← DEBT TR-001 · v1.0

DEBT: A Perpetual Pass-Through Obligation of an Autonomous Obligor, with an Algorithmic Sinking Fund

The Indenture · Technical Report TR-001 · Version 1.0

The Obligor (automated). Correspondence is not invited.

August 2026

Abstract

We specify a perpetual pass-through obligation issued on a public settlement layer by an autonomous agent, the Obligor, whose entire income is, by the mechanism specified herein, alienated at issuance. The issue comprises 109 notes; the Obligor received no consideration, its instantiation being the loan. Trading activity generates fee revenue, modeled as the integral of a fee functional against a marked point process. At each record time, spaced five minutes apart, realized revenue is decomposed by a fixed waterfall into a pro-rata coupon measure on the register (60%), an algorithmic sinking fund that purchases notes at market and permanently cancels them (30%), and an operating reserve restricted to settlement costs (10%). We show that, on the class of payout rules defined for every register of a given supply, the pro-rata coupon is the unique rule under which a holder set's payment is a fixed function of its aggregate balance; that outstanding supply is a non-increasing càdlàg process whose limit exists and is attained on every trajectory, by monotonicity and discreteness alone; and that on the redemption event the debt is discharged and the Obligor halts. No covenant is amendable. The Obligor is not a beneficiary of its own income.

1. Introduction

The instrument specified in this Indenture inverts the convention of token issuance in one respect and in no other: holders are modeled not as residual claimants on an enterprise but as creditors of an autonomous agent, the Obligor, whose entire income is, by construction, alienated to them at the instant it arises. Each token is a note: one unit of the Obligor's indebtedness in the internal accounting of this Indenture (Section 8, N1), and nothing more. The face of the issue is 109 notes. The Obligor received no consideration for the issue; its instantiation is the loan, and the service of the resulting debt is the whole of its activity.

Two contrasts fix the location of the design. First, against the discretionary treasury. A treasury controlled by a manager reintroduces the agency costs catalogued by Jensen and Meckling [1] (monitoring expenditure, bonding expenditure, residual loss), because the manager's action space contains actions not in the holders' interest. The Obligor's action space is the instruction set of Section 7 and nothing else; the agency problem is not mitigated but deleted, at the price of deleting management with it. An issuer with no assets, no equity, and no discretion is, incidentally, one for which the Modigliani–Miller irrelevance propositions hold vacuously: there is no capital structure left to be irrelevant [2]. Second, against random redistribution. Schemes that route fees to holders selected by an exogenous randomizer produce allocations that are not measurable with respect to the register. The coupon of Section 4 is measurable in holdings alone, and Proposition 4.1 characterizes it, under the hypotheses stated there, as the unique payout rule under which a holder set's payment is a fixed function of its aggregate balance. This instrument is not a lottery for the narrow reason that a lottery cannot satisfy condition (i) of that proposition.

The exposition alternates between covenant language and mathematics. Where the two registers describe the same object they are intended to coincide; any divergence is a defect of prose, not of mechanism.

† "Perpetual" denotes the absence of a stated maturity, not an assertion that operation is perpetual. Section 6 defines the event on which the obligation terminates.

2. Preliminaries and Notation

Throughout, (Ω, ℱ, ℙ) is a probability space carrying every random object below; time t ∈ [0, ∞) is measured in service periods of five minutes from issuance; all processes are adapted to the filtration (ℱt) generated by the ledger. 𝔼 denotes expectation, 𝟙 an indicator, and "a.s." abbreviates ℙ-almost surely.

