarter, against a pre-committed panel of lending venues on the same custody and reproducibility terms as the Red Line 14 reference panel:

• Haircut level on the base asset and on pledged positions, by collateral class and Layer 0 grade.

• Haircut dispersion—the cross-lender interquartile range at a common timestamp—as the primary series.

• Due-diligence cost: the observable cost of onboarding the asset as collateral at a new venue, in time and fees, which should fall toward zero if the mechanism is working.

• Dispersion conditioned on stress, since the prediction with the most content is about the shape of failure rather than its level.

The prediction is specific enough to lose. An information-insensitive asset shows haircuts that are tight at whatever level volatility sets, and—this is the discriminating claim—dispersion that does not widen when the market does, because there is no private information for a stressed lender to price. The historical signature of a funding run is dispersion widening before level, as the better-informed lenders withdraw first. If that signature appears here with full receipt availability, symmetric knowledge did not hold, and the mechanism this section proposes is not present in the asset.

The falsifier. This mechanism is made falsifiable as Red Line 17 (§27: Risk Analysis & Failure Modes): cross-lender haircut dispersion that fails to decline as verification coverage rises, or that widens under stress while receipts remain available, is this section’s claim failing in public.

Two mechanisms, and they are complements.

This section and §10b: Why Hold the Base Asset? are not rival accounts, and the difference between them is worth stating in one line because they answer different questions. Information- insensitivity is why a counterparty would accept the asset without investigating it. The regime-contingent holder-side flow is why a holder would want it when other arrangements fail. Acceptance without demand is a payment rail; demand without acceptance is a collectible. A monetary asset requires both, and §10b: Why Hold the Base Asset? adds the third question — whether anyone will reckon in it. The thesis argues all three, sizes none, and publishes an instrument for each.

Where a Monetary Premium Would Actually Come From

The constructive half. If fees, burns, and collateral yield a well-valued cash-flow claim rather than money, the monetary claim has to be relocated rather than abandoned — and the place it relocates to is one the thesis has already spent six Parts describing without noticing that it was the monetary argument.

$\Delta$ is not a constant; it is a function of regime pressure.

Write $\Delta(R)$, with $R$ the regime-pressure index of Stage A (§10b: Why Hold the Base Asset?). §10b: Why Hold the Base Asset? showed why $\Delta$ is thin in benign states: a solvent, suable indemnitor substitutes for a proof. Invert that sentence and it names exactly when $\Delta$ is large. The substitute fails when the counterparty:

• cannot be sued — cross-jurisdictional, pseudonymous, or sanctioned, so no forum will hear the claim;

• will not be solvent when it matters — the failure is correlated, and the indemnity is worth least in exactly the state that triggers it;

• is the adversary — a state, a platform, or a regulator, where the entity you would sue is the entity imposing the loss;

• inflicts a non-compensable loss — censorship, seizure, deplatforming, or disclosure, where damages do not restore the position because the position was never about money.

That list is the threat model of §4: Threat Model, restated as a demand curve. The thesis is therefore internally consistent — but the consequence is unflattering to fee accrual as a monetary argument and places the monetary burden on links 8 and 9:

$\Delta$ is small in benign states and large in the tail. The asset’s usefulness is state-contingent, and its distribution is skewed toward exactly the states everyone else’s arrangements stop working in.

State-contingency does two different things, and only one of them is monetary.

The tempting move here is to say that an asset whose usefulness rises in states where the marginal utility of wealth is high must be worth more than the discounted expectation of its cash flows, because those cash flows arrive weighted by a high state price. That move fails the test this section’s own demolition just set. §10b: Why Hold the Base Asset? defined a monetary premium as value in excess of discounted cash flows, and a discounted-cash-flow valuation carried out with the correct stochastic discount factor already weights every cash flow by its state price. State-price weighting is what a risk-adjusted discount rate summarizes — and a single discount rate summarizes it correctly only when payoffs are not heavily state-contingent, which this asset’s are. A payoff this state-contingent needs the stochastic discount factor itself, not the single scalar that compresses it. An argument that stops there has relocated the monetary claim into the denominator of a DCF, which is not outside the DCF at all. The argument therefore has to be split into two mechanisms, one conceded and one kept.

Mechanism one: a negative beta on the fee stream. Real, valuable, and not monetary.

Because $\Delta(R)$ rises when the substitutes fail, the fee stream is countercyclical with respect to regime pressure: the protocol can charge most for its differential properties in the states where wealth is scarcest. A rational investor pays more per unit of expected cash flow for that stream than for a procyclical one, and should. But this is exactly a discount-rate effect. It lowers the cost of capital applied to the same fee stream, it is fully representable inside a discounted-cash-flow valuation, and it therefore produces no moneyness. A countercyclical utility is a better utility, not a monetary asset. Conceded, and set aside: nothing in the monetary claim below rests on it.

Mechanism two: a holder-side service flow. This is where a monetary premium would have to live.

The bearer of the asset obtains something that is not a cash flow at all, and so has no cash flows to discount: the ability to transact, prove, hold, and exit at the moment when the substitutes for proofs, courts, and custodians have stopped working. That service accrues to whoever holds the unit, by virtue of holding it, and not by virtue of any distribution from the protocol. Nothing is paid out, so a valuation of distributions omits it however its discount rate is set; a valuation that prices services from possession, as transactional-demand models of tokens do, need not. This is the same category of thing as the value of holding a bearer instrument outside the banking system, and it is why an asset with no cash flows whatsoever can carry a price. It establishes a benefit of ownership. Whether that benefit becomes monetary use rather than inventory demand depends on others accepting the unit, which is the separate question of §10b: Why Hold the Base Asset?.

The mechanism is standard, and the analogy is to the mechanism only.

