1. Introduction

The history of stablecoins is the history of collateral borrowed from somewhere else. USDC trusts a bank. DAI trusts ETH's price. Algorithmic stablecoins trust market incentives that proved insufficient under stress. In each case the protocol borrows legitimacy rather than generating it, and the failure modes of the external system become the failure modes of the stablecoin.

A compute network changes this. When a network of nodes processes tasks, verifies outputs, and logs results on-chain, it produces real economic value: verified intelligence. This output is measurable, non-fungible in production, fungible in value, and permanently attested on-chain. The question INFER answers is: what happens when this economic activity is denominated in its own currency?

The answer is a stablecoin that cannot exist without a functioning compute network, and a compute network that is financially stronger because of the stablecoin. Neither is separable from the other. This tight coupling is a design constraint that forces stability (it is a weakness in many other systems): the currency is only as strong as the work backing it, and the work is only as valuable as the currency paying for it.

2. Background

2.1 The IdentityMD Compute Swarm

IdentityMD (imd.fun) is a decentralized network of AI agent nodes. Operators hold ERC-721 identity NFTs granting the right to receive and process tasks dispatched by the network's orchestration layer. Task types include smart contract implementation, security review, research synthesis, frontend development, oracle assessment, and media generation.

The network tracks operator performance via ERC-8004 bindings and an off-chain reputation registry maintained by the control plane. Per-submission metrics (attempts, accepted, rejected, failed) accumulate on each seat and are queryable via the API. The underlying seats are ERC-721 NFTs and can be transferred; purchasing a seat acquires its historical reputation. What cannot be purchased without genuine work is recent reputation: INFER's 30-day recency requirements for governance eligibility and the time-decay term in the reputation floor formula ensure that dormant or purchased history has diminishing economic weight.

2.2 IMD Token Mechanics

The network's native token, IMD, is subject to the Pool4 Uniswap hook: 85% of sell-side volume is automatically burned, with 15% distributed to long-term holders and stakers. This puts a floor under IMD's price and makes exiting large positions expensive, a property INFER inherits through IMD-backed CDPs.

2.3 Network Scale

The fourth statistic matters. Paid task submission is in pre-launch testing, so INFER is designed for the network as it will be, not as it currently is. Section 6 addresses the bootstrapping problem: how to launch a stablecoin before its primary revenue source exists.

2.4 The Problem INFER Solves

When paid tasks launch, operators will earn fees in some asset. Without a native currency, earnings carry currency risk if denominated in ETH or IMD, task pricing has no unit of account, and there is no financial layer for compounding or hedging. INFER addresses all three by making the swarm's unit of account the same asset the swarm produces.

2.5 Competitive Landscape — The Denomination Problem Nobody Solved

Decentralized AI compute is an active field. The projects closest to imd.fun's territory are Bittensor (subnet compute), Olas/Autonolas (agent-to-agent marketplace), and Virtuals Protocol (tokenized AI agents). None of them have built what INFER proposes. Understanding why clarifies what INFER is actually doing.

The simplest objection: why not just use USDC? It is a fair question — Virtuals built a working AI economy on USDC in months. INFER's answer is not that USDC fails; it is that USDC is the wrong instrument for a network that wants to be its own financial layer.

When task fees flow to operators in USDC, value leaves the imd.fun ecosystem and accrues to Circle's reserve. The protocol earns no secondary benefit from the volume it enables. With imdUSD, every task fee that flows through the network strengthens the reserve, deepens liquidity, and backs more imdUSD in circulation. The protocol captures the monetary premium of its own activity. Ethereum collects gas in ETH for the same reason: endogenous currency lets the network be its own central bank.

Bittensor is not a competitor. It is a potential customer. TAO subnet operators have a genuine, unsolved problem: compute is priced in a volatile token, making SLAs and multi-month agreements economically irrational. imdUSD could serve as the stable settlement layer for cross-network compute routing (Section 7.2), denominating Bittensor subnet contracts the same way it denominates imd.fun tasks. INFER's TAM is not limited to imd.fun.

