# 03 — Tokenomics: Utility Token + Treasury Buyback

> *Tokens that make sense economically. Regulatory clarity as a design constraint, not an afterthought.*

## The design

The Veritas Protocol has one utility token (working name `VRT`, placeholder) with the following economic flows:

**Demand side (who pays):**
- AI laboratories pay for high-volume grounding-call access.
- Websites pay subscription fees for Veritas certificates.
- User subscriptions for premium features (priority lookup, deep-investigation commissions, multi-CPML composition).
- Content producers pay for priority verification.
- Parties to contested claims pay for investigation commissions.
- NGOs and foundations donate to fund their own verification centres.

**Token flow:**
1. Buyers acquire tokens with USDT or fiat → treasury accumulates stable value (USDT, bank deposits, or tokenised T-bills).
2. Buyers spend tokens on services (deep checks, reindexing, investigations, storage, priority access, certificate renewal).
3. Validators earn tokens as compensation for verification work.
4. Validators may burn tokens → treasury releases proportional USDT.

**Governance + economic parameters:**
- Token has an initial issuance; subsequent issuance follows a published schedule gated by DAO vote or foundation multisig.
- Burn ratio (tokens → USDT) is a treasury-set parameter updated periodically based on reserves.
- Token has no implied price-appreciation guarantee; purchase is for service consumption.
- No lock-up, staking rewards, or yield mechanisms at launch.

## Why this shape works

This is not the PoW+PoS hybrid of the v0.1-rejected deck. It is closer to:

- **Chainlink LINK** — service payment token, no burn, validators paid per service rendered. Chainlink has survived regulatory scrutiny in multiple jurisdictions.
- **Witnet WIT** — dual-token system with non-transferable reputation plus transferable utility. Veritas can borrow the reputation idea separately from the token (see `12-validator-reputation.md` — future artefact).
- **Arweave** — endowment pays perpetual storage from deposited funds; Veritas's treasury plays a similar role for verification labour.

The core economic logic:
- Someone wants a service → pays for it.
- The service is performed by validators → they get paid.
- Treasury holds the reserve in stable form.
- Token is the medium of exchange, not a speculation instrument.

## The regulatory question

The burn-for-USDT mechanism is where regulatory risk concentrates. Paths:

**Path A — Launch with burn enabled, jurisdiction-chosen for friendliness.**
- Incorporate the foundation + token-issuance entity in MiCA-compliant EU jurisdiction, Switzerland, UAE VARA, Singapore MAS-regulated, or BVI.
- Obtain a legal opinion covering both the utility and the burn mechanism from a securities-law firm in the chosen jurisdiction.
- Geoblock US persons during a bounded period while the SEC position is ambiguous.
- Document contingency: if regulatory enforcement arrives, the burn mechanism can be paused by governance vote; token transitions to pure utility; existing holders are compensated via a published plan.

**Path B — Launch without burn, pure utility.**
- Token is only consumable: buy to spend on services; no path back to fiat except through resale on secondary markets.
- Validators paid directly in USDT by treasury.
- Token value is purely driven by protocol usage; no arbitrage-to-fiat mechanism.
- Cleaner legal posture; less exciting to crypto investors.

**Path C — No utility token at all (regression to v0.1).**
- All payments in USDT or fiat.
- Token is purely optional governance (non-transferable, not a security).
- Cleanest legal posture; lowest crypto-community alignment.

The current recommendation is **Path A as default, with a pre-documented fallback to Path B if regulatory enforcement arrives**. The fallback is documented from launch, pre-priced into token-purchase terms, and pre-communicated to holders. This makes the contingency a feature of the system, not a surprise pivot.

## Critical analysis

**1 — Is this just LINK with extra steps?** Partially. The core structure (utility token, service payments, validator compensation) is close to the Chainlink model. The differences: treasury-backed burn (LINK has no burn), per-verification work rather than per-oracle-call, and the pay-for-investigation market on top.

**2 — What about the Howey test?** The four prongs:
- *Investment of money* — yes, buyers give up fiat to get tokens.
- *Common enterprise* — yes, arguably.
- *Expectation of profit* — if the token's marketing or terms imply appreciation, yes. If not, marginal.
- *From efforts of others* — validators and foundation do work; holders benefit. Yes.

