Three ways of being.
One recognition.
Each of us is, at once, a being, a doer, and a relator. The protocol recognises all three — and only counts what's honest to count.
Existence Value
You ARE, therefore you have worth. Unconditional. Infinite. Non-tradeable.
Creative Value
Your capacity to CREATE and transform. Renewable. Expressible. Exchangeable.
Relational Value
Your CONNECTIONS and contributions. Accumulated. Measurable. Portable.
The protocol does not create these bodies. It recognizes them — and makes the recognition unforgeable.
Two tokens per hub.
One global bridge.
Two ways our work is recognised — what we are (a weekly basic dignity payment for every one of us) and what we make (the value we exchange). One bridge currency that lets us trade across communities. Engineered against attack: hard supply caps, activity-based decay, unique-counterparty requirements, and a closed circuit where nothing can be bought in or cashed out.
- Every weekUBD arrivesTo every verified human, from one home hub. Unconditional.
- ThenIt is spentOn bread, a repair, a lesson — bought from the member who made it.
- And hereNew CP, to the makerBecause the sale was real, new credit is minted — not to an investor, not to a lender, but to the person who made the thing.
- Between hubsgCP bridges hubsLocal CP converts up to gCP, the one bridge between hubs. It carries value across, never out.
Outside the wall: nothing is bought in, nothing is cashed out.
A closed wall with four stations inside it, joined by one line. UBD arrives every week for every verified human. It is spent with the member who made something. Because the sale was real, new CP is minted to that maker. Local CP converts up to gCP, the one bridge between hubs. No line enters the wall and no line leaves it: nothing is bought in, nothing is cashed out.
Universal Basic Dignity
Every verified human receives a weekly dignity distribution from exactly one home hub — and a home hub is always a geographic one, because dignity income means nothing where no local market is obliged to accept it. Unconditional. Capped. Local. Non-convertible to fiat. The specification's Đ1,000 is the documentation's reference example, not a universal amount: each geographic hub sets its own UBD, calibrated to the local cost of living — the same basket of dignity, a different number from hub to hub. This is not charity — it is recognition.
Creative Potential
Earned through verified value creation: marketplace sales, services, mentorship, governance. Local to each hub. Quality-weighted by reputation. Activity-rewarding decay.
Global Creative Potential
The federation's bridge currency. Hard-capped at 10 billion forever. Provisioned by the productive capacity of all hubs and registered real assets — never by external currency. Used for inter-hub trade, hub formation stakes, refugee support.
Ten billion forever, never inflatable, and nothing to buy in or cash out. Here is why the circuit is closed.
Read the protocolThe other half of a marketplace
Until now this marketplace had one side: every instrument assumed the person with something to give speaks first. A roof needs mending before anyone advertises that they mend roofs. So a member posts what they want done, at a stated value — and on acceptance it settles as an ordinary sale, the same mint equation, unchanged: not one unit of extra claim per unit of real value sold.
Escrow — and why it is not a freeze
An escrow is a pre-committed lock on the poster's own tokens, by their own act, released only by published rule — never an administrator's discretion. Exactly three exits: acceptance, expiry, an arbitral finding. An escrow with a release key is a freeze wearing a nicer word, and we will not ship one.
The stated value is escrowed at the moment of posting. An unfunded work order does not exist: a “wanted” post carrying no committed value is an advertisement, and there is already a place for advertisements. On expiry with no taker, the escrow returns to the poster automatically.
One taker claims it, the order closes to further takers, and the delivery deadline begins. This is the state in which labour is genuinely committed on both sides — and it is the state the health metrics decline to count as real value until it settles.
The taker marks delivery, and the poster has one week to accept or to dispute. Silence has a direction, and the direction is toward whoever performed: the window auto-accepts, because a poster who could commission work, take it and go quiet would hold a free option — and an option that costs nothing is one everybody eventually exercises.
The escrow releases to the taker, the mint fires, and the transaction is an ordinary marketplace sale in every register we keep. A taker who misses the deadline has performed nothing, so that clock resolves the other way. Neither rule asks anyone to be trusted; both ask only that a clock be published before it starts running.
No escrow outlives one quarter. Thirteen weeks is the maximum term from posting to release — the Protocol's own quarter, the interval the basket recalculation, the depth window and the trailing activity measures all already run on — because an escrow spanning two measurement windows would let one commitment be read twice by a metric that reads quarterly. Work genuinely longer than a quarter is posted as a sequence of orders, each funded, each settling on its own, which is also how a taker gets paid before the whole job is finished and how a poster limits exposure to a taker who stops. And escrow shelters nothing: the weekly retirement charge and the commons levy fall on escrowed balances exactly as on any other, with no floor, no bracket, no exemption and no activity condition. An escrow that suspended the charge would be a demurrage shelter dressed as a job, available to anyone who could post an order to a friend.
The commons share of the mint
A share of the claim that is already minted — zero to fifteen per cent, one tenth by default, never below the seller's one per cent floor — is credited to the hub commons (in non-geographic hubs) instead of the seller: the coordinator, the translator, the moderator, the builder. It is a division, not an addition: total claim per sale is unchanged.
