# The Checklist A promised supply limit is only as fixed as the people keeping it, so money nobody can make more of has to be designed the other way: close every route by which power can reach the money. Each property follows from a route of attack, fiat fails by design, gold failed at custody, and Bitcoin passes the list if, and only if, it stays decentralised and secure. - Date: 2026-07-15 - Canonical: https://thenaturalstate.org/essays/the-checklist/ --- Say we had to design money that nobody, however powerful, could make more of. It would need certain properties, each one there for a reason. Then the question is what, if anything, satisfies the list. You can't get "nobody can make more of it" by writing it down. A promised supply limit is only as fixed as the people keeping the promise, and monetary history is mostly a list of those promises breaking. Rome put less silver in its coins. Governments on the gold standard suspended redemption the moment keeping the promise got expensive. Every fiat currency [government money whose supply and rules are set by policy] has an institution whose job is to manage the supply. So the design brief has to go past "pick something scarce" to "remove every route by which the most powerful actor in the room can reach the money". Do it that way and the properties stop being a wish list. Each one exists to close a specific route of attack. ## Why the brief matters at all Money is stored time. A nurse in Leeds saving £300 a month is storing hours of her life to spend later. When someone makes more of the money, they move purchasing power from everyone holding it to themselves, without asking, because the new units buy real things before prices adjust. So this question decides whether saving works at all, and whether the gains from technology reach people as lower prices or get absorbed on the way through. ## The five routes, and the properties that close them **Route 1. Issue more units.** Kings did it with a mint, central banks do it with a keyboard. The close is brutal. No issuer at all. The supply schedule has to be an automatic rule that's nobody's job to administer, because any administrator, however constrained or well meaning, holds a lever, and levers get pulled in emergencies. The rule also has to hold against effort. If ten times the effort produced the money faster, a state could outspend everyone. So production has to get automatically harder as more effort chases it, which keeps issuance on schedule no matter who shows up with how much power. **Route 2. Change the rule.** A fixed rule enforced by a small committee is fixed only until the committee finds it inconvenient. That's what happened to gold convertibility in 1933 and 1971. The close is distributed enforcement. Every user must be able to hold the complete rulebook and automatically reject money that breaks it, and anyone must be free to join as an enforcer with no gatekeeper deciding who qualifies. Then changing the rules requires near-universal voluntary agreement, because a powerful group that "upgrades" the rules alone just creates a separate currency the rest of the network ignores. **Route 3. Multiply claims instead of money.** You don't need to counterfeit gold if everyone's gold sits in your vault and trades as your paper. The claims become the money, and claims can be printed. Two properties close the route together. The money must be a bearer asset [something you own by holding it, with no custodian in between], so you don't need a custodian. That is self-custody: you hold the money itself, not a claim on someone who holds it for you. And verifying the real thing must cost nearly nothing, so dilution has nowhere to hide. If verification is expensive, it centralises into a few trusted auditors, and the auditors become the new vault. **Route 4. Rewrite the record.** Purely digital money has a special problem, because digital information copies for free. Something physical has to anchor it. Writing the ledger has to cost real energy while checking the ledger stays nearly free. Then rewriting history means redoing all the accumulated work faster than the rest of the network combined, and cheating becomes a losing trade rather than a forbidden act. Systems that skip the physical cost and let the largest holders vote on the rules haven't removed the committee. They've rebuilt it, weighted by wealth. **Route 5. Seize it.** Scarcity you can confiscate is scarcity that serves whoever holds the guns. In 1933 the US called in private gold, and the vaults made enforcement easy. The close is money you can hold as pure information. If value can be carried as words in your head across a border, mass seizure stops working. You can raid a vault once. You can't raid millions of memories. There's a sixth, quieter requirement. The money must be practical at every scale. Divisible enough to buy coffee, portable enough to settle across an ocean, durable forever. This is a security requirement. Impracticality reopens route 3. Gold's physics is the proof, because you couldn't slice it for groceries or ship it cheaply, so people wrapped it in paper and parked it in vaults, and the wrapping is where it was captured. And these properties