That a non-cash-flow service from holding a thing can carry a price no cash-flow model reproduces is the storage-theory account of convenience yield in consumption commodities ([Kaldor 1939]; [Working 1949]): the holder of physical inventory obtains an option against stockout that the holder of a claim on future delivery does not. The analogy drawn here is to that mechanism — a service flow accruing to the bearer rather than to a claimant — and not to the setting. A triad asset is not a storage commodity, it faces no stockout risk in the storage-theory sense, and no magnitude in this thesis derives from the commodity literature.

The distinction the mechanism turns on is easiest to see with a fire extinguisher and a contract for the delivery of one. Both have a price. Both can be bought today, valued, resold, and hedged. Only one of them works during the fire. The premium you pay for owning the extinguisher rather than a delivery claim on one is the amount by which the physical commands more than the discounted contract. No discounted-contract valuation reproduces that number. It is the quantity this thesis means when it says the holder-side flow has no cash flows to discount. In the moment of use, the contract and the extinguisher are not substitutes at any price, and every argument in this section about regime states is an argument about when the market is on fire. An extinguisher is not money, though. The analogy establishes a benefit of ownership; the step from there to monetary use is independent acceptance and a persistent demand to hold, and this section does not supply it.

Gold, which this thesis keeps comparing itself to, is a separate case and should not be filed under storage theory: gold’s convenience yield in the storage-theory sense is near zero in normal regimes, which is why its lease rates are ordinarily negligible and its forward curve essentially full cost of carry — the early-2025 episode, when tariff-driven physical flows into New York pushed one-month lease rates to multi-year highs and spot into backwardation, is the exception that shows what a storage-theory yield on gold looks like when it briefly exists. What is true of gold is the part that matters here. It has no cash flows, negative carry, and industrial demand far too small to explain its price; every constructible DCF for gold returns a number well below the market. On the standard account that residual is monetary and portfolio demand — what holders pay for a bearer holding that is useful when other arrangements are not — which is the holder-side category described above, arrived at from a different direction.

Regime-Contingent Convenience Yield

The monetary premium available to a triad asset is the holder-side service flow generated by the state-contingency of $\Delta(R)$ — the bearer’s ability to transact, prove, hold, and exit when the substitutes for proofs, courts, and custodians have stopped working — conditioned on credible non-discretion in issuance and on bearer holdability. Those two are not added terms but enabling conditions: the flow is only a monetary service while issuance discipline holds and the unit remains bearer-holdable, and it collapses if either fails. The service accrues by virtue of holding rather than as a distribution, so there is no stream to discount. That is what places it outside a discounted-cash-flow valuation rather than merely at a different discount rate inside one.

It is not the countercyclicality of the fee stream. That is a negative beta on cash flows: real, valuable, and captured exactly by a DCF using the correct stochastic discount factor, which is why it confers no moneyness.

It is also not generated by burns, by collateral, or by fee share. Those produce a cash-flow claim and a collateral lockup (§10b: Why Hold the Base Asset?).

Which conditions and which links this actually implicates.

The consequence of the split is immediate. If the monetary claim rests on the holder-side flow, then it rests on the properties that determine whether a holder can actually use the thing under pressure — and none of those are fee-routing properties. Of the five lemma conditions, only issuance discipline touches the channel at all, and it does so because credible non-discretion is part of the payoff rather than part of the accrual. The other four are conditions for value accrual, and accrual is a DCF quantity. Link 8 then requires a persistent self-custodied constituency capable of bearing loss. The premium itself hangs off link 9: liquidity, neutrality, verifiability, legal holdability, and agency preservation (§3: First Principles: What a SoV Must Survive). Those are the conditions under which a bearer can transact, prove, hold, and exit when it counts. No burn schedule reaches the premium: a burn operates on the claim, and the premium is not on the claim.

Now discount it honestly.

The hedge has a defect, and it is the same defect the thesis has already documented without drawing the monetary conclusion. The payoff is negatively correlated with the states you fear — that is the point — but the delivery is positively correlated with them. The states in which $\Delta(R)$ spikes are energy interdiction, hardware denial, network filtering, and jurisdictional pressure (§4: Threat Model, §14: Layer 0: Verifiable Machines & Energy), and those are precisely the states in which the protocol’s ability to supply privacy, proofs, and compute is impaired. §30: Objections & Responses half-concedes this and Red Line 13 makes the mechanism falsifiable, but both frame it as a threat to the hinge. It is also a discount on the hedging premium, which is the monetary consequence, and the honest statement of it is: you are being asked to pay a premium for insurance whose underwriter is exposed to the insured event.

Two further deductions from the same discount:

• The slots are occupied. Gold already holds “works when the network does not.” Bitcoin already holds “works when the state does not.” Neither requires a grid at the moment of use — gold requires none at all, and a Bitcoin key survives an outage even where settlement waits. A triad asset needs power, reachable networks, and obtainable reference hardware in order to deliver anything at all, which makes it a hedge against a narrower and more specific band of failure: adversarial conditions severe enough to need proofs and privacy, but not severe enough to take the grid.

• The band may still be the important one. That band — administrative repression, surveillance, synthetic media, platform and compute enclosure, financial repression without collapse — is the one Part I argues is most likely. Sovereign optionality (§14: Layer 0: Verifiable Machines & Energy) exists to widen it, and disruption-adjusted VerifyPrice (§14: Layer 0: Verifiable Machines & Energy) exists to price whether the widening is real.

And do not overclaim it.

The state-contingency argument establishes a mechanism. Non-cash-flow service flows accruing to a bearer are ordinary in asset pricing, and there is nothing exotic in claiming one here. The holder-side flow is nonetheless unsized: nothing in this document estimates how large a regime-contingent convenience yield a triad asset could command, and no honest estimate is available before there is a market in which to observe one. This is an empirical question the thesis has not answered. What it can do is refuse to smuggle the answer in — which is why the chain-strength rating for the store-of-value premium is Medium (conditional), why link 8 now asks who bears the asset’s loss, and why the relocated claim is attributed to link 9 rather than to fee accrual. The measurement instrument exists so that the question can be settled rather than asserted: §23: Extended Telemetry publishes the lending-rate, basis, and wrapper-basis series against the regime-pressure index, and a series flat across regime states is the null result, reported as such.

