07Chapters 7.0 – 9.0 · TLVY

No utility without binding

A protocol token earns its place by doing something a contract, a database or an invoice cannot do at acceptable cost. Where a substitute exists, the substitute should be used.

7.1 · Design axiom

Three constraints govern every design choice

01 · Access

Never required to access a service

Enterprises pay for agent execution in local currency through a gateway. Licence counterparties pay in the currency of their contract. Contributors may elect TLVY or a gateway conversion. A design in which a user must acquire a token before receiving value is rejected.

02 · Revenue

No claim on protocol revenue

No share of licence income, no dividend, no redemption right, and no arrangement with an equivalent economic effect. The waterfall pays contributors and validators as service compensation, not holders as a class.

03 · Forfeit

Every bond can be lost

Every bonded position is forfeitable under stated conditions. A bond that cannot be lost is a deposit — and deposits do not secure anything.

7.2 · The five utility loops

Shared participants, not parallel functions

Five circulations involve TLVY. The overlap is the design — treating them as separate would misrepresent how supply behaves.

Contribution

Verified work converts to TLVY credit at settlement. Value enters from licence and task fees, then exits to contributors. Nothing here generates TLVY.

Verification

Adjudicators and nodes bond for rights, earn service fees and forfeit on misconduct. A risk market measured by fees earned against bond lost.

Consumption

The protocol's share of task fees converts to TLVY at the gateway; a fixed percentage is burned. The enterprise bill stays in local currency.

Licensing

Fiat licence fees route through the waterfall, with a share burned at conversion. The most significant loop commercially, and the least frequent.

Governance

Stake weights voting. Locks are matched to a decision's reversibility — constitutional matters carry longer locks than operational ones.

Three interlocks

Where the loops meet

  • Contributor settlement draws on the pool the licensing loop replenishes.
  • Bonding removes TLVY from circulation until validators exit and bonds unlock.
  • Burn reduces supply on both the consumption and the licensing path.
Direction of flow

Value enters from outside

Licence fees and agent task fees bring value in from outside the system, and it exits to contributors. The verification loop is a risk market: its health is the ratio of fees earned to bond lost, and that ratio decides who participates.

7.3 · Sink, source and bond

Four sources, four sinks — and a lock is not a sink

Sources

Where supply is released

Cold-start contributor emissions Validator and node reserves Governed treasury releases Ecosystem grants

The first is inflating by design and time-limited; the second parametric. The last two are reallocations of balances already emitted.

Sinks

Where supply leaves float

Bonded stake Protocol fee burn Licence conversion burn Treasury absorption

Burn is the only irreversible sink. Treasury absorption is deferred supply, not removed supply. Bonds unlock on schedule — unless slashed.

Fig. 7.3aSink-and-source ledger — four sources and four sinks around circulating supply.

A validator who performs no adjudication earns zero fees.

Staking is an operational performance bond, not an interest-bearing instrument. Distributions to node operators and Adjudicators are service-fee settlements based on verified task volume and slashing risk.

Bond size approximates the most a participant could extract by misreporting their own conduct — so it differs by actor class and by language.

Three destinations for slashed bond

Restitution

Where an identified counterparty suffered loss.

Burn

Where misrepresentation has no identifiable victim, as with fabricated adjudication.

Treasury

For procedural violations without misrepresentation.

Fig. 7.3bBonding and slashing — severity by actor class and offence, with the destination of each slash.
7.4 · The token utility necessity test

What if a database, an invoice and a contract did the job?

For each function TLVY performs, the test asks what would happen without it. Where the substitute works, TLVY should not be paid for the function.

FunctionSubstitute without TLVYWhy the substitute fails
Contribution settlement between parties with no prior relationshipManual treasury payouts over banking railsCross-border micro-payout cost exceeds the smallest contribution, and a payment record cannot establish provenance
Verification bondingReputational scoring aloneReputation cannot be confiscated, so false validation carries no cost
Licence revenue to a contributor pool of unknown, changing sizeCentralised revenue-share arrangementNeeds identity resolution and payment corridors per jurisdiction — excluding informal contributors by construction
Supply discipline tied to utilisationDiscretionary buyback programmeNot auditable, not automatic, and reversible by a later decision
Constituency for language admission and revocationFoundation board appointmentNo legitimate way to weight the people whose material is governed; the body becomes a political object
Absent by choice

Five functions survive. Three are left out.

—

Enterprise data licensing

Licences are contracts between legal entities with identity, dispute resolution and reporting. A token would add settlement risk to a transaction that already has legal recourse.

—

Gateway settlement

Regulated intermediaries already operate in fiat. TLVY appears only at the conversion step where the protocol's own fee is realised — a treasury operation, not a customer-facing one.