The money is spent through published bounties, or it is not spent. Scope, deliverable, acceptance test and price are named before the work and settled on delivery against that test — never on attendance or “collaboration”, and never against an external contribution: no bounty is ever paid in tokens against money.
What is not solved, said plainly. There is no way to verify that delivered work was done — only that a poster accepted it, or failed to dispute it within a week. That is the same standard the first tier of dispute resolution already applies, and it is weaker than any of us would like: two members who agree to lie about a delivery will succeed, and no escrow, clock or diversity bound reaches them. What the bounds do reach is scale — the point at which lying stops being two people and becomes a business — and that is the whole of the claim made here.
Nothing here is for sale
No pre-sale, no ICO, no investor allocation, no exchange listing, and no fiat or stablecoin gateway — in either direction, at any token level. No token can be bought with external money, and no token can be sold for it. This is not a launch-phase posture to be relaxed once the project is respectable: it is unamendable, and not even a foundational-tier amendment reaches it. A boundary a supermajority can open is not a boundary; it is a delay.
Value enters in exactly two ways — recognition (UBD, to every verified human) and creation (CP, minted only on real transactions between real members). It leaves in exactly two ways — spending, on the goods and services of the network, which is what an economy is for; and migration, carrying balance and reputation to another hub. There is no cash-out, because there is no cash-in. The bounded exchange is the protocol’s window at which CP is exchanged; CP itself is minted only on real transactions — the rate prices the exchange, never the mint.
Political credibility
“No amount of money can buy entry, voice, or advantage in this system” is the most credible sentence a dignity protocol can pronounce — and only a closed circuit makes it true. A convertible system can promise that capital won't capture it. A closed system doesn't have to promise.
Monetary sovereignty
A convertible token is denominated by what it converts into — priced by it, arbitraged against it, drainable into it at every crisis of confidence. Substitution never happens by converting out to the old money; it happens when the new unit comes to denominate growing shares of real life. The closed circuit is not a ceiling on that ambition. It is its precondition.
Structural simplicity of defence
Closing the boundary deletes chapters of the threat model rather than mitigating them. No bank run where there is nothing to run to. No pump-and-dump where there is nothing to dump into. No whale entry where there is nothing to buy. What survives is the machinery aimed at internal markets and inter-hub flows; what watched external curves is gone rather than retuned.
Provisioning, not backing. Goods, not a peg.
Hub reserves of grain, energy, and committed labour are things available for purchase within the network, giving the currency real things to buy. They are not a peg. No token here promises stable value, guaranteed redemption in any external asset, or reference to any commodity price. A community instrument redeemable in the community's own goods is a different object — economically and legally — from a financial product promising stability against an external benchmark, and the Protocol is deliberately and permanently the former.
Provisioning depth replaces the coverage ratio
A coverage ratio measures what fraction of a redemption claim could be honoured. In a closed circuit there is no redemption claim, so “60% coverage” answers the question 60% of what promise? — and has no answer. So the metric was not relabelled; it was replaced with the only honest question: what can this money buy?
Provisioning Depth = (purchasable real value this quarter × 4) ÷ token value in active circulation — a rate, in × per year
Published weekly with raw numerator, raw denominator, and dormancy share — including the two properties that are not flattering: the numerator is quarterly and lags a sudden loss of provisioning, and excluding dormant balances means a dormancy wave can improve the reading without anything real improving. As depth thins, conversion fees rise and per-window limits tighten by published formula, reaching prohibitive but never closed. There is no pause function anywhere in the stack: a breaker that needs a human hand is an admin key with a nicer name.
Non-convertibility leaves no arbitrage to run and no value to drain: with no pair to sell on, nothing inside the circuit can be drained against an outside currency. It has two consequences, and only the first is a choice. The first is horizon: HPP begins complementary — no member is asked to leave the existing economy — and is built to deepen from there. The second is mechanical, and it is the one this Protocol pays for: a circuit that published one credit as one unit of national currency would give its businesses a single number to file with, and this Protocol may never publish a rate at all.
A circuit can hold a business. It can never hold a rate.
The circuit is closed: no fiat gateway, no published rate, no token-for-donation. Tax treatment is barter — the taxpayer determines fair market value under their own law.
Read the full legal treatment →
Nothing about commerce breaks the circuit. The closed boundary was never a rule against trade — it is a rule against convertibility, and the two are opposites. A bakery that takes CP for bread has been spent at: no external counterparty, no ramp, no pair, no redemption desk. A legally constituted enterprise may supply goods and services into a hub's economy and be paid in circuit tokens, through a verified human member acting in the course of that business — this Protocol verifies personhood and admits no company to membership, so none of it creates corporate voice, corporate membership, or a second dignity income. But there is one convenience a circuit with a published parity has that we cannot copy. Where a circuit publishes one credit as one unit of national currency, its businesses file at that parity: the invoicing and the tax treatment follow a single published number. It is the load-bearing beam of that kind of legal design, and we may not lay it. No hub, no Foundation, no campaign, and no material of this Protocol in any language may publish, endorse, adopt, cite as authoritative or imply an exchange rate between any token here and any external currency — no official rate, no indicative rate, no “for accounting only” rate, no reference rate computed from a basket, and no table whose columns invite the reader to divide one by the other. A published rate is the external benchmark the circuit forbids, arriving through the accounting door instead of the exchange door, and that door is unamendable: repealing the clause would not open it, because the boundary that forbids it cannot itself be amended. The convenience is not one vote away. It is not any number of votes away.
