The Wealth Delta Tax: Constitutional Governance
Wealth Delta Tax, wealth taxation, constitutional governance, fiscal institutions, institutional design, democratic accountability, taxpayer governance, Sovereign Wealth Fund governance, constitutional entrenchment, institutional capture, anti-capture mechanisms, public finance governance, tax administration
Revision History
| Revision | Date | Details |
|---|---|---|
| 0.01 | 03 July 2026 | First Draft |
| 1.00 | 15 August 2026 | Published to website |
| 1.01 | 29 August 2026 | Glossary entry for Route D auction mechanism replaced to reflect three-pathway architecture (corrective, voluntary hard-reset, inheritance) with summary of distinct tax treatment by pathway and direction; §6.1 second paragraph extended with two sentences confirming corrective trigger operates in both directions, distinguishing tax treatment by direction, and stating taxpayer non-notification rule |
Abstract
The Wealth Delta Tax proposes to tax the annual change in individual net worth on an accrual basis, with a symmetric loss-refund mechanism and a pre-funded Sovereign Wealth Fund. A mechanism designed to replace goodwill-dependency with structural guarantees cannot then depend on goodwill at the institutional level. This paper designs the governance architecture the WDT requires, holding it to the same standard the mechanism holds itself.
The governance problem is informational before it is political. Setting the parameters of a wealth tax requires operational knowledge held almost entirely by those being taxed. The Governing Council’s structure resolves this by giving formal standing to those with the best operational information while structurally preventing that information advantage from becoming a decision advantage. DR — lottery-selected, holding no financial stake in any outcome — functions as the audience both TP and FS must convince, replacing expensive private lobbying with formal public argument in a setting where argument quality is directly presented. (GOV §1.1) develops this argument and applies it to the \(\tau_h\) ramp schedule as a worked example.
Governing bodies are derived from the mechanism’s own transactions rather than from inherited constitutional intuitions. The test is narrow: a body is justified if and only if it is the unique holder of some lever the mechanism specifies. This produces three political chambers and four categories of executive body: three independent Valuation Bodies, an Allocator, an SWF Custodian, and an Administrator. The derivation, including a comparison with the three-estate frame it replaces, is in (GOV §3); the full transaction-by-transaction comparison is in (GOV.A §C). The Dividend Recipient chamber’s 50% vote share follows from the anti-collusion guarantee rather than from symmetry intuition. Ten enumerated structural clauses define the properties the system must preserve to remain the same kind of tax; the first seven follow directly from the mechanism’s foundational axioms, and three rest partly on judgment, which is stated plainly.
The standard applied throughout is comparative rather than absolute: harder to capture than the alternatives, more visible when capture is attempted, and leaving more worth inheriting if it happens anyway. Three of governance decay’s four sub-forms are irreducible, and the paper names them as such. For them the honest response is residue — the Public Valuation Register, the SWF’s actuarial record, the permanent published decision archive — rather than a false claim of prevention. Operational detail for all mechanisms described here is in GOV.B.
Glossary
Administrator: The Administrator is a credential issuer and consistency-confirmer rather than a data custodian or truth-discovery authority; this follows from the delta self-correction mechanism’s own design.” This can sit after the existing sentence ending “Full specification is in (GOV.B §B).
Allocator: A single person who recommends how the SWF’s available balance is distributed across general government revenue, directed labour relief, and reinvestment. Holds the recommendation function only; the Governing Council retains full authority to adopt, modify, or replace any recommendation. Appointed by T1 vote after proposal by either FS or TP; serves without a term limit; removable by T2 vote with the rebalancing cost falling on the proposing chamber if removal succeeds. Named in this paper as the most capture-vulnerable body in the architecture — a description of a structural feature, not a design flaw. Appointment mechanics, the publication requirement, and public conduct are in (GOV.B §B.2).
Anti-collusion guarantee: The structural requirement that DR’s unanimous opposition be independently sufficient to defeat any joint TP/FS proposal. It is satisfied mechanically by the dual-threshold pass rule at the current 50/25/25 vote-share allocation. Its derivation is in (GOV §3.2); its protection as an enumerated structural clause is clause 9 in (GOV §5.2).
Bootstrapping period: The period before the full governance architecture is constituted and operational — before chambers are seated, appointments are made, and the system is running. This paper treats it as a real capture surface but assigns its design to the Phase One implementation paper.
Bridging facility bond: A bond posted before a taxpayer’s physical departure at exit closure, decoupling departure from settlement of the final WDT position. Where the expected exit delta is positive, the taxpayer posts a bond; where it is negative, the SWF posts a bond to the taxpayer; where direction is uncertain, both sides post proportional bonds that net on settlement. The symmetric structure is the state accepting downside exposure at exit on the same terms as the symmetric refund mechanism accepts it during the assessment period. Mandate and sizing are in (GOV.B §E).
Capture: The redirection of an institution’s operations away from its founding purpose by actors whose interests conflict with that purpose. Treated in this paper as the default long-run state of any institution, rather than an exceptional event. The design standard is comparative: harder to capture than the alternatives, not capture-proof.
Classification veto label: A label any voter may attach to their substantive vote simultaneously and at no additional cost, signalling that a proposal should be treated as structural. A simple majority of votes cast carrying the label triggers reclassification to Tier 2. Label counts are published in real time by the Administrator. The mechanism is complementary to the seat-burn: the label is a continuous aggregated signal; the seat-burn is a targeted individual escalation. Full mechanics are in (GOV.B §C.4).
Constituency dissolution mechanism: The automatic response to a sustained fall in DR’s volunteer rate. When the rate falls below a sustained floor, the monthly lottery draw count increases by a fixed step; it decays back asymmetrically once recovery is sustained, with the decay window longer than the expansion trigger. DR cannot set any of the mechanism’s parameters. Full specification is in (GOV.B §A.3.3).
