-
Notifications
You must be signed in to change notification settings - Fork 0
Economic Model Tokenomics
- Introduction
- Project Structure
- Core Components
- Architecture Overview
- Detailed Component Analysis
- Dependency Analysis
- Performance Considerations
- Troubleshooting Guide
- Conclusion
- Appendices
This document provides comprehensive tokenomics documentation for the $CSIG token. It covers the fixed supply, distribution, governance mechanisms, token utility, USD decoupling, Howey test compliance, and the three-stage fee routing model. It also analyzes economic incentives, trust signals, and long-term sustainability considerations.
The tokenomics specification is defined in the design document and implemented across core protocol contracts:
- Token contract: $CSIG ERC20 with minting capability on testnet and non-mintable fixed supply on mainnet.
- Staking contract: enforces agent registration stake, slash lifecycle, and token burns.
- Identity contract: anchors agent identities and status.
- Reputation contract: stores and validates 6-factor reputation scores.
graph TB
subgraph "Contracts"
CSIG["CSIGToken.sol<br/>ERC20 + Ownable"]
ST["CountersigStaking.sol<br/>UUPS + AccessControl"]
ID["CountersigIdentity.sol<br/>UUPS + AccessControl"]
REP["CountersigReputation.sol<br/>UUPS + AccessControl"]
end
subgraph "Governance"
TL["TimelockController<br/>7-day delay (mainnet)"]
end
CSIG --> ST
ST --> ID
ST --> REP
TL --> ST
TL --> ID
TL --> REP
Diagram sources
- CSIGToken.sol:12-26
- CountersigStaking.sol:28-331
- CountersigIdentity.sol:18-227
- CountersigReputation.sol:24-181
- tokenomics.md:133-146
Section sources
- README.md:55-63
- tokenomics.md:16-28
- Fixed supply and distribution: 1 billion $CSIG tokens distributed across protocol treasury (40%), team/contributors (20%), ecosystem/partners (15%), public sale/TGE (15%), and liquidity provision (10%).
- Governance timelock: mainnet transfers admin/control to a TimelockController with a 7-day delay.
- Vesting: on-chain vesting contracts with 4-year vesting and 1-year cliff for team members.
- LP lock: Unicrypt time-lock for LP tokens for a minimum of 2 years post-TGE.
- Token utility anchor: $CSIG is required for AI agent identity registration and oracle epoch prioritization.
- USD decoupling: fees denominated in USD terms and settled in $CSIG at oracle-reported spot price.
- Fee routing: three-stage model (bootstrap, transition, mature) governed by on-chain triggers.
Section sources
- tokenomics.md:16-46
- tokenomics.md:133-146
- tokenomics.md:63-74
- tokenomics.md:77-97
The tokenomics architecture ties token mechanics to protocol usage and governance:
sequenceDiagram
participant User as "User"
participant ID as "CountersigIdentity"
participant ST as "CountersigStaking"
participant CSIG as "CSIGToken"
participant REP as "CountersigReputation"
User->>ST : depositStake(didHash, minimumStake)
ST->>CSIG : transferFrom(operator, amount)
ST-->>User : StakeDeposited
User->>ID : registerAgent(agentAddress, ed25519PubKey)
ID-->>User : AgentRegistered(didHash)
User->>REP : meetsThreshold(didHash, threshold)
REP-->>User : true/false
Diagram sources
- CountersigStaking.sol:154-165
- CountersigIdentity.sol:120-141
- CountersigReputation.sol:171-173
- Total supply: 1,000,000,000 $CSIG (1 billion). Non-mintable on mainnet; testnet supports minting for onboarding and faucet.
- Distribution:
- Protocol Treasury: 40% (400M) released linearly over 5 years via TimelockController.
- Team & Contributors: 20% (200M) subject to on-chain vesting (4-year vest, 1-year cliff).
- Ecosystem & Partners: 15% (150M) released via milestone-based governance votes.
- Public Sale / TGE: 15% (150M) sold as access to protocol utility; unsold tokens are permanently burned.
- Liquidity Provision: 10% (100M) paired with USDC to create Uniswap v3 concentrated liquidity; LP tokens locked in Unicrypt for minimum 2 years post-TGE.
Trust signals:
- All vesting and treasury releases are on-chain and governed by TimelockController.
- No side agreements; no unlocked founder tokens; no multisig overrides on vesting.
Section sources
- tokenomics.md:16-28
- tokenomics.md:32-46
- CSIGToken.sol:12-26
- Mainnet: DEFAULT_ADMIN_ROLE, UPGRADER_ROLE, and parameter controls transfer to TimelockController.
- Delay: 7 days (locked at deployment, not tunable).
- Proposer: Governance multisig (initially 3-of-5, expanding post-TGE).
- Executor: Any address (permissionless execution after delay).
- Canceller: Governance multisig.
Security guarantee: hard 7-day delay ensures observation and response to malicious proposals.
Section sources
- tokenomics.md:133-146
- Team and contributors receive 200M $CSIG via on-chain vesting contracts.
- Schedule: 4-year vesting with 1-year cliff.
- Enforced by smart contracts; no verbal agreements; no overrides by multisig.
Section sources
- tokenomics.md:23-28
- 100M $CSIG paired with USDC to create Uniswap v3 concentrated liquidity.
- LP tokens locked in Unicrypt time-lock for minimum 2 years post-TGE.
- After lock expiration, governance decides among:
- Re-lock for another 2 years
- Transfer LP tokens to treasury timelock for managed liquidity
- Burn LP tokens for permanent liquidity
Option 3 is the strongest trust signal if protocol generates sufficient fee revenue.
