Token Traits
A Complete Vocabulary for Token Identity in Provable Systems
Version: 0.1-draft | Date: March 3, 2026
Abstract
Every token system flattens the rich structure of economic entities into a single mechanism — "smart contracts" (Ethereum), "programs" (Solana), "skills" (Gold Standard v0.1). This flattening hides distinctions that matter: the difference between what an entity CAN do and what it MUST do, between what it knows and what it perceives, between what it is and who it's connected to.
This paper introduces six traits for tokens on provable blockchains. The traits emerge from the intersection of two lenses — double-entry accounting (balance sheet, P&L, cash flow) and personality theory (what makes an agent an agent). The resulting vocabulary is not decorative. It is structural: a token's traits determine its operational capabilities, its trust profile, its composability surface, and its economic behavior. The vocabulary is designed so that when tokens interact — trade, lend, govern, contract — the interactions produce the same statements (balance sheet, income, cash flow) that every company and every person already expects from their economic life.
Depends on: Gold Standard (PLUMB, TSP-1, TSP-2), Skill Library
1. The Problem With "Skills"
The Gold Standard defines a skill as "a composable package of hooks, optional state, and config that teaches a token a new behavior." Twenty-three skills are specified: Liquidity, Governance, Lending, Compliance, Soulbound, Oracle Pricing, Delegation, and so on.
But look at what Compliance actually does. It restricts who can send or receive via Merkle inclusion proofs. It does not teach the token a new behavior. It removes a behavior. A token with Compliance is LESS free than one without. Calling it a "skill" is like calling a prison sentence a "career opportunity."
And look at Oracle Pricing (COMPASS). It doesn't enable the token to DO anything new in terms of on-chain actions. It enables the token to PERCEIVE something — market prices. A blind person who gains sight hasn't learned a skill. They've gained a sense.
And Delegation creates a relationship between an owner and a delegate. Royalties create a permanent link between a creator and every future holder. These are not capabilities of the token itself — they are connections between tokens.
One word cannot carry all this meaning. When everything is a "skill," you lose the ability to ask precise questions:
- "What can this token do?" (its capabilities)
- "What constraints bind this token?" (its obligations)
- "What data can this token access?" (its perception)
- "What is this token connected to?" (its relationships)
- "What has this token experienced?" (its history)
These are different questions requiring different answers. A vocabulary that collapses them into one word forces you to scan all 23 "skills" and mentally re-classify each time. The vocabulary should do this work for you.
2. Two Lenses, One Structure
2.1 The Accounting Lens
Every entity that participates in economic life — a person, a company, a trust, a DAO — has its existence fully described by three financial statements:
Balance Sheet captures what IS, at a single point in time. Assets (what you have and what you can do), liabilities (what you owe and what constrains you), and equity (your fundamental nature — assets minus liabilities). The balance sheet always balances: Assets = Liabilities + Equity.
Profit & Loss captures what CHANGED over a period. Revenue (value that flowed in from exercising capabilities) minus expenses (value that flowed out from honoring obligations) equals net income (did the entity grow or shrink). P&L is the dynamic counterpart to the static balance sheet.
Cash Flow captures what MOVED in practice. Operating cash flow (from core activity), investing cash flow (from acquiring or disposing assets), financing cash flow (from raising or repaying capital). Cash flow reveals what the balance sheet and P&L obscure — an entity can be profitable on paper but illiquid in practice.
These three statements are not arbitrary conventions. They are the minimal complete description of an economic entity's state, change, and movement. Every regulatory regime, every auditing standard, every investor framework reduces to reading these three.
2.2 The Personality Lens
What makes an agent an agent — not just a passive container but an entity that acts in the world? Across philosophy, psychology, and common sense, six aspects recur:
Character — who you fundamentally are. Your nature, your type, the thing that persists when everything else changes. A kind person is still kind when they lose their job, forget their experiences, or move to a new city.
Abilities — what you can do. Learned, developed, exercised. A musician can play instruments. A trader can read markets. Abilities generate value when applied.
Obligations — what you must do or cannot violate. Promises made, debts incurred, laws accepted, vows taken. Obligations constrain freedom but build trust — a person who keeps their promises is more valuable as a counterparty than one who is unconstrained.
Experience — what you know from your history. Accumulated state, track record, memories. An experienced doctor is more trusted than a new graduate. The experience is not a capability (both can prescribe) but a credibility signal.
Perception — what you can sense about the world. Your inputs, your data channels, your awareness. A person with access to market data makes better decisions than one without, even if their analytical abilities are identical.