Cooperative architecture: The design principle, derived from MF, that the WDT treats taxpayers as participants in a reciprocal arrangement rather than as subjects of a unilateral extraction. The symmetric loss-refund mechanism is its operational expression; governance participation by the taxpayer population is its institutional expression.
Delta: The annual change in an individual’s net worth, assessed at fair market value on a fixed annual date, above the exemption threshold. The WDT taxes positive deltas at progressive marginal rates and refunds a proportional share of negative deltas at the same rates. Defined in (WP §3.1).
Dividend Recipient Chamber (DR): The third chamber of the Governing Council, holding 50% of total vote share. Membership is filled by monthly birth-month lottery with staggered one-year terms. DR holds no proposing right. Its vote share is fixed by the anti-collusion guarantee and is an enumerated structural clause rather than a calibration parameter. Full composition and mechanics are in (GOV.B §A.3).
Dual-threshold pass rule: The voting rule governing all Governing Council proposals. A proposal passes only if (1) nays stay strictly below the nay threshold, and (2) yays exceed nays among votes actually cast, with non-votes excluded from the denominator. At the current 50/25/25 allocation the two conditions are not independent: condition 1 is automatically satisfied whenever condition 2 holds. Full worked arithmetic is in (GOV.B §C.1).
Enumerated structural clauses: The ten properties the WDT system must preserve to remain the same kind of tax. Any proposal touching them triggers automatic Tier 2 review and a permanent rebalancing cost on conclusion. The list is itself on the list. The clauses are set out in (GOV §5.2); the full protection rationale is in (GOV §5.2).
Fiscal Sovereign Chamber (FS): The second chamber of the Governing Council, holding 25% of total vote share at baseline. Membership is tied to constitutional office in the relevant jurisdiction. FS office supersedes TP membership immediately. Full composition and mechanics are in (GOV.B §A.2).
Governing Council: The political governing body of the WDT system, comprising the three chambers (TP, FS, DR) and operating under the dual-threshold pass rule. It holds authority over all structural and ordinary proposals, and retains full authority to adopt, modify, or replace Allocator recommendations. The executive bodies hold no Governing Council votes.
Governance decay: The gradual degradation of an institution’s capacity to perform its intended function without any single discrete act causing it. Four sub-forms are identified in (GOV §7) and developed in (GOV.A §E): definitional drift, procedural calcification, role-fidelity drift, and constituency dissolution. The first three are irreducible; the fourth is tractable.
Labour Relief Reserve (LRR): The component of the SWF that funds the transition account for labour and consumption tax relief. Its recommended floor is three years of government expenditure at the prevailing rate. The two-phase structure and LRR fill conditions are in (RATES §6).
Lever test: The derivation test applied in (GOV §3). A governing body is justified if and only if it is the unique holder of some lever the mechanism’s own transactions create — some transaction that cannot execute without this specific party. Shared interest and political intuition do not satisfy the test.
Lifetime contribution envelope: The cumulative constraint that refunds received cannot exceed taxes paid over a taxpayer’s full WDT participation history. It persists across assessment position closures and re-entries. Defined in (WP §3.5); interaction with closure events is in CLOSE.
Mechanism-shaped test: The five-condition test any proposed governance feature must satisfy before it is accepted as a structural safeguard: (1) works with the enforcer deleted; (2) cost and act are the same transaction; (3) cost is proportional to the size of the act; (4) cost is in a currency the actor cannot discount; (5) no actor defines the inputs that determine its own cost. Developed in (GOV §2.1); applied throughout the paper.
Mode B governance failure: The failure mode in which the state honours the WDT’s mechanics while abandoning what the mechanics exist to serve. It has two forms: the discrete form (outright revenue diversion, substantially closed by enumerated clause 6) and the drift form (valuation methodology loosening gradually, irreducible and addressed through residue). Introduced in (GOV §4).
Nay threshold: The maximum number of nay votes a proposal may receive without failing condition 1 of the dual-threshold pass rule. Defined as equal to DR’s vote share and tracks it automatically. At the current 50/25/25 allocation, T = 50.
Oracle failure: One of three failure modes in the (GOV.A §A) taxonomy. A mechanism is oracle-dependent when its operation requires an external report of what actually happened that the mechanism itself cannot verify independently. Whoever controls that report controls the system without touching its formal structures.
Rebalancing cost: The permanent vote-share consequence that attaches to a proposing chamber on Tier 2 conclusion. The proposing chamber’s share moves toward the other proposing chamber by a fixed increment; DR’s share is never affected; total system vote share is conserved. The cost is flat per proposal and has no floor. Full arithmetic is in (GOV.B §D).
Residue: Durable assets — the Public Valuation Register, the SWF’s actuarial record, the permanent published decision archive — that survive a captured period and give a future legitimate effort the raw material to reconstruct what happened and rebuild from it. The honest response to the three irreducible sub-forms of governance decay.
Resource-defines-truth degeneration: One of three failure modes in the (GOV.A §A) taxonomy. A mechanism degenerates into resource-defines-truth when removing all human discretion from an evaluation does not eliminate capture but instead redefines it as acquiring enough of whatever the mechanism counts.
Role-fidelity drift: One of the four sub-forms of governance decay. A body’s actual conduct loosens away from its mandate without any formal amendment. Close to undetectable in real time. Addressed through residue mechanisms — stewardship statements, three-body corroboration statistics, the Administrator’s format-consistency requirement — rather than prevention.
