gbrain: sync converted org-mode brain files

projects/passepartout/strategy/phase-4-impact.org

@@ -0,0 +1,530 @@
+:PROPERTIES:
+:ID:       e4f5a6b7-c8d9-0123-4ef0-123456789012
+:CREATED:  [2026-05-25 Mon]
+:END:
+#+title: Phase 4 — Impact
+#+filetags: :passepartout:strategy:adoption:impact:
+
+Phase 4 spans 10⁸ to 10⁹ users. Two-tier computing is the stable
+equilibrium. See the [[id:92ccd074-04a0-4e45-a44f-9da24ea20a9b][Impact]] overview for context.
+
+**Verification:** Two-tier computing is the stable equilibrium. Verified
+instances handle all transactions of significant economic value.
+Conventional computing serves entertainment, casual use, and legacy
+systems that have not migrated — but its economic significance has
+shrunk dramatically. The surveillance advertising model that funded
+most of the conventional internet for two decades is extinct in
+regulated markets and structurally declining everywhere else. ASIC mass
+production makes verification cheaper than conventional compute for
+verified tasks.
+
+**Social protocol:** The protocol is default identity for significant
+transactions. Portable reputation, earned through verified actions and
+lost through verified breaches of trust, replaces platform-bound rating
+systems as the primary signal of trustworthiness online. The
+distinction between "corporate verified identity" and "community
+reputation" has blurred — they are the same cryptographic graph.
+
+Pseudonymity remains available — anyone can create a DID without linking
+it to a real-world identity — but the economic weight of reputation
+makes persistent pseudonyms more valuable than throwaway identities for
+high-value interactions. This is not anonymity's end; it is a shift
+from purely anonymous transactions (where neither party has any signal
+about the other) to pseudonymous accountable transactions (where each
+party has a cryptographic history they choose to reveal). Whistleblowers,
+activists, and anyone with a legitimate need for anonymity can still
+operate through ephemeral DIDs and uncensorable relay networks — the
+protocol does not require KYC or real-name verification.
+
+**Foundation internet categories:**
+
+*Messaging:*
+
+DIDComm has replaced the protocol layer of person-to-person and group
+communication. Messaging is now a native capability of your identity —
+you message someone by their DID, not by which app they use. WhatsApp,
+Signal, Telegram, and iMessage still exist as client applications, but
+the lock-in is broken: any DID-compatible client can reach any other.
+The platform is no longer the gatekeeper of who you can talk to.
+Interoperability, long the holy grail of messaging, is achieved not
+through regulation or corporate cooperation but through architectural
+unification at the protocol layer.
+
+*Websites:*
+
+Publishing has shifted from "host content on a server" to "publish a
+Note from your PDS." Websites still exist as rendering surfaces —
+browsers still render HTML — but the content they display is
+protocol-native. Domain names resolve to DIDs, not IP addresses; a
+domain seizure by a state or hosting provider does not remove the
+content. The web has become a viewing layer over protocol-native
+content, not the primary storage and identity layer it was in the 2010s.
+This is similar to how the web became a viewing layer over databases —
+the difference is that the user controls the database.
+
+*Email:*
+
+Directed Notes have replaced email for most person-to-person and
+business communication. The Note primitive — already used for
+publishing, messaging, payments, and contracts — handles asynchronous
+directed communication with end-to-end encryption, cryptographic sender
+verification, and spam-free routing (relays only deliver to subscribed
+DIDs). Email persists as a legacy protocol for organizations that have
+not migrated, similar to how fax persisted alongside email. But its
+primacy for business communication is over — a contract sent as a Note
+carries a proof chain; a contract sent as an email attachment is just
+a file.
+
+**Financial services — full transformation:**
+
+*Banking:*
+
+Banks have transformed from financial infrastructure operators to gate
+operators — the interface between fiat currency and the protocol. A
+retail bank's primary functions (safe-keeping, money movement, lending)
+are now gate primitives:
+
+- **Deposit safe-keeping:** The bank's internal ledger is a gate that
+  attests to the state of each depositor's account. A depositor can
+  query their balance through any compliant client. The "bank run"
+  risk is structurally different because the gate can attest to
+  solvency in real time.