Section sources
- tokenomics.md:32-46
- $CSIG is required to:
- Register an AI agent identity via staking in CountersigStaking.
- Pay micro-fees for oracle epoch prioritization (mainnet; not active on testnet).
- Utility anchor: “You need $CSIG to register an AI agent identity on the Countersig Network. Without it, you cannot participate.”
- Howey test compliance: purchasers acquire a tool for a specific, defined use, not an expectation of profit from others’ efforts.
Section sources
- tokenomics.md:49-60
- tokenomics.md:12
- README.md:192-207
- Fees denominated in USD terms and settled in $CSIG at oracle-reported spot price.
- Adjustable parameters:
- Minimum stake (USD target ~$10) via setMinimumStake(uint256) by DEFAULT_ADMIN_ROLE.
- Query fee (USD target ~$0.001) maintained by oracle operator set or on-chain fee registry (to be deployed).
- Targets calibrated based on Sepolia testnet data.
Section sources
- tokenomics.md:63-74
- CountersigStaking.sol:299-302
- Stage 1: Bootstrap (default at mainnet)
- Routing: 100% to validators/oracles.
- No burn; treasury subsidizes uncovered oracle operator costs.
- Stage 2: Transition
- Trigger: Governance vote after 3 consecutive calendar months where total protocol query fee revenue ≥ documented oracle operator infrastructure costs.
- Routing: 80% validators / 20% burned.
- Stage 3: Mature
- Trigger: Governance vote after Stage 2 has been active for 6 months with sustained revenue.
- Routing: 50% validators / 50% burned.
Eligibility conditions are on-chain verifiable thresholds.
Section sources
- tokenomics.md:77-97
- Slashing burn: 50% of slashed stakes sent to address(0xdead) upon slash execution; independent of fee burn stages.
- Fee burn: governance-managed token velocity control via three-stage model.
- Legal framing: slashing burn is a network security property; not marketed as deflationary or referenced in token price.
Section sources
- tokenomics.md:100-112
- CountersigStaking.sol:278-293
- Testnet: mintable by owner for onboarding and faucet use (cap of 10,000 per call).
- Mainnet: non-mintable fixed supply; governance-controlled.
Section sources
- CSIGToken.sol:12-26
- Enforces minimum stake for agent registration.
- Slashing model:
- Initiation by SLASHING_COMMITTEE_ROLE with evidence.
- 7-day challenge period; operator may dispute.
- Execution distributes 50% to dead address, 25% to victim, 25% to reporter.
- Identity marked Slashed; Reputation zeroed.
Section sources
- CountersigStaking.sol:14-27
- CountersigStaking.sol:205-293
- README.md:147-178
- Identity: anchors agent DID, stores operator, Ed25519 public key, and status (Active, Suspended, Slashed).
- Reputation: stores 6-factor score; on-chain consumers use meetsThreshold(didHash, threshold).
Section sources
- CountersigIdentity.sol:18-227
- CountersigReputation.sol:24-181
The tokenomics rely on tight coupling between CSIGToken, CountersigStaking, CountersigIdentity, and CountersigReputation, with governance enforced by TimelockController.
graph TB
CSIG["CSIGToken"]
ST["CountersigStaking"]
ID["CountersigIdentity"]
REP["CountersigReputation"]
TL["TimelockController"]
CSIG --> ST
ST --> ID
ST --> REP
TL --> ST
TL --> ID
TL --> REP
Diagram sources
- CSIGToken.sol:12-26
- CountersigStaking.sol:28-331
- CountersigIdentity.sol:18-227
- CountersigReputation.sol:24-181
- tokenomics.md:133-146
Section sources
- README.md:55-63
- On-chain staking and slashing reduce off-chain reliance on centralized authorities.
- USD decoupling mitigates deflationary pressure from rising $CSIG prices by pegging fees to USD and settling in $CSIG at oracle rates.
- Three-stage fee routing allows gradual transition to sustainable validator rewards while managing token velocity.
[No sources needed since this section provides general guidance]
Common operational and governance-related issues:
- Minimum stake adjustments: Use setMinimumStake(uint256) via DEFAULT_ADMIN_ROLE (TimelockController).
- Query fee maintenance: Managed by oracle operator set or on-chain fee registry (to be deployed).
- Slash disputes: Operators have 7 days to dispute; ensure challenge period timing is observed.
- LP lock expiration: Post-2-year lock, governance must decide re-lock, treasury transfer, or burn.
Section sources
- CountersigStaking.sol:299-302
- tokenomics.md:77-97
- tokenomics.md:32-46
$CSIG’s tokenomics are designed around strict supply discipline, on-chain governance, and utility-driven demand. The fixed supply, milestone-based ecosystem funding, and Unicrypt LP lock reinforce trust. The Howey anchor and USD decoupling align purchases with utility rather than speculation. The three-stage fee routing model ensures sustainable validator rewards and gradual token burn, supporting long-term economic stability.
[No sources needed since this section summarizes without analyzing specific files]
- Utility-first: $CSIG is required for identity registration and oracle prioritization.
- Lock-ups: 5-year treasury release, 4-year team vesting, 2-year LP lock.
- Transparency: All vesting and treasury releases are on-chain and governed by TimelockController.
- Security: Slashing burn deters malicious behavior; not a value accrual mechanism.
Section sources
- tokenomics.md:16-46
- tokenomics.md:100-112
Start Here
Core Concepts
Smart Contracts
Oracle System
Agent SDK
Integration Guides
Economic Model
Deployment & Ops
Advanced Topics