Route D auction mechanism: The Route D auction mechanism operates across three distinct pathways, each with its own trigger and tax treatment. The corrective auction fires following corroborated Valuation Body consensus that a declared value is an egregious statistical outlier in either direction. The voluntary hard-reset auction is initiated by the taxpayer to obtain a market-tested basis without Valuation Body involvement. The inheritance auction fires automatically on transfer at death. All three share the same auction mechanics: the asset is offered at the most recent recognised declared basis as the opening price, any willing buyer may bid, and the highest bid becomes the new recognised basis. Tax treatment differs by pathway and direction of discovery. Full specification is in (VAL §11) and (GOV.B §G).
Seat-burn: The act by which a DR member triggers an immediate and permanent Tier 2 review by vacating their seat. The burn is irrevocable; the member is excluded from the resulting Tier 2 vote. After a Tier 1 vote has concluded, a seat-burn is the only route to retrospective Tier 2 review. Full mechanics are in (GOV.B §C.3).
Self-referential power: One of three failure modes in the (GOV.A §A) taxonomy. A mechanism suffers from self-referential power when the actor being scored holds enough influence over the outcome they are scored against that their score becomes partly a function of their own choices.
Solvency floor: The hard threshold expressed as a ratio of the SWF’s liquid assets to its aggregate outstanding liabilities, below which automatic consequences follow without requiring a Governing Council vote. Aggregate bridging facility commitments count toward the ratio on the same basis as the refund liability. Full specification is in (GOV.B §E.1).
Sovereign Wealth Fund (SWF): The pre-funded vehicle that capitalises the WDT’s refund liability. Its sole capitalisation purpose is pre-funding the refund liability; this is an enumerated structural clause. It comprises two internal reserves: the SWF Refund Reserve (SRR) and the Labour Relief Reserve (LRR). Governed by the SWF Custodian under a hard solvency floor.
SWF Custodian: The executive body managing the Sovereign Wealth Fund. Its existence is stated as a design choice rather than derived from the lever test. It holds a singular mandate: protecting the long-term stability of the fund. It is designated through statutory mandate extension of a pre-existing long-tenure, constitutionally insulated financial institution. In the UK reference jurisdiction, this maps to the Bank of England. Mandate and institutional mapping are in (GOV.B §E).
SWF Refund Reserve (SRR): The ring-fenced component of the SWF covering the refund liability only. The working capitalisation ratio derived in RATES is 2.77× net annual WDT income, with a recommended Governing Council floor of 3×.
Taxpayer Chamber (TP): The first chamber of the Governing Council, holding 25% of total vote share at baseline. Membership is a byproduct of WDT filing above the threshold; no separate registration is required. Each member holds an equal fractional share of the chamber’s total external vote regardless of wealth. Full composition and mechanics are in (GOV.B §A.1).
Taxpayer history record: A mandatory Administrator output comprising each taxpayer’s longitudinal participation record: taxes paid, refunds received, lifetime contribution envelope balance, and assessment window elections over time. Subject to periodic deposit at designated archival institutions with independent preservation mandates. Protected by the Administrator’s transmission mandate; no enumerated clause required.
Tier 1: The default voting regime. TP and FS vote under the dual-threshold rule; DR is notified and may participate but is not required to. Full mechanics are in (GOV.B §C.2).
Tier 2: The escalated voting regime, triggered automatically by any proposal touching an enumerated structural clause, by a classification veto label majority, or by a DR seat-burn. All chambers must participate; DR participation is mandatory on pain of automatic seat loss. The rebalancing cost attaches on conclusion regardless of outcome. Full mechanics and timing scenarios are in (GOV.B §C.3).
Three-way ratio: The published breakdown of every concluded Governing Council vote into yay, nay, and non-vote shares of total possible votes. Published by the Administrator as a mandatory output alongside every vote result. Functions as a continuous legitimacy signal independent of the pass/fail outcome.
Valuation Bodies: Three independent bodies operating under identical mandates that carry out professional valuation on Routes A and B, and execute the three-body sealed-estimate protocol for the Route D auction trigger. Hard institutional separation — no shared staff, leadership, or institutional home — is required by design. Terms are staggered to prevent simultaneous reshaping. Full appointment mechanics and the sealed-estimate protocol are in (GOV.B §B.1).
Volunteer rate: The proportion of DR lottery selectees who accept service and take up their seat within the service-acceptance window. Published continuously by the Administrator as a rolling figure, trailing average, and full historical series. The primary legitimacy signal for constituency dissolution; the input to which the constituency dissolution mechanism responds automatically.
1. Introduction
The Wealth Delta Tax proposes to tax the annual change in individual net worth on an accrual basis, with a symmetric loss-refund mechanism, a pre-funded Sovereign Wealth Fund, and a cooperative architecture that treats taxpayers as participants rather than subjects. WP sets out the mechanism. MF grounds it normatively. VAL addresses asset assessment. CORP closes the attribution gap for listed equity. LR.B surveys the evidence base. BEHAV establishes the behavioural robustness framework. CLOSE settles the general theory of position closure.
This paper addresses what none of them does: how the institution governing the WDT should itself be governed.
A mechanism that can be quietly redirected by whoever controls its governing institution is not a mechanism at all — it is a set of promises whose durability depends on the goodwill of whoever is currently in charge. The WDT replaces exactly that dependency with structural guarantees (the symmetric refund is a guarantee, not a policy commitment; the SWF solvency floor is a hard constraint, not a target). The governance architecture must be held to the same standard.