—

Agent subscription billing

Enterprises pay in local currency. No operator in this category can manage a volatile asset in inventory.

7.5 · Explicitly rejected anti-patterns

Considered, recorded, rejected

Holders hold participation in a governance and security system whose parameters determine how a licensing business operates. That is a real position — and not a claim on cash flow.

Discretionary buyback

Rejected on auditability. Burn happens at a defined point in a published pipeline and scales with utilisation; a buyback is only a promise about future behaviour.

Multiplied staking tiers

Higher rates for longer locks would turn a performance bond into a yield product and attract capital that does not intend to adjudicate.

Collateral in a second asset

It introduces correlation risk into the security layer exactly when the second asset is most likely to fall.

TLVY fee discounts

They would pull the token into customer-facing pricing — the very boundary the necessity test exists to maintain.

8.1 – 8.2 · Supply and allocation

Fixed at ten billion. No mechanism to increase it.

Cold-start emissions are drawn from a pre-allocated pool rather than minted — the emission schedule is a release schedule, and maximum supply is knowable at issuance.

28%
Contributor rewards and cold-start emissionsFunds verified contribution settlement until revenue covers it
14%
Ecosystem and language development fundRegistry expansion, tooling, onboarding in new varieties
12%
Validator and node incentive reserveBond subsidies and fee top-ups until adjudication volume sustains itself
14%
Core contributorsFour-year vest with a one-year cliff
10%
Protocol treasury and operationsAudit, legal, compliance and operating costs across the gated phases
8%
Liquidity formation reserveEvent-driven draws, disclosed at draw
6%
Strategic partners and licensee onboardingIntegration costs for licence counterparties and gateways
4%
Public distributionPublic liquidity bootstrap allocation
2%
Advisors and subject-matter panelsSame vesting as core contributors
2%
Security reserve and contingencyExploit response, legal contingency, audit remediation

Emissions terminate

Cold-start emissions decline on a published curve and end at a defined pool exhaustion point — they do not taper indefinitely.

Reserves follow evidence

Validator and node reserves release against service delivery records, not elapsed time.

Treasury is visible

Releases require governance authorisation, and the treasury balance is a published quantity.

8.3 · Emissions versus burn

The crossover arrives in two stages

01

Burn at conversion

Burn quantity moves with the TLVY price while the underlying transaction does not — partially dampening movement in both directions.

02

A banded ratio

The conversion ratio is a governance parameter with a published band, so no majority can turn it into a burn that starves operations.

03

Asymmetric revenue lines

Task fees are frequent and small; licence fees infrequent and large. Licence burn first exceeds emissions annually, then combined burn exceeds them on a trailing basis.

Fig. 8.3Scheduled emissions against utilisation-driven burn across two revenue lines.
9.1 · Chain-agnostic canonical supply

Issued by a registry, not by a chain

A single Canonical Supply Registry holds the authoritative record of total supply and the sole authority to authorise issuance anywhere. No environment can create supply — no mint function, no rebase, no reissuance after burn.

Three criteria in tension

01

Network liquidity

How much depth a listing attracts and how fast price discovery stabilises.

02

Settlement cost

The economics of fee burn at the point of conversion.

03

End-user access cost

Whether a participant can hold a bonded position without losing a meaningful share of it to fees.

The criteria for a good issuance environment in 2026 are not the criteria of 2029.

Selecting the primary environment is a live decision scored on a rubric disclosed at the time of selection — announced with its reasoning, not after it.

9.2 · Dynamic multi-tier liquidity

Four strata, disclosed at every activation

Strata may be activated in any sequence or combination. The binding constraint is disclosure: which strata were used, what share of the reserve they drew, and on what terms.

StratumParticipant profileLock characterPricing formation
Public liquidity bootstrapUnrestrictedNoneMarket discovery
Ecosystem contributionDelivery counterpartiesMilestone-vestedNegotiated against delivered scope
Compliant institutionalSupervised entitiesJurisdiction-determinedStructured against eligibility terms
Strategic market structureMarket operatorsPerformance-linkedContractual against executed metrics
Fig. 9.3bFour strata, activation in any order, and the two restrictions that hold across all of them.
Fig. 9.3aThe registry holds sole issuance authority; environments hold only representations.
9.3 · Supply-integrity controls

A discrepancy halts issuance

  • The registry publishes total supply, authorised issuance, cumulative burn and each bonded position class.
  • Bridges lock a representation at origin before release at destination — they carry supply, never create it.
  • Burned supply is permanently retired; reissuance is a constitutional matter.
  • Bonds are recorded against the registry, so they cannot be double-counted or evaded by leaving an environment.