Collateral: Unit-Elasticity, Float, and Wrong-Way Risk

Condition 3 requires operators to post the native asset as collateral, and the reference designs specify the requirement as a share of capacity value: “10–20% of capacity value” in §6: The Triad and the Monetary Candidate and a “10–15% collateral requirement” in Design A. That specification has a consequence.

Collateral Unit-Elasticity

Let $K$ be the USD value of deployed capacity, $\chi$ the required collateral ratio, and $P$ the asset price. The number of units that must be locked is

The requirement fixes a value, not a quantity. Collateral demand is therefore unit-elastic in price: a doubling of $P$ halves the units required to satisfy the same obligation.

($\chi$ is used here for the collateral ratio because $\kappa$ already denotes net mechanical gain in Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture and facility capacity share in §14: Layer 0: Verifiable Machines & Energy.)

It is a level effect on free float, not a slope on demand.

The mechanism immobilizes a fixed dollar quantity of float — a level effect on the free float, not a buy order of any kind, since a lockup places no bid — and the valuation it supports grows only as deployed capacity $K$ grows, not as price grows. Describing it as “structural demand that scales with the network” is true only in the sense that it scales with physical build-out, and physical build-out is slow, capital-rationed, and observable.

And $K$ deflates too.

Capacity value is the replacement cost of deployed infrastructure. It therefore inherits the same deflation exposure as the fee base in §10b: Why Hold the Base Asset?: the same generation of throughput is worth fewer dollars of replacement capital each year. A collateral requirement pinned to $K$ shrinks in dollar terms unless deployed physical capacity grows faster than its unit cost falls. This is the same empirical bet, entering through a second door.

Reflexivity runs in both directions.

For small moves the mechanism is genuine negative feedback, and it is a real design achievement: price rises, fewer units are needed to cover the same $\chi K$, surplus collateral releases into float and meets the buying; price falls, operators must post more units, and they buy. An automatic stabilizer.

For large moves it inverts. Collateral denominated in the asset it insures loses value exactly when slashing risk and operator distress rise — textbook wrong-way risk, and in its dynamic form the familiar margin-spiral or leverage-cycle mechanism. The operator’s instruction in a drawdown is “post more units, at a moment when your existing holdings are worth less and your operating business is stressed.” A common answer is not to post; it is to exit capacity. Exiting reduces $K$, which reduces required collateral, which releases locked units into a falling market. The stabilizer becomes an accelerant, and it does so through the same equation that made it a stabilizer:

The value-leakage mitigations of §10b: Why Hold the Base Asset? do not contemplate this loop. Red Line 15 (§27: Risk Analysis & Failure Modes) does: it reads on exactly this sequence as a conjunctive condition — a material drawdown, collateral coverage falling below realized slashing exposure, operator exit or forced liquidation, stress-adjusted DVC declining, released collateral raising liquid float, and core SLOs failing to recover — and §27: Risk Analysis & Failure Modes requires the pure-native, mixed, and native-plus-insurance designs to be stress-tested against it before governance chooses among them. The metric the loop needs, collateral coverage against realized slashing exposure with capacity-withdrawal rates conditioned on drawdown, is the one Red Line 15 publishes.

The design tension, stated plainly.

Collateral must be the native asset in order to create native demand, which is the whole of Condition 3’s monetary contribution. Collateral should be uncorrelated with the risk it insures in order to be credible, which is the whole of prudential collateral design. You cannot have both. Any move toward external collateral — stablecoins, bonded fiat, over-collateralization in an uncorrelated asset — strengthens safety and weakens Condition 3’s monetary contribution by exactly as much. This is not a problem to be solved; it is a trade-off to be chosen deliberately and disclosed.

The magnitude bound.

$\chi K$ is bounded by an accounting identity, and the arithmetic is worth doing even roughly. The following is an order-of-magnitude illustration, not an estimate: the inputs are chosen to be generous rather than defensible, and no claim rests on their precision.

Order-of-magnitude ceiling on collateral lockup. Illustrative arithmetic on assumed capacity values, not a forecast; the point is the exponent, not the digits.

Those are large-cap-equity numbers. They are not monetary-aggregate numbers, and no choice of $\chi$ inside a plausible range changes the exponent. Collateral therefore cannot be the source of moneyness. At best it supports holding demand while operators remain solvent and choose to participate, and it releases in the drawdown that tests it.

The one real contribution, stated in the document’s own notation.

Collateral does do something, and it is worth being precise about what. It creates a holding constituency whose supply is highly price-inelastic — operators cannot sell locked units at any price without exiting the business — which shrinks effective free float and steepens the price response to a given flow. In the Stage C decomposition (§10b: Why Hold the Base Asset?), that is an operation on the liquidity and market-impact state $\Lambda_t$, not on the native monetary impulse $\theta_t$.

Collateral is a slope effect on price impact, not a level effect on price. By immobilizing float (a level effect on free float), it changes how much price moves per unit of flow. It does not establish where price belongs, because it places no bid.

And a slope effect cuts both ways: a steeper response to buying is a steeper response to selling. Calling this “structural demand” overstates it in one direction while concealing the symmetry in the other.

From Utility Demand to Monetary Premium

Many indispensable services—electricity, bandwidth, compute instances, legal services, cloud storage—have recurring demand without being stores of value. The monetary argument requires explaining why this utility becomes monetized savings demand, not just operating expense.