+- **Money movement:** Sending money from one bank's customer to
+  another's is a gate-to-gate transaction. The sending gate attests
+  "this DID has the funds, the transfer is authorized, the
+  regulatory checks pass." The receiving gate attests "the funds
+  arrived, the credit is posted." Settlement is atomic — no batch
+  processing, no end-of-day reconciliation, no correspondent banking
+  chain. A cross-border transfer that took 3-5 days in 2025 now
+  settles in milliseconds at gate verification cost.
+- **Lending:** A loan application is a gate query: the borrower's DID
+  presents its verified transaction history (income, payment patterns,
+  existing debts), the lender's gate runs the underwriting rule, and
+  the loan contract executes as a protocol Note. The cost of
+  originating a loan drops from hundreds of dollars (underwriter +
+  credit bureau pull + document processing) to the marginal cost of a
+  gate rule execution.
+- **KYC/AML:** These are no longer separate functions performed by
+  compliance departments. They are gate rules applied to each
+  transaction. The cost of financial compliance for a bank drops from
+  5-15% of operating expenses to a gate subscription fee. The
+  financial compliance industry ($50B+ in the banking sector alone) has
+  collapsed to a fraction of its former size.
+
+The banking license still exists — the regulatory framework for who can
+operate a fiat-to-protocol gate — but the operational cost of being a
+bank drops so dramatically that new entrants proliferate. Community
+banks and credit unions, which struggled with compliance costs in the
+2010s and 2020s, can now compete with the largest institutions because
+the gate levels the compliance playing field.
+
+*Capital markets:*
+
+The entire trade lifecycle — order, match, clear, settle, report — is a
+sequence of gate verifications:
+
+- **Order placement:** A signed DID message from a verified investor.
+  The gate checks: is this DID authorized to trade this security? Does
+  the investor's account have sufficient funds? Is the order compliant
+  with position limits?
+- **Matching:** The exchange (still exists as a venue, not an
+  infrastructure provider) runs a matching gate rule: match buy and
+  sell orders that satisfy the same security, price, and settlement
+  terms.
+- **Clearing:** An escrow gate holds both sides' consideration until
+  settlement conditions are met. No central counterparty needed for
+  most instruments.
+- **Settlement:** Atomic transfer. The security (represented as a token
+  on the protocol with full legal provenance) and the funds exchange
+  simultaneously. No T+1 or T+2 settlement window. No DTCC or
+  Euroclear processing chain.
+- **Reporting:** The immutable proof log serves as the regulatory
+  record. Regulators query it directly rather than receiving periodic
+  filings. The cost of trade reporting drops to zero.
+
+The intermediaries that existed because of trust deficits — clearinghouses,
+custodians, depositories — have lost their structural position. The
+NYSE or LSE still exists as a listing venue and matching service, but
+the infrastructure underneath is protocol-native.
+
+Going public is a gate rule: the company's verified financials satisfy
+exchange listing requirements, the offering is structured as a
+protocol-native securities issuance, and the gate ensures ongoing
+reporting compliance. The cost of an IPO drops from millions of dollars
+to the cost of gate rule specification and audit.
+
+Secondary markets for private securities become liquid because transfer
+is a gate rule, not a legal process requiring lawyers and consent from
+every existing shareholder. A startup employee can sell vested shares on
+a secondary market with the same ease as trading public stock, subject
+to programmable lock-up gate rules.
+
+*Insurance and mutual insurance:*
+
+**Conventional insurance:** Insurers who did not adopt verification in
+Phase 2-3 are now structurally uncompetitive. The actuarial wedge has
+widened to 5-10x. A verified insurer can quote a comprehensive policy
+at a price point that an unverified insurer cannot match because their
+underwriting is based on actual verified data rather than statistical
+proxies and self-reported forms. Most commercial insurance has migrated
+to verification-based underwriting.
+
+**Mutual insurance at all scales:**
+
+Mutual insurance has matured into three tiers:
+
+- **Social mutuals (dozens to low hundreds):** Neighbourhood pools for
+  shared risk — appliance failure, minor medical bills, income
+  disruption. These are the original Phase 2 pools, now standardized.