Relationships — who you are connected to. Family, partners, counterparties, dependents. Relationships define your social existence and your exposure — to opportunity and to risk.
2.3 The Intersection
When you overlay these two lenses, they align:
| Accounting | Personality | Direction | Question answered |
|---|---|---|---|
| Equity | Character | Intrinsic | What IS it? |
| Assets | Abilities | Outward | What CAN it do? |
| Liabilities | Obligations | Inward | What MUST it do? |
| Retained Earnings | Experience | Backward | What does it KNOW? |
| Revenue Streams | Perception | Inward | What can it SENSE? |
| Counterparties | Relationships | Between | Who is it WITH? |
This alignment is not forced. It reflects a deeper truth: accounting and personality theory are both trying to describe the same thing — the complete state of an agent in the world. One uses numbers, the other uses words. The structure is the same.
3. Six Token Traits
A token on a provable blockchain is an economic agent. It has identity, state, capabilities, constraints, inputs, and connections. Its traits are the vocabulary for describing all of these.
3.1 Nature — What You ARE
Accounting analog: Equity Personality analog: Character Direction: Intrinsic
Nature is the token's fundamental type — the conservation law it enforces. A TSP-1 Coin enforces sum(balances) = supply. A TSP-2 Card enforces owner_count(id) = 1. Nature does not change when you add or remove other traits. A Coin with Lending is still a Coin. A Card with Governance is still a Card.
Nature is already fully defined by the Gold Standard: two conservation laws, two standards, 10-field PLUMB leaves, five operations (Pay, Lock, Update, Mint, Burn). Nature is not an attachable trait — it is the foundation on which all other traits are installed.
Nature answers: "What kind of entity is this?" Divisible value (Coin) or unique object (Card). This determines which operations are possible, which conservation law applies, and which other traits can be attached.
What Nature produces in statements:
- Balance Sheet → Equity section. The token type and its conservation law.
- P&L → Not directly. Nature doesn't generate income; it defines what income means.
- Cash Flow → Not directly. Nature defines what "cash" is for this entity.
3.2 Skills — What You CAN Do
Accounting analog: Assets Personality analog: Abilities Direction: Outward (capability)
A skill is a composable package of hooks and optional state that enables a new behavior. Skills are positive capabilities — adding a skill means the token can do something it couldn't before. Skills generate value: swap fees from Liquidity, interest from Lending, rewards from Staking, votes from Governance.
Skills are the asset side of the token's balance sheet. A token with more skills is like a company with more productive assets — more capable, more revenue-generating, more composable.
The skills (from the existing 23):
| Skill | What it enables | Revenue model |
|---|---|---|
| Liquidity (TIDE) | Provide and take liquidity in swaps | Strategy fees from takers |
| Governance | Vote on proposals using token balance | Influence over protocol parameters |
| Lending | Lend tokens or borrow against collateral | Interest income |
| Staking | Lock tokens to earn rewards | Staking rewards |
| Vault | Deposit assets, receive shares at exchange rate | Yield from underlying strategy |
| Bridging | Move tokens across chains via proof relay | Access to multi-chain markets |
| Batch Operations | Bundle multiple operations in one proof | Gas/proof cost savings |
| Burn-to-Redeem | Destroy one asset to claim another | Physical goods, crafting, migration |
| Sword Evaluator (new) | Evaluate financial contract ASTs | Derivative settlement |
What Skills produce in statements:
- Balance Sheet → Asset section. Each skill is an intangible asset of the token entity.
- P&L → Revenue line. Fees, interest, rewards earned from exercising skills.
- Cash Flow → Operating section. Inflows from core skill activity.
3.3 Duties — What You MUST Do
Accounting analog: Liabilities Personality analog: Obligations Direction: Inward (constraint)
A duty is a composable package of hooks that constrains behavior. Duties are negative capabilities — adding a duty means the token CANNOT do something it could before, or MUST do something it didn't have to. Duties restrict proof generation: any transaction that would violate a duty fails to produce a valid proof.
Duties are the liability side of the token's balance sheet. But critically, duties that constrain you build trust in others. A person who vows to keep a balance above a threshold is more trustworthy to a builder than one who is free to spend everything. The constraint is your liability; the trust it creates is your counterparty's asset. This is the accounting identity in action: your liabilities are someone else's assets.