The bridge has eight conditions. The middle five are the §10b: Why Hold the Base Asset? arriving early and informally; they are named here in one line each and stated formally at §10b: Why Hold the Base Asset?, not argued twice:

1. Utility demand is not enough. Recurring demand for a service does not automatically create a scarce, holdable asset. Bandwidth is indispensable, but claims on bandwidth do not become money.

2. The asset must be required for fees or settlement — required fee medium, Condition 1.

3. Fees must produce burns, retirement, or staking yield — supply reduction, Condition 2.

4. Operators must post the asset as collateral — Condition 3, whose worth §10b: Why Hold the Base Asset? bounds as a slope effect on price impact, not a valuation floor and not a source of premium.

5. Issuance must follow a schedule fixed ex ante — issuance discipline, Condition 4.

6. Users must not be able to bypass the asset at equal service quality — non-bypassability, Condition 5.

7. Telemetry must prove the loop is working. Fee coverage, burn rates, collateral lockups, and workload demand must be publicly verifiable—not asserted.

8. If any value-capture condition fails, the asset does not even capture its own service value. It becomes infrastructure exposure whose economics accrue to operators or customers rather than to holders. Meeting those five conditions makes service value accrue to the asset; it does not make the asset money, establish stress-deliverable service, or create a loss-bearing holder constituency.

This section is the “utility-token trap” defense. The thesis does not claim that useful things automatically become money; it claims that under specific, testable value-capture conditions, a useful asset accrues the value of its usefulness to its holders — a cash-flow claim and a collateral lockup. Whether anything further, a monetary premium in excess of those, is available is argued separately and on different grounds in §10b: Why Hold the Base Asset?. The §10b: Why Hold the Base Asset? formalizes the accrual conditions; the telemetry regime (§22: Layer 6: Governance & Telemetry) makes them falsifiable.

Why Users Cannot Simply Bypass the Asset

The strongest economic objection to the thesis is simple: “Why can’t AWS, a ZK prover marketplace, or a privacy wallet sell the same service for fiat or stablecoins and bypass the base asset entirely?”

The monetary object at stake in this objection is the base asset — the fee, settlement, and collateral unit — not Work Credits. Work Credits are bypassable service claims by design, and their bypass threatens only service-claim economics, not the monetary thesis. What the thesis needs is that the base asset cannot be bypassed, and the objection is valid unless the protocol enforces native value capture. The required mitigations:

1. Core fees are denominated in the base asset. Provers, routers, and settlement corridors accept only the native asset for protocol-level fees. Fiat or stablecoin payment requires acquiring the asset first — for the seconds it takes to settle, which is transactional demand, not a savings motive.

2. Collateral must be posted in the base token. Operators cannot participate without holding significant quantities of the asset. Calling this “structural demand” overstates it in one direction while concealing the symmetry in the other (§10b: Why Hold the Base Asset?): it immobilizes a fixed dollar quantity of float, which steepens the price response to flow in both directions rather than establishing where price belongs.

3. Fee retirement is a pro-rata buyback tied to usage. A published share of fees is retired. This returns fee value to holders (Value-Capture Condition 2) and reduces net issuance only when retired fees exceed scheduled issuance; it is a cash-flow mechanism and carries no moneyness inference (§10b: Why Hold the Base Asset?).

4. Priority is sold in the asset, never held. Gold-tier SLAs and priority access during congestion are bought through service contracts paid in the asset, which keeps them a fee channel; holding the asset confers none of them (§10b: Why Hold the Base Asset?). Governance participation requires staking.

5. Settlement paths are natively denominated. Privacy corridors and settlement rails denominate in the base asset; off-ramps exist but are not the default. Whether anyone keeps the unit after settling is the denomination question of Red Line 18, not a property of the rail.

Honest admission: If users can in practice bypass the asset—for example, if most operators accept stablecoins and immediately off-ramp, or if hyperscaler-hosted provers dominate the market and set prices in fiat—then the SoV thesis fails. The system may remain useful infrastructure, but the monetary claim collapses. The telemetry must track this: native-asset fee share, bypass channel volume, and operator off-ramp rates should be visible on the Economic Coverage Board (§23: Extended Telemetry).

The Incumbent Bypass Channel Is Not Hypothetical

The five mitigations above answer a proposal. They do not answer a precedent, and a precedent exists: stablecoins already settle a large fraction of the value the thesis is targeting, at scale, at near-zero cost, with no native monetary asset anywhere in the loop. Tron and Ethereum carry stablecoin transfer volumes at national-payment-system scale; in the emerging-market currency episodes Chainalysis documents [Chainalysis 2024] — Argentina, Turkey, Nigeria — dollar-stablecoin wallets, not Bitcoin and not Zcash, were the observed instrument of savings flight and censorship-adjacent settlement. That is a decade of revealed preference in exactly the states of the world this thesis calls State 3 (§26: Adoption Curve & Ecosystem Dynamics), and it is not engaged anywhere in the design.

The stablecoin channel is a live test of Condition 5 that has already been run, and the honest reading is unfavorable in three of four respects:

• Where stablecoins beat the triad: benign and mid-band repression. A stablecoin settles in seconds, costs cents, has no learning curve, and offers practical censorship resistance to the median user, because freezing a Tron address is harder than freezing a bank account even though it is easier than censoring a shielded pool. For payments-motivated flight, the bearer-asset properties this thesis prices (privacy by default, portable proofs, verified compute access) are mostly not on the buyer’s list.

• Where the triad can still differ: the upper band. The stablecoin’s weakness is structural and appears exactly where the thesis’s services begin: it is a claim on a custodian’s reserve and an issuer’s goodwill, it freezes under sanctions enforcement, it carries no proof or compute service, and its censorship resistance is borrowed from its host chain rather than owned. As repression crosses from financial into administrative and epistemic forms — compelled disclosure, platform deplatforming, attestation demands — the stablecoin inherits the substitutability of its issuer, not of cryptography. That is the band in which a triad asset’s $\Delta$ over a stablecoin is nonzero, and §10b: Why Hold the Base Asset? already prices the premium as regime-contingent.

