Ducat

Moneywith memory.

Ducat is not a dollar-pegged stablecoin. Its market price moves freely. Its reference can step up as the stablecoin reserve earns it, but cannot step down.

Reference
$1.5000
An example of a raised reference. Not a guaranteed payout.
Backing
$2.1000
Example treasury value per ducat, after haircuts.
Market
$4.8000
An illustrative market price, not a target. Free to rise or fall.
1

The problem was never reflexivity.

Price attracts attention. Attention attracts capital. Capital deepens liquidity, and liquidity attracts more of all three. Every serious attempt to engineer this out of crypto has produced something nobody wanted to hold.

Ducat does not try. Reflexivity is the most reliable capital formation mechanism this market has ever produced, and a protocol that treats it as a defect is refusing free money on principle.

The defect is narrower than that. A token can travel from a dollar to twenty dollars and back to a dollar while leaving nothing behind. The run happened. The protocol has the same balance sheet it started with, and everyone who arrived late paid for the education.

The problem is not reflexivity. It is reflexivity without memory.

Ducat is built to remember. Every run it survives leaves it holding more than it held before, and the record of that is not a chart or a narrative. It is a balance sheet, published, marked down and readable from the chain.

A banking experiment, run in the open

Strip away the token and what is left is a question worth asking plainly: what happens when a central bank publishes its whole balance sheet, writes its rules into code it cannot quietly amend, and gives itself exactly one mandate, to get heavier over time?

That is the experiment. Not a coin, not a chart, not a community. A monetary authority with no boardroom, tested the only way a monetary authority can be tested, by having its balance sheet read by anyone who wants to and its rules run whether or not the moment is convenient.

Ducat did not arrive at this from nothing. It is downstream of two prior attempts to answer the same question, each of which got something importantly right and something importantly wrong. Section 24 traces that lineage in full. What matters here is the posture it leaves Ducat with: a treasury that is a balance sheet rather than a story, and a currency whose rules do not bend to whoever is in the room when things get hard.

2

Three values, not one.

Most dollar-shaped assets publish a single number and spend their lives defending it. That is a design that can only lose slowly or fail suddenly. Ducat publishes three, and the distance between them is not a problem to be closed. It is where the work happens. The figures below illustrate a possible later state, not launch settings, live quotes or a forecast.

Market $4.8000
What buyers and sellers agree to pay. Free to be irrational in either direction. Nothing in the protocol defends it, and nothing caps it. The only friction is a small toll on the ducat's own pool, covered in section 19. A premium is not a policy failure, it is an offer.
Backing $2.1000
Risk-adjusted treasury value per ducat outstanding. Measured from assets the protocol owns outright, each marked down by its own haircut, read independently of the ducat's own market price and published in full. No swap creates backing.
Reference $1.5000
The reference used by monetary policy. It starts at $1.00 and can step up only when the stablecoin reserve passes the ratchet tests. The contract has no path to lower it. It is neither a market-price peg nor a guaranteed redemption minimum: redemption uses the lower of reference and reserve per ducat, then deducts the fee.

The part the promises run on

Backing is the whole balance sheet. The promises run on a narrower figure inside it: the stablecoin reserve, at its haircut, per ducat. This paper calls it the reserve. The contracts call it risk-free value.

Every path that can move value reads the reserve and nothing broader. The bond floor, issuance, redemption, the ratchet and the equity desk all measure against stablecoins alone. The checks constrain issuance and treasury outflows using stablecoins alone. External losses or changed asset valuations can still reduce reserve cover without lowering the reference.

Stocks add to what the treasury is worth. They never stand behind what it has promised.

One treasury, two different jobs
Risk-adjusted treasury value

Stablecoin reserve

Reference tests, issuance cover and redemptions.

Funds monetary redemption

Equity sleeve

Additional backing. Available to the bounded pass exit.

Adds value, not reserve cover

Both contribute to backing. Only the stablecoin reserve enters the cover ratio.

Market expresses expectation. Backing records accumulated value. The reserve carries the promise. Reference records monetary progress that has already been earned and can no longer be taken back.

The separation is the entire architecture. Once these are distinct quantities rather than one number wearing several hats, a premium becomes an input to capital formation instead of a peg violation, and a drawdown becomes a recovery problem instead of a redenomination.

3

A currency that breathes.

The shared recovery regime is a planned extension. The coordinated bond gate, hook-published regime and inverse bonds described below still require final implementation and activation rules.

Most currencies are asked to hold still, and spend enormous effort failing to. Ducat is built to move, in both directions, on a schedule nobody sets by hand. What decides which direction it is moving in at any moment is a single published ratio: the stablecoin reserve held against every ducat outstanding, compared to the reference. Above 1.20 times cover, the system expands. Below it, the system contracts. Nothing else votes on which state it is in, and nothing needs to.

Call it a business cycle compressed into a set of contracts and stripped of the discretion a human central bank would normally exercise inside it. The shape is not new. Good conditions build a cushion. The cushion is what the system draws on when conditions turn. What is different here is that the line between the two states is a number anyone can read on chain, rather than a judgment call made by a committee after the fact.

Expansion above 1.20× cover
Bonds sell into a rising premium and bank the proceeds permanently. Free issuance mints against a surplus that has already arrived. The ratchet, reading a sustained low rather than a single print, becomes eligible to move the reference up a rung. Every one of these adds to the reserve, or retires a claim against it, and none of them can run in the other direction.
Contraction below 1.20× cover
Bonds and free issuance both stop at the same line, together. Inverse bonds open a standing buyback that burns ducat out of the market. The desk turns overweight equity back into USDG. Redemption keeps paying, at the lower of the reference or the reserve, so the exit never becomes the thing that empties the treasury. Nothing here waits for a vote.

The two states are not competing designs bolted together. They are one design, read from two sides of the same threshold. A protocol that only knew how to expand would be a bull market with a smart contract attached. A protocol that only knew how to contract would never grow a treasury worth defending in the first place. Ducat is built to do both, and to do them without anyone having to decide, in the moment, which one applies.

The system does not choose a season. It reads the reserve and finds out which one it is already in.

The proposed reserve cycle
Cover = reserve per ducat ÷ reference

Above 1.20×

Bonds and permitted expansion. Retain part of the surplus.

Build the cushion

Below 1.20×

Proposed coordinated stop. Inverse bonds and desk recovery.

Reduce outstanding claims

A design map, not a live regime indicator. Ratchet and redemption retain their own tests.

Everything from here forward belongs to one side of this line or the other. Sections 6 and 7 are expansion in mechanical detail; section 16 and the redemption right in section 18 are what contraction looks like when the line is crossed. Section 23 draws the whole cycle out end to end, in both directions.

4

The starting point, not a peg.

Ducat launches at a $1.00 reference, set where the genesis balance sheet can prove it rather than where an illustration would like it. That starting number does not make Ducat a dollar-pegged stablecoin. The reference records a level the reserve has qualified to support; it is not a guaranteed sale price or minimum redemption payment.