The duties (from the existing 23 + new):
| Duty | What it constrains | Trust it creates |
|---|---|---|
| Compliance | Only transfer to/from approved parties | Regulatory assurance |
| Soulbound | Never transfer at all | Permanent identity binding |
| Transfer Limits | Cap amounts per transaction or period | Protection against theft/manipulation |
| Fee-on-Transfer | Deduct percentage to treasury on every move | Sustainable protocol funding |
| KYC Gate | Require verified credential to mint/receive | Legal compliance |
| Controller Gate | Require program proof to move tokens | Program-controlled accounts |
| Supply Cap | Never mint beyond ceiling | Scarcity guarantee |
| Timelock | Wait before config changes take effect | Governance safety |
| CommitmentGuard (new) | Keep balance above committed floor | Counterparty payment assurance |
What Duties produce in statements:
- Balance Sheet → Liability section. Each duty is an obligation of the token entity.
- P&L → Expense line. Fees paid (Fee-on-Transfer), opportunity cost of constraints.
- Cash Flow → Financing section. Outflows from honoring obligations.
3.4 Memory — What You KNOW
Accounting analog: Retained Earnings Personality analog: Experience Direction: Backward (accumulated)
Memory is the token's accumulated state from its operational history. In PLUMB terms, memory lives in skill state trees — Merkle trees that persist across operations and record what has happened. Memory is not a hook that fires on operations; it is the residue that operations leave behind.
In accounting, retained earnings are the sum of all past net income not distributed to owners. They represent what the entity has accumulated from its entire operating history. Memory serves the same function for tokens — it is the verifiable, content-addressed record of everything the token has done.
Memory makes the difference between a new token and a seasoned one. Two tokens with identical skills and duties but different memories have different trust profiles. A token that has processed 10,000 swaps with zero failed settlements is more trustworthy than a freshly minted one, even if they are structurally identical. Memory IS reputation.
What constitutes Memory:
| Memory source | What it records | Trust signal |
|---|---|---|
| Liquidity allocation tree | Swap history, strategy performance | Market-making reliability |
| Governance proposal tree | Voting history, proposal outcomes | Governance maturity |
| Oracle attestation tree | Price feed history, uptime | Data reliability |
| Settlement receipts | Contract outcomes, payout accuracy | Financial trustworthiness |
| Compliance audit trail | Transfer approvals, rejection history | Regulatory compliance track record |
| Merkle root history | State transitions over time | Overall operational integrity |
What Memory produces in statements:
- Balance Sheet → Retained Earnings / Accumulated Experience section.
- P&L → Not directly, but memory determines how P&L items are valued (a token with proven history commands premium pricing).
- Cash Flow → Not directly, but memory quality affects access to capital (trusted tokens attract more liquidity).
3.5 Senses — What You Can PERCEIVE
Accounting analog: Revenue Streams (input channels) Personality analog: Perception Direction: Inward (information)
A sense is a connection to external data that the token can consume in its operations. Without Oracle Pricing, a token is blind to market prices — it literally cannot evaluate a Sword contract that references ETH/USD. Without a cross-chain proof relay, a token is deaf to events on other chains. Senses determine what the token can know about the world outside its own state tree.
In accounting, revenue streams are the channels through which value enters the entity. For tokens, senses are the channels through which information enters. Revenue follows information — you can only charge for swaps at market price if you can perceive the market price. You can only liquidate undercollateralized positions if you can perceive the collateral ratio. Senses are the prerequisite for every skill that depends on external state.
What constitutes Senses:
| Sense | What it perceives | What it enables |
|---|---|---|
| Oracle Pricing (COMPASS) | Market prices via STARK-proven aggregation | Lending health factors, Sword evaluation, stablecoin pegs |
| Proven Price (native) | Fee-weighted TWAP from on-chain swaps | Self-pricing without external oracles |
| Cross-chain Relay | State proofs from other blockchains | Bridging, cross-chain collateral |
| Event Monitor | On-chain events (liquidations, governance votes) | Reactive strategies, automated settlement |
| Timestamp | Current block time from consensus | Timelock expiry, vesting schedules, contract maturity |
A key property of senses on provable blockchains: every perceived value comes with a proof. Oracle Pricing data is a STARK proof of correct aggregation. Proven Price is a byproduct of proven swap execution. Cross-chain state comes with inclusion proofs. There is no "trust the oracle" — there is "verify the proof of what the oracle claims."
What Senses produce in statements:
- Balance Sheet → Not directly, but senses determine the valuation of assets (a token that can perceive prices can mark-to-market).