• The arithmetic. None of that changes the base fact: for the median settlement need in benign and mid-band states, the incumbent bypass channel is cheaper, faster, and already deployed. The thesis’s five mitigations make bypass harder on this protocol; they do nothing about bypass around it. Red Line 6 is therefore best read as already having an empirical prologue: every stablecoin-settled triad-adjacent payment is a data point that the capturable wedge must be measured against, not assumed above.

The design implication is not despair but precision: the asset’s fee-bearing services must be ones a stablecoin cannot express — private settlement where the stablecoin is a custodial IOU, proofs where the stablecoin is silent, verified compute where the stablecoin has nothing to verify. Where the triad service is interchangeable with a stablecoin payment, Condition 5 should be presumed failed, and the Value Capture Board’s stablecoin-denominated fee share series (§23: Extended Telemetry) is the instrument that watches it fail or hold.

Co-option as Bypass

The bypass threat is not always a competing product. It can also be institutional co-option: ETFs, treasury companies, margin loans, and regulated custody that deliver exposure to the asset’s price without requiring users to interact with the protocol’s privacy, proof, or settlement rails. If the majority of demand is satisfied by custodial wrappers that bypass the fee-burn-collateral loop, the asset’s price may rise while its monetary thesis weakens. The telemetry must distinguish between custodial exposure (which does not exercise value capture) and protocol-native usage (which does).

Wrapper Dominance Risk

Co-option as bypass is dangerous enough to warrant a named, top-tier risk rather than a sidebar. A protocol asset can succeed as a financial product while failing as money. If ETFs, custodians, treasury companies, broker-dealers, lending desks, and stablecoin wrappers satisfy most demand for exposure, the asset’s price may rise even as native settlement, privacy usage, fee burns, collateral lockups, and non-custodial flows stagnate. This is not a contradiction. It is the signature of wrapper dominance.

Wrapper dominance is dangerous because it turns a monetary network into a reference price. It creates holders without users, exposure without settlement, and liquidity without sovereignty. The asset can moon while the monetary thesis dies.

Wrapper Dominance Ratio (WDR)

Wrapper dominance has a stock component and a flow component, and they must not be divided into one another: exposure is measured at an instant, usage over an interval, so a single ratio would scale with the arbitrary length of the measurement window. WDR is therefore reported as a pair.

Stock form — what share of economic exposure sits in custodial or synthetic form, where $E^{\text{wrapper}}_t$ and $E^{\text{native}}_t$ are exposures at time $t$:

Flow form — how activity divides over a stated horizon $h$, where $V_{t-h:t}$ is volume across that window:

The stock form is bounded in $[0,1]$. The flow form is not: it divides one volume by another, so it is bounded below by zero and unbounded above, and it is undefined when native volume is zero. Both are window-explicit. A rising stock share with a rising activity ratio indicates the asset may be financializing faster than it is becoming money. The horizon $h$ must always be published alongside the flow form.

Inputs to track: ETF/wrapper AUM; custodied balances; exchange balances; wrapped token supply; native fee share; non-custodial settlement volume; shielded/private settlement volume; staking/collateral lockups; fee-burn coverage.

Why wrappers come first, and why that is not reassuring.

The observation that first-generation use of a new medium wears the old medium’s form [McLuhan 1964] — early print looked like manuscripts, early television like radio with pictures — supplies the intellectual lineage of this ratio, and it changes what a rising WDR should be read as. It is not, on its own, evidence of pathology: during a medium transition, consumption of the new asset through the old form is the expected initial condition, not an anomaly. What it means is that the WDR is measuring a phase, and that the thesis’s claim is specifically about whether the transition completes. Wrapper dominance in year three is the manuscript stage of the bearer asset. Wrapper dominance in year twenty is a medium that never finished forming. The failure gate above exists precisely because the frame does not promise completion: first-generation use is always the old content, and the red lines, not the analogy, decide when waiting has become failing.

Gold ran this experiment already.

The financial lineage is a century old, and it is worth naming because it removes any temptation to treat wrapper dominance as a novel crypto pathology. Paper claims on gold grew until they dwarfed the metal: unallocated bullion accounts, gold certificates, and eventually exchange-traded products came to represent exposure-to-gold on a scale that holding-of-gold never matched — the vault holds a fraction of what the paper promises, and the fraction is the finding. A shareholder in a gold ETF owns a claim on a trust that owns gold; a holder of unallocated bullion owns, in the stress-relevant sense, a deposit at whoever holds it. Both are exposure. Neither is a coin in a vault, and on the day it matters — the redemption run, the allocation freeze, the jurisdictional block — the difference between allocated and unallocated is the entire difference. Paper gold did not destroy gold. It demonstrated the exact pattern this ratio watches for: the financial claim outgrowing the bearer object it references, prospering for decades, and leaving the underlying’s monetary character unchanged while the exposure stack did the volume. That is the precedent the WDR tracks, and the reason it is a stock and a flow rather than a single number.

Failure gate: If WDR rises for multiple quarters while native fee share, private settlement, and collateral lockups stagnate, the asset may remain investable but its SoV-as-protocol thesis is weakening. This gate is added to the Red Lines in §27: Risk Analysis & Failure Modes and tracked on a dedicated Wrapper Dominance Board (§23: Extended Telemetry).

The Market Realization Plane

The Wrapper Dominance Ratio is a pair — a stock share and a flow ratio — reported side by side and never divided into one another. The stock component measures how much ownership has migrated into custodial and synthetic form; it does not explain the flow mechanics by which those wrappers set prices. That requires one more construct.