The genesis sale price is $3.00, three times the starting reference. After launch, market price can rise or fall independently. There is no protocol-imposed market-price ceiling and no promise of appreciation.

The first assets come from a 24 hour genesis sale at $3.00 in USDG. Seventy percent is banked as stablecoins and the rest seeds the pool. Settlement refuses to complete unless the reserve covers the reference at least 1.20× on every ducat minted, so the opening cushion is asserted by the contract rather than promised. The modelled opening sheet carries about $1.60 of stablecoins behind every unit.

Suppose demand arrives. The ducat trades at $4.00, then $8.00. Nothing about the monetary system requires the reference to follow, and it does not. An $8.00 market price is not evidence of $8.00 of assets. Market price moves in a block. Balance sheets do not.

What the premium does create is an opportunity, and the protocol takes it. Governance opens bond capacity market by market, inside a ceiling of 65% of the standing issuance allowance for each epoch. Buyers take ducats at a discount to where it is trading, never below the reference, and the discount moves with bond demand rather than with the size of the run. A bigger run does not open more capacity on its own. The assets land in the treasury permanently. Supply expands into demand that already exists.

The ratchet reads one number: the lowest reserve per ducat across the last five days. If that low clears the test through a fully observed window, every price feed is fresh and the liquid reserve sits at or above its 35% floor, the protocol becomes eligible to recognise part of the distance it has travelled. There is no concentration test. Concentration is priced into backing as a surcharge instead, and the ratchet does not read backing.

  • $1.0000 to $1.0500requires a five day low of $1.3125 in stablecoins per ducat
  • $1.0500 to $1.1025requires $1.3781, and at least a day since the last step
  • $1.1025 to $1.1576requires $1.4470, cushion retained rather than spent

The step is capped at 5%, steps can come no more than once a day, and the test is set at 1.25× the new reference rather than the old one. That ratio is immutable. A raise to $1.05 therefore requires $1.3125 of stablecoins behind every ducat, held as the low of a full five days. The modelled genesis sheet clears the first rung on its own.

Stocks cannot earn a step however far they run, because the ratchet never reads them. One good print cannot move it, and there is no way to skip a rung.

The market can ask for a higher monetary value at any time. Only the reserve can grant it.

5

The ratchet only turns one way.

Market can rise and fall freely. Backing fluctuates as treasury assets appreciate, depreciate and produce income. Reference moves deliberately, and in one direction. Only the ratchet contract can write it, and the contract rejects any value that is not strictly higher.

A sustained reserve can justify a higher reference. A speculative spike cannot. The asymmetry runs the other way too, and this is the part that matters: if the reference has reached $1.2155 and the reserve later falls to $1.10 per ducat, the protocol does not declare $1.10 the new reference and carry on. Issuance has already stopped, redemption pays the lower of the two, and every safeguard that reads the reserve is acting on it.

A ratchet that moves both ways is not a ratchet. It is a chart.

What earns the next step
  1. Observe a full five daysUse the lowest stablecoin reserve per ducat, not the latest reading.
  2. Fund the new referenceA move from $1.00 to $1.05 needs a five-day low of at least $1.3125.
  3. Respect every remaining checkFresh feeds, the 35% liquid floor and at least one day between steps.

$1.05 × 1.25 = $1.3125. The 5% step is a maximum, not an automatic daily increase.

This is what makes the reference worth measuring anything against. Price can go backward. Backing can go backward. The monetary objective does not follow them down, which means every level it has reached is a level the system has committed to defending rather than a high water mark it once printed.

6

Farming the premium.

Read a reference of $1.2155 against a market price of $5.00. A conventional stablecoin sees $3.78 of error and burns capital eliminating it. Ducat sees an extraordinary valuation being offered voluntarily for new supply.

That demand gets monetised rather than corrected. Capacity opens progressively rather than all at once: a market's remaining capacity is spread across its remaining deposit intervals, so nobody can take it in one block. Dumping unlimited supply at the reference destroys the premium in a block and collects almost none of it. Moving slower than the buyers is the whole trick. It is what lets the run keep running while the treasury fills up behind it.

  1. The market bids past the referenceNothing is done to stop it. No intervention, no defence, no ceiling.
  2. Capacity opens on a scheduleBuyers take ducats at the time-weighted pool price less a discount, never below the reference, vesting in a straight line over the term the market opened with.
  3. Assets land in the treasuryOnly registered, oracle-priced assets can be bonded. They sit in treasury custody and leave only to approved venues, inside a call that has to return the receipt.
  4. The premium deflatesIt always does. The assets it bought do not leave with it.

Price is temporary. Assets are permanent.

Every cycle that ends the way cycles end still leaves the protocol structurally heavier than it was when the cycle began.

7

Bonds may not eat the promise.

Bonds are the converter between reflexivity and balance sheet growth. They are also the most direct way to thin a balance sheet out, and the difference is where the line is drawn.

If backing sits at $3.00 per ducat and the protocol issues new units for $1.50 of assets each, it has grown the treasury and diluted every existing claim on it. The headline improves. The cushion per ducat gets thinner.

Ducat allows that, up to a line. Bond pricing reads the time-weighted market price and the reference. It does not read backing. A bond can be sold below backing. It can never be sold below the reference, and after every bond the reserve must still cover the reference on the whole supply, checked on the state after settlement rather than before it.

A bond paid in stocks carries one more rule. The reference cost of the ducats it issues comes off the surplus that issuance reads, so the same room is never spent twice.

The cushion is allowed to flex. The promise is not.

8

Backing is the memory.

A cycle begins and ends. A narrative appears and disappears. The ducat trades at $6.25 and later returns to $2.50. None of that is unusual and none of it is preventable.

What is unusual is the state the system is in afterward. If the protocol spent the six dollar period acquiring assets it now owns outright, the monetary system that comes out of the cycle is not the one that went in. Backing is the only honest record of that, because it is the only number a market cannot manufacture.

Cycle one leaves $1.63 of backing. Cycle two leaves $2.00. Cycle three leaves $2.50. The trajectory is never guaranteed, least of all when treasury assets themselves move, and the haircuts exist precisely because they do. But that is the direction the whole machine is pointed. What the protocol pledges against is narrower: the stablecoins inside that figure.

Enthusiasm is the fuel. Bonds are the converter. Backing is what the protocol remembers.

9

The treasury is not a pile. It is a balance sheet.

Accumulating assets is the first stage and the least interesting one. Reserves that sit still depend entirely on the next wave of demand to grow. Ducat is built so the balance sheet keeps earning after the attention leaves.

The treasury holds stablecoins and tokenised equities the protocol owns outright, each marked down by its own haircut before it counts toward backing. At least 35% of the treasury must be instantly payable stablecoins, and redemption pays from that leg alone, so the exit stays payable while equity markets are shut.