- P&L → Revenue enablement. Senses don't generate revenue, but skills that require senses do.
- Cash Flow → Operating section (indirectly). Data feed costs, oracle fees.
3.6 Bonds — Who You Are WITH
Accounting analog: Counterparties Personality analog: Relationships Direction: Between (connection)
A bond is a persistent, verifiable relationship between two tokens. Not a transaction (which is a one-time event) but a structural link that affects ongoing operations. The controller field pointing from a Coin to a Card is a bond. The royalty field linking an NFT to its creator is a bond. The delegation chain from owner to delegate is a bond.
In accounting, your counterparty ledger defines your exposure — receivables, payables, credit lines, guarantees. In personality, relationships define your social existence. For tokens, bonds define the web of permissions, obligations, and dependencies that connect entities.
Bonds are bidirectional in effect: a Delegation bond gives the delegate spending power (their asset) while creating exposure for the owner (their liability). A Royalties bond gives the creator recurring income (their asset) while imposing a cost on every transfer (the holder's duty). Every bond shows up as an asset on one side and a liability on the other — the double-entry principle, expressed as token relationships.
What constitutes Bonds:
| Bond | Between | Effect |
|---|---|---|
| Royalties | Creator ↔ Asset | Creator receives percentage on every transfer |
| Delegation | Owner ↔ Delegate | Delegate can spend within bounds |
| Multisig | N Signers ↔ Controlled Account | Threshold approval required |
| Subscription | Payer ↔ Recipient | Recurring authorized payments |
| Vesting | Beneficiary ↔ Token | Time-locked progressive release |
| Controller | Coin ↔ Controlling Program/Card | Program must co-authorize movement |
| Contract Position | Contract Card ↔ Position Holder | Settlement rights |
What Bonds produce in statements:
- Balance Sheet → Counterparty section. Both asset-side (receivables from bonds) and liability-side (payables from bonds).
- P&L → Revenue (royalty income, delegation fees) and Expenses (subscription payments, royalty costs).
- Cash Flow → All three sections. Operating (subscription income/expense), investing (position acquisition/disposal), financing (delegation relationships).
4. The Accounting Identity
In double-entry accounting, the fundamental equation is:
Assets = Liabilities + Equity
For tokens:
Skills + Senses + Bonds(receivable) = Duties + Bonds(payable) + Nature
This is not metaphor. It is structurally enforced. Consider a token entity's complete state:
Left side (what the entity HAS):
- Skills: Liquidity, Lending, Governance = revenue-generating capabilities
- Senses: Oracle Pricing, Proven Price = information channels
- Bonds (receivable): Royalties owed TO this entity, Delegation rights FROM others
Right side (what the entity OWES or IS):
- Duties: Compliance, Transfer Limits, CommitmentGuard = constraints and obligations
- Bonds (payable): Royalties owed BY this entity, Subscriptions payable
- Nature: TSP-1 or TSP-2 conservation law = fundamental equity
The identity balances because every capability has a corresponding constraint somewhere in the system. If you add Lending (skill/asset), your counterparty gains a Debt (duty/liability). If you add Delegation (bond/receivable on the delegate's side), the owner gains Exposure (bond/payable on the owner's side). Adding and removing traits always preserves the accounting identity across the system.
Memory (retained earnings) accumulates on the left side over time, growing equity. The P&L captures the change per period:
Revenue (from Skills) - Expenses (from Duties) = Net Income → Memory (accumulated)
4.1 Financial Statements From Token Traits
The practical consequence: by reading a token's traits, you can reconstruct its financial statements without any additional infrastructure.