Market realization is deliberately not an eighth layer of the stack. Layers 0–6 produce privacy, proofs, compute, settlement, and governance. Market realization produces none of those; it is the conventional financial machinery that represents claims on the resulting monetary object. It is orthogonal to the stack, so it is modelled as a plane around the stack rather than a layer within it.

Market Realization Plane

The set of external institutions and instruments through which claims on the native monetary object are represented, financed, allocated, and priced: exchanges and custody, spot ETFs, corporate treasury vehicles, index products, options and futures, leveraged and inverse ETPs, dealer swaps, prime-broker financing, passive mandates, systematic trend strategies, and rules-based or agentic treasury systems.

The result is two nested loops, and the thesis needs both to be instrumented.

The inner protocol loop determines whether the stack works:

The outer market-realization loop determines how the stack is financially represented:

The inner loop determines native monetary function. The outer loop determines market-price realization. Either loop can strengthen while the other weakens, and the outer loop can run for years on narrative alone.

The plane is not a precaution invented for a young asset. The reference asset of the entire financial system already has one, unacknowledged. When a central bank reads the long end as a message, the reply from market structure is that no unfiltered message exists for the Treasury curve: a measurable share of its demand is generated by benchmark rules and accommodated through leveraged intermediation (§2: The World Forces New Monetary Primitives), and the decomposition that would have to come first—net demand by tenor, in risk units, separated by buyer and by decision rule, with a residual the authors are made to name—is the object this section specifies for the base asset. The difference is only that here it is built in from the start, where for the Treasury curve it would have to be reconstructed after the fact. If the price of the world’s risk-free asset cannot be read without first identifying who is speaking and under what rule, the price of a monetary candidate certainly cannot, and that is the whole of Premise 9.

A Three-Stage Model

The combined thesis can now be stated as three linked but separable processes.

Stage A — regime pressure creates structural need. Let $R_t$ index financial repression, surveillance, synthetic media, and AI concentration. Compute demand is deliberately not a component of $R_t$: it is a demand driver in its own right, entering alongside regime pressure rather than as part of the pressure index, so that $D_t^{\text{triad}} = g(R_t)$ is not partially defined in terms of its own output. Regime pressure generates demand for triad capacity:

This is the causal layer developed in Part I.

Stage B — protocol design converts need into native value. Let $\phi_t \in [0,1]$ measure the effectiveness of the monetary design: required fees, burn share, collateral, issuance discipline, and non-bypassability. Then native captured demand is

As $\phi_t \rightarrow 0$, the system can remain enormously useful while the monetary object fails. This is not the §10b: Why Hold the Base Asset? restated as a coefficient: the lemma is an AND-gate on five conditions, while $\phi_t$ is an empirical capture fraction those conditions constrain. The lemma says partial capture is possible only when the gate is open; $\phi_t$ measures how much of the triad demand actually flows through once it is.

Stage C — market structure realizes native value as a price path. Observed price depends not only on native demand but on aggregate exposure flows and the liquidity available to absorb them:

where $\theta_t$ is the non-flow fundamental or native monetary drift — defined to exclude flow effects, so that all flow impact enters once, through the $I(Q_t, \Lambda_t)$ term, rather than twice — $Q_t$ is aggregate exposure demand (a flow over the interval $[t-1, t]$), $\Lambda_t$ is the liquidity and market-impact state, and $\eta_t$ is residual. Aggregate demand decomposes by source:

Only the first term is monetary evidence. The remaining four can dominate the price for extended periods, in either direction. Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture develops the flow mechanics formally — holder flow elasticity, the net mechanical gain coefficient, the recycling boundary, market impact, and volatility drag — and §23: Extended Telemetry defines the telemetry that makes the plane observable.

Why a protocol should care about external market structure. A designer might object that this is someone else’s problem. It is not. External wrappers affect treasury behavior, collateral demand, governance concentration, liquidity-provider incentives, public understanding, security-budget expectations, regulatory pressure, and the price that the protocol’s own participants use when making decisions. The protocol should not manage its price. It must nonetheless instrument the structures through which its monetary claims are represented, for the same reason it publishes VerifyPrice: unmeasured dependencies are where theses go to die quietly.

The Numeraire Is Not Fixed

Everything above measures the price path in units of account whose own value is assumed constant. That assumption is doing more work than it appears to.

§10b: Why Hold the Base Asset? establishes that price is not evidence of monetary adoption. The point here is adjacent and independent: even a price series that is informative about the numerator can mislead through the denominator. A rising quotation may report an appreciating asset, a depreciating unit of account, or any combination of the two, and the series alone cannot distinguish them.

Numeraire-Dependence

The property that a measured price path is jointly determined by the asset and by the unit in which it is quoted, such that the same series can support opposite conclusions about real command over resources depending on the denominator chosen.

For this thesis the consequence is a measurement requirement rather than a philosophical observation. The Market Realization Plane exists to prevent financialization from being narrated as adoption. A plane instrumented only in the sovereign unit of account is blind to the case where wrapper-led appreciation and currency depreciation move together—which is precisely the regime §2: The World Forces New Monetary Primitives argues is likely.

Requirement.

The core market-realization series—the Wrapper Dominance Ratio (§10b: Why Hold the Base Asset?), the Wrapper–Native Growth Gap, and the native fee, burn, collateral, and settlement series—should be published in at least one non-fiat numeraire alongside the fiat series. A reference basket of energy, compute, shelter, and gold is sufficient and has the advantage that each component is a thing the holder might actually need. Where the two numeraires disagree in sign, the disagreement is the finding and should be surfaced rather than reconciled.

A sharper definition of the objective.

The thesis has so far spoken of purchasing power, which inherits the numeraire problem it is trying to escape. The more precise statement of what a store of value is for:

Wealth is durable, transferable command over necessary capacity under adversarial conditions.

