Systems Architecture & Ledger
Oversees the Canonical Supply Registry, cross-environment state proofs and bridge contract security, drawing on distributed fault-tolerant replication and high-concurrency clearing.
11Chapter 11.3 · Organization
Custody apart from operations, audit apart from both
The legal architecture separates custody of the supply registry from the entities that run revenue-generating activity, and places the audit function outside both.
Entity structure
Five entities, five exposures
| Entity | Function | Exposure |
|---|---|---|
| Development foundation | Holds protocol intellectual property; funds core development | Non-commercial; no customer relationship |
| Protocol stewardship entity | Holds Canonical Supply Registry authority; executes governance outcomes | No operating revenue; acts on chamber instruction |
| Treasury vehicle | Holds reserves; disburses against authorised allocation | Assets disclosed on the published reconciliation cadence |
| Regional operating companies | Run gateway relationships, agent deployment and contributor onboarding under contract | Carry commercial and regulatory exposure in their own jurisdictions |
| Independent verification function | Audits registry reconciliation, licence recording and burn execution | Structurally detached; contracted for a fixed term |
Regional operating companies contract with the stewardship entity rather than owning protocol assets, which keeps a jurisdiction-specific regulatory action inside the entity that operates there.
No operating company holds mint authority, registry access beyond its own reporting, or the ability to alter licence records — and none retains licence revenue beyond its contracted service fee.
Core architecture working groups
Pseudonymous groups, coordinated by the foundation
In line with decentralised governance and cross-border operational resilience, core development is led by specialised working groups rather than named individuals.
Computational Linguistics & Domain Evaluation
Directs the contribution taxonomy, inter-annotator consensus and low-resource fine-tuning benchmarks, with a focus on regional language preservation and dialect corpus curation.
Cryptoeconomics & Mechanism Design
Manages bonding ratio models, parametric emission curves and slashing calibration, keeping equilibrium across the five utility loops.
Regulatory Engineering & Privacy
Formulates consent-scope cryptography, residency attestation boundaries and off-chain zero-knowledge compliance that interfaces with regional gateway operators.
Specialised domain advisory panels
Rotating, milestone-specific charters
Linguistic Typology Panel
Advises on annotator quality thresholds and phonetic dialect variation across target deployment clusters.
Institutional Data Governance Panel
Advises on enterprise compliance standards, ISO-aligned data provenance and regulated-sector procurement interfaces.
Risk factors
Stated with the residual that remains
Each material risk is listed with its control and the residual risk left after that control.
| Risk | Control | Residual |
|---|---|---|
| Contributor supply below model in low-resource varieties | Tiered validation; treasury-funded validator programme | Partly demographic — funding changes the slope, not the floor |
| Validator concentration in few attested varieties | Cross-language panels; Council term limits | Persists while attestation capacity is scarce |
| Licence demand does not form in Phase II | Narrower scope at higher tariff | The whole Layer I revenue model depends on it |
| Gateway counterparties fail or withdraw | Multi-gateway default; per-jurisdiction configuration; independent reconciliation | Gateway dependency is structural for regulated settlement |
| TLVY volatility narrows burn per conversion | Conversion ratio band; burn at conversion | A sustained decline reduces burn against fixed costs |
| Bonding becomes unattractive as the token falls | Bonds scale with volume, not a fixed token quantity | In a deep drawdown, affordability and security move apart |
| Bridge or environment failure severs reconciliation | Issuance halt on discrepancy; no environment holds mint authority | A halt does not recover an environment that already failed |
| Regulatory reclassification in a material jurisdiction | Utility limited to bonding, metering and governance; no revenue claim; no holding requirement | Classification outcomes are outside the protocol's control |
| Emission dependence beyond Phase III | Fixed maximum supply; pool exhaustion is hard; halt is legitimate | The halt provision is only credible if it is used |
| Contributor allocation concentrated among early high-volume participants | Per-contributor accrual caps by quality tier; retention measured | Caps blunt rewards for the most productive contributors |
What the protocol does — and what it refuses to
The full framework states how the economics close, and which functions would keep working without a token at all.