Balance Sheet (at any block height):
ASSETS LIABILITIES + EQUITY
───────────────────────────── ─────────────────────────────
Skills: Duties:
Liquidity (TIDE) ✓ Compliance ✓
Lending ✓ Transfer Limits ✓
Governance ✓ CommitmentGuard ✓
Senses: Bonds (payable):
Oracle Pricing ✓ Royalties (5% out) ✓
Proven Price ✓ Subscription ✓
Bonds (receivable): Nature:
Delegation rights ✓ TSP-1 (Coin)
Royalties (2% in) ✓ supply = 1,000,000
Memory:
10,247 swaps processed
99.8% settlement success
18 months operational
───────────────────────────── ─────────────────────────────
P&L (per epoch/period):
REVENUE EXPENSES
──────────────────────────────── ────────────────────────────────
Liquidity fees earned: +450 NPT Fee-on-Transfer paid: -120 NPT
Lending interest: +200 NPT Royalties paid: -85 NPT
Staking rewards: +100 NPT Subscription payments: -50 NPT
Oracle feed costs: -10 NPT
──────────────────────────────── ────────────────────────────────
Total Revenue: +750 NPT Total Expenses: -265 NPT
NET INCOME: +485 NPT → Memory
Cash Flow (per epoch/period):
OPERATING:
Swap fees received: +450 NPT
Interest received: +200 NPT
Fees paid: -120 NPT
Royalties paid: -85 NPT
Net Operating: +445 NPT
INVESTING:
Sword contract positions acquired: -10,000 NPT
Sword contract settled: +12,000 NPT
Net Investing: +2,000 NPT
FINANCING:
Staking rewards: +100 NPT
Subscription payments: -50 NPT
Net Financing: +50 NPT
NET CASH FLOW: +2,495 NPT
This is not hypothetical. Every line item corresponds to a provable on-chain event — a STARK proof of a specific operation. The financial statements are free byproducts of the proof system. No separate accounting layer needed. The token's traits determine which line items exist. The token's operations fill them in.
4.2 Why This Matters
If tokens automatically produce balance sheets, P&L, and cash flow statements, then:
For DAOs: Treasury management becomes native. A DAO's TSP-2 Card (its identity) has Skills (Governance, Lending), Duties (Compliance, Timelock), Senses (Oracle Pricing), Bonds (Delegation to working groups), and Memory (proposal history). Its financial statements are derived directly from its traits and operations. No Gnosis Safe spreadsheets. No manual reconciliation.
For Regulators: Compliance reporting becomes provable. A regulated token's Duties (Compliance, KYC Gate, Transfer Limits) are on-chain and machine-readable. Its Memory contains the complete audit trail. The regulator can verify the token's financial statements by checking proofs — not by trusting self-reported data.
For Individuals: Personal finance becomes automatic. Your identity Card's Bonds (contract positions, delegations, subscriptions) define your exposure. Your Coins' Skills (Lending, Staking, Liquidity) define your income sources. Your Duties (CommitmentGuards) define your obligations. Your financial picture is always current, always provable, always complete.
For Protocols: Composability becomes typed. When two tokens interact, the trait vocabulary tells you exactly what will happen: which Skills are exercised, which Duties must be honored, which Bonds are created, which Senses are consulted, what Memory is recorded. No surprises. No "read all 23 skills and figure out which matter."
5. Implementation
5.1 Trait Architecture in PLUMB
Token traits are implemented through the existing PLUMB hook system. The vocabulary change is organizational, not architectural — no new on-chain primitives are needed. What changes is how traits are classified, discovered, and reasoned about.
┌──────────────────────────────────────────────────────────┐
│ NATURE │
│ TSP-1 (Coin) or TSP-2 (Card) — conservation law │
├──────────────────────────────────────────────────────────┤
│ TRAITS │
│ │
│ ┌─────────┐ ┌─────────┐ ┌─────────┐ │
│ │ Skills │ │ Duties │ │ Senses │ │
│ │ (can do)│ │(must do)│ │(see) │ │
│ └────┬────┘ └────┬────┘ └────┬────┘ │
│ │ │ │ │
│ └─────┬─────┘ │ │
│ │ │ │
│ ┌──────────v─────────────────v──────────┐ │
│ │ PLUMB Hook Slots │ │
│ │ pay_hook · lock_hook · update_hook │ │
│ │ mint_hook · burn_hook │ │
│ └───────────────────────────────────────┘ │
│ │
│ ┌─────────┐ ┌─────────┐ │
│ │ Memory │ │ Bonds │ │
│ │ (knows) │ │(linked) │ │
│ └─────────┘ └─────────┘ │
│ State trees Leaf fields │
│ & history & cross-token │
│ references │
├──────────────────────────────────────────────────────────┤
│ PLUMB FRAMEWORK │
│ Leaf format · Config · Auth · 5 Operations │
└──────────────────────────────────────────────────────────┘
All trait types install through the same PLUMB hook system. The distinction between Skills, Duties, Senses, Bonds, and Memory is semantic — it describes the INTENT and EFFECT of the hook, not a different mechanism. A Compliance hook and a Liquidity hook both install in pay_hook. But they are opposites: one restricts, one enables.