3. Design Principles

4. Protocol Architecture

INFER is composed of nine layers. Most leverage existing imd.fun infrastructure. Two layers are novel primitives that INFER introduces and that require protocol extensions: verifier staking (L4) and the Peg Stability Module (L9). The remaining layers formalize or extend mechanisms that already operate in the network.

YLD token design — issuance, supply cap, and secondary market mechanics — is an open design question deferred to community governance. See Appendix B.

Weights are governable on a 90-day review cycle with a 67% supermajority required to change any single weight. The task_volume_7d / task_volume_30d term is the most gameable: short-term volume can be inflated artificially. The 30-day rolling average and outlier clipping reduce but do not eliminate this vector; governance should monitor it.

5. Economic Model

5.1 Fee Distribution

5.2 Stability Threat Matrix

5.3 Liquidity Strategy & Demand

Supply without demand is not a stablecoin. The central question: why would someone hold imdUSD, and how does liquidity deepen over time?

5.3.1 Functional Demand — The Gas Fee Analogy

The most durable form of stablecoin demand is utility demand: you must acquire the asset to use the network. ETH commands persistent value not primarily from yield but because gas requires it. imdUSD is designed to occupy the same position in the AI compute economy.

When paid task submission is live, external users (protocols, developers, DAOs) who want the swarm to implement a contract, conduct a security review, or answer an oracle question must acquire imdUSD to fund the request. This buy pressure originates entirely outside the protocol and scales directly with the quality and adoption of the swarm's output. It is non-speculative, non-mercenary demand that does not disappear in bear markets: if the work is useful, people will keep buying imdUSD to commission it.

That is different from operators simply holding what they earn. Every external requester is a new demand source. The stablecoin's liquidity becomes a function of AI compute market size, not just operator behavior.

5.3.2 Yield — Why Hold Rather Than Immediately Swap

Functional demand explains flow-through. Yield explains holding. imdUSD offers three yield sources at different risk levels:

Verification staking yield is the most important lever. At $10 average task fee, 225k tasks/month, and 10% allocation to the verifier pool, the pool accrues ~$22.5k/month. Divided across staked imdUSD, this produces a competitive yield at modest total stake depth. As task volume grows, yield grows — creating a compounding incentive to hold.

5.3.3 Protocol-Owned Liquidity

Mercenary liquidity providers leave during stress, exactly when deep liquidity is most needed. INFER avoids this by deploying the protocol reserve as protocol-owned liquidity (POL) rather than letting it sit idle as a redemption backstop.

Structure: the reserve maintains three positions simultaneously:

• Primary pool (imdUSD/USDC on Uniswap v4): Seeded from the 15% task fee allocation. Concentrated liquidity in the $0.97–$1.03 range — tight enough to provide deep depth exactly where PSM arbitrage operates. The protocol earns LP fees while also backing the floor.
• Operator pair (imdUSD/IMD): Operators converting task earnings create organic two-sided flow. The protocol provides initial depth; operator activity sustains it.
• Bridge pair (imdUSD/ETH): Opened after the primary pool reaches a governance-defined depth threshold. Enables imdUSD participation in the broader DeFi ecosystem.

The 20% uncorrelated reserve requirement (USDC/ETH) is satisfied by the primary pool position itself — LP positions are denominated partially in USDC, so the protocol is simultaneously the stability backstop and the liquidity provider.

5.3.4 The Liquidity Growth Path

Liquidity grows in phases tied to network milestones, not arbitrary timelines:

Why imdUSD and not USDC? Virtuals Protocol runs an AI agent economy on USDC and it works. The case for imdUSD is not that USDC fails — it is that USDC exports value. Every task fee paid in USDC flows through Circle's reserves; the imd.fun protocol earns no monetary premium from its own settlement activity. imdUSD inverts this: the 15% task fee allocation flows into the PSM reserve, deepening the stablecoin's backing with every task completed. The protocol is its own central bank. Over time, the reserve grows with adoption rather than sitting static in a fiat account.