Governing bodies should be derived from the mechanism’s own transactions rather than inherited from assumptions about how institutions of this kind typically look. A body is justified if and only if it is the unique holder of some lever the WDT mechanism specifies — some transaction that cannot execute without this specific party. This test produces a smaller set of bodies than constitutional intuition reaches for. Every body’s mandate then follows from what it actually needs to do rather than from the role it was assumed to fill. The full derivation, including an earlier attempt that failed and an account of where and why it failed, is in (GOV §3) and (GOV.A §C). (GOV §1.1) addresses why a Governing Council of this kind is the right response to the governance problem tax systems face.
The paper names its compromises rather than disguising them as natural extensions of the theory. The SWF Custodian is not derived from the lever test and is stated plainly as a design choice. Dividend Recipients’ standing requires a second pass beyond the mechanism’s own transactions, derived through the anti-collusion guarantee rather than assumed. Seven of the ten enumerated structural clauses follow directly from the derivation; (GOV §5) states which three rest on judgment rather than necessity. The standard applied to all of them is comparative rather than absolute: harder to capture than the alternatives, more visible when capture is attempted, and leaving more worth inheriting if it happens anyway.
The bootstrapping period — who governs before chambers are constituted, appointments are made, and the system is operational — is a real capture surface but is deliberately out of scope here, assigned to the Phase One implementation paper.
1.1 The Governance Problem This Paper Addresses
Setting the parameters of a wealth tax — rate structures, assessment windows, valuation thresholds, deferral charges, SRR floors, the \(\tau_h\) ramp schedule — requires operational knowledge held almost entirely by the people the tax is levied on. They know which assets are illiquid and which are structured to appear so. They know which attribution difficulties are technical constraints and which are deliberate. They know how assessment window length interacts with their portfolio management cycles. Current democratic governance of tax systems excludes this population from the formal decision process almost entirely. The knowledge reaches decision-makers only through lobbying — expensive, opaque, and requiring significant resource or access. The most informed participants are structurally positioned as adversaries rather than as sources of operational intelligence.
The Governing Council resolves this by giving formal standing to the people with the best operational information while structurally preventing that information advantage from becoming a decision advantage. TP holds its vote share, proposes through an internal quorum, and argues its case publicly before DR. FS holds its own share and brings fiscal and macroeconomic counterweight. Neither chamber can decide alone, because DR holds fifty percent. DR is lottery-selected, holds no financial stake in any outcome, and has no prior relationship with the mechanism it evaluates. It is the audience that both TP and FS must convince — replacing private lobbying with formal public argument in a setting where argument quality is directly observable and credibility accumulates in the permanent record.
This is not technocratic governance, which fails because those with the best information are excluded from the formal process and forced to influence it indirectly. It is not pure market forces, which fail here because tax policy has no price signal. It is a mechanism for extracting private operational knowledge through formal factional negotiation, with DR providing the epistemic discipline that forces TP and FS to make their cases in publicly verifiable terms. Every calibration decision — rate levels, assessment window parameters, ramp schedules, SRR floors — goes through this mechanism. The knowledge transmission is transparent, the argument is auditable, and the record persists.
The \(\tau_h\) ramp schedule in (CORP.A §B.2) illustrates this in practice. TP members from industries with transparent ownership structures have a direct financial interest in fast ramp progression and will argue for it. TP members from structurally hard-to-attribute industries will argue for slower progression, with specificity, because their credibility with DR depends on making the attribution-feasibility case accurately. The schedule that emerges reflects private information about attribution costs that no technocratic body could independently access. FS counterbalances with fiscal timing concerns. DR evaluates without a stake. Phase One attribution data audits the claims after the fact. The Governing Council does not replace technical expertise; it creates conditions under which technical expertise held by self-interested parties is revealed accurately rather than strategically.
2. The Standard This Design Is Held To
Capture is the default long-run state of every institution that has existed long enough (Olson, 1965), including the tax systems the WDT proposes to replace or supplement. A design that takes “prevent capture” as its target is setting an impossible goal, and pursuing an impossible goal produces theatre: a document that names risks and proposes counterweights, which is precisely what every captured institution’s founding documents also did. This paper does not claim the architecture that follows is capture-proof, and any criticism premised on that assumption is criticising the wrong thing.
The standard applied here is comparative rather than absolute, and has three components. First, time-to-capture: does a given design feature raise the activation energy needed to redirect the relevant part of the system, requiring corruption of more independent inputs than the status quo? Capture is rarely a single breach; it is more often the normalisation of small concessions accumulated over decades, the regulatory revolving door being the clearest example (Olson, 1965). Second, visibility: does a capture attempt happen as a discrete, dated, public event, or as slow invisible drift nobody can point to afterward? A problem that cannot be perceived cannot be corrected. Visibility makes it possible to pass a torch through a captured period rather than simply losing the thread. Third, residue: if capture happens anyway, does the institution leave behind durable assets — a standing fund, a public valuation register, a permanent decision archive — that a future legitimate effort could actually use to rebuild? The standard is not permanence; it is leaving something worth inheriting.
These three components are properties of the same design objective stated at different timescales: time-to-capture applies during the institution’s life, visibility applies at the moment of crisis, and residue applies after it. All three are measurable in comparative terms, none in absolute ones — which is why the honest standard throughout this paper is “harder to capture than the alternatives” rather than “not capturable.”
2.1 The Mechanism-Shaped Test
From the three-part standard follows a practical design tool: the mechanism-shaped test, five conditions any proposed governance feature must satisfy before it is accepted as a safeguard rather than a rule-shaped gesture toward one.