5.2 Trait Metadata
Each trait carries metadata that allows classification:
struct TraitMeta {
name: Digest, // content-addressed name
category: Field, // 0=Skill, 1=Duty, 2=Sense, 3=Bond, 4=Memory
hooks: [Field; 5], // which PLUMB hooks it installs (bitmask per operation)
requires: [Digest; 4], // other traits this depends on
state_tree: bool, // whether it maintains a persistent state tree
description: Digest, // content-addressed human-readable docs
}
Category classification enables:
- Wallets displaying "Skills: 3 | Duties: 2 | Senses: 1 | Bonds: 4"
- Queries: "show me all my Duties" or "what Senses does this token have?"
- Trust scoring: ratio of Skills to Duties, Memory depth, Bond network
- Automated financial statement generation from trait categories
5.3 Trait Discovery
A wallet or explorer reading a token's config can reconstruct its complete trait profile:
- Read the config hash → extract 5 hook digests
- For each non-empty hook, resolve the content-addressed trait definition
- Read
TraitMeta.categoryto classify - Read Bonds from leaf fields (
controller,locked_by,royalty,delegation) - Read Memory from state tree roots referenced in the config
- Assemble the balance sheet / P&L / cash flow view
This is the equivalent of reading a company's annual report — but provable, real-time, and automatically structured.
5.4 Trait Composition Rules
Not all trait combinations are valid. The vocabulary makes conflicts visible:
Skills compose freely. Liquidity + Lending + Governance = a token that can swap, lend, and vote. No conflicts possible — capabilities are additive.
Duties compose with AND. Compliance + Transfer Limits = must transfer to approved parties AND within amount caps. Both constraints apply. The proof must satisfy ALL duties simultaneously.
Senses compose with OR. Oracle Pricing + Proven Price = the token can perceive prices from external oracles OR from on-chain swap data. Multiple senses provide redundancy and optionality.
Bonds compose structurally. Royalties + Delegation = each operates on its own axis. Royalties affect pay hooks. Delegation affects auth. No conflict unless two bonds claim authority over the same operation.
Cross-category conflicts are visible. Soulbound (Duty: never transfer) + Liquidity (Skill: enable swaps) = contradictory. STARK proof composition fails — both proofs cannot be simultaneously valid. The trait vocabulary makes this conflict visible at configuration time, not at runtime. You can see "wait, I'm installing a Skill that requires transfers, but I already have a Duty that forbids transfers" before deployment.
6. The CommitmentGuard Pattern
The trait vocabulary emerged from a specific design challenge: how does a homebuyer assure a builder that construction payment is guaranteed, without locking capital in escrow?
6.1 The Problem
Alice hires Bob to build a house. Cost: 100,000 NPT. Construction takes 6 months. Bob invests labor and materials progressively. Bob needs assurance that Alice's money will be there at each milestone.
Traditional solution: escrow. Alice deposits 100,000 NPT into a third-party account. The money is frozen for 6 months. Alice earns nothing on it. She can't use it for governance, lending, or any other purpose. Dead capital.
6.2 The Solution
Alice installs a Duty on her TSP-1 account:
CommitmentGuard {
category: Duty,
floor: 100,000 NPT,
beneficiary: bob_builder_card_id,
expiry: activation + 6 months,
hooks: [pay_hook], // constrains outgoing payments
}
The pay_hook rejects any proof where Alice's post-payment balance falls below 100,000 NPT. Alice can still:
- Vote in governance with these tokens (Governance Skill reads balance, doesn't move it)
- Earn staking rewards on these tokens (Staking Skill adds to balance)
- Receive payments, increasing her free balance above the 100,000 floor
- Spend any amount ABOVE 100,000 freely
Alice's total balance is 150,000 NPT. She can spend up to 50,000 freely. The bottom 100,000 is committed — not locked, committed. The difference matters: the tokens are in Alice's account, earning, voting, composable. But no valid proof exists that would move her balance below the floor.
6.3 Why This Is Stronger Than Escrow
| Property | Escrow | CommitmentGuard |
|---|---|---|
| Builder assurance | Money is in third party's hands | No valid proof exists to spend below floor |
| Alice's capital efficiency | Zero — money is frozen | Full — money earns, votes, composes |
| Cryptographic guarantee | Trust the escrow agent | Mathematical — proof generation fails |
| Composability | None | Full — same balance backs multiple purposes |
| Removal protection | Escrow agent controls | Requires Bob's co-signature (Multisig on config) |
| Cost | Escrow agent fees | Zero — it's a hook, not a service |
6.4 How the Vocabulary Helped
This pattern is invisible when everything is a "skill." CommitmentGuard is not a capability — it's a constraint. Classifying it as a Duty makes its purpose clear: it appears on the liability side of Alice's balance sheet. Bob can query "what Duties does Alice carry?" and see the commitment. Alice's wallet shows "Duties: CommitmentGuard (100,000 NPT for Bob, expires Oct 2026)." The vocabulary does the work.