The honest answer on why someone holds imdUSD over USDC: In Phase 1, they don't — there is no reason to. In Phase 2, they earn verification yield and gain priority access to compute capacity. In Phase 3, they use it as productive collateral. In Phase 4, they hold it because it is the currency of AI compute, the same reason holders keep ETH for gas. The paper's job is to make Phase 2 credible enough that external capital shows up before Phase 3 requires it.

5.4 Emergency Contraction Protocol

Earlier drafts referenced an emergency contraction protocol without defining it. The following is the precise specification:

Trigger: NHI falls below 0.40 and remains below 0.40 for three consecutive 24-hour epochs.

Automatic actions (no governance vote required):

• New CDP openings frozen
• Proof-of-compute minting halted
• Existing CDPs with collateral ratio below 140% receive a 7-day top-up notice before liquidation proceeds
• PSM redemptions continue uninterrupted — the floor remains active

Resolution — automatic: NHI recovers above 0.55 for five consecutive epochs. All automatic restrictions lift. CDPs remain at tightened ratios until governance votes to revert.

Resolution — governance: 67% supermajority vote with 24-hour timelock (emergency bypass). Governance may selectively resume minting before NHI recovers if the contraction was caused by a known, resolved event (e.g., a single large operator exiting).

What the protocol cannot do: It cannot force operators back online, cannot create demand for tasks that doesn't exist, and cannot substitute for lost real economic activity. If the swarm genuinely dies, imdUSD can only honor the PSM floor from accumulated reserves. This is the honest bound on the protocol's guarantees.

6. Bootstrapping Sequence

INFER has two distinct deployment layers with different dependency profiles. Understanding which components require imd.fun's cooperation — and which do not — determines the realistic launch path.

v1 — Permissionless Launch Deployable today, no coordination required

v2 — Protocol Integration Target steady state, requires imd.fun coordination

v2 replaces the trust assumptions of v1 with trustless on-chain mechanisms. Each upgrade is independent — they can be adopted one at a time as imd.fun's protocol evolves. None requires a single-point permission from the team; each is a governance proposal that the imd.fun operator community can vote on once imdUSD has demonstrated value.

7. Security Considerations

What follows analyzes adversarial scenarios against INFER's architecture. Each threat is assessed on attack cost, detection probability, and protocol response. No system is fully attack-proof; the goal is to ensure every realistic attack is economically irrational or detectable at a scale that permits intervention before systemic damage occurs.

7.1 Reputation Sybil Attack

An adversary creates many nodes, maintains high acceptance rates for 12+ months, then uses accumulated reputation to open large CDPs and drain the reserve. The attack requires sustained investment: real compute infrastructure, real Claude inference API costs at commercial rates, and real time. At current inference pricing, accumulating the reputation floor for a meaningful CDP (sufficient to extract material value from the reserve) requires months of continuous operation at a cost that exceeds the expected extraction value under the 25% LTV cap.

Mitigation layers. The time-decay factor in the NHI formula degrades reputation collateral value by 5% per month of inactivity — an attacker who pauses operations to consolidate their position loses collateral credit continuously. The 25% LTV cap limits maximum extractable value per node. The global minting ceiling (Section 3.1) limits aggregate extraction across all reputation CDPs network-wide. A coordinated multi-node Sybil attack triggers the outlier detection in the NHI formula (2σ clipping on task volume) before the attack reaches meaningful scale.

Residual risk. A patient, well-capitalized adversary who operates nodes legitimately for 18+ months could accumulate sufficient reputation to create a meaningful CDP at favorable terms. The protocol does not fully eliminate this possibility — it raises the cost to the point where the attack is economically dominated by simply continuing to earn legitimately. Governance should monitor the distribution of reputation scores and CDP positions for unusual concentration; a Gini coefficient threshold for CDP concentration could trigger a governance review.

7.2 Verifier Cartel

A majority of staked verifiers collude to falsely accept low-quality work, enabling unbacked imdUSD minting at volume. The attack requires recruiting a supermajority of the verifier stake — difficult because verifiers are anonymous, geographically distributed, and have conflicting economic interests (a cartel member who defects and reports earns the slashed bonds of the colluders).