interlock. Scarcity without distributed enforcement is a promise. Enforcement without cheap verification decays back into trust. Verification without self-custody just documents how your custodian is diluting you. Self-custody without divisibility drives people back to custodians. Take any one away and what's left stops being money nobody can make more of, even when the thing itself stays scarce. ## The audit Fiat fails by design. Loaned into existence, it must expand to keep yesterday's debts serviceable, and money pegged to it, like a dollar stablecoin, inherits the design. It's the thing the brief exists to escape. Gold is the near miss, and the most instructive failure. It very nearly passes route 1, because you can't will gold into existence. You have to dig it up at real cost. What it lacks is the automatic brake. Nothing holds gold's issuance to a schedule, so more effort still means more gold. But it fails cheap verification, divisibility, and portability, and those failures forced it into vaults and paper claims, and the claims were multiplied and the rules changed. In practice the metal stayed scarce. What broke was custody, and once the paper was doing the work of money, the money's supply broke with it. And a physical money tends to re-run that film, because its physics forces intermediaries between people and the asset. Most other cryptocurrencies fail the list by choice. They trade away distributed enforcement to gain speed or features, and a foundation that can pause or patch the chain is an issuer in waiting. Stake-based systems hand the rulebook to the largest holders. And anyone can copy Bitcoin's code tonight, which proves the cap was never what made it scarce. The unit is scarce because one specific network exists, made of enforcers, holders, and accumulated energy history. A copy starts with none of that. A central bank digital currency [money the central bank issues direct to the public, on its own ledger] is the brief inverted. Every route held open, plus programmability, so the issuer can decide how much money exists and what yours is allowed to do. Which leaves one artefact. Bitcoin is the list, item by item. No issuer, just a schedule that stops at 21 million coins, enforced by everyone who runs a node [software that checks every transaction against the rules]. Production that gets harder as more effort chases it. A rulebook a home computer can enforce, and a supply anyone can audit in full. A bearer asset held as twelve words. A ledger anchored to energy through proof of work [spending real electricity to write each block, so faking history costs more than it pays]. Divisible to a hundred million units per coin, and settled globally in minutes, with faster payment layers on top. Durable in the way information is durable, because every node keeps a full copy of the record. Bitcoin satisfies the list if, and only if, it stays decentralised and secure. The design closed the five protocol routes, and seventeen years of attack haven't opened one. The biggest route still open is social. If most coins end up pooled inside a few regulated custodians, and most people keep measuring their life in pounds, the old lever gets rebuilt one layer up, paper claims on bitcoin the way there were paper claims on gold. The defence is people holding their own keys, running nodes, and actually using the thing. So the design guarantees nothing. It makes the guarantee available, and keeping it is a job. ## Arguing back "Just run fiat with better people." Incentives beat intent. Whoever holds the lever eventually pulls it, usually in an emergency, almost always described as temporary, and no committee can know enough to set the price of money, which is what an interest rate is, anyway. The fix is removing the lever, not auditioning better hands for it. "The energy cost is waste." The cost is the mechanism. It's what turns the rules from opinions into physics, because breaking them means outspending the rest of the network combined. Strip the cost out and you're back to a database run on goodwill. "Developers could just change the cap." Developers propose, nodes dispose. A cap change without near-universal agreement creates a minority coin the market can ignore, and the people who'd have to adopt the change are the same people it would rob. The list wasn't written after Bitcoin to flatter it. The cypherpunks [the people who set out to build private digital money out of cryptography rather than institutions] wrote the brief first and spent two decades failing at it, and they weren't alone. DigiCash, a company that issued, died with its issuer. E-gold, whose gold sat in a custodian the state could reach, died on routes 3 and 5. Bitcoin is the first artefact that closed all five routes at once, which is why I always come back to the same sentence. The only question that matters long term is whether it stays decentralised and secure. Everything else follows from that. And kept, the design buys one thing. Not a number that goes up. A ruler that can't stretch. Measured against a fixed ruler, technology finally reads as what it's always been, prices falling as we get better at making things. That's the rest of the thesis.