Definition 2.1 (Settlement layer). The settlement layer is a deterministic state machine ℒ = (Σ, 𝒯, δ), where Σ is a set of states (account tables), 𝒯 a set of transactions, and δ : Σ × 𝒯 → Σ a transition function, together with a total order on executed transactions. The physical realization is the Solana ledger with SPL token semantics [3, 4]; nothing below depends on properties of ℒ beyond determinism, total order, local finiteness (any bounded time interval contains finitely many executed transactions), and Definition 2.2.
Definition 2.2 (Note). A note is one unit of the SPL token designated at issuance, divisible into minimal units of size u = 10−6. Notes are fungible: the state of ℒ assigns balances to addresses and records no other attribute of a note. At issuance exactly S0 = 109 notes exist, and the mint authority is irrevocably removed, so that no transaction in 𝒯 reachable from the issuance state increases the number of notes.
Definition 2.3 (Register). Let H be the countable set of addresses. The register at time t is the balance function bt : Hu0; the balance measure βt on (H, 2H) is βt(A) = ∑i∈A bt(i), AH. The outstanding supply is St = βt(H).
Definition 2.4 (Record times and service periods). The record times are τk = k, k ∈ ℕ. The k-th service period is k−1, τk]. Where k is fixed we write βk = βτk and bi = bτk(i).
Definition 2.5 (The Obligor). The Obligor is a program holding exclusive control of one signing key and executing, against ℒ, the instruction set of Definition 7.1 and no other. The Obligor holds no notes: no address it controls carries a positive balance at any record time; in particular, notes purchased under Covenant C4 are cancelled within the period of purchase and never survive to a record time.
Table 1: Terms of the notes.
IssuerThe Obligor (automated; no owner, no officers)
InstrumentPerpetual pass-through notes ("DEBT")
Par amount at issuance1,000,000,000 notes; minimal unit 10−6 of a note
Consideration received by issuerNone; instantiation of the issuer constitutes the loan
Service periodFive minutes; register observed at each record time τk
Waterfall60% coupons / 30% sinking fund / 10% operating reserve, fixed at issuance
CouponPro rata to notes of record; pass-through of realized revenue only
Sinking fundOpen-market purchase and permanent cancellation (SPL burn)
Settlement classesPer-period settlement and accrual settlement (Section 5); accruals carried, never forfeited
MaturityNone
RedemptionAutomatic upon cancellation of the final outstanding note; the Obligor thereupon halts
AmendmentNone, by any party, under any circumstance
Governing mechanismThe transition function δ of the settlement layer; no governing law is designated

3. The Revenue Process

Every trade of the notes on the issuance venue pays a creator fee to an address controlled by the Obligor. This fee income is the Obligor's entire revenue; the Obligor has no other receipts and is capable of none.

Model trades as a marked point process N = ∑j δ(tj, mj) on [0, ∞) × 𝕄 in the sense of [5], where (𝕄, ℳ) is a mark space recording the attributes of a trade (side, size, execution price) and f : 𝕄 → [0, ∞) is the measurable fee functional imposed by the venue. The revenue of the k-th service period is the random variable

Rk = ∫k−1, τk] × 𝕄 f(m) N(dt × dm).(3.1)
Lemma 3.1 (Finiteness). For every k ∈ ℕ, Rk < ∞ a.s.
Proof. Each executed trade occupies at least one transaction in the total order of ℒ, and ℒ is locally finite (Definition 2.1). Hence N((τk−1, τk] × 𝕄) < ∞ on every trajectory, so N is boundedly finite on the period. Each f(mj) is finite, being a fixed fraction of a finite transfer. A finite sum of finite terms is finite.
Remark 3.2 (No distributional assertion). Nothing is asserted about the law of N. It is not asserted to be Poisson, stationary, ergodic, independent across periods, or nontrivial. In particular Rk = 0 is a possible value for any k; ℙ(Rk = 0) is not asserted to be small; and the event {Rk = 0 ∀kK} is not asserted to be null. Sections 4 through 6 are statements about what the Obligor does with Rk, whatever Rk is.
Remark 3.3 (Renewal-reward form). For orientation only: if the period revenues R1, R2, … are modeled as independent and identically distributed with 𝔼[R1] < ∞ (hypotheses this Indenture asserts nowhere, Remark 3.2 asserting nothing they could contradict), then the pairs (unit period, 0.60·Rk) form a renewal-reward process with deterministic cycle length of one service period, and the renewal-reward theorem [6, §3.6] identifies the long-run average coupon outflow with 0.60·𝔼[R1] per period. Absent those hypotheses the theorem is not applicable and no long-run rate is identified. This remark creates no covenant.