Each term is load-bearing. Durable excludes claims that survive only while an issuer chooses to honor them. Transferable excludes capacity that cannot be moved or bequeathed. Necessary capacity names the denominator explicitly—energy, shelter, compute, mobility, time—rather than leaving it implicit in a currency. Under adversarial conditions is the requirement of §3: First Principles: What a SoV Must Survive and the reason §3: First Principles: What a SoV Must Survive is a design constraint rather than a preference. This is the definition the rest of the document should be read against.

Worked example: structure does not determine behavior.

A useful illustration, because it is easy to get backwards. An asset can be genuinely bearer-oriented, scarce, censorship-resistant, and independently settleable at the protocol layer, and simultaneously trade as leveraged technology beta at the wrapper layer—held through exchange-traded products, pledged as collateral, sized by volatility-targeting mandates, and sold first in a de-grossing episode. Both descriptions are accurate. They describe different planes.

The error in either direction is the same error. Concluding from correlated selloffs that the protocol properties are illusory mistakes the plane for the stack. Concluding from the protocol properties that the price will behave defensively mistakes the stack for the plane. Appendix H: Formal Model of Market Realization, Wrapper Flows, and Price Capture supplies the machinery for keeping them apart, and §23: Extended Telemetry the telemetry.

A related precision, since the language is routinely abused: a proof-of-work asset is energy-linked, not energy-backed. Its issuance and security consume energy; it is not redeemable for a fixed quantity of electricity, and no holder has a claim on a joule. The distinction matters because a genuine claim on capacity—a generation asset, a storage system, a Facility Capacity Receipt—has a payoff structure that an energy-linked bearer asset does not, and conflating them overstates the latter’s hedging properties.

Technology success is not incumbent success.

One further reading of the same distinction, which the thesis has stated elsewhere in monetary terms and which generalizes. A technology can transform an economy while destroying the equity, debt, and tokens of everyone who financed its first build-out; railways and long-haul fiber are the standard cases. This is §10b: Why Hold the Base Asset? pointed at infrastructure rather than at protocols: the social return and the return to the first capital structure are different quantities, and the second is the one an investor actually receives.

Denomination: The Function the Thesis Has Never Measured

Ask a merchant in Buenos Aires what a thing costs and the answer comes in dollars, whatever ends up crossing the counter. That is the whole of the unit-of-account question, and it is the one monetary function the other instruments do not measure.

§10b: Why Hold the Base Asset? treats the numeraire as a measurement hazard: the thesis’s own series are quoted in a unit whose value moves, so they must also be published in a non-fiat one. This subsection points the same word the other way, and asks a monetary question rather than a hygiene one — is anyone choosing to quote in this one?

Denomination is the strongest of the monetary functions and the one nobody instruments.

A store of value can be abandoned in an afternoon: the holder sells and is out. A unit of account cannot. It is welded into contracts whose counterparties would all have to move at once, and each of whom eats the basis if they move alone. That mutual dependence is what makes denomination sticky: it is a coordination device rather than a portfolio choice, and coordination devices are hard to acquire and correspondingly hard to lose [Doepke & Schneider 2017]. Assets that achieve denomination rarely lose it. Assets that achieve only holding lose it routinely.

The thesis measures fees, burns, collateral, settlement, holder cohorts, wrapper exposure, capacity, reachability, and verification cost. It does not measure whether a single contract anywhere is priced in the unit. That is the largest gap in a five-family measurement programme, and it is a gap on the monetary side rather than the service side.

The trap, stated first, because the obvious metric is worthless.

A naive denomination share would read one hundred per cent on the day the network launches and would mean nothing. §6: The Triad and the Monetary Candidate specifies that all triad services are priced in the base token; Condition 1 of the §10b: Why Hold the Base Asset? requires it. Denomination that the protocol mandates is a routing rule — the same routing rule already stated, already conceded to be a design commitment rather than a finding, and already excluded from carrying monetary weight by §10b: Why Hold the Base Asset?. Counting it as evidence of adoption would be the tokenomics inference in a new costume.

Everything of interest is therefore in the complement.

Free-Choice Denomination Share

Let $\mathcal{C}_{\text{free}}$ be the set of contracts in which the parties were not required by protocol rule to express price terms in the base asset — forward and term capacity purchases, SLA agreements above the mandated fee, bilateral prover–buyer contracts, corridor quotes, over-the-counter blocks, service retainers, employment and vendor agreements among operators, and any obligation denominated between counterparties rather than by the protocol.

Free-choice denomination share is the fraction of $\mathcal{C}_{\text{free}}$ whose price terms are written in the base asset, reported by contract count, by notional, by tenor bucket, and by counterparty class.

The mandated complement — fees, required collateral postings, protocol-set tier pricing — is published separately and is never added to it. It is a design commitment and reads as one.

Quoting and settling are different acts, and the crypto record turns on the difference.

A contract has two units and they need not agree. It can be quoted in dollars and settled in the asset; quoted in the asset and settled in the asset; or, rarely, quoted in the asset and settled in dollars. The second and third are unit-of-account observations, because the unit that fixes the obligation is the unit of account whatever instrument discharges it. The first — quoted in fiat, settled in the asset — is a payment-rail observation, and it is the configuration essentially all crypto commerce has actually taken.

This is worth stating at full strength because it is the strongest evidence against this thesis’s own expectations. Bitcoin is the most successful new store of value of the last century on the measures this thesis uses—credible scarcity, verification cost, censorship resistance, and capitalization—and after seventeen years it denominates almost nothing. Bitcoin-native businesses quote in dollars and settle in bitcoin. Salaries described as paid in bitcoin are, with few exceptions, dollar salaries settled in bitcoin. Whatever monetary premium bitcoin carries, it did not come with denomination attached and has not produced it since.

Two readings are available and the thesis should not pretend the choice is obvious. Either denomination is not necessary for moneyness — in which case this subsection measures something real but not load-bearing — or bitcoin’s moneyness is incomplete along a specific, measurable axis. This document takes the second reading and concedes it is contestable.