The weakness is "expectation of profit." If marketing explicitly disclaims appreciation and the burn-for-USDT mechanism is rate-limited to prevent arbitrage from driving token price up relative to USDT, the expectation can be bounded. But "bounded" is not "zero." The SEC's position here is real.

**3 — What stops the burn mechanism from being a de facto redemption right that makes the token a security?** Treasury-controlled parameters. The burn-to-USDT exchange rate is a treasury-published rate that does not track spot market; it is an operating parameter, not a holder right. Holders have a right to *access the mechanism*, not a right to a *specific redemption value*. Language and practice both matter here — a legal opinion is required.

**4 — What's the validator ROI at realistic scale?** Under 2026 AI-economics assumptions: if AI-lab grounding-call revenue is $10M/year (small-pilot scale) and 70% flows to validators, that's $7M / N validators. With N=20 validators at Phase II, $350K / validator / year — roughly one FTE-year of compensation per validator. This is plausible and real.

At larger scale ($100M/year): $3.5M per validator at N=20; enough to support serious institutional engagement. At $1B/year: unrealistic at Phase II, but illustrative of the ceiling.

**5 — What about speculation?** The token can be traded on secondary markets (unless explicitly non-transferable, which defeats the economic loop). Speculation is possible. Mitigations:
- Burn-to-USDT cap per holder prevents large holders from arbitraging.
- Treasury-published burn ratio adjusts for reserves; if price deviates from fundamentals, burn becomes less attractive and speculation unwinds.
- Explicit marketing disclaimers.

None of these eliminates speculation; they bound its economic impact on the protocol.

**6 — What if the chain we're on has regulatory problems?** Chain choice is a regulatory input. Ethereum L2s (Base, Optimism, Arbitrum) have the clearest regulatory posture. A chain that itself has unresolved regulatory questions (some alt-L1s) adds exposure that the token design cannot mitigate.

**7 — How do we prevent treasury capture?** Treasury multisig + transparent published policy + independent annual audit. Governance of treasury parameters is not a board-level decision; it's a published operating policy.

## Revenue projections (order-of-magnitude, scenario-based)

Assumptions:
- Phase II launch (month 18): 10 validators, 5 consensus domains, 1 AI-lab pilot.
- Certificate subscriptions: 100 sites at $200/year = $20K/year.
- AI-lab grounding: 1 lab at $500K/year contract.
- Investigation commissions: 200 commissions/year at $1K each = $200K/year.
- NGO + foundation donations: $500K/year (Mozilla MIECO + Knight + one other).

Total gross revenue estimate: ~$1.2M/year at Phase II steady state.
Validator compensation budget (70%): ~$840K/year → ~$84K/validator — enough for institutional buy-in at partial-FTE level.

Phase III scale-up (month 36+):
- AI labs: 3 labs at $1M/year each = $3M.
- Certificates: 5,000 sites at $200 = $1M.
- Investigations: 2,000 × $1K = $2M.
- Donations: $1M.

Total: $7M/year. Validator compensation: $5M/year → $100K × 50 validators = feasible.

These are scenario estimates, not promises. Actual economics depend on AI-lab uptake (the single biggest variable), investigation-market price discovery, and certificate adoption rate.

## Open questions

- Is the burn mechanism technically pausable at chain level without holder consent? Yes if the smart contract has an admin pause function, but that itself has regulatory implications.
- Should Veritas use an existing stablecoin (USDC, USDT, PYUSD) in treasury, or hold fiat at a bank? Banking relationship is harder but cleaner legally.
- What's the validator-compensation distribution algorithm? Per-attestation fee? Work-done-quality-weighted? Multi-stakeholder review?
- Does the protocol share revenue back to ClaimReview / Duke Reporters' Lab / Crossref for data consumption? (Fair question; incentive alignment with upstream data sources.)

## What we'd build

- `veritas-token` — utility token ERC-20 contract with pause-able burn function.
- `veritas-treasury` — multisig with published policy; treasury-held USDC/USDT + custody solution.
- `veritas-payment-router` — routes service fees from buyers to validators (chain-settled).
- `veritas-investigation-market` — smart contract for investigation commissioning, escrow, and release on completion. (See `06-investigation-market.md`.)
- `veritas-legal-opinion` — the bound legal document covering the token and treasury, under chosen jurisdiction.
- `veritas-fallback-transition` — documented and coded migration path for a burn-mechanism shutdown.
