A treasury desk has two books that will not speak, and a foreign asset the home cell is not allowed to invent. The invoice is real. The commodity is real. The corridor is the only path that should move value, and it should move nothing until every rule that applies has been retrieved and has allowed the hop.
JIL Sovereign Technologies, Inc. operates this site and the Layer-1 it describes under the license from JIL Sovereign Holdings, LLC (WY). Payment integrity at jilsovereign.com is JIL Sovereign Technologies, Inc., the same company and a different product. The retail wallet is a separate host. JIL Sovereign Holdings, LLC licenses the intellectual property and does not operate this host.
01What this paper adds
Cells stay. Interoperability is added. The backbone is not replaced.
The October 2026 paper states the case for a sovereign cell: local law, a local book, proof before movement. This paper does not reopen that case. It states the rule for a hop.
Stand the cell up first, isolated. Interoperability connects it by publishing the rules the Adaptive Trust, Compliance and Execution Engine (ATCE) must retrieve. The corridor works only after that retrieve succeeds. A release that does not retrieve the rules is not a hop.
02The tree
Depth stops at sovereign, hub, annex.
A Tier 1 sovereign holds hubs. Each hub holds annexes. An annex is a leaf. It holds nothing under it. A hub under a hub is rejected. The corridor credential stays on the Tier 1 root. An annex does not open a corridor.
Class A and Class B are license prices on this host. They are not this Tier 1 and Tier 2. A separate internal package note uses Tier 1, Tier 2, and Tier 3 for a managed, regulated, and sovereign ladder. That ladder is not the tree in this paper. On this page, Tier 1 means a sovereign that can hold hubs and annexes. Tier 2 means a Shared Resource: one stablecoin, with no hubs and no annexes of its own. A layer 1 is not a Tier 2. A token is not a digital currency on this page.
| Place | What it holds | What it may not do |
|---|---|---|
| Tier 1 sovereign | The root, the corridor credential, and the sovereign rules | It does not invent the receipt rule of a foreign currency |
| Hub | Hub rules, under one sovereign | It does not open a corridor, and it does not hold another hub |
| Annex | A leaf. Local allow and local limits. A pointer when a foreign currency is in use | It does not open a corridor, and it does not replace the currency rule |
| Shared Resource | The ATCE rules for one stablecoin. A Shared Resource is a Tier 2 | It has no hubs and no annexes |
03The plug
A stablecoin stands once as a Shared Resource. An L1 is not that resource.
A digital currency on this host is a stablecoin, not a token. Ethereum, Solana, BNB Chain, Cardano, and Bitcoin are layer 1s. Each stablecoin stands once as a Shared Resource. That Shared Resource defines the ATCE rules for the stablecoin: what receipt counts, how many confirmations, and which lock or custodian is accepted. It then uses the existing Layer-1 corridor. The backbone is not modified to host that stablecoin. The Shared Resource is a plug. JIL does not charge to stand it up.
A Tier 1 registers once to use one Shared Resource, and that registration covers every hub and every annex under that Tier 1. A leaf may point at the Shared Resource and store the local allow and the local limits. It does not rewrite the stablecoin rule. The United Arab Emirates registering does not enroll Oman. Oman registers on its own, or it does not use the stablecoin. The known list is Known networks and stablecoins.
Gold and Oil on the cell demo are annexes in a worked example. They are not Ethereum, Solana, or Bitcoin, and they are not a claim that any state purchased a cell.
04Every layer, both seats
ATCE addresses the whole stack. One refusal stops the hop.
The buyer brings three rule sets: the buying Tier 1, the hub inside it, and the annex under that hub. The seller brings the same three. When the movement uses a non-JIL asset, the currency Tier 2 is a seventh rule set. ATCE retrieves each one. A missing set, a refused set, or an unpinned set does not move. The refusal is still written down.
| Seat | Rules ATCE must address |
|---|---|
| Buyer | Tier 1, hub, annex |
| Seller | Tier 1, hub, annex |
| Currency | The one Shared Resource for that stablecoin, when a stablecoin is in use |
05A policy is a chain of versions
A change appends. It does not rewrite.