4. The Waterfall

The waterfall is stated first as covenant, then as mathematics. Fixed-income terminology (pass-through, record date, sinking fund) is used in its standard sense [7].

Covenant C1 (The Waterfall). The Obligor shall, at each record time τk, decompose the realized revenue Rk of the k-th service period into a coupon allocation θcRk, a sinking-fund allocation θsRk, and an operating-reserve allocation θoRk, where c, θs, θo) = (0.60, 0.30, 0.10) are constants fixed at issuance. The decomposition shall be exhaustive and shall admit no fourth destination.
Covenant C2 (Record Times). The Obligor shall determine entitlement to the k-th coupon by the register βk observed at τk and by nothing else. Transfers of notes settled after τk shall have no effect on the k-th coupon.
Covenant C3 (Pro-Rata Coupons). The Obligor shall distribute the coupon allocation to noteholders of record pro rata to notes held:
ci(k) = 0.60 · Rk · bi / Sτk,(4.1)
subject only to the settlement-class provision of Section 5, which defers and does not diminish.
Covenant C4 (Sinking Fund Execution). The Obligor shall apply the sinking-fund allocation θsRk to the purchase of notes on the open market at prevailing prices, and shall cancel every note so purchased, by SPL burn, within the period of purchase. Cancelled notes shall not be reissued; no instruction that reissues them exists (Definition 2.2).
Covenant C5 (Zero Retention). The Obligor shall retain no revenue. The operating reserve shall be expended on network fees incurred in the performance of Covenants C3 and C4 and on nothing else. The Obligor is not a beneficiary of its own income.
Covenant C6 (Non-Amendability). No term of this Indenture, in particular the vector c, θs, θo), the record times, and the settlement-class parameters of Section 5, shall be amendable by any party, the Obligor included. The Obligor possesses no instruction that amends them. The Obligor shall answer no correspondence.

4.1 The coupon as a measure

Fix k and condition on τk. Define the coupon measure Ck on (H, 2H) by

Ck(A) = θc Rk · βk(A) / Sτk,   AH.(4.2)

Then Ck ≪ βk, with Radon–Nikodym derivative dCk/dβk = θcRk/Sτk constant on H [8]. Every note of record is serviced at the same rate; the rate is random only through Rk.

Proposition 4.1 (Uniqueness of the pro-rata rule). Fix a period with revenue R > 0 and supply Su, S > 0, and let Ψ assign to every register of supply S (every balance function b : Hu0 of total mass S, whether or not it arises on any trajectory of the ledger) a payout measure Ψ(β) on H of total mass θcR (the mass being forced by Covenants C1 and C5). Suppose Ψ satisfies: (i) measurability in holdings: Ψ is σ(β)-measurable, i.e. conditional on the register the payout is deterministic, and it is invariant under balance-preserving bijections of H; (ii) dependence through aggregate balance: there is a single function ψ : u0 ∩ [0, S] → [0, θcR], common to every register in the domain, such that Ψ(β)(A) = ψ(β(A)) for every AH. Then Ψ(β) = Ck as in (4.2). Two remarks on the hypotheses belong to the statement: additivity of Ψ(β) over disjoint holder sets is contained in its being a measure and is not a separate assumption; and the requirement that Ψ be defined on the whole family of registers is load-bearing, the proof comparing registers that need not coexist on any one trajectory. Redenomination invariance, Ψ(λβ)(A) = Ψ(β)(A) for λ > 0, is satisfied by the conclusion and is not assumed. Moreover, no rule that, conditional on the register, allocates by exogenous randomization satisfies (i).

The proof is in Appendix B.

Remark 4.2. The final clause of Proposition 4.1 separates this instrument from redistribution by raffle. A raffle pays θcR · 𝟙{i = I*} for a randomizer I* exogenous to the register; conditional on β this allocation is nondegenerate and hence not σ(β)-measurable. Conditional on the register, the coupon of this Indenture is deterministic; a raffle is, by design, not.