Haircuts price what can go wrong with a mark, not the asset class. Every position takes 1% while its feed is fresh. A stablecoin whose feed goes stale takes 5%, and a stock whose market is closed takes 10%. A non-stable position that grows past 40% of its class carries a surcharge of up to 25% on top. Stocks do not need a deep class haircut, because they never back the promise.

Illustrative holdings. Only the stablecoin row counts toward the promise.
AssetTierValueHaircutRealisable
USDGStable$26,400,0001.0%$26,136,000
AAPLEquity$3,060,0001.0%$3,029,400
NVDAEquity$2,970,0001.0%$2,940,300
TSLAEquity$2,970,0001.0%$2,940,300
All positions$35,400,0001.0%$35,046,000
Reserve (stablecoins)$26,400,0001.0%$26,136,000

Figures illustrative. Every position is published, and the haircut is applied before the asset is allowed to count.

How the stock book is sized

The protocol never spends on stocks. The equity book is an allocation of excess reserve, and it arrives by bond. Its target is a share of the stablecoin surplus above 1.30× cover, rising to half of the excess at 2.00×, split AAPL 34, NVDA 33 and TSLA 33. Bonds bring stocks in, and their discount widens with the gap to target.

The way out needs nobody's permission either. When a stock runs over its weight, anyone can buy the excess from the desk at the oracle price plus 1%, paying in USDG, which is kept, or in ducat, which is burned.

Paths that move value use strict price reads that revert on a stale or paused feed, so a stock cannot be bonded or bought from the desk at a price nobody is publishing. Both close while its market is shut. Valuation and redemption carry on at the stale haircut.

What the balance sheet earns

Stablecoins above the liquid floor can be placed in approved vaults, and the vault shares still count toward the reserve. That is the implemented income path, alongside the buy-side toll on the pool and the desk's margin; this paper does not establish live deployment. Equity distributions are not built. None of it is paid out.

Further out, gauge weight can direct voting positions across aligned markets and earn emissions and incentives there. A gauge controller and a sync to an external voter already exist. The voter is unset at deploy. That layer is the roadmap rather than the running system, and the paper marks it as such.

The implemented core is the part that matters most: the protocol owns its assets outright, marks them down honestly, promises only against its stablecoins and publishes the result.

Protocol-owned liquidity, coming to a second pool

The reviewed launch configuration assigns no protocol-owned position in the canonical DUCAT/USDG pool. A second pool, DUCAT against tokenised equity, is being stood up alongside it, and this one the protocol seeds and keeps a position in.

Owning that liquidity is what makes the pair worth having. A market with no protocol depth behind it is thin exactly when it is most useful, and a thin pool is a bad venue for the cross-pool arbitrage the second pool exists to enable, covered in section 19. Protocol-owned liquidity fixes the depth problem at its root instead of subsidising it week to week.

The position is not free money sitting in a vault. It is a liquidity position, redeemable only by withdrawing it, so it carries its own tier and its own haircut and does not count toward the 35% liquid reserve floor. Where its funding is drawn from, and the exact haircut it carries, are being finalised alongside the levy in section 19.

10

Rank decides how much of it reaches you.

The treasury is not a black box you take a position against. It issues a fixed number of passes, and a locked pass is a claim on every expansion the protocol is permitted to make.

One thousand passes are declared once, one way: 40 Founder, 80 Charter and 880 Member. Supply can grow without limit. The number of drawn passes cannot grow at all, which means a fixed count of holders sits above a monetary base designed to get larger for as long as the system keeps working.

Every print is split between locked passes and the protected vault. The vault takes E × P / (S + P), where E is the print, S is supply and P is the protected part of it. Passes take the rest, which is between half and all of every print depending on how much supply has chosen protection. Nobody sets the share. It follows the holders.

Member 1× issuance · 1× gauge
Drawn from a paid ticket, with one unit of issuance and gauge weight. Eligibility is a bonded-value threshold rather than a pro-rata split, because pro-rata on indivisible things rounds somebody to zero and calls it a reward.
Charter 4× issuance · 3× gauge
Four times a member on expansion, which keeps the bonding threshold per unit of weight the same at every rank, and the same governance weight as a founder. The middle rank is where control actually concentrates.
Founder 10× issuance · 3× gauge
Ten times a member on expansion, and exactly the same say as a charter. A founder is not paid more because it paid more. Every ticket in a period pays the same price, and the rank is drawn.

Beside the draw sits a fourth rank, Recovery, at 3× issuance and 1× gauge. It starts at zero supply and exists for one situation, covered in section 16.

A print, worked through

Suppose a period mints 10,000 ducat in expansion, half the drawn passes are locked, and protected ducat P equals 20% of total pre-print supply S. The vault receives E × P / (S + P), or 10,000 × 0.20 / 1.20 = 1,666.67 ducat. The remaining 8,333.33 ducat is allocated to locked passes by effective weight.

Assume equal remaining lock duration across 20 Founders, 40 Charters and 440 Members. Their relative issuance weights total 200 plus 160 plus 440, or 800 units. Each unit receives about 10.4167 ducat. A Founder receives 104.17, a Charter 41.67 and a Member 10.42. Lock the other half with the same duration and the print splits across twice the weight, halving each existing holder's allocation. These are rounded gross allocations before vesting, not guaranteed rewards.

A 10,000 ducat print
Protected vault1,666.6716.67% of the print
Locked passes8,333.3383.33% of the print

10,000 × 0.20 ÷ 1.20 = 1,666.67

Assumes protected ducat is 20% of total pre-print supply. The split follows that ratio, not a fixed reward promise.

A pass earns only while it is locked

A pass is not a standing claim. It earns expansion, and votes, only while it is locked in escrow, for up to 365 days, and both of its weights decay in a straight line to the end of the lock. Only passes locked when a period opens share in that period. Rewards are bucketed per eight hour period and vest over five days. The pass is a claim you have to commit to.

Protected ducat

A holder who wants to participate in expansion without a pass has a third option. Ducat deposited into the protected vault becomes pDUCAT, and the vault takes its share of every print, so its exchange rate rises. Entry and exit are queued. Exit waits a three day cooldown. The age-based fee is 3% before one day, 2% before three days and 1% before five days, then zero; collected fees stay in the vault for those who remain. The vault is capped at 90% of supply.

Holding the ducat is exposure to the money. Holding pDUCAT adds a share of expansion; that formula does not guarantee freedom from dilution. Holding a pass is exposure to growth in the money, which is a different instrument with a different risk profile and should be described as one.

11

Two weights, deliberately unequal.

Issuance weight and gauge weight are separate fields in the contract, and escrow keeps a ledger for each. The founder rank is where the reason becomes visible: ten times the economics, three times the say.

One weight answers how much of permitted expansion a pass participates in. The other answers how much influence it has over where the protocol's liquidity power is directed. Fusing them is the standard design, and the standard result is that whoever arrived first controls everything forever.

Keeping them apart lets the rare pass carry the economics of a rare rank without carrying proportional control over the treasury. Rarity stays desirable. The system stays governable.