Each rule has a version built in. A policy link is the tuple of tier, party, rules, and version, chained to the previous version. The first version has no previous link. Every later version names the one before it. A seller can carry a long chain. The buyer has the same form. The currency has the same form, with the party named as the asset.
A later version is a new policy number. The row already named is never rewritten. A reader who opens an old hop sees the versions that hop named, not the text a clerk typed afterwards.
06Four stores, four jobs
The name is small. The chains are write-once. The corridor CREB journal is the full listing.
| Store | What it keeps | What it refuses |
|---|---|---|
| 32-byte policy word | The policy name. A policy number. | It is not the body of the rules |
| ATCE log | That policy number | It does not log the chains |
| Policy table | The version chains for that number. Write-once. | A rewrite of a named row |
| Corridor CREB journal | The full policy text and the transaction | A later edit of an entry already written |
The corridor CREB journal lists the policy details and the transaction details. For each entry that list includes:
- When the entry was created
- Who bought, and what was bought
- Who sold
- The source of funds or of the commodity
- The history of that source
- The buyer's ATCE accreditation
- The seller's ATCE accreditation
- The policy numbers and the version chains those numbers name
That journal is the forever trust record of the hop. The ATCE log stays a number. The policy table stays the chains. A reader who needs the story opens the corridor CREB journal. A reader who needs to prove the number was not swapped opens the policy table and walks the chain.
07What is true on the chain today
The design above is the build. It is not a description of every release already on a validator.
What the code can do today is narrower. A cell can pin one 32-byte word. Once that word is pinned, a release without an ATCE context is refused. An unpinned cell can still release. A later configure can replace the word. The word still packs a short scalar gate. It is not yet a policy name looked up in a write-once table, and a release does not yet write the corridor CREB journal described here.
Two chain identifiers exist in the estate record. They are not one history. A journal that promises to keep an entry forever cannot start until the chain that holds it is one chain. This paper does not merge them.
Agreement on the recorded fleet is 10 validators in the set and 9 signing, all operated by JIL. That bounds accident and partial compromise. It is not Byzantine fault tolerance against the operator.
08Price, stated once
The tree and the plug are the meter. The published hop is unchanged.
- The first 10 hub registrations are free. Ten is not a ceiling. A hub past those 10 is allowed and is $25,000 a year on the sovereign. That is not a second license. The hub license stays $0.
- Annexes are unlimited. An annex license is $0.
- Registering a leaf in the ATCE is a charge. The dollar amount is not set, and this page does not invent one.
- Standing up a Shared Resource has no charge. A Tier 1 registers once to use one, and that registration covers every hub and annex under that Tier 1. The use amount is not printed on this page. The hop stays the published 5 basis points.
- A settled hop is 5 basis points of settled gross, paid by the initiating sovereign, until a written tariff replaces it. Movement inside a hub is 0.
- The JIL.ai ignition block sale is paused. It is not the price of this paper.
Class A remains $2,500,000 to join and $400,000 a year. Class B remains $1,500,000 to join and $250,000 a year. Those are the sovereign licenses. They are not a fee for Ether.
09What this paper will not claim
- It will not claim a granted patent. Patent pending only.
- It will not claim that Ethereum, Solana, or Bitcoin settlement is live.
- It will not claim a regulator has approved the corridor.
- It will not claim the cell demos are a national deployment. They are a worked example at demo.jilsovereign.net/demo.
- It will not quote a basis-point rate other than the published hop of 5, and the 0 inside a hub.
- It will not say a court will admit the journal.
Keep the cell. Publish the rules. Retrieve them on the hop. Name the policy. Keep the chains. Write the transaction once, in full, and leave it.
If that is the problem in front of the desk, the next step is a briefing scoped to the jurisdiction, the license class, and the corridors actually needed. The first paper remains the case for the cell.