7. Complete Trait Catalog
Reclassification of all existing Gold Standard hooks plus new additions:
7.1 Skills (9)
| # | Trait | What it enables |
|---|---|---|
| S1 | Liquidity (TIDE) | Provide/take liquidity in token swaps |
| S2 | Governance | Vote on proposals using token balance |
| S3 | Lending | Lend tokens or borrow against collateral |
| S4 | Staking | Lock tokens to earn protocol rewards |
| S5 | Vault | Deposit assets, receive shares at exchange rate |
| S6 | Bridging | Move tokens across chains via proof relay |
| S7 | Batch Operations | Bundle multiple operations in one proof |
| S8 | Burn-to-Redeem | Destroy one asset to claim another |
| S9 | Sword Evaluator | Evaluate financial contract ASTs to payout tables |
7.2 Duties (9)
| # | Trait | What it constrains |
|---|---|---|
| D1 | Compliance | Only transfer to/from approved parties |
| D2 | Soulbound | Never transfer |
| D3 | Transfer Limits | Cap amounts per transaction or period |
| D4 | Fee-on-Transfer | Deduct percentage to treasury on every move |
| D5 | KYC Gate | Require verified credential to mint/receive |
| D6 | Controller Gate | Require program proof to move tokens |
| D7 | Supply Cap | Never mint beyond ceiling |
| D8 | Timelock | Wait before config changes take effect |
| D9 | CommitmentGuard | Keep balance above committed floor |
7.3 Senses (3)
| # | Trait | What it perceives |
|---|---|---|
| P1 | Oracle Pricing (COMPASS) | Market prices via STARK-proven aggregation |
| P2 | Proven Price | Fee-weighted TWAP from on-chain swaps |
| P3 | Cross-chain Relay | State proofs from other blockchains |
7.4 Bonds (5)
| # | Trait | Between whom |
|---|---|---|
| B1 | Royalties | Creator ↔ Asset (permanent revenue share) |
| B2 | Delegation | Owner ↔ Delegate (bounded spending authority) |
| B3 | Multisig | N Signers ↔ Controlled entity (threshold approval) |
| B4 | Subscription | Payer ↔ Recipient (recurring authorized payments) |
| B5 | Vesting | Beneficiary ↔ Token pool (time-locked release) |
7.5 Memory (implicit)
Memory is not installed as a discrete trait. It accumulates automatically from all operations. Every Skill, Duty, Sense, and Bond that maintains a state tree contributes to the token's Memory. The Memory IS the set of state trees plus the Merkle root history.
What is discrete is the depth and queryability of Memory:
- A token with Liquidity (TIDE) accumulates swap history automatically.
- A token with Governance accumulates proposal/vote history automatically.
- A token with no stateful traits has Memory limited to its basic operation log.
Memory grows over time. It cannot be deleted (content-addressed, on-chain). It can be archived (old state roots remain valid but off-chain storage may prune intermediate states).
8. Recipes: Trait Combinations for Common Entities
8.1 Simple Currency
Nature: TSP-1 (Coin)
Skills: Liquidity
Duties: Supply Cap
Senses: Proven Price
Bonds: —
A basic tradeable token with fixed supply and market pricing.
8.2 Regulated Security Token
Nature: TSP-1 (Coin)
Skills: Liquidity, Governance, Lending
Duties: Compliance, KYC Gate, Transfer Limits, Supply Cap
Senses: Oracle Pricing, Proven Price
Bonds: Multisig (board of directors)
A fully compliant security that can trade, vote, and be used as collateral — but only between verified parties within regulatory limits.
8.3 Artist's NFT Collection
Nature: TSP-2 (Card)
Skills: Burn-to-Redeem (physical item claim)
Duties: —
Senses: —
Bonds: Royalties (artist receives 5% on every transfer)
Minimal setup. The NFT trades freely, the artist earns on every sale.
8.4 DAO Treasury
Nature: TSP-2 (Card) — the DAO identity
Skills: Governance, Lending, Vault, Staking
Duties: Timelock, Compliance
Senses: Oracle Pricing, Proven Price
Bonds: Multisig (core team), Delegation (working groups), Subscription (recurring grants)
A fully autonomous economic entity. The Card IS the DAO. Its Skills define what the treasury can do. Its Duties protect against rash decisions. Its Bonds define the organizational structure. Its Memory IS the institutional knowledge.