Gauge voting is implemented over a governance whitelist of gauges. The position it will direct is not: the external voter it syncs to is unset at deploy.

12

Every pass pays into the reserve.

The revised ticket clock and reserve-linked payment rule are proposed launch terms, pending final configuration. They should not be read as currently available sale terms.

The ownership layer has one door, and it runs through the balance sheet. Eligibility is earned by bonding. The ticket is paid in stablecoins that go straight into the treasury. At launch there is no other route.

That choice does most of the work in this section. The usual protocol NFT sale is a competing fundraise: it pulls capital toward a second asset and away from the token it was supposed to support. This does the opposite. Every pass sold adds stablecoins to the one reserve that stands behind the currency's promise, and the ducat holder receives that without participating.

  1. The pass has to be wantedA fixed count sitting above a monetary base with no ceiling. Nothing else about the loop starts until that proposition is real.
  2. Eligibility is earned by bonding$500 bonded across the last three completed eight hour periods, or a governance whitelist. Access is a threshold rather than a raffle, and bonding means approved assets landing in the treasury permanently.
  3. Backing rises on the way inBefore a single pass has been sold, the assets bonded to qualify for them are already on the balance sheet and already counted, after haircuts.
  4. The ticket is paid in USDGOne ticket per account per eight hour period, on a clock that descends from $10.00 to $0.50. Everyone in a period settles at its clearing price and reclaims the difference. Thirteen tickets a period at launch, halving weekly to a floor of four.
  5. The rank is drawnEach ticket's rank is drawn without replacement from the declared pool, using a verified drand round. A founder cannot be bought by outbidding.
  6. The proceeds stay in the reserveDeposited into the treasury as stablecoins and counted toward the reserve from that block. Stablecoins per ducat rise for every holder, including the ones who never wanted a pass.

The sale therefore lifts the balance sheet twice from a single process. Once when the assets bonded to qualify arrive and stay, and again when the ticket price lands in the reserve against unchanged supply.

The pass is paid for in the asset that backs the promise, and the payment never leaves.

From eligibility to participation
  1. QualifyMeet the completed-period bond threshold or the governance whitelist.
  2. Buy a ticketPay the period price. Final clearing determines the refundable difference.
  3. Reveal the rankVerified drand randomness draws from the remaining rank inventory.
  4. Choose a commitmentLock to participate in eligible rewards and votes. A revealed, unlocked pass can use the equity exit.

Eligibility does not make the pass free. Rank is drawn, not selected by paying a higher price.

Then the loop closes on itself. A stronger reserve is a stronger monetary system, a stronger monetary system makes a fixed claim on its expansion worth more, and a more valuable pass draws more bonding to qualify for the next one.

That reflexivity runs in both directions, as all reflexivity does, and it is worth saying plainly rather than leaving for someone else to point out. Pass demand can cool, and the loop can stop turning. What it cannot do is unwind. Stablecoins paid for a pass never leave with it, because the pass exit reaches equities only. The reserve a sale built is the floor the next cycle starts from.

The burn leg

A period can also be stamped ducat-paid instead of USDG-paid. Buyers settle in the currency, and the proceeds are burned: supply falls while the treasury stays exactly where it is. Two ways to spend a pass, and each does something different for the balance sheet, which means the choice of which is open should not be arbitrary.

It follows the same line as the rest of this paper's recovery logic rather than a separate governance mood. Below 1.20× cover, the USDG leg is what is open: every pass sold is a stablecoin deposit into the reserve, at the moment the reserve can least afford to pass up one. At or above that line, with the reserve already carrying the cushion issuance depends on, the ducat leg becomes available, and a pass sale does its work by retiring supply instead. Governance sets the switch, through the same timelock as everything else, but the line it is switching around is the one already governing bonds and issuance, not a new judgment call. At launch, with cover freshly proved at settlement, the USDG leg is what is open. The Recovery book is the one exception: it is always paid in USDG, in every regime, because its entire purpose is adding to the reserve when nothing else is.

And the reference feels it

Selling passes does not touch the reference directly, and nothing in this section should be read as saying it does. What it touches is the reserve, and the reserve is the only quantity in the system that can earn a reference step. The trailing test takes the five day low of stablecoins per ducat and does not care how they arrived, so a USDG pass sale counts toward a ratchet exactly as a stablecoin bond does. In a ducat-paid period, supply retired by the burn counts too, through the same measure.

Which gives the ownership layer an unusual property. Selling passes makes the currency structurally heavier, and a heavier reserve is the only thing that can move the reference upward.

The pricing schedule, the eligibility threshold and the payment leg are governance settings. Governance is a timelock with a two day minimum delay, so every change to the sale sits in the public queue before it takes effect.

13

And burned for the sleeve.

A pass is bought into the reserve. It can also be destroyed for a slice of the equity sleeve, pro rata by rank, which gives the ownership layer an exit that does not require anyone to buy the pass from you.

The slice is weighted by issuance weight, because that is the weight that describes the economics. A founder burning against ten units of weight receives ten times what a member receives against one, at the same moment, from the same pool. It is the ordering the expansion split already uses, applied to the way out rather than the way in.

What it pays out of is deliberately narrow. The claim reaches the tokenised equity positions and nothing else. It pays in kind, the shares themselves, less a flat 10% that stays in the treasury. The in-kind payout does not require an equity price quote, so market closure alone need not prevent it, and the stablecoin reserve is out of reach by construction rather than by a test.

A pass has no claim on the promise. It has a bounded claim on the equity book.

That distinction is the whole safety argument and it should be read carefully. Paying shares out against a burned pass removes treasury value without removing a single monetary claim, so backing per ducat falls by construction. There is no arrangement of this mechanism that makes that untrue, and the paper is not going to pretend otherwise. What it cannot lower is the reserve per ducat, because it never touches a stablecoin.

So the exit needs no floor. There is nothing a solvency test would be protecting. It is metered by a daily allowance per asset and remains subject to treasury pause state, asset availability and successful token transfers. An empty equity book supplies no payout; a holder should not burn a pass for a zero-value exit.

  1. Pro rata by rankWeighted by issuance weight against the weight still outstanding, paid in kind from the equity book less the exit fee.
  2. Metered, not gatedA daily allowance per asset and one governed fee. No reserve-cover gate is required, but pause controls and exhausted allowances can still prevent execution.
  3. A worked exampleA Founder burns against 10 units of weight, out of 800 outstanding, when the equity book holds $2,000,000. That is 1.25% of the book, $25,000 of shares before the fee, $22,500 after the 10% held back. An alternative Member burn against that same pre-burn snapshot, at 1 unit of weight, receives a tenth: $2,250. These are separate examples, not sequential payouts; the first burn changes both balances and outstanding weight. Neither example touches a stablecoin.
  4. The pass does not come backA burned slot is never minted again. The count falls permanently and total issuance weight falls with it.