A proposed mechanism is mechanism-shaped if and only if it satisfies all five. First, it still works with the enforcer deleted: no panel, auditor, or independent body should have to detect intent or render a verdict for the cost of the act to land on the actor who committed it. Second, the cost and the act are the same transaction, ideally in the same instant, rather than a future-dated penalty depending on someone later judging whether the act was good or bad. Third, the cost is proportional to the size of the act, not flat: a flat cost deters only actors for whom the gain at stake is smaller than the flat fee, which is the population least worth deterring. Fourth, the cost is paid in a currency the specific actor cannot discount to near-zero on their own time horizon. Fifth, no actor defines the inputs that determine its own cost: whoever computes the size of a chamber’s penalty cannot be appointed by, or accountable to, that same chamber.
This is the same test that explains why VAL’s in-kind settlement mechanism and CORP’s market-cap-delta levy both work without requiring active enforcement. It is applied uniformly throughout this paper rather than re-derived each time. (GOV.A §B) works through why these and other existing WDT instruments pass or fail the test, organised around three failure modes: oracle failure, where the mechanism depends on an external report of what happened that someone else controls; self-referential power, where the actor being scored has enough influence over the outcome to affect their own score; and resource-defines-truth degeneration, where removing all discretion redefines capture as acquiring enough of whatever the mechanism counts. A mechanism that fails any one of the five conditions is rule-shaped rather than mechanism-shaped, and is rejected in this paper.
One architectural commitment follows from the test and applies to every institution in this paper, including data institutions: no WDT body should hold a monopoly on any input the mechanism requires to function. Concentration of any input — financial custody, appointment power, valuation authority, or data — is the vulnerability, regardless of domain. The three-body Valuation architecture distributes valuation authority for this reason; the chamber structure distributes governance authority; the same principle extends to data architecture. Wherever the mechanism can be designed so that an institution holds the minimum necessary to do its job while the rest remains with the parties who generated it, that design is preferable. (GOV.B §B.4) specifies how this applies to the Administrator.
3. Deriving the Architecture
The whitepaper’s Appendix B.1 sketches a governance model of three roughly equal constituencies — government, taxpayers, and the broader public — and is explicit that this is illustrative rather than load-bearing. A three-estate frame is the default shape any designer reaches for when asked to balance competing interests. Reaching for the default is not the same thing as deriving it from what the mechanism actually requires.
The test applied in this section is narrow and mechanical: a governing body is justified if and only if it is the unique holder of some lever the mechanism itself creates — some transaction specified by WP or VAL that cannot execute without this specific party. Shared interest is not sufficient. Political intuition is not sufficient.
The earlier derivation attempt that started from the inherited three-estate frame, why it failed, and what the comparison reveals transaction by transaction is in (GOV.A §C). The corrected derivation follows.
3.1 The Corrected Derivation
Reading WP and VAL for verbs rather than nouns — for what happens independent of any assumption about who it is meant to happen to — produces a short list of transactions: delta measurement, tax flow, refund flow, asset valuation, the Route D auction trigger, surplus allocation, dividend distribution, solvency-ratio checking, and the corporate-level infrastructure for listed equity. Running each transaction against the lever test produces the following result.
Delta measurement, tax flow, and refund flow require the party whose net worth is measured — no other transaction on the list needs a second party of this kind. This is a new position: the Taxpayer. Asset valuation on professionally valued routes requires a different party from the Taxpayer, so that the valuer bears independent risk for a mispriced valuation; no already-identified party can hold this risk without collapsing the independence VAL’s own design depends on. This is a new position: the Valuer. The Route D auction trigger requires a confirmation process independent of the valuation function — the two lever-positions are distinct in kind, each requiring independence from the Taxpayer and from each other, even though the settled architecture instantiates both through three Valuation Bodies operating under identical mandates rather than as two separate bodies (the reason for this is in (GOV.A §C). Surplus allocation requires a body explicitly separated from the mechanical refund trigger: (WP §4.2) names this separation, and no other identified party can hold the allocation function without importing the conflict of interest that separation is designed to avoid. This is a new position: the Allocator. Dividend receipt holds only the receiving end of a transfer — no vote, no valuation role, no custody over anything upstream of the dividend itself. This is an endpoint, flagged but not yet confirmed as a chamber. The solvency-ratio check is a number that feeds the Allocator’s constraint; it is not a party. The corporate-level delta and levy are infrastructure around the individual transaction rather than a new interested party.
The result is four acting positions plus one flagged endpoint, not the three symmetric chambers the inherited frame assumed. “Government” does not survive as a single entity: it dissolves into the valuation function, the auction-trigger function, and the allocation function, each requiring a different relationship to the mechanism’s transactions and a different kind of independence. The Taxpayer and the diffuse-public endpoint each emerge from the derivation on their own terms rather than being assumed in at the start.
3.2 Closing the Dividend Recipients’ Standing
The derivation in (GOV §3.1) established that the mechanism’s own transactions do not produce a vote for Dividend Recipients. This section runs the lever test against a different and explicitly broader transaction: the anti-collusion guarantee.
TP and FS are the two chambers capable of proposing, and therefore capable of negotiating with each other. The cooperative architecture, treated as load-bearing throughout WP and MF, requires that they cannot jointly redirect the system against the interests of the population neither chamber represents, without that guarantee depending on either colluding party policing itself. This guarantee is named independently in WP and MF, addressed to the underlying taxed population generally, before either paper has any occasion to discuss chamber design. It predates the specific shape being used here to justify DR’s standing.
Running the lever test against the anti-collusion guarantee eliminates every party already on the board. None of the executive bodies can hold it: each is deliberately walled off from chamber politics, and handing any of them discretionary power to judge what counts as collusion reopens the failure mode the three-body Valuation architecture was designed to close. What the guarantee actually requires is not a neutral third party empowered to judge collusion. It is a check that needs no judgment at all: a numeric, dual-threshold vote held by a constituency large and diffuse enough that capturing it costs more than capturing two chambers, with a share fixed at a level that makes its opposition alone — with no help from either proposing chamber — mathematically sufficient to defeat any joint proposal. No party other than Dividend Recipients can supply that property, because no other party in this architecture is both vote-bearing and structurally incapable of being the thing it checks.