8.5 Sword Derivative Contract
Nature: TSP-2 (Card) — the contract itself
Skills: Sword Evaluator
Duties: Timelock (maturity enforcement)
Senses: Oracle Pricing (for obs() evaluation)
Bonds: Contract Position (linked to position holders' Coins)
The contract is a Card. Evaluation is a Skill. Maturity is a Duty. Price perception is a Sense. The counterparty relationship is a Bond. Every trait category participates.
8.6 Person (Identity)
Nature: TSP-2 (Card) — unique, non-fungible
Skills: Governance (vote), Lending (borrow)
Duties: CommitmentGuard (obligations to counterparties)
Senses: Oracle Pricing (market awareness)
Bonds: Delegation (authorized agents), Subscription (recurring payments),
Vesting (employment compensation), Contract Position (derivative exposure)
A person IS a token. Their capabilities (Skills), obligations (Duties), data access (Senses), relationships (Bonds), and reputation (Memory) form a complete identity — one that produces the same financial statements any person or company expects from their economic life.
9. Design Principles
9.1 Orthogonality
Each trait category is independent. You can add a Skill without changing Duties. You can add a Duty without affecting Senses. You can form Bonds without installing Skills. The categories are orthogonal dimensions of the token's identity, not layers that depend on each other.
Exception: some traits have cross-category dependencies. The Lending Skill requires the Oracle Pricing Sense (to check health factors). The Sword Evaluator Skill requires Oracle Pricing Sense (for obs() evaluation) and Timelock Duty (for maturity enforcement). Dependencies are declared in TraitMeta.requires.
9.2 Symmetry
Every bond shows up twice — as a receivable on one side and a payable on the other. Every duty that constrains one party creates trust for another. Every skill that enables one operation requires a corresponding duty somewhere in the system to keep it safe. The trait vocabulary makes the double-entry nature of economic relationships visible.
9.3 Completeness
The six traits (Nature, Skills, Duties, Memory, Senses, Bonds) are claimed to be complete — there is no seventh category needed. The argument:
- Nature covers the intrinsic (what you ARE).
- Skills cover outward capability (what you CAN DO).
- Duties cover inward constraint (what you MUST DO).
- Memory covers the past (what you KNOW).
- Senses cover external input (what you PERCEIVE).
- Bonds cover relationships (who you're WITH).
These six exhaust the possible relationships between an entity and the world: being, acting, constraining, remembering, perceiving, connecting. Any proposed seventh category either reduces to one of these or is a compound (Vesting = Bond + Duty). The claim is that any new token behavior will classify cleanly into one of the six, or will be a composition of traits from multiple categories.
9.4 Parsimony
The vocabulary adds zero new on-chain primitives. PLUMB hooks, state trees, leaf fields, and proof composition are unchanged. The six trait categories are a lens for understanding what already exists — a classification system that makes the existing 23+ hooks legible as a coherent model of economic agency, rather than a flat list of features.
10. Open Questions
-
Should trait category be enforced on-chain? Currently proposed as metadata. Could be a constraint: a hook self-declares as Skill or Duty, and the system prevents contradictory installations. Or should it remain purely informational?
-
Memory pricing. Memory grows forever (state trees only accumulate). Should there be state rent for Memory, or is the proof cost of deeper Merkle trees sufficient economic pressure?
-
Trait standards. Should there be formal interfaces per category? E.g., every Duty must export
constraint_description(), every Sense must exportdata_schema(). Or is the informal convention sufficient? -
Composite traits. Vesting is both a Bond (relationship with beneficiary) and a Duty (time-locked constraint). Should it be classified as one or the other, or should composite classification be supported?
-
Negative Bonds. Current bonds are cooperative (Delegation, Royalties, Multisig). Are there adversarial bonds? A lien, a lawsuit, a blacklist entry? How do these map to the vocabulary?
-
Trait market. If traits are content-addressed code deployed to Atlas, can there be a marketplace for traits? "Install this CommitmentGuard variant optimized for construction escrow." Economic dynamics of trait creation and adoption.
See Also
- Gold Standard — PLUMB framework, TSP-1, TSP-2, proven price
- Skill Library — Detailed specifications of all 23 hooks
- Sword — Financial contract DSL as contracts-as-tokens