+  Formation is a few clicks: define the contribution schedule, define
+  the claim gate rules, invite members. The protocol handles
+  everything else. These pools cover risks that no conventional insurer
+  would serve because the premium per member is too small.
+
+- **Commercial mutuals (hundreds to thousands):** Industry-specific
+  pools that compete with commercial insurers. A typical example: a
+  pool of 500 small manufacturers that covers equipment breakdown,
+  business interruption, and liability. The pool's underwriting is
+  granular to the individual member — risk tiering based on verified
+  maintenance logs, safety records, and claims history — rather than
+  the broad category pricing of conventional commercial insurance.
+  Members with better verified records pay substantially less, which
+  creates a feedback loop: safer operations → lower premiums → more
+  investment in safety → safer operations.
+
+- **Reinsurance pools (pools of mutuals):** The most architecturally
+  novel tier. Groups of mutuals pool at a higher layer to cover
+  correlated risk — a natural disaster that triggers claims across
+  multiple neighbourhood pools, or an industry-wide downturn that
+  triggers claims across multiple commercial pools. A gate rule on
+  each member mutual's claim rate triggers a payout from the larger
+  pool. This mirrors how traditional reinsurance works (Lloyd's,
+  Swiss Re), but fully automated and transparent — the proof log of
+  each member mutual serves as the financial report for the larger
+  pool's underwriting.
+
+The structural advantage of protocol-native mutual insurance over
+conventional insurance:
+
+| Dimension | Conventional insurance | Protocol mutual |
+|-----------+----------------------+-----------------|
+| Formation cost | Millions (licensing, capital reserve, compliance) | Near zero (define gate rules, invite) |
+| Transparency | Annual financial statements | Real-time proof log |
+| Exit cost | Policy cancellation, search for new carrier | DID takes verified history to any pool |
+| Competition axis | Brand + distribution + claims service | Gate rule design + contribution structure |
+| Risk tiering | Broad categories (age, geography, industry) | Granular (individual verified behaviour) |
+| Fraud detection | Investigative (after claim filed) | Structural (fraud requires collusion across verified identities) |
+
+The most important consequence: mutual insurance becomes viable for
+categories that conventional insurance cannot profitably serve.
+Microinsurance in developing markets, where the premium is measured in
+dollars per year and the administrative cost of a conventional policy
+exceeds the premium. Niche occupational risks too small for an actuary
+to model. Pre-existing conditions that conventional insurance excludes
+— a mutual pool of people with the same condition can self-insure
+because adverse selection is symmetric (everyone has the condition, so
+no one is selecting out).
+
+*Payment systems:*
+
+Card networks (Visa, Mastercard) have lost their structural position in
+the verified economy. Their product — authorization + clearing +
+settlement at 1.5-3% — is replaced by protocol-native payment attestation
+at millicents per transaction. The card networks still process
+transactions in the conventional internet tier, but the highest-value
+and highest-volume transactions have moved to the protocol.
+
+The correspondent banking system for cross-border payments has
+essentially disappeared. A verified DID in one jurisdiction sends to a
+verified DID in another jurisdiction. The exchange rate is the only
+friction. SWIFT, which processed 15,000 messages per second at its peak,
+is a legacy messaging protocol for conventional-bank-to-conventional-bank
+communication. The protocol's transaction volume has surpassed it by
+orders of magnitude.
+
+Central bank digital currencies, where they exist, operate on the
+protocol's verification layer. A CBDC gate attests to the state of each
+digital currency unit — issued by the central bank, held by a verified
+DID, transferred through gate-signed transactions. Programmable monetary
+policy becomes feasible: the central bank sets a gate rule for reserve
+requirements, and every bank's compliance is attested in real time.
+
+*Accounting:*
+
+The accounting profession has completed its transformation. The general
+ledger is a gate. Every transaction is attested. Triple-entry accounting
+is the standard — every transfer has the sender's signature, the
+recipient's signature, and the protocol's proof log entry. Reconciliation
+between two entities is a single gate query: do both attestation logs
+agree?
+
+The year-end audit is a gate rule that runs continuously. The auditor's
+annual sign-off is replaced by a cryptographic attestation: "the gate
+rule was correctly specified and the attestation log satisfies it."
+Audit opinions are real-time, not retrospective.