This also fixes the specific figure. The nay threshold under the dual-threshold rule is defined as equal to DR’s vote share. DR’s unanimous opposition is therefore independently sufficient to defeat any proposal precisely when DR’s share is no smaller than the combined share of every other chamber. At the current 50/25/25 split this holds with equality: DR alone equals TP and FS combined. A property of this allocation, derived in (GOV.B §C.1), is that at T = 50 the nay condition is automatically satisfied whenever the yay-majority condition holds — the two conditions are not independent at this threshold, and DR’s blocking power operates through the arithmetic of the yay-majority condition rather than as a separate veto. A flatter split — such as the 33.3/33.3/33.3 figure WP used illustratively — does not merely weaken the guarantee. It activates condition one as an independent constitutional constraint, changing the fundamental character of the voting system: any single chamber, TP or FS included, could then block alone, removing the friction that makes TP/FS cooperation costly and visible. The 50/25/25 split is therefore derived from the anti-collusion guarantee rather than chosen for symmetry, and DR’s share is a protected structural property rather than a Phase One calibration parameter. The full derivation is in (GOV.A §C). The clean result: three chambers and four categories of executive body — three independent Valuation Bodies, an Allocator, an SWF Custodian, and an Administrator — each with a derivation rather than an assumption behind it.
4. Designing Against Capture
The derivation in (GOV §3) establishes which bodies must exist and what their respective lever-positions are. It does not establish how to stop those bodies from being redirected.
The naive response to capture risk is to name prohibitions: the Governing Council may not redirect WDT revenue, the Valuation Bodies may not coordinate on declarations, the Allocator may not favour a particular political outcome. These prohibitions are not wrong; they are incomplete. An institution can honour every procedural commitment it has made while still failing on the terms that justified creating it. The state collects the delta tax, processes refunds, maintains the solvency floor, and publishes the required disclosures — and directs the accumulated revenue away from labour tax relief, or allows valuation methodology to loosen gradually through professional consensus rather than any single act, or calibrates the Allocator’s recommendation framework to systematically favour retention over distribution. The mechanism continues to operate. The terminal goal does not.
This failure mode — the state honouring the WDT’s mechanics while abandoning what the mechanics exist to serve — is what the project’s papers label Mode B governance failure. It comes in two forms. The discrete form, an outright proposal to redirect net WDT revenue away from labour tax relief, is substantially closed by the enumerated structural clauses in (GOV §5) and the automatic rebalancing trigger they carry. No judgment of intent is required for that trigger to fire. The drift form — valuation methodology loosening gradually through professional consensus and role-fidelity drift in the Valuation Bodies, with no single act and no discrete proposal ever touching a structural clause — has no equivalent mechanism-shaped closure; why this is so follows from the governance decay analysis in (GOV.A §E). The honest response to the drift form is residue rather than prevention: the three-body Valuation architecture makes systematic divergence visible in the aggregate published record without requiring qualitative judgment about any single valuation, and the stewardship-statement mechanism creates a ratcheting public commitment that cannot be walked back without the walking-back itself being visible.
Mode B establishes the ceiling of what enumerated clauses and rebalancing costs can do. They can close the discrete form. They cannot close the drift. (GOV §7) returns to this honestly; (GOV §5) and (GOV §6) are designed within that constraint.
5. The Structural Safeguards
(GOV §3.2) derived DR’s standing and fixed its vote share at 50% on structural grounds. (GOV §4) established that enumerated prohibitions are necessary but not sufficient: the discrete form of Mode B governance failure requires a mechanism-shaped response, not just a rule-shaped one.
5.1 The Anti-Collusion Guarantee
The anti-collusion guarantee requires, as a matter of vote arithmetic, that DR’s unanimous opposition be independently sufficient to defeat any joint TP/FS proposal. The dual-threshold pass rule satisfies this mechanically: a proposal passes only if nays stay below the nay threshold (defined as equal to DR’s vote share) and yays exceed fifty percent of votes actually cast. At the current 50/25/25 allocation, DR alone holds exactly the vote share needed to reach the nay threshold unaided. The guarantee operates without any body rendering a verdict on whether TP and FS are colluding; it is a numeric fact about the vote structure.
At T = 50, derived in (GOV.B §C.1), the nay condition is automatically satisfied whenever the yay-majority condition holds. The two conditions are not independent at this threshold: DR’s blocking power operates through the arithmetic structure of the vote rather than as a separately operative veto. Lowering DR’s share below 50% would not merely weaken the guarantee but change the voting system’s constitutional character entirely, activating condition one as an independent constraint that would let any single chamber block alone. The full worked arithmetic is in (GOV.B §C.1).
5.2 The Enumerated Structural Clauses
The enumerated structural clauses define the properties the system must preserve to remain the same kind of tax. Any proposal touching them triggers automatic Tier 2 review and a permanent rebalancing cost on conclusion. Ten clauses are on the list, each satisfying three tests before inclusion: removing or inverting it would produce a system a neutral observer would classify as a different kind of tax, not merely a worse version of the same one; it is directly entailed by the foundational axiom or the terminal goal; and it cannot be expressed as a calibratable parameter but is binary or a directional commitment.
The first seven follow directly from the derivation in (GOV §3) or from the foundational axioms of MF and WP; removing any of them would sever the logical connection between the mechanism and the justification for it. The eighth, ninth, and tenth rest on judgment as well as derivation, and that is stated plainly below.