The same terms in every weather

Closing the exit in a downturn would be the easy version, and here it would protect nothing. The exit cannot touch what backs the promise, so its terms do not change through a cycle: one governed fee and per-asset daily allowances, without an additional reserve-cover gate. Operational pauses and transfer restrictions still apply. An ownership exit that vanishes the moment holders want it was never an exit.

The step worth sitting with is the last one. Expansion is split across passes by weight, so retiring weight raises every surviving pass's share of every expansion the protocol ever makes again. The holder who leaves takes equity. The holders who stay take a permanently larger claim on the growth of the monetary base, and they do not have to do anything to receive it.

It is the same shape as the exit one layer up. Redemption pays the lower of the reference or the reserve per ducat, less a fee, and leaves the remaining holders no worse capitalised than they were. A sleeve burn pays shares less a fee and leaves the remaining passes holding more of the future. Both exits are real, both are capped, and both are priced so that using one is a transfer to the people who did not.

Between them the ownership layer has a floor that does not depend on anyone wanting a pass. Passes are bought into the reserve, which makes the currency heavier. They are burned for equity, which makes the survivors' claim larger. The drawn count only ever moves down.

The exit fee is one governed number, capped at 50%, and the daily allowance per asset is another. Any revealed, unlocked pass is eligible. Both settings sit in the public queue before they take effect.

14

Built so the currency wins.

Every claim on this protocol is ordered, and the ducat sits at the top. There are two tiers, and nothing sits between them. Pass holders own the upside, and in exchange their only exit is the part of the treasury the promise never rests on.

1. Ducat holders senior everywhere
After every mint the reserve must cover the reference on all supply, and redemption pays from that reserve and nothing else.
2. Pass holders junior by choice
Passes carry the upside, and their claim reaches equities only. They are the claim that stops being paid first.

The pass earns disproportionate upside because it is the first claim to go quiet. Issuance is the only thing a pass earns, and issuance stops at 1.20× cover, well before the currency's own cover is touched. That is not an unfortunate side effect of the design. It is the consideration being paid for the upside, and a holder who does not understand that has misread the instrument.

15

The bull market pays for the bear market.

The defence against a downturn is not a stock of the protocol's own token. No contract holds ducat against itself. The defence is stablecoins, built in the good months by what issuance is not allowed to spend.

Expansion issues 70% of each rise in the stablecoin surplus and leaves the rest where it is. Nothing is issued at all below 1.20× cover. Every buy on the pool pays 0.5% into the reserve, and every sell burns 1% of the ducat sold. Yield on stablecoins above the liquid floor accrues to the reserve and is never paid out.

A strong market therefore finishes with more stablecoins behind every ducat than it started with, and a weak one draws on a cushion that was built for it. Every print goes to the protected vault and to locked passes, and a period in which nobody is locked sends the pass leg to the treasury.

The mechanism is countercyclical by construction rather than by anyone's discretion at the moment it is needed, which is the only time discretion has ever failed.

16

Recovery reads the reserve, not the price.

Reflexive systems are easy to design in one direction. This is the other one. There is no recovery mode to enter. Nothing switches and nobody has to declare anything. Each safeguard reads the reserve on its own and acts alone, whatever the market happens to be doing.

  1. All issuance stops on its ownBelow 1.20× cover, free issuance returns zero and bonds stop taking new capacity, together and without exception. Above that line a bond can trade a discount for a permanent asset; below it, the reserve is not spent making that trade. No committee has to agree that conditions are bad.
  2. Inverse bonds openBelow the same 1.20× line, the treasury will run a standing bid: anyone can sell ducat directly to the protocol and have it burned, paid from the reserve. It is a bond turned around. A bond spends the reserve's room to grow supply against a permanent asset; an inverse bond spends stablecoins already held to shrink supply instead. An inverse bond raises reserve per remaining ducat only when its all-in payout is below the reserve value retired; the final pricing and solvency checks must enforce that condition. The pricing and the pace at which it is allowed to buy are still being set.
  3. The desk turns equity back into reserveThe same standing sale described in section 9 that lets anyone buy an overweight stock from the desk becomes a recovery tool here: overweight positions can be sold down for USDG, and USDG is what the reserve is measured in. It does not wait for the equity book to be overweight to matter; below 1.20× cover, thinning it is the point.
  4. Rescue capital buys a pass, not a bondWhen stablecoins fall under the reference, governance can open the Recovery book: a rights issue of Recovery rank passes, paid in USDG, with no ducat minted. It adds to the reserve without adding to supply, and it sits dormant at zero until then.
  5. Income stays inYield, the pool toll and desk proceeds accrue to the reserve. That is the rule at all times, not a setting reserved for bad ones.
  6. The exit shrinks, not the promiseRedemption pays the lower of the reference or the reserve per ducat, less 1%, so a holder leaving below the reference takes what is actually there and leaves the rest no worse off.

The reserve improves through exactly three channels: stablecoins arriving, stablecoins earning, and claims retiring. Every safeguard above points at one of them, and none of them pays anything junior until cover returns.

It recovers from a higher floor than the one it fell from.

17

Policy asks one question.

The shared regime flag belongs to the revised design. Price observation and issuance checks already exist; the shared flag is a planned extension.

Policy is not here to hold a line. It reads the market and the reserve, then allows exactly as much issuance as the reserve has already paid for.

The hook under the ducat's own Uniswap v4 pool on Robinhood Chain does three things on every swap, not one: it records the price observation, it takes the toll, and it checks the reserve against the 1.20× line and flags which regime is currently live, expansion or contraction. Every other contract that cares which regime is live, bonds, free issuance, the levy split described in section 19, reads that flag rather than recomputing the check itself, so the two states described in section 3 are read from a single place on chain rather than assembled independently by whichever contract happens to need the answer. The issuance decision itself is a plain contract that reads a 30 minute time-weighted price from the same hook and asks the market one question: is it at or above the reference, and within 10% of its seven day anchor, on a pool with at least $8,000 of vouched depth?

The answer is yes or no. How much follows from the stablecoin surplus and the standing rate. Composition limits sit on bonds, not on the gate. Volatility and bond demand are not inputs.

There are no bands. A ladder of regimes saturates at every price a run produces and tells policy nothing the level test does not.

A one block spike and three weeks of sustained bid are not the same event, which is why the gate reads a thirty minute average and holds it against a seven day anchor rather than trusting spot. The size of a premium is not an input at all. A $3.75 market against $1.60 of stablecoins and a $3.75 market against $1.05 are entirely different systems wearing the same price, and it is the reserve, not the premium, that decides how much either may issue.

Unreadable fails open, dark fails closed

A pool that has never been readable, because it is too young or thinner than $8,000 of vouched depth, does not gate issuance. A pool that was readable inside the anchor window and then stopped closes issuance and bonds until it returns. A thin pool is not a cheap off switch, and a drained pool is not a cheap on switch.

This is not discretionary central banking. Nothing here is a judgement call made in the moment. Policy cannot declare backing, which is computed from oracle reads. It makes no treasury call at all. It cannot mint without limit, because every mint passes the token's own cap and a solvency check after it settles. It cannot ratchet the reference on a single market move, because the ratchet reads a trailing window. Its authority is real and its perimeter is fixed.