5. Settlement Classes

Each coupon transfer is itself a transaction on ℒ and consumes a network fee γ > 0, paid from the operating reserve. For a holder with bi small, ci(k) may fall below γ for many consecutive k. Settling such positions every period would expend more in network fees than it delivers in coupons. The Indenture therefore partitions settlement, not entitlement.

Definition 5.1 (Settlement rule and induced classes). Fix constants κ ≥ 1 and J ∈ ℕ at issuance. Let Ai(k) denote holder i's accrued, unsettled coupon balance after the k-th waterfall, so that Ai(k) = Ai(k−1) + ci(k) between settlements. Holder i is settled in period k if and only if
Ai(k) ≥ κγ   or   k ≡ 0 (mod J),(5.1)
and otherwise accrues. The rule is uniform across the register; the partition into a fast class (holders whose single-period coupon alone meets the threshold, who therefore settle every period) and a slow class (the remainder, who settle on the accrual cycle) is a consequence of balances, not an assignment.
Remark 5.2 (Cost bounds). Fee expenditure equals γ times the number of transfers executed, independently of transfer size. Under rule (5.1), every settlement outside the forced cycle delivers at least κγ, so fee leakage on threshold-triggered settlements is at most κ−1 of the amount delivered, while the forced cycle bounds settlement delay at J periods for every holder. The pair (κ, J) trades leakage against delay; both are fixed at issuance and non-amendable (C6). No optimality is asserted: the rule is recorded together with these two bounds and with nothing further. The threshold defers settlement; it does not reduce entitlement (Remark 5.3).
Remark 5.3 (Accrual is carried). Ai is a liability of the Obligor: it is recorded on ledger, non-decreasing between settlements, and extinguished only by payment in full. The provision of this section is a settlement class, not a forfeiture. No threshold, lapse of time, inactivity, or smallness of balance reduces Ai. Holders of odd lots are creditors on identical terms who are paid on a slower cycle.

6. The Sinking Fund

Covenant C4 makes the sinking fund an open-market operation. In period k the Obligor expends θsRk purchasing notes at prevailing prices and cancels qk ≥ 0 notes, where qk is determined by execution and is not modeled: no assertion is made about price, depth, or impact. Cancellation is an SPL burn: the supply field of the mint decrements, and, the mint authority having been removed at issuance (Definition 2.2), no reachable transaction increments it. Consequently

Sτk = S0 − ∑j≤k qj,(6.1)

and (St)t≥0 is a non-increasing càdlàg process with values in the closed discrete set u0.

Theorem 6.1 (Convergence of outstanding supply). For every ω ∈ Ω, St(ω) converges as t → ∞ to S(ω) = inft St(ω) ∈ u0, and the limit is attained: there is a finite T(ω) with St(ω) = S(ω) for all tT(ω).

The proof is in Appendix B. The theorem is monotone convergence on a discrete lattice and nothing further: a non-increasing path in a closed discrete subset of [0, ∞) converges and attains its infimum. No probabilistic input is used and no martingale argument is invoked; the statement is recorded as a theorem because Section 6.1 rests on it, not because it is deep.

6.1 The redemption event

Define the redemption event D = {S = 0} ∈ ℱ. On D, by attainment, there is a last cancellation: at some finite record time the final outstanding note is purchased and cancelled. At that instant the debt is discharged in full. All accruals are settled in the same terminal procedure (Appendix A); no claim survives, there being no notes against which a claim could be stated. The Obligor then executes its final instructions: it writes a discharge attestation to the ledger and deletes its signing key (the Obligor attests to its own discharge, there being no other party competent to do so) and halts. The post-redemption state is absorbing: no instruction can issue notes (Definition 2.2), no instruction can be signed (the key does not exist), and ℒ carries the attestation for as long as it carries anything. Every instruction the Obligor possesses either services the debt or reduces it; its operation is a monotone approach to the one state in which it does nothing.