The tax base is the delta. The system taxes change in net worth, not the stock and not realised income, consistent with applying the individual-as-subject axiom continuously rather than at arbitrary trigger events a taxpayer can avoid.
Refund symmetry exists. The system recognises losses at a rate mirroring gain-year treatment; asymmetric treatment makes the state a silent partner in upside only, which severs the moral foundation of the cooperative architecture.
The lifetime contribution envelope exists. Cumulative refunds cannot exceed cumulative taxes paid, making the mechanism a symmetric risk-sharing arrangement rather than an unconditional state subsidy.
The Sovereign Wealth Fund exists and its sole capitalisation purpose is pre-funding the refund liability; honouring outstanding refund obligations takes precedence over all other functions the SWF may carry out, including labour relief distribution. A promise to pay refunds from future revenue is a political promise rather than a mechanism.
The attribution gap is closed. Individual wealth flowing through structures where direct assessment is impractical must still be reached, regardless of the specific mechanism currently doing so; the corporate delta levy (CORP) and (CORP §5) is the current instantiation of this obligation.
Net WDT revenue above the cost of pre-existing spending commitments is structurally committed to reducing taxes on labour and consumption. The commitment fixes direction, not implementation. (RATES §6.3) adds that continued LRR accumulation beyond its floor target violates this clause and clause four together, making post-fill rate recalibration required.
The individual is the unit of taxation. Corporations, trusts, and funds are instruments through which individual wealth is organised and have no welfare of their own.
A non-discretionary auction mechanism exists for confirmed Route D outliers, with at least three independent Valuation Bodies. This follows from the derivation in (GOV §3.1) that the auction-trigger function requires independence from the Taxpayer and from valuation, but the specific three-body instantiation is a judgment about what satisfies that requirement rather than a necessary consequence of it. The auction mechanism itself is in the Harberger self-assessment tradition (Harberger, 1965; Posner & Weyl, 2018): declared value as the offer price, open competitive bidding as the price-discovery mechanism. The clause therefore protects the property — non-discretionary trigger with independent validation — rather than the specific architecture, which is stated as “at least three independent Valuation Bodies.”
A diffuse non-proposing constituency exists whose unanimous opposition is independently sufficient to defeat any proposal; this property is maintained by defining the nay threshold as equal to that constituency’s vote share at all times, so that the sufficiency condition holds regardless of the specific share. This is derived from the anti-collusion guarantee (GOV §3.2), but the specific operationalisation as a birth-month lottery constituency rests on judgment: that a lottery is the most robust available way to constitute a body that is non-capturable because it is random, and that lottery selection is the only mechanism for producing a constituency DR cannot itself direct.
A permanent, public, and undiscretionary record of all Governing Council decisions, vote outcomes, and valuation data exists; the body maintaining it holds no authority over what it publishes, when, or in what form. This follows from the transparency requirements the anti-collusion guarantee and the residue strategy depend on, but the specific operationalisation as an enumerated clause — rather than as an ordinary architectural requirement — rests on judgment: that removing mandatory transparency from the protected list would constitute a different kind of institution, not merely a less visible version of the same one.
The enumerated list is itself on the list. Amending it — adding or removing a clause — is functionally equivalent to amending the protection any clause provides and triggers the same mechanism.
Clause 2: The symmetry commitment applies to individual delta positions on attributed holdings. Four named exceptions are consistent with this and do not contradict it: loss years generate no corporate-level refund, because corporations are not the mechanism’s moral subjects and shareholder losses are recognised through individual assessment on attributed positions (CORP §5.5); corrective over-declaration via the Route D auction produces a basis correction with no refund generated, because the over-declaration created no tax liability to mirror (VAL §11); tranche-three positions forfeit refund access as a consequence of unattributable ownership, not as an exception to symmetry (CORP.A §B.2.2); and the lifetime contribution envelope caps refunds at cumulative taxes paid, which is the operational expression of the mechanism’s cooperative rather than insurance character (WP §3.5). A wealthy taxpayer evaluating the refund guarantee should understand it as applying fully to their individual attributed delta position. These exceptions apply to corporate collection mechanics and deliberate concealment, not to the individual symmetric commitment the cooperative architecture rests on.
Clause 6: The pace of that commitment is protected by chamber dynamics rather than the clause’s text alone. Clause 6 binds direction; the chamber structure binds pace through a convergent interest that does not depend on FS cooperation. Once the LRR floor is reached, TP’s dominant chamber interest is rate reduction (lower \(\tau_0\) reduces entry burden on the taxable population TP represents). A TP proposal to reduce rates post-fill, directing released revenue toward labour tax relief per clause 6, requires only DR support to pass: TP at 25% plus DR at 50% exceeds the yay-majority threshold without FS. DR’s material interest is direct: the labour tax relief dividend is the income effect DR members and their households receive. FS can oppose but cannot block alone. To suppress dividend pace growth, FS would need to capture sufficient DR votes to defeat a TP rate-reduction proposal, requiring DR members to vote against their own immediate financial interest. That risk is real and irreducible, belonging to the propaganda and informal coercion sub-form of role-fidelity drift identified in (GOV §7.4) and (GOV.A §E), but it is not a structural gap in the chamber logic. What prevents pace drift is not clause 6 alone but clause 6 plus TP’s independent interest in rate reduction plus DR’s independent interest in dividend growth, operating simultaneously and without requiring coordination.
5.3 Tiered Review, Rebalancing, and Transparency
The enumerated clauses fix what is protected. The tiered review and rebalancing mechanism fixes the cost of attempting to change it.