Policy is powerful because its powers are bounded.

18

The exit is priced honestly.

Redemption pays the lower of the reference or the reserve per ducat, less 1%, in USDG, within a daily capacity of 3% of the liquid reserve. It pays from the liquid leg only, so it never waits on a stock market opening.

Taking the lower of the two is the part that protects everyone who stays. If the reserve has fallen below the reference, paying out at the reference would drain stablecoins faster than claims retire and push the reserve down for every remaining holder. The contract checks that every redemption leaves the reserve per remaining ducat no lower than it found it. The exit is real, it is capped, and it cannot be used to strip the balance sheet.

The exit is clamped on what can actually be paid out today, not on a figure that includes stocks the protocol would have to sell first.

Price the monetary exit

Reference

$1.5000

Reserve per ducat

$2.0000
Take the lower value, then deduct 1%$1.4850 USDG per ducat

Illustrative price calculation. Execution is subject to liquid reserve capacity, daily allowance and pause state.

The ducat is not pegged. The reference is the centre of monetary policy, not a promise about market price. Redemption has no price gate, no contract trades on the pool, and nothing in the protocol defends the market price in either direction.

Two holders, two outcomes

In a later-state example, the reserve holds $2.00 per ducat against a $1.50 reference. Reserve cover is 1.333×, using stablecoins alone. Redemption takes the lower figure, $1.50, then deducts 1%: $1.4850 per ducat. A higher market price does not increase this quote.

Now suppose the reserve falls to $1.20 against the same $1.50 reference. The reference has not fallen, but the payout has: redemption uses $1.20 less 1%, or $1.1880. This is why a reference that cannot decrease is not a guaranteed minimum redemption payment. Paying the reference here would hand out more than the treasury actually holds per unit, at the expense of everyone who does not redeem. The holder who exits takes exactly what is there. The holders who stay are left no worse off than they were the moment before.

19

The toll on the pool.

The existing pool toll and proposed unified levy are separate versions. The second pool, levy rates, decay window, funding split and liquidity-position haircut remain pending. The proposed 5% ceiling is not the current hook configuration.

The ducat trades on one canonical pool, ducat against USDG, and the hook under it takes a toll in both directions. 1% of every ducat sold is burned. 0.5% of every USDG spent on the ducat is deposited to the treasury. Both rates are governed through the timelock and capped at 3%.

Which happens is fixed by direction. Sold ducat is burned and spent stablecoins are held. There is no treasury decision to make and no discretionary pot in between.

  1. Paid by everyoneThe one percent is a tax on selling ducat, paid by every seller, not a fee on one kind of trade. Nobody is excluded, and everybody contributes.
  2. Held or burned, by directionBuys pay stablecoins into the reserve. Sells destroy part of what is sold. Nothing buys ducat on the pool to burn it.
  3. Both routes land in the same placeHeld, the reserve grows against unchanged supply. Burned, supply falls against an unchanged reserve. Stablecoins per ducat rise either way.

Nothing in this line is paid out. It goes back to the currency and to nobody else. Pass economics come from permitted expansion, where they are defined, weighted and junior by design. Keeping the two apart means the toll never has to be argued about in a drawdown, because there is no claim on it to suspend.

The toll also costs something, and that should be stated rather than discovered. A trader who buys and sells back pays 1.5% on the round trip. That is the price of a pool that feeds the reserve on every trade.

The deeper corridor

There is a corridor underneath the pool that does touch the balance sheet. When the market trades below the redemption price, buying on the pool and redeeming at the lower of the reference or the reserve, less the fee, is profitable, and stays profitable until the gap closes. That is the corridor that makes the floor real rather than stated, and anyone with ducat and a pool to buy it on can work it.

The two rates on the canonical pool are governed settings and sit in the public queue before they take effect. Whether proceeds are held or burned is not a setting.

A second pool, and the arb it brings back

One pool cannot disagree with itself. A second is being stood up, ducat against tokenised equity, and the protocol seeds it and keeps a liquidity position there rather than leaving the depth to whoever shows up, as section 9 describes.

Two pools pricing the same asset will not agree for long, and that disagreement is worth recovering rather than leaving on the table. The corridor this reopens is the one the original design called the spread between the pools: buy the ducat where a pool implies it is cheap, sell where another implies it is rich, close the cycle flat in ducat and ahead on the difference. It needs both pools to be real markets with real depth, which is exactly what owning the second pool's liquidity is for.

What is captured this way does not sit in a discretionary pot, and it does not sit outside the fee structure either. It is priced and collected through the same levy described below, on whichever pool the dislocation is closed against, and it is distributed exactly the way every other line under that levy is distributed: part to the reserve, part to funding the protocol, on the schedule set out next. A trade that closes a dislocation is still a trade, and it pays the same toll a directional one would.

The levy: one number, capped, and decaying

A single levy is replacing the pieces above with one published rate, enforced the same way it is today: the hook. It deploys on the new equity pool the same way it deployed on the canonical one, wired in from that pool's creation, so both venues run the identical contract rather than two different fee mechanisms. Two things about the rate are fixed now, even though the number itself is not.

First, the ceiling. Combined, across whatever the levy eventually is and whatever of the original toll survives inside it, the total a trade can be charged will never exceed 5%. That is a hard cap this document is committing to before the rate underneath it is finalised, not a target the rate happens to land near.

Second, the shape. The levy opens at the top of that range and decays down to its resting rate over a period governance will set and publish before launch, rather than sitting flat forever. Early trading carries the heavier load, when the reserve is thinnest and the protocol's own build and operating costs are least offset by anything else. As the reserve deepens, the rate eases down, and the split underneath it moves too: more of the levy goes to protocol management at the start of that window, and more of it goes straight to the reserve as the window closes, ending, like the pool toll it replaces, almost entirely as a reserve inflow.

What the rate is, on day one and at rest, and how long the decay window runs, are being finalised. This document will carry the numbers once they are set, in this section and in the params table in section 21.

None of this touches the invariants in section 20. The levy funds itself out of trading activity, never out of the reserve directly, and it is not a claim anyone junior can be paid ahead of the currency itself.

20

Things nobody can do to you.

Autonomy is only worth having if its limits are enforced by the contract rather than promised in a document. The implemented constraints are described below. The proposed combined levy ceiling is called out separately and still requires implementation verification.