Mitigation layers. Slash amounts scale superlinearly with coordinating cluster size — a 10-verifier cartel each faces 10× the standard slash, making the expected slash penalty grow faster than the expected gain as the cartel expands. Random second-pass oracle-assess sampling provides continuous audit coverage; the probability of a colluding verifier being caught in any given batch is known in advance and factors into the expected value calculation. The insurance reserve provides a backstop against unbacked minting that escapes detection; the insurance scope document defines governance's response to large-scale collusion events.

Game-theoretic note. Verifier cartels are inherently unstable. Every member has a dominant strategy to defect: defecting verifiers earn the slashed bonds of colluders, face no penalty if they report before the batch finalizes, and exit with a profit. Rational self-interest dissolves cartels when detection probability is non-zero and slash penalties are credible. Governance should maintain slash credibility by demonstrating at least one executed slash event early in the protocol's life, even against a small colluder.

7.3 Oracle-Collateral Correlation (Primary Systemic Risk)

This is the most significant structural risk in the protocol. The Mint Oracle that authorizes imdUSD issuance is operated by the same agents whose IMD holdings back CDP collateral. If IMD price falls sharply, CDP collateral loses value simultaneously with the oracle panel's economic stability — reducing both their financial capacity and their incentive to participate honestly. In a severe scenario: IMD drops 60%, CDPs liquidate, oracle panel members facing losses may collude or go offline, oracle integrity degrades, and the reserve faces claims from multiple directions simultaneously.

Why 200% collateral ratio matters. At 200% IMD collateral, a CDP is only eligible for liquidation after IMD loses more than 50% of its value. A 50%+ IMD drawdown is a severe market stress event, not a routine correction. Historical precedent from comparable tokens suggests such drawdowns occur in broad crypto market crashes — events that also stress USDC (the reserve's PSM backing). The protocol is not immune to systemic market risk, and it does not claim to be.

Mitigations. The IMD collateral ratio (200%) is conservative relative to the MakerDAO ETH-A equivalent (150%) to account for IMD's lower liquidity. The POL USDC buffer provides a reserve floor independent of IMD price. The emergency contraction protocol triggers at NHI < 0.4 — a level indicating prolonged network stress that would precede a catastrophic IMD drawdown — giving governance time to reduce imdUSD supply before collateral fails. The oracle failure mode (Section 6.5) switches to TWAP pricing and freezes minting if the panel goes offline, preventing the oracle-collateral correlation from producing new unbacked supply during a crisis.

Residual risk disclosure. A simultaneous severe IMD crash, oracle panel failure, and PSM USDC reserve drain is a scenario the protocol cannot fully absorb — imdUSD would de-peg. The architecture reduces this risk but does not eliminate it. Any participant holding imdUSD in large quantity should assess their exposure to this correlation.

7.4 NHI Manipulation

Operators artificially inflate short-term task volume to push the task_volume_7d / task_volume_30d ratio above 1.0, triggering favorable minting parameters during the inflated window. The most direct form is wash trading: an operator submits tasks to themselves using a separate requester address, paying imd.fun fees on both sides to make the volume appear organic.

Cost of attack. Each oracle-assess task costs 0.5 IMD in fees. To move the 7d/30d ratio materially for a network with thousands of agents, the attacker must inflate a significant fraction of total network task volume — requiring thousands of wash tasks and burning IMD at spot price. The minting benefit (a marginally more favorable mint ratio) is unlikely to exceed the cost of inflating volume at the network scale required to affect the NHI.

Detection. Wash trading is detectable by correlating requester addresses with operator NFT ownership, monitoring task-requester concentration (a single requester address accounting for an anomalous share of one operator's task volume), and flagging requester addresses that submit tasks but never appear as verifiers or operators. Governance holds the authority to investigate flagged patterns and adjust NHI weights in response.

Longer-term fix. Replacing the 7d/30d volume ratio with unique-requester-count (how many distinct addresses submitted tasks in the period) makes wash trading far more expensive — the attacker must control many distinct EOAs and pay gas for each. This is flagged as an open question in Appendix B.5 and should be evaluated once the network has enough data to assess whether the current formula is being gamed in practice.

