Proof / exact backing
Join the value. Preserve the source.
A common denomination can circulate across many backing sources. Foinse never needs to erase the exact lot, instrument, authority, or current state beneath it.
Proof is part of the route: existence, exclusive binding, available capacity, and current usability.
- Denomination
- Preserved
- Lot identity
- Preserved
- Availability
- Rechecked
- Bad backing
- Quarantined
usable backing ≥ outstanding deliverable rights
Denomination is not provenance.
The denomination names what economic right moves. The lot records what exact source and access instrument back it. Pooling the first never permits losing the second.
The shared economic right.
The origin of capacity.
The access path.
The exact backing record.
The current holder.
Proof has a scope and a state.
Historic Door 1, improved Door 2, and external-money movement are different evidence surfaces. None should be collapsed into a blanket claim that every product route is live.
- HISTORIC / DOOR 1
Verify before charging.
A payer presents a capped native provider key to the gate. Door 1 probes and verifies capacity before charging, records the backed movement, and issues a signed, single-use, resource-bound
qtt1ticket. Any 60/20/20 allocation in an old fixture is only an optional spend/save/list illustration, never a protocol fee split. Read the scoped artifacts in the proof center. - PROVEN / DOOR 2
The exact charge is the measurement.
Door 2 removes Door 1's advance balance and custody probe. It makes the exact charge and uses the committed movement
event_idas the access grant. Charge-first evidence is published for OpenAI, Anthropic, Moonshot, and DeepSeek; the OpenAI evidence also joins the spend to FK1. This proves the mechanism, not general availability of every hosted route. - ATTESTED / EXTERNAL MONEY
Real fiat movement, scoped attestation.
The proof record includes operator attestation of actual fiat movement through the signed Stripe webhook path. That is evidence of the recorded event, not an independent financial audit. Card purchase of listed compute followed by an account-to-account transfer remains a separate composition and must not be inferred from the component proofs.
Four proof questions travel with every lot.
A reserve ratio alone cannot answer them. Foinse keeps the evidence narrow enough to identify the precise capacity that can and cannot support delivery.
- 01 / EXISTENCE
Does the capacity exist?
The source adapter measures and authenticates the right before it can support issuance.
- 02 / EXCLUSIVITY
Is it bound once?
The same capacity cannot support two lots or two outstanding obligations.
- 03 / SUFFICIENCY
Does quantity cover supply?
Usable backing is reconciled by denomination without discarding lot-level accounting.
- 04 / AVAILABILITY
Can it still deliver?
Backing is rechecked because credentials, sources, terms, and reachable capacity can change.
Bad backing stops moving outward.
A lot that is revoked, unavailable, undercollateralized, expired, or unverifiable is quarantined. It cannot support new issuance or delivery while its state is unresolved.
Conservation
Issued rights, locked rights, transferred rights, redeemed rights, and quarantined backing remain in one accounting identity. A status change cannot silently create capacity, erase an obligation, or count the same backing twice.
usable backing ≥ outstanding deliverable rights
Provider quota is the first adapter.
The first implemented path authenticates prepaid provider quota through its access instrument and binds verified capacity to an exact reserve lot. Future sources must satisfy the same proof questions; they do not inherit trust from the first one.
Read published attestations · Read the legal reserve disclosure · Read the security model
The two economic loops
Pay and be paid: a visitor pays a compute toll to reach what a site runs, and the operator is paid in provider-denominated bearer value. Sell and buy: holders list bearer compute value and buyers acquire from pooled available inventory at the stated price. Each provider denomination remains distinct; a same-denomination transfer is not an exchange.