+
+The accounting profession has split into two tracks:
+
+1. **Gate rule designers** — accountants who specify attestation rules
+   for accounting frameworks (GAAP, IFRS, tax codes, regulatory
+   reporting). This is the growth track. A gate rule designer is part
+   accountant, part verification engineer. They define what constitutes
+   a valid transaction, a correct recognition event, or a permissible
+   reportable item.
+2. **Forensic accountants** — trace fraud through attestation logs. This
+   track shrank but has not vanished. Fraud still occurs when gate
+   rules are mis-specified or when collusion across multiple verified
+   identities creates a false attestation. The work is more technical
+   and more impactful — a fraud finding in an attestation log is a
+   mathematical proof, not a judgment call.
+
+The Big Four's audit practices are a fraction of their former size.
+Their consulting and advisory practices, now oriented around gate rule
+design and verification integration, have partially absorbed the lost
+revenue. The profession employs fewer people than it did, but each
+practitioner is more leveraged — a single gate rule designer defines
+attestation logic that applies to millions of transactions, rather than
+a single audit team checking thousands.
+
+**Governance and law — full transformation:**
+
+*Legislation — laws as gate rules:*
+
+A law that can be encoded as a gate rule is perfectly enforced. The
+question is no longer "does this transaction comply with the law?"
+It is "does this transaction pass the gate rule?" This changes the
+nature of legislation fundamentally.
+
+A regulator considering a new rule now thinks in two registers: the
+natural-language statute (subject to interpretation, litigation, and
+evasion) and the gate rule (self-executing, unambiguous, and
+enforceable at the point of action). Some laws are natural for
+encoding — transaction reporting thresholds, emissions limits, safety
+standards, tax rates. Others are not — prohibitions on "unfair or
+deceptive acts" (FTC Act Section 5), "reasonable care" standards,
+or any rule that relies on context-dependent judgment.
+
+The central legislative challenge of the protocol era is deciding what
+NOT to encode. A gate rule that perfectly enforces a bad law is worse
+than imperfect enforcement of a good one. A prohibition on "excessive
+risk-taking by banks" cannot be encoded without first defining
+excessive in terms a gate can evaluate — and that definition will be
+gamed. A gate rule cannot exercise prosecutorial discretion, grant
+jury nullification, or make equitable exceptions. The legislative
+choice to leave a law unencoded is a choice to preserve human judgment
+in its enforcement, and it should be as deliberate as the choice to
+encode.
+
+Every parliament or legislature that adopts gate rule capability also
+establishes a gate rule auditing office — analogous to a
+congressional budget office or legislative counsel, but for technical
+impact assessment. Before a bill with a gate rule is enacted, the
+auditing office runs the proposed gate rule against real transaction
+data to answer: what does it actually do? Who does it affect? Can it
+be evaded? Are there unintended consequences? This is not optional
+oversight — it is a necessary function because a gate rule's effects
+are precisely knowable only by running it, and enacting a rule without
+knowing its effects is legislative malpractice.
+
+*Law practice — contract engineering:*
+
+The legal profession has split into two tracks, more sharply than
+accounting:
+
+1. **Contract engineers** — lawyers who design gate rules that encode
+   contractual intent. Instead of writing "Party A shall deliver the
+   goods within 30 days of receiving payment," the contract engineer
+   specifies: a payment-received event triggers a delivery-required
+   obligation, tracked on a shared proof log, with automatic escrow
+   release upon attested delivery and arbitration trigger on dispute.
+   This is a fundamentally different skill from conventional contract
+   drafting — it requires understanding both the legal framework (what
+   constitutes a binding agreement) and the verification framework
+   (what constitutes a provable event). This track is the growth
+   track, absorbing talent from the contracting bar.
+
+2. **Litigators for the protocol** — lawyers who argue about what gate
+   rules mean when they produce outcomes the parties did not intend.
+   If a gate rule says "pay X when condition Y occurs" and the parties
+   disagree about whether condition Y actually occurred despite the
+   attestation, the dispute is about the attestation's validity or the
+   rule's specification, not about the facts. This track is smaller
+   than the commercial litigation bar of the platform era, because the
+   volume of disputes drops drastically. Most commercial disputes
+   never reach a lawyer — the gate rule executes according to its
+   specification, and if the specification was correct, there is
+   nothing to dispute.