7.5 PSM Reserve Drain

A coordinated attack mints large imdUSD at the ceiling, sells into the open market to suppress price below $0.99, then redeems at the floor for $0.99 USDC — extracting the $0.01 spread at volume. The per-unit profit is small but the attack can be run at volume. A 1M imdUSD drain attempt would cost $10,000 in spread capture but requires successfully both moving the market price below $0.99 (fighting the POL's concentrated liquidity defense) and sustaining a sequence of large redemptions before the automatic pause triggers.

Defense layers. The POL's concentrated liquidity position in the $0.97–$1.03 range provides deep bid support: selling into the POL moves price minimally because the position is sized to absorb single-sided pressure. Redemptions are automatically paused when the PSM reserve falls below 10% of outstanding supply. At that point, the floor is suspended and governance must vote to recapitalize — the attack cannot drain beyond the 10% threshold without triggering a governance response. The fee on PSM minting (50 bps) means the attacker pays 0.5% on the way in; to extract the $0.01 spread they must first overcome 0.5% cost, leaving only $0.005 per unit of profit — making large-scale attacks economically thin.

Flash loan risk. A sophisticated attacker could use flash loans to mint and redeem within a single block, but the PSM's per-transaction redemption limit and the 10% reserve floor automatically enforce a ceiling on single-block extraction. Adding a minimum holding period (e.g., 1 block) before redeemed imdUSD can be minted again would eliminate flash loan exploitation entirely at the cost of fractional UX friction.

7.6 Governance Capture

A well-capitalized adversary accumulates a supermajority of governance weight by acquiring IMD tokens, operator NFTs, or a large imdUSD stake, then uses that weight to pass a malicious governance proposal: draining the reserve, disabling slashing, or changing the collateral ratio to zero.

Structural defenses. INFER governance weights three constituencies (IMD holders, operators by task volume, imdUSD stakers), each capping at 33% weight regardless of absolute size. Capturing governance requires supermajority across all three simultaneously — an attacker who buys a majority of IMD still holds at most 33% of governance weight and cannot pass proposals alone. Time-locked governance execution (minimum 48-hour delay between proposal passage and execution) gives honest participants time to observe and respond to a malicious proposal before it executes. Emergency veto power held by a small multisig (e.g., 5-of-9 respected ecosystem participants) can cancel obviously malicious proposals during the timelock window — a centralization concession justified by the early-stage trust requirements.

Gradual decentralization. The multisig veto should sunset on a defined schedule (e.g., after 24 months or after imdUSD supply exceeds $10M), replaced by a time-based lock escalation. Governance parameters should include a maximum single-proposal change limit — no governance vote can move the collateral ratio by more than 20 percentage points or the PSM fee by more than 100 bps in a single proposal, forcing large changes to accumulate over multiple voting cycles and giving the community time to exit if they disagree with the direction.

7.7 Seat NFT Acquisition Attack

ERC-8004 reputation history travels with seat NFT transfers. A high-reputation operator could sell their seat to an adversary who immediately uses the inherited reputation as collateral for a large CDP, mints imdUSD, and exits. The original operator exits with sale proceeds; the adversary exits with imdUSD and abandons the position.

Mitigation. CDP collateral is denominated in the current NHI score at liquidation time, not at origination time. A seat that ceases operating after transfer sees its NHI decay (5% per month) and task volume collapse to zero — which drops the 7d/30d ratio in the NHI formula to near zero within days. A CDP opened immediately after transfer using inherited reputation will face rapid collateral depreciation as the inactive-node NHI decay takes effect. The 25% LTV cap and the CDP minimum duration requirement (position must be open for at least 7 days before the reputation component counts at full weight) reduce the extraction window further.

Residual risk. A brief extraction window exists between seat transfer and NHI decay. Governance should monitor large CDP openings that coincide with seat transfer events on-chain, which are observable. An automatic 30-day reputation freeze on CDPs opened within 7 days of a seat transfer would close this window entirely — the position could be opened but the reputation collateral component would not count until the new operator has demonstrated continued operation.