Nothing in the solvency path reads the ownership layer
Passes can go to zero without touching the ducat. The distributor reads escrow only to split ducat already minted.
There is no owner
Every privileged call is a role, and governance and admin roles sit on a timelock with a two day minimum delay.
The treasury has no sweep function
Not a restricted one. None at all. Three registered spenders, redemption, the desk and the pass exit, each draw against a daily allowance, and a strategy deploy must return its receipt in the same call.
The token enforces its own mint cap
The current epoch's mints plus the whole previous epoch's cannot exceed it, so no 24 hours can ever mint more than the cap. No upstream bug can get underneath it.
Every bond must leave stablecoins covering the reference
On the whole supply, checked on the state after it settles, not on the state before.
Expansion may only spend surplus that has already arrived
70% of the growth in stablecoin surplus since the last print, none below 1.20× cover, with a post-bootstrap standing rate of 10.5% per week, applied to each epoch's supply. This is a weekly-equivalent rate, not a separate rolling-week hard cap.
A sleeve burn can never lower the reserve
It pays equities in kind with supply unchanged, so backing per ducat falls, as section 13 says. The stablecoins per ducat cannot.
Backing is measured independently of market price
Assets are valued from Chainlink feeds only. No swap, no matter how large, creates treasury value.
The reference has no downward path
Only the ratchet contract can write it, and only upward. Not by governance vote, not by market move, not by policy discretion.
A guardian can pause, and nothing else
Responders can pause minting, treasury outflows, bonds, redemption and the desk. They can never unpause, move funds or grant roles. Unpausing is a timelocked governance action, and bond claims stay open while paused.
Rounding lands on the treasury's side
Obligations and receipts round up, payouts round down. Dust cannot accumulate against the currency.
The proposed trading levy has a 5% ceiling
The revised design commits to a combined ceiling across both pools. This extension is not yet verified as a deployed contract invariant; the final implementation must enforce it.

A subset of the full invariant set. The complete list is published with the policy.

21

The numbers, in full.

Every constraint described above is a published parameter with a value, not a principle with a tone of voice. This register combines the reviewed launch settings with the revised design. Shared recovery controls, the second pool, unified levy and $10.00 to $0.50 ticket clock remain proposals pending final configuration; they are not live readings.

  1. 1$1.00
    Opening referenceWhere every ducat's redemption is measured from on day one. It can only go up, and only through the ratchet.
  2. 2$3.00
    GenesisA 24 hour fixed-price sale in USDG, capped at $30,000 and $1,000 per wallet. Mints the first ducat at settlement, banks 70% and seeds the pool with the rest. Settles only at 1.20× cover or better, and a raise too small to seed a readable pool refunds instead.
  3. 31,000,000 a day
    Epoch mint capEnforced by the token over a sliding 24 hour window. Sized to admit the genesis settlement and little more. Raising it is timelocked.
  4. 421 epochs
    BootstrapFor the first 21 eight hour epochs after the timelock delay, issuance has no rate cap. Only the surplus rule and the cover floor bind. The end is immutable.
  5. 510.5% weekly-equivalent
    Expansion capA standing issuance rate applied per epoch, for bonds and free issuance together once the bootstrap ends. It is not a separate rolling-week hard cap. Issuance spends 70% of each rise in the stablecoin surplus and nothing below 1.20× cover.
  6. 61.20× on stablecoins
    Recovery thresholdBelow this, bonds and free issuance both stop, and the inverse bond and desk-to-USDG levers described in section 16 become active.
  7. 71.00× on stablecoins
    Bond floorThe reserve must cover the reference on all supply after every bond. The margin scales with the reference automatically.
  8. 8TBD
    Inverse bond pricingThe rate at which the treasury buys back and burns ducat below 1.20× cover. Sits alongside the bond floor as its mirror; not yet set.
  9. 965%
    Bond capacity ceilingOf the standing allowance per epoch, opened market by market by governance.
  10. 10min(reference, reserve) less 1%
    RedemptionPaid in USDG from the liquid leg, up to 3% of the liquid reserve a day. Every redemption must leave the reserve per remaining ducat no lower. The fee is what makes every exit accretive to the holders who stay.
  11. 115% step, once a day
    RatchetNeeds a five day low of stablecoins per ducat at 1.25× the new reference, so a raise to $1.05 requires $1.3125. The ratio is immutable.
  12. 12E × P / (S + P)
    Expansion splitThe protected vault's share of every print. Locked passes take the rest. No liquidity slice and no bond slice. The treasury receives ducat only in a period when nobody was locked.
  13. 1335% of treasury
    Liquid reserve floorInstantly payable stablecoins only, so redemption never waits on an exchange opening.
  14. 141%
    HaircutOn every asset with a fresh feed. 5% for a stale stablecoin feed and 10% for a stock whose market is closed, plus up to 25% on a non-stable position over 40% of its class.
  15. 151% sell, 0.5% buy
    Pool tollDucat sold is burned. USDG spent is held. Each rate is capped at 3%. The levy below is expected to fold this in.
  16. 16One, becoming two
    PoolsThe canonical DUCAT/USDG pool, plus a DUCAT/equity pool now being stood up with a protocol-owned liquidity position, sized and funded as described in section 9.
  17. 175% ceiling
    LevyA single trading fee across both pools, split between the reserve and protocol management. Never exceeds 5% combined. Opens at the top of that range and decays to a lower resting rate over a window still being set; the split shifts toward the reserve over the same window. The exact rate and decay period are not yet published.
  18. 18Same as the levy
    Arbitrage captureSpread closed between the two pools is priced and collected through the levy above, on whichever pool it is closed against, and distributed on the same reserve and management split. No separate pot, no separate rate.
  19. 195 days
    Bond vestSet per market, and the first market vests over five. Supply reaches circulation gradually. The treasury receives the assets in the same transaction.
  20. 2040 / 80 / 880
    PassesFounder, Charter and Member, drawn by verified randomness, weighted 10/3, 4/3 and 1/1. Recovery 3/1, at zero supply until opened.
  21. 21$500
    Pass eligibilityBonded over the last three completed eight hour periods, or a governance whitelist.
  22. 22$10.00 to $0.50
    Ticket clockPer eight hour period, one ticket per account, everyone settling at the clearing price. Thirteen tickets a period, halving weekly to a floor of four. Paid in USDG at launch.
  23. 2310%
    Pass exit feeKept by the treasury on the shares handed over. Governed, at most 50%, with a daily allowance per asset.
  24. 2490% of supply
    Protected vault capThree day exit cooldown. Fees of 3%, 2% and 1% apply before one, three and five days respectively, then zero. Collected fees stay in the vault.
  25. 25Four burns
    Supply retirementThe sell toll, ducat paid to the desk, redemption, and ducat-paid pass periods, which are off at launch. Each is visible on chain as it happens. Nothing sums them into a published figure.

Governed settings sit in the public queue at least two days before they take effect. A shorter list is not reachable by governance at all: lowering the reference, the ratchet's funding ratio, the end of the bootstrap and the genesis price.

22

From balance sheet to credit.

A sufficiently capitalised balance sheet that holds its reserve in stablecoins, marks everything else down and publishes its own solvency is describing something other than a reserve. It is describing a lender.

Once capitalisation, liquidity and risk conditions are strong enough, a conservative portion of the balance sheet can support credit, governed by the same policy architecture that governs issuance. When conditions deteriorate, credit tightens. When cover falls, it stops.