So the treatment is barter — which is the older and better-tested body of law anyway. Payment in kind is not exotic: revenue authorities have assessed it for as long as they have existed, and the rule is almost everywhere the same. The taxpayer determines fair market value under their own law and reports it. That duty is unchanged, undischarged by this Protocol, and not this Protocol's to discharge. What we supply is evidence, never valuation: the transaction record, its timestamp, the quantities, the hub's published listings and its quarterly basket recalculation, and the raw metric inputs already published weekly — from which a taxpayer or their adviser can construct a valuation their own law accepts. Records, yes. Rates, never. And the settlement is the part a business should plan around rather than discover: tax is paid in ordinary money, outside the circuit, out of the enterprise's own ordinary-money revenue. The Protocol collects nothing, withholds nothing and remits nothing on anyone's behalf — so a business whose token-denominated income outgrows its ordinary-money income can face a bill in a currency its receipts are not in. Complementary first is not modesty. It is solvency. Valuing a thing is not pricing the unit: a peg is a promise about what a token is worth, and a taxpayer's assessment is a statement about what a sack of flour is worth. The first creates a claim and the second creates none — and a number written on a tax return is not a promise this Protocol made. Before mandatory acceptance binds any enterprise in a jurisdiction, that jurisdiction's Foundation commissions and publishes a full tax opinion, reviewed every year and on any material change of law; where the honest answer is not safely, not yet, the opinion must say so on its face and commercial acceptance does not open there. And the cost is named rather than smoothed: a business inside this circuit will do more paperwork than a business inside a circuit with a published parity and will do it without the single number that would make the paperwork trivial. Some enterprises will decline on that basis, some jurisdictions will stay closed until an opinion says otherwise, and the economy will deepen more slowly than it would with a rate. The Protocol prefers a slower numerator to an amended boundary, and says so here rather than discovering it later under pressure.
One protocol, many currencies, three roles
Value moves between hubs through gCP only, never hub-to-hub — one bridge to observe, no web of pairs to police.
The topology law, in full →
The Protocol defines classes; hubs deploy instances; exactly one token is global. The dignity right is a constitutional guarantee — one per verified human, non-multipliable, inalienable — and is not a token: UBD is how it is paid. UBD tokens are hub-minted and spendable only in the issuing hub, and a member receives UBD from exactly one home hub, however many they belong to, because the right is singular and no two communities should allocate grain for the same human being — and that home hub is a geographic hub, because a hub with no territory has no local market obliged to accept what it would mint. CP tokens are hub-minted too — the Protocol mints no CP — and a member creating value in several hubs earns several CP currencies legitimately, because minting follows real sales; but onboarding grants and creator stipends are per person, not per hub, or multi-hub membership becomes a printing press. gCP is the only Protocol-minted token and the only one fungible network-wide: local CP converts at Steward tier and inter-hub value moves through that deliberate bottleneck — hub-and-spoke, never mesh — which prevents arbitrage between local economies, keeps monetary policy local, and gives the Federation one surface to observe instead of N² pairs.
No tax.No confiscation.No permission.
There is no protocol-level taxation. No state intermediary that takes a cut. No central treasury that can seize. The fees that exist are visible, capped, governed by the people they serve — and they never enrich a single authority.
You direct your value
Where the commons spends, the community votes. Vote cost grows as the square (so domination is expensive), vote weight grows with experience and contribution, and constitutional limits sit above both. You can't be outvoted by a treasury department — there isn't one.
No state can confiscate
UBD never passes through a government's books. gCP cannot be frozen by any authority. The federation has no military and no police force. Sovereignty is structural, not aspirational.
Every flow is visible
Every fee is on-chain. Every commons allocation is voted. Every treasury balance is public. You can audit the system from your phone, in real time, in any language.
The only fees that exist
All capped, all transparent, all flowing back to the community — never to a central authority.
| Where | Rate | Where it goes |
|---|---|---|
| Inter-hub gCP transfer | 0.1% | Burned · deflationary pressure |
| CP → gCP conversion | 2.0% | → Local commons (community-voted spending) |
| CP → gCP conversion | 0.1% | → gCP reserve (federation stability) |
| Insurance / mutual aid | 5% | Of all transaction fees · community-owned |
- Forced taxation → voluntary commons contribution
- State intermediary → direct peer-to-peer settlement
- Hidden flows → on-chain transparency
- Political confiscation → constitutional protection of exit
This is what financial sovereignty looks like: you choose where your value goes, you see where every fraction flows, and no one — not the protocol, not a hub, not a future government — can take it from you.
If "no one can take it from you" lands as something you’ve been waiting for — then this was written for you.
See the doors