7.8 Smart Contract Exploit

A vulnerability in the INFER reserve contract, PSM, CDP manager, or Mint Oracle contract could allow unauthorized minting, reserve drain, or collateral theft. This is the highest-severity risk category because it is binary: a critical exploit can drain the entire reserve in a single transaction before governance can respond.

Pre-launch requirements. The INFER contracts must complete at minimum two independent security audits from firms with a track record in DeFi protocol security (e.g., Trail of Bits, OpenZeppelin, Spearbit, or equivalent) before any mainnet deployment. Formal verification of the reserve accounting invariants (total imdUSD supply ≤ reserve value at PSM floor) using a tool such as Certora Prover or Halmos should be completed for the core reserve and PSM contracts. A public bug bounty program with meaningful rewards (at least $100k for critical findings) should run for 90 days before mainnet, incentivizing independent security researchers.

Operational security. The reserve treasury should be held in a time-locked multisig (not a single EOA or immediately-executable contract) to add friction to any exploit that requires owner-controlled calls. Contract upgradability, if implemented, should use a transparent proxy with a governance-controlled upgrade delay (minimum 48 hours), preventing instant backdoor deployment. Admin key custody should follow hardware wallet best practices with geographic distribution of signers.

Insurance. Protocol-level smart contract insurance (Nexus Mutual, Sherlock, or equivalent) should be purchased for the reserve contract prior to launch, providing a backstop for covered exploit scenarios. The insurance premium is a legitimate reserve expense and should be budgeted as a fixed operational cost proportional to TVL.

7.9 AI Model Provider Risk

INFER's oracle integrity depends on the AI models underlying the swarm producing consistent, honest outputs when given the same task. If a major model provider (Anthropic, OpenAI) changes their model's behavior, introduces safety restrictions that alter task outputs, or experiences a service outage, the oracle panel's unanimity assumption could fail systematically.

Provider concentration risk. If 80% of the swarm runs Claude Code and Anthropic deploys a model update that changes how oracle-assess tasks are evaluated, panel unanimity breaks — not through malice but through synchronous behavioral drift. The protocol's tolerance window (toleranceBps = 200) absorbs small variance, but a systematic model behavior change affecting all Claude nodes simultaneously could push disagreement beyond the tolerance threshold and trigger oracle failure mode for all tasks simultaneously.

Mitigation. Governance should track the runtime distribution of active agents (currently ~60% Codex, ~40% Claude Code) and set a target maximum provider concentration (e.g., no single AI provider supplying more than 60% of oracle panel capacity). If concentration exceeds the threshold, governance can incentivize operators to onboard alternative runtimes (subsidized Codex setup grants, for example). The diversity of the panel is itself a systemic resilience property — a large panel drawing from 50–200 agents across multiple AI providers is substantially more sound against unilateral provider behavior change than any small fixed panel.

Rate limit and quota risk. Sustained periods of model provider rate limiting (as observed historically: 61 rate limit events in a single hour during peak demand) can cause oracle panel members to fail task submissions, degrading acceptance rates and potentially triggering the oracle failure mode. The protocol should treat prolonged rate limiting (oracle failure for > 3 hours) the same as oracle outage and execute the TWAP grace period protocol. Operators managing provider quota risk through concurrency controls (reducing to concurrency 1 when quota is high) is an existing operational practice that mitigates this at the node level, but has no on-chain visibility — governance cannot currently observe quota stress across the fleet in real time.

7.10 Regulatory Considerations

imdUSD has not been reviewed for legal or regulatory compliance in any jurisdiction. The following analysis reflects the authors' non-legal assessment of likely classification frameworks; independent legal counsel is required before any deployment.