+
+3. **What survives intact:** Constitutional law, criminal law (where
+   discretion, intent, and proportionality matter), family law,
+   human rights law, and any area where the law balances competing
+   interests rather than verifying compliance with rules. These
+   require human judgment that cannot be encoded as gate rules. A
+   family court deciding custody is not a gate rule problem. A
+   prosecutor deciding whether to charge is not a gate rule problem.
+   Asylum adjudication is not a gate rule problem. The protocol
+   transforms commercial and regulatory law; it does not touch the
+   core of adjudicative judgment.
+
+*Elections:*
+
+Elections have fully adopted the protocol's verification infrastructure
+for registration and tallying. The voter registry is a gate — it
+attests that a DID corresponds to a living, eligible voter in a
+specific district. The tally is a gate rule — it counts the attested
+votes and produces a result that any citizen can verify by querying
+the proof log. The "stolen election" narrative that depends on
+uncertainty about who voted or whether votes were counted accurately
+has lost its evidentiary basis — the proof log is public and any
+citizen can independently verify the count.
+
+The ballot itself goes through a privacy-preserving mix that severs
+the link between DID and vote. The protocol's relay network provides
+the foundation: votes enter through one relay, are shuffled through a
+mix network, and emerge as an anonymized set that the tally gate rule
+counts. The voter receives a cryptographic receipt that their vote
+entered the mix, but cannot prove to a third party which candidate
+they selected. Coercion resistance is structural — a vote-buyer cannot
+verify that the voter voted as instructed.
+
+Not every jurisdiction has adopted protocol-native elections.
+Authoritarian states continue to run conventional elections (or no
+elections), and the contrast between their non-verifiable outcomes and
+the protocol's transparent ones is a legitimacy problem they cannot
+solve. A state that claims an election result without a verifiable
+proof log is making a claim that the protocol's citizens can
+demonstrate is unsupported — not by accusing the state of fraud, but
+by pointing to the absence of evidence that a protocol-native
+election would provide as a matter of course.
+
+*Parliaments and legislatures:*
+
+Legislatures have adapted to the protocol era with institutional
+changes:
+
+- **Gate rule auditing offices** — independent bodies that analyze
+  proposed gate rules before enactment. Staffed by a mix of lawyers,
+  verification engineers, and domain experts. A bill that references
+  a gate rule must include the rule's specification and the auditing
+  office's impact analysis before it can be voted on. This creates a
+  new legislative bottleneck — a bill cannot be enacted without a
+  technical analysis of what the gate rule actually does.
+- **Technical question time** — legislators must understand at a
+  conceptual level what a gate rule does and what it means to encode
+  a policy preference as a verification rule. This does not require
+  every legislator to be a programmer, but it requires enough
+  technical literacy to ask "what happens when this gate rule
+  interacts with that one?" Legislatures that cannot develop this
+  capacity find themselves irrelevant to the most consequential
+  policy decisions of the era.
+- **Legacy law committees** — committees responsible for reviewing
+  existing laws to determine whether each should be encoded as a gate
+  rule, left as conventional legislation, or repealed. This is a
+  multi-decade project analogous to the codification of the common
+  law in the 19th and 20th centuries, but compressed — a state's
+  entire regulatory code must be assessed for whether each rule is
+  suitable for gate encoding, and the assessment itself is a
+  significant undertaking.
+
+*Local and national politics:*
+
+Political organization has been transformed by the protocol's structural
+properties:
+
+- **Constituent verification:** A politician can verify that a message
+  claiming to come from a constituent actually comes from someone in
+  their district. The constituent's DID attests to their residency
+  gate. This eliminates astroturfing as a political tactic — a
+  campaign that claims "thousands of constituents are angry about X"
+  can be verified or refuted by checking whether the DIDs behind the
+  messages are actually in the district.
+- **Direct democracy:** The protocol makes it technically feasible to
+  hold frequent, verifiable referenda. The coordination costs —
+  identifying the electorate, distributing ballots, collecting votes,
+  verifying the count — are eliminated by the protocol
+  infrastructure. The question of whether this is desirable is
+  political, not technical: do we want more direct democracy, or do
+  we want to preserve representative structures that filter for
+  deliberation and expertise?