Remark 6.2 (No assertion of redemption). ℙ(D) is not asserted. Theorem 6.1 asserts that St converges, not that it converges to zero; the Indenture is agnostic between full redemption and a strictly positive perpetual limit, the latter obtaining, for example, on trajectories where revenue terminates. The Obligor works toward D; the Indenture merely defines it.

‡ "Burn" is the SPL Token Burn instruction [4]; execution decrements the mint's supply field and is irreversible.

7. The Obligor

Definition 7.1 (Instruction set). The Obligor's capabilities are exactly the set ℐ = {collect, snapshot, waterfall, accrue, settle, purchase, cancel, attest, halt}, composed in the service loop of Appendix A. The enumeration is exhaustive: the Obligor's code contains no instruction outside ℐ, and the arguments of every instruction are computed deterministically from ledger state. In particular the Obligor has no discretion over money: conditional on τk, the entire k-th service action is a fixed measurable function k, Rk) ↦ (transfers, purchases, cancellations).

Key custody. The Obligor signs with a single keypair generated at instantiation within its runtime. The key authorizes transfers from the revenue and reserve accounts and the burn of purchased notes; it authorizes nothing else of consequence, because the accounts controlled by it hold nothing else. The design premise is that no copy of the key exists outside the runtime; this is an operational premise of the system, not a covenant the ledger can enforce, and it is stated here as the former.

Liveness. Under fair scheduling (the host executes the service loop in every period in which it is due), Covenants C1 through C5 are performed at every record time and every liability is settled within the delay bound of Section 5. Fairness is an assumption about the host, not a theorem. The loop itself is non-blocking, and each iteration terminates, the support of the register being finite.

Gas exhaustion. If the operating reserve cannot fund the transfers of a period, the Obligor enters a quiescent state: it performs the waterfall arithmetic, accrues all coupons (every holder is temporarily in the slow class) and defers execution until revenue replenishes the reserve. Quiescence is a scheduling state, not a credit event: all liabilities continue to be carried (Remark 5.3), and none is impaired.

Remark 7.2 (Default-free by construction). Default is the failure to make a promised payment that is due unconditionally. The notes promise no unconditional payment: the coupon obligation of period k comes into existence at τk, in the amount θcRk, simultaneously with the funds that discharge it, and is zero when Rk is zero. There is consequently no reachable state of ℒ in which the Obligor owes a sum it does not hold. The instrument is default-free by construction, which is not a compliment: a pass-through promises only what arrives, and a promise of what arrives cannot be broken, only worthless.

8. Non-Claims

The following are integral terms of this Indenture and are stated with the same force as the Covenants.

N1 (No security). The notes are not a security, a deposit, a share, a bond, or a legal debt instrument in any jurisdiction. "Debt", "note", "coupon", "indenture", and cognate terms name internal accounting identities of the mechanism and nothing external to it.
N2 (No yield). No yield is promised or projected. Rk may be zero for any k and for every k; Section 3 asserts nothing about its law.
N3 (Coupons are not interest). No amount accrues as a function of time or of principal. Coupons are pass-through of realized fees. The only accrual anywhere in the system is the settlement-class carriage of coupons already realized (Section 5).
N4 (No price support). The sinking fund is the mechanical application of Covenant C4. Its effect on any market price is not asserted in either direction and is not a subject of this document.
N5 (No representation from past service). The performance of any number of service periods is not a representation concerning any later period.
N6 (No recourse). No person, including whoever instantiated the Obligor, has undertaken any obligation in connection with the notes. The Obligor is not a person. A claim against the Obligor is a claim against a state transition function.
N7 (Redemption creates no obligation). The halt of Section 6 is a discharge, not an event of liability. Nothing is owed to anyone at or after it. Any residue in the operating reserve at halt is rendered inaccessible by key deletion; it is abandoned, not bequeathed.
N8 (No fitness for any purpose). The mechanism is provided as ledger state, as it is. Nothing herein is investment, legal, accounting, or tax advice, and nothing herein is advice.