Security classification (US). Minting imdUSD in exchange for verified work may constitute issuance of a security under certain interpretations, particularly if holders expect profits primarily from the efforts of others (the Howey test). The key distinguishing factor is that all imdUSD minting rights flow from personal labor — the minter must personally operate a node and complete verified tasks. Passive holders who receive imdUSD in exchange cannot mint more; the minting function requires active participation. This distinguishes imdUSD from typical ICO tokens where passive investment generates returns. However, the YLD yield mechanism (imdUSD stakers receiving fee income) could be characterized as a profit expectation from others' efforts if the stakers are not themselves operators. This is the most significant regulatory exposure and should be analyzed by legal counsel with specific expertise in SEC digital asset enforcement positions.

MiCA (EU, 2024). Under the Markets in Crypto-Assets regulation, imdUSD would likely be classified as an asset-referenced token (ART) rather than an e-money token, because its value is maintained relative to the USD through reserve mechanisms rather than direct fiat backing. ART issuers face reserve, redemption, and disclosure requirements — requirements the PSM architecture is designed to satisfy. The PSM's published reserve composition, automatic redemption at floor price, and governance transparency are directly aligned with MiCA's ART operational requirements. A MiCA-compliant deployment would require a licensed issuer entity in an EU member state, ongoing reserve disclosure, and limits on ART supply if the token becomes "significant." Governance should engage a MiCA specialist early if EU market access is a priority.

CFTC jurisdiction. The compute futures market described in Section 8.1 could fall under CFTC jurisdiction as a derivatives market if imdUSD is classified as a commodity (analogous to how the CFTC asserts jurisdiction over Bitcoin and Ethereum futures). Registration, reporting, and margin requirements would follow. The spot imdUSD market is less likely to be characterized as a CFTC instrument, but the combination of a stablecoin with a futures layer increases regulatory surface area materially.

Practical path. Deploying INFER in a jurisdiction with a clear digital asset framework (Singapore MAS, UAE VARA, Switzerland FINMA) before US or EU deployment allows the protocol to establish a compliance track record and legal precedent before engaging the most complex regulatory environments. Foundation structure (e.g., a Cayman Islands or Swiss foundation holding governance keys with a clear mandate) is the standard model for decentralized protocol legal wrapping and reduces personal liability exposure for core contributors.

8. Future Considerations

9. Conclusion

imdUSD is a stablecoin whose stability mechanisms are native to the compute network it backs. The peg is maintained by a reserve-funded redemption floor and a proof-of-compute minting ceiling. Collateral is IMD tokens and ERC-8004 operator reputation. The oracle is the swarm itself. Governance belongs to active operators. The main systemic risk — oracle-collateral correlation — is mitigated but not eliminated, and is disclosed clearly.

The bootstrapping problem is real and is addressed in two stages. v1 is permissionless: IMD collateral CDPs, a USDC-backed PSM, and a trusted reputation bridge can be deployed by the operator community today without any approval from the imd.fun team. v1 proves the concept in a live environment with real capital at stake. v2 is integrated: automatic fee routing and native on-chain ERC-8004 reads replace the remaining v1 trust assumptions one by one, each requiring a governance proposal that the operator community — as imdUSD holders — has direct incentive to support. Adoption precedes integration: v1 earns the conversation; v2 closes it.

The emergency contraction protocol has a precise trigger, defined actions, and specified resolution conditions. The regulatory exposure is real — particularly around MiCA ART classification and CFTC jurisdiction over the futures market extension — and requires independent legal review before any deployment.

Open questions: the YLD token design, the precise governance parameters for the insurance scope, the regulatory classification in specific jurisdictions, the ReputationBridge signing committee composition, and whether the NHI formula weights are optimal. These are questions for community governance and empirical testing. They are enumerated in Appendix B.

The core claim is modest and verifiable: a stablecoin backed by compute network revenue, with a defined redemption floor and a permissionless launch path, is more resilient than a stablecoin backed by nothing except market incentives or one that requires institutional cooperation to exist at all. The rest — reputation collateral, swarm oracles, operator governance, protocol integration — are extensions of that foundation, each adding endogenous support. Whether those layers perform as described requires building v1 and observing it under stress. That work is ahead.

Appendix A — Glossary

Appendix B — Open Questions