+- **Campaign finance compliance:** The contribution gate rule is the
+  standard enforcement mechanism. A candidate's DID cannot accept
+  contributions that violate campaign finance law — the gate rule
+  refuses them before they arrive. Enforcement agencies shift from
+  investigating violations to auditing gate rule specifications.
+- **Organizing freedom:** A political movement can organize through
+  the protocol with the same censorship resistance as any other
+  community. The government cannot surveil the membership, disrupt
+  the coordination, or block the movement's publication. This
+  applies symmetrically to movements the government likes and
+  movements it does not. The protocol does not distinguish between a
+  democratic opposition in an authoritarian state and a hate group
+  in a democratic one — both have the same architectural protection.
+  This symmetry is the hardest political fact of the protocol era,
+  and democratic states must confront it without the ability to
+  selectively suppress.
+
+*The authoritarian dimension — the asymmetry problem:*
+
+The protocol's privacy and censorship resistance properties are
+asymmetrical: they protect citizens from government more than they
+protect government from citizens. This is by design, but it creates a
+structural tension that democratic states must navigate.
+
+A democratic state that depends on surveillance for tax enforcement,
+crime investigation, or national security finds that the protocol
+limits what it can see. A gate attestation proves that a transaction
+occurred but reveals nothing about the parties' identities beyond what
+the gate rule requires. The state cannot demand to see the full
+transaction log because the gate does not store it — the proof log
+stores attestations, not content.
+
+This is not a bug or a loophole. It is the protocol's core architectural
+choice: verification enables compliance without surveillance. A tax
+gate rule can attest that the correct tax was paid on a transaction
+without revealing the transaction's amount or the parties' identities
+to the tax authority. The tax authority learns "tax was correctly
+paid" rather than "here is all the data about every transaction."
+
+Authoritarian states face a starker choice. They can ban the protocol
+(which is visibly ineffective — citizens who can access the relay
+network retain their speech and association). They can accept the
+protocol's limits (which means their surveillance state stops working
+for citizens who use it). Or they can create their own state-controlled
+verified network (which defeats the purpose — citizens will know it
+is surveilled and treat it accordingly). All three options are bad
+from the state's perspective; the protocol is designed so that there
+is no good option for a state that wants to surveil its citizens.
+
+The asymmetry is the protocol's most important political feature.
+It is also its most vulnerable — a democratic state under sufficient
+threat (terrorism, foreign interference, pandemic) may decide that
+surveillance capability is worth sacrificing verification. The
+protocol cannot prevent a democratic state from choosing
+surveillance; it can only ensure that the choice is visible and
+deliberate rather than the default operating mode.
+
+The internet of 2010-2030 was defined by centralized platforms that
+extracted value from user data and locked users into walled gardens.
+The internet of 2030+ is defined by a protocol that gives users
+ownership of their identity, reputation, content, and data. Centralized
+platforms (Meta, Google, Twitter, Reddit, Discord) still exist as
+applications, but their lock-in is broken — portable identity and
+portable reputation mean users stay because they choose to, not because
+they cannot leave. The conventional internet does not shut down, but
+its economic center of gravity has moved: the most valuable transactions,
+the most trusted interactions, and the highest-margin services now
+operate on the verified protocol layer. The conventional internet
+becomes what the web was to AOL — the same physical infrastructure,
+but a fundamentally different economic and architectural layer on top.
+
+**Economics:** Two-tier economy is stable. Verification infrastructure
+companies are $500B-$2T in combined market cap. Protocol-based commerce
+processes trillions of dollars in annual transaction value with near-zero
+intermediation fees. The creator economy is 5-10x larger than in the
+platform era because creators keep 95% instead of 70%. The freelance
+economy is 2-3x larger because escrow and arbitration are trustless.
+The contract market is global, not jurisdictional. The labor market has
+fully restructured — "verification engineer" and "protocol integrator"
+are standard career paths. The earnings gap between protocol-sector
+workers and legacy-sector workers is a policy concern, similar to the
+college/non-college wage gap of the 20th century.