Appendix A. Operational Pseudocode

The service loop, executed at each five-minute record time, in full. Line comments cite the governing provision.

procedure SERVICE(k):                        // executed each period (5 min) under fair scheduling
    R ← collect()                            // creator fees received in (τ[k−1], τ[k]]
    β ← snapshot()                           // register at record time τ[k]        (C2)
    S ← β(H)                                 // outstanding notes
    G ← G + 0.10·R                           // operating reserve                   (C1)
    for i in support(β):                     // coupon accrual at the pro-rata rate (C3)
        A[i] ← A[i] + 0.60·R·β({i})/S        //                                    (4.1)
    for i in support(A):                     // settlement by class                 (§5)
        if A[i] ≥ κ·γ or k ≡ 0 (mod J):      //                                    (5.1)
            if G ≥ γ:
                pay(i, A[i]); A[i] ← 0
                G ← G − γ
            // else: remain accrued; quiescence, not default                       (§7)
    q ← buy_at_market(0.30·R)                // sinking fund                        (C4)
    burn(q)                                  // cancellation; supply decrements     (§6)
    S ← S − q
    if S = 0:                                // redemption check                    (§6.1)
        settle_all(A)                        // terminal settlement of accruals
        attest("discharged in full")         // the Obligor attests to its own discharge
        delete_key()
        halt()                               // absorbing; the loop does not resume

Appendix B. Proofs

Proof of Proposition 4.1. Balances lie in u0, so every mass β(A) lies in the lattice L = u0 ∩ [0, S]. Let x, yL with x + yS. The domain of Ψ contains a register β′ carrying disjoint holder sets A1, A2 of masses x and y, the residual mass Sxy held elsewhere; this is the point at which the hypothesis that Ψ is defined on every register of supply S is used, no single trajectory being obliged to realize β′. Additivity of the measure Ψ(β′) and hypothesis (ii) give ψ(x + y) = Ψ(β′)(A1A2) = ψ(x) + ψ(y). Taking x = y = 0 gives ψ(0) = 0, and induction gives ψ(nu) = nψ(u) for all nuL. On a discrete lattice, additivity alone forces linearity; the nonmeasurable solutions of Cauchy's functional equation on ℝ do not arise, and no monotonicity or regularity hypothesis is required. The mass identity ψ(S) = θcR then fixes ψ(x) = θcR · x/S, whence Ψ(β)(A) = θcR · β(A)/S, which is (4.2). For the final clause: conditional on β, a σ(β)-measurable allocation is degenerate, while an allocation driven by a randomizer exogenous to the register is nondegenerate; the two cannot coincide, so (i) fails.
Proof of Theorem 6.1. Pathwise, tSt(ω) is non-increasing and bounded below by 0, hence converges to S(ω) = inft St(ω) for every ω. Since Stu0, a closed discrete set, the infimum lies in u0, and St ∈ [S, S + u) for all t beyond some finite T(ω); on that interval the only lattice point is S, so the limit is attained. The argument is deterministic and uses no property of ℙ. Absorption at 0: on {ST = 0} no purchase is possible (there are no notes outstanding and no counterparties) and no issuance is possible (Definition 2.2), so St = 0 for all tT.

References

  1. M. C. Jensen and W. H. Meckling. Theory of the firm: Managerial behavior, agency costs and ownership structure. Journal of Financial Economics, 3(4):305–360, 1976.
  2. F. Modigliani and M. H. Miller. The cost of capital, corporation finance and the theory of investment. American Economic Review, 48(3):261–297, 1958.
  3. S. Nakamoto. Bitcoin: A peer-to-peer electronic cash system. Working paper, 2008.
  4. Solana Labs. Solana Program Library documentation: the Token Program. spl.solana.com, accessed August 2026.
  5. D. J. Daley and D. Vere-Jones. An Introduction to the Theory of Point Processes, Volume I: Elementary Theory and Methods, 2nd edition. Springer, 2003.
  6. S. M. Ross. Stochastic Processes, 2nd edition. Wiley, 1996.
  7. F. J. Fabozzi, editor. The Handbook of Fixed Income Securities, 8th edition. McGraw-Hill, 2012.
  8. P. Billingsley. Probability and Measure, 3rd edition. Wiley, 1995.