Policy would then answer two related questions rather than one: how much money exists, and how much credit the balance sheet can safely carry. That is the point at which the treasury stops being proof of solvency and starts being useful for something beyond defending the currency.

No lending or credit contract exists. Credit is the longer-term destination and is not part of the launch system.

23

The loop, and the loop in reverse.

Every part of the design resolves into one sequence, and the sequence does not require the market to keep going up. It runs the other way just as cleanly when the market does not cooperate, which is the whole point of building it as a loop rather than a plan.

Expansion
  1. Demand pushes the market past the referenceUnopposed, uncapped, unapologised for.
  2. Bond capacity opens inside a ceilingSlower than the buyers, on purpose.
  3. Assets land permanently in the treasuryOwned outright, haircut applied, published.
  4. The reserve earns and the levy pays inVault yield on stablecoins, and a fee on every trade.
  5. Stablecoins per ducat riseThe number every promise is measured against.
  6. Locked passes take most of each printFixed count, growing base.
  7. A sustained reserve earns a ratchetThe reference steps up and never steps back.
  8. The cycle begins againFrom a higher floor than the last one started from.
Contraction
  1. Cover falls under 1.20×Read on chain, the same block it happens, by anyone.
  2. Bonds and free issuance stop togetherNo new supply is sold while the cushion is this thin.
  3. Inverse bonds and the desk start pulling the other wayDucat bought back and burned; overweight equity sold down for USDG.
  4. The reserve per remaining ducat risesFewer claims, or more stablecoins, against the same or a smaller supply.
  5. Redemption keeps paying, at the lower of the two pricesThe exit never becomes the thing that empties the treasury.
  6. Cover clears 1.20× againOn the strength of what contraction did, not a rebound in the market price.
  7. The system reads expansion againFrom a floor no lower than the one contraction started from.

Neither half needs the other's permission to run, and neither is a failure mode of the first. A currency that only expanded would be a bull market wearing a balance sheet. This one contracts on the same terms it expands: mechanically, publicly, and without anyone having to be right about where the cycle is headed next.

The objective is not perpetual price appreciation. No design delivers that and every design that claims to is lying. The objective is perpetual improvement in the machine underneath the price.

24

What this takes from Olympus, and where it leaves.

Olympus proved three things: speculative premium can finance a treasury, bonds can exchange future supply for present assets, and a protocol that owns its liquidity is not at the mercy of the people renting it.

Ducat's launch design keeps the first two and initially sets the third aside. One pool was enough to start with, the treasury's weight sat in stablecoins, and a rented venue was a cost worth accepting rather than a problem worth solving on day one. That third lesson is now being taken back up, deliberately and on narrower terms than Olympus applied it: not the currency's only venue, but the second pool described in section 9 and section 19, where the arbitrage the design leans on needs real depth rather than whatever liquidity happens to show up.

The original reserve-currency framing began from a permanent intrinsic-value anchor and treated the treasury as proof that the token was worth at least that much. Ducat separates market, backing and reference, and asks a different question: if the balance sheet keeps proving it can carry more, why should the monetary floor stay where it started?

The treasury is not evidence supporting a fixed claim. Its growth is an input to monetary policy itself.

Standard Reserve is not history, and it should not be read as a step Ducat grew out of. It is the closest thing this design has to a direct competitor: a pre-launch protocol in the same category, betting on the opposite architecture. Strip the treasury down to a single defended ratio, remove any policy committee, and let the currency answer to nobody. That is a clean pitch and it buys real simplicity. It also means the system has no way to tell a five minute spike from five weeks of sustained demand, because nothing in it is built to look. Ducat is making the opposite bet: three published numbers instead of one, and the belief that removing discretion is worth doing without also removing the resolution that comes from reading more than price. Which bet is right is not settled by either whitepaper. It gets settled by which balance sheet is still standing after the first real drawdown.

  1. 1284, VeniceStrikes the ducat. Its gold content is not changed for five hundred years, through plague, war and the loss of an empire.
  2. 2021, OlympusProves a protocol can own its liquidity, and that reflexivity runs in both directions.
  3. Now, DucatLets the market run, sells into it on the way up, keeps what that buys, and reads more than one number while doing it.

How the four compare

Set side by side against Standard Reserve, Olympus and NetNet, the differences above stop being abstract. Ducat and Standard Reserve are both pre-launch; Olympus and NetNet are both live. Fixing the constraints below in writing now, before anything is live, is cheaper than adjusting them after.

MechanismDucatStandard ReserveOlympusNetNet
StatusPre-launch, design previewPre-launch, whitepaper stageLive since 2021Live
Reserve assetsStablecoins fund the floor; tokenised equities sit above itHard reserves, notably tokenised goldDiversified productive treasury, plus protocol-owned liquidityUSDG; idle balance earns in Morpho
Published valuesThree: market, backing, referenceReserves and net flowBacking per tokenTwo: RFV and NAV
Policy inputMarket against reference, filtered through a 30 minute TWAP gateNet flow through a single hooked poolRange-bound around a moving averageTreasury RFV and NAV, rules hardcoded
The floorReference has no downward path. Redemption at the lower of reference or the reserve, less 1%No holder redemption claim; an exit fee prices the door insteadBacking per token; loans borrow against itBacking per token, defended by a standing buyback
ExpansionBonds sold into a rising premium; capacity opens slower than demand arrivesIssuance multiplier steps up while inflows persistEmissions and bond salesBond sales in USDG at a discount to NAV
ContractionBonds and issuance stop together below 1.20× cover; inverse bonds and the desk pull the other way; the fee stays in the treasuryIssuance cuts at once; fees flip toward buybacks and burnsA repurchase facility, and inverse bondsThe standing buyback program
Who absorbs first loss1,000 passes, junior to every holder in every regimeFounding charters and the branches they licenseHolders; no junior trancheHolders; no junior tranche documented
SupplyExpands and contracts; 1,000,000 daily mint cap, 10.5% weekly-equivalent issuance rateHard cap, disclosed at launchNo hard capBond-issued; no hard cap documented

Ducat figures are from this paper and include proposed extensions. The other columns reproduce the source paper's September 2026 comparison, not independently verified current product specifications. None of the three is affiliated with Ducat.

25

Money with memory.

Crypto forgets quickly. Narratives rotate, premiums evaporate, liquidity migrates, and assets that traded at extraordinary valuations return to earth about as fast as they left it.

Ducat does not try to prevent any of that. It tries to remember it.

When enthusiasm arrives, the protocol converts part of it into assets. When enthusiasm leaves, the assets stay and keep earning. Backing records the result, marked down and published. And when the reserve has sustainably proved the system deserves more, the reference steps up and stays there.

Market priceis temporary
Backingis memory
Referenceis progress

The goal was never to hold the ducat at $1.00.

The goal is to make $1.00 the first chapter.

Genesis

The genesis sale opens the balance sheet this paper describes. Date, the live parameters, and how to participate will be published separately.

Stay tuned.