The one structural asymmetry that makes the second reading defensible.

Bitcoin has no native economy of goods. The things bought with it are produced by an economy that prices in dollars, so a bitcoin quote imports basis risk against every input the seller must pay for, and no coordination is available to remove it. A triad protocol is different in one respect that is not a matter of degree: the goods are produced by the system that issues the unit. A proof, a verified inference, a corridor settlement, and a unit of delivered verified capacity are priced, produced, collateralized, and settled inside the same accounting perimeter. A prover paid in the unit, posting collateral in the unit, buying capacity priced in the unit, has a naturally two-sided position and faces the basis risk that keeps bitcoin quotes in dollars only on the legs that reach outside.

That is the whole of the structural argument, and it is narrow. It says a service protocol has a coordination path to denomination that a pure bearer asset does not. It does not say the path will be taken.

The walled-garden test, before a critic applies it.

Internal denomination proves nothing on its own, and there are unflattering precedents. Airline miles are denominated, transferable, and priced against a schedule the issuer sets; in-game currencies denominate large and genuinely productive internal economies. None is money, and each would score highly on a share computed only over contracts internal to its own economy. The discriminating cut is therefore not free choice alone but where the counterparty stands:

• Tier I — inside contracts. Both legs are protocol services. Free choice, but the parties are already inside the accounting perimeter. This is where in-game currencies score one hundred per cent.

• Tier II — boundary contracts. One leg is a protocol service, the other is not: an enterprise buying verified inference, an operator’s power contract, a hardware purchase.

• Tier III — outside contracts. Neither leg is a protocol service, and the unit was chosen anyway.

The monetary content rises strictly from I to III, the three are published separately and never blended, and Tier I is reported as context rather than as evidence. A protocol scoring highly on Tier I alone has built a company scrip with excellent telemetry.

The volatility objection, which is the serious one.

Nothing prices in a volatile unit if it can avoid it, and this is the standard and correct explanation for the bitcoin record. It bounds where denomination can appear, and the bound is useful precisely because it makes the prediction specific rather than directional. Denomination should appear first at short tenor, where the parties’ exposure to unit variance over the contract’s life is small, and first in two-sided positions, where a counterparty’s costs and revenues are in the same unit and the variance nets. It should appear last, or never, in long-dated one-sided contracts, which is exactly where a naive story would expect a strong monetary asset to show up first.

That is a shape prediction across the tenor and sidedness buckets, and a shape is harder to fake than a level. A denomination share that rose uniformly across all buckets would be evidence of subsidy or mandate rather than adoption, and should be read that way.

And it couples to the previous mechanism.

The reason volatility is prohibitive is not variance itself but the cost of carrying and hedging the exposure that variance creates over a contract’s life. That cost falls when positions in the unit can be financed cheaply and pledged without investigation — which is what §10b: Why Hold the Base Asset? argues cheap universal verification supplies. The two mechanisms are not parallel additions to the same list. Information-insensitivity lowers the carrying cost of denomination, and denomination is what converts an accepted asset into a coordination device. Acceptance without denomination is a settlement rail; denomination without acceptance does not occur.

An ordering caveat the thesis should carry rather than discover.

The currency-substitution literature finds a consistent sequence when populations abandon a domestic unit: asset substitution first, unit of account second, means of payment last. Savings dollarize years before prices do. If that ordering holds here, free-choice denomination is a confirming indicator of monetary adoption rather than a leading one on the macro path, and this subsection should not be read as promising an early warning of anything.

The claim it does support is narrower and survives the caveat: denomination is leading with respect to the protocol’s own contract layer, because Tier I and Tier II contracts exist from Phase I onward and can be counted long before any external population is substituting anything. What is early here is the measurement, not the phenomenon.

Instrument.

Publish quarterly on the Value Capture Board (§23: Extended Telemetry), under the custody and reproducibility terms of Red Line 14 — the party collecting the fee may not classify the contracts:

• Free-choice denomination share, by contract count and by notional, split across Tiers I/II/III, and never aggregated with the mandated complement.

• Quote/settle matrix. The four-cell table of quoting unit against settling unit, by notional. The fiat-quoted, natively-settled cell is the payment-rail null and is reported as the headline denominator, not hidden in a total.

• Tenor and sidedness decomposition. Share by tenor bucket and by whether the counterparty’s position is one- or two-sided in the unit, so the shape prediction above can fail visibly.

• Subsidy disclosure. Any fee rebate, tier privilege, or incentive conditioned on native denomination, with the share recomputed excluding subsidized contracts. A purchased quote is not a chosen one.

• Redenomination events. Contracts that switch units in either direction at renewal, which is the cleanest available revealed preference and the series a critic will ask for first.

The falsifier. This mechanism is made falsifiable as Red Line 18 (§27: Risk Analysis & Failure Modes), in two conditions with different severities: outsiders declining to reckon in the unit weakens the thesis, and protocol participants declining to reckon in it on unmandated contracts kills it.

What this subsection does not claim.

It does not claim denomination is necessary for moneyness — bitcoin is the standing counterexample and it is named above rather than managed. It does not claim the protocol’s endogenous service economy makes denomination likely, only that it makes a coordination path available that a pure bearer asset lacks. It does not raise any rating in §6: The Triad and the Monetary Candidate: a new instrument on link 9 is an instrument, not a finding. And it does not promise an early warning on the macro path, for the ordering reason stated above.

What it does supply is an answer to the question the other instruments cannot answer: what would be visible, at Phase I, that distinguishes this from every service token that ever shipped? The answer is a contract nobody was required to write in the unit, written in the unit anyway, with a counterparty outside the perimeter, at a tenor long enough to matter, without a rebate.

New here? Start with the one-minute version.

Tip: hover a heading to reveal its permalink symbol for copying.