Ordinary proposals are decided at Tier 1: TP and FS vote under the dual-threshold rule; DR is notified and may participate but is not required to. Any proposal touching an enumerated clause triggers Tier 2 automatically: all chambers must participate, with consequences that differ by chamber. DR’s participation is mandatory on pain of automatic seat loss: a DR member who misses a Tier 2 vote loses their seat immediately, without exception. This is the mechanism through which DR’s watchdog role is given constitutional force — the consequence is what makes the obligation real. TP’s participation cannot be individually compelled across a large and diffuse membership; non-participation is recorded in the three-way ratio as a legitimacy signal but carries no individual structural consequence. FS’s participation is not individually enforceable through WDT mechanics, but a qualifying office-holder who fails to vote in a Tier 2 session carries that failure into their existing constitutional accountability structures; the WDT records FS participation rates in the permanent public log. Tier 2 is also triggered by a simple majority of votes cast attaching a classification veto label to their substantive votes simultaneously and at no additional cost, or by any single DR member burning their seat. The classification veto and the seat-burn are complementary rather than redundant: the classification veto is a continuous, costless signal aggregating across all voters simultaneously; the seat-burn is a targeted individual escalation informed by the visible label distribution. Where a chamber misclassifies a proposal as ordinary, confirmed misclassification following a seat-burn challenge results in retroactive rebalancing cost from the original proposal date.
The rebalancing cost attaches on Tier 2 conclusion and is permanent. The proposing chamber’s vote share moves toward the other proposing chamber by a fixed increment; DR’s share is never affected; total vote share is conserved system-wide at all times. The cost is flat and permanent regardless of whether a proposal turns out to have been wise, because distinguishing wise from captured at the moment of assessment requires exactly the oracle the mechanism is designed to avoid needing. This is optimised for durability at the deliberate price of agility for legitimate reform, and is stated as a cost rather than disguised as a natural property of the design.
Transparency operates as the visibility axis alongside cost. The Administrator publishes all governance outputs on a fixed cycle with no discretion over what is sent, when, or how. Vote totals and classification veto counts are continuously visible in real time during any open voting window. A taxpayer history record is a mandatory Administrator output: each taxpayer’s longitudinal participation record comprising taxes paid, refunds received, lifetime contribution envelope balance, and assessment window elections over time, subject to periodic deposit at designated archival institutions with independent preservation mandates. The permanent published decision archive, the Public Valuation Register, and the SWF’s actuarial record form the residue layer that survives a captured period. Full operational detail — voting cycle mechanics, timing scenarios, withdrawal rules, rebalancing arithmetic, and the Administrator’s format requirements — is in GOV.B.
6. The Executive Bodies
Four bodies carry out the mechanism’s transactions without holding a Governing Council vote. Appointment mechanics, tenure, operational constraints, and the full Route D auction process are in GOV.B.
6.1 The Valuation Bodies
Three independent Valuation Bodies exist because VAL’s route architecture requires professional valuation on Routes A and B (VAL §10) to be independent of the Taxpayer whose asset is being valued. The body producing the valuation must bear risk for a mispriced result, and that risk must attach to a party separate from the Taxpayer so that the Taxpayer cannot influence the outcome by selecting a sympathetic valuator. The three-body structure rather than a single body follows from the additional requirement that the Route D auction trigger be non-discretionary: where a Taxpayer’s declared value on a non-fungible asset is dramatically understated, the trigger cannot depend on any single body’s judgment. The auction operates in the Harberger self-assessment tradition — declared value as opening price, open competitive bidding as the price-discovery mechanism — developed in (VAL §11) and drawing on Harberger (1965) and Posner & Weyl (2018). A flagging body identifies an outlier and is excluded from what follows; the other two bodies produce sealed independent estimates opened simultaneously; when both non-flagging bodies unanimously confirm the declared value falls outside the trigger threshold, the Administrator publishes the auction notice. The corrective trigger operates in both directions: egregious under-declaration and egregious over-declaration both satisfy the trigger condition. The tax treatment differs — under-declaration produces an upward delta taxed in the normal way; over-declaration produces a basis correction with no refund generated. The taxpayer is not notified when a flag is raised or during the estimation period; notification occurs only at the auction notice stage. The three-body architecture makes this unanimous-agreement requirement workable: no single body holds the trigger, and systematic divergence between the three bodies over time is visible in the aggregate published record without requiring qualitative judgment about any individual valuation. No other party in the architecture could hold this function without collapsing the independence the mechanism depends on or reintroducing discretion into the trigger.
The three bodies operate under identical mandates with identical appointment processes. Hard institutional separation — no shared staff, leadership, or institutional home — is required by design. Full appointment mechanics, case assignment protocol, the sealed-estimate procedure, and the conduct rules for the auction itself are in (GOV.B §G).
6.2 The Allocator
The Allocator exists because (WP §4.2) explicitly separates the mechanical refund trigger from discretionary allocation of the fund’s available balance. Once refund obligations, bridging facility commitments, and operating costs are met, what remains is available for distribution across general government revenue, directed labour relief, and reinvestment. Someone must recommend that distribution. The Allocator holds the recommendation function and publishes the recommendation with full reasoning before the Governing Council votes. The Council retains full authority to adopt, modify, or replace any recommendation entirely; the Allocator holds no executive power.
The Allocator is a single person. The role is not primarily technical — the arithmetic of surplus distribution is not difficult, and the relevant data is published by the Administrator and the Custodian. What it requires is a broad mandate covering economics, geopolitical conditions, fiscal timing, and the cultural and political context that bears on what form of relief serves the terminal goal at any given moment, and relational standing with both proposing chambers sufficient that they speak candidly. An Allocator who cannot learn from TP members what the taxable population is actually experiencing cannot produce a synthesis that reflects private knowledge the published data does not contain. An Allocator who has no standing with FS members cannot access the fiscal constraints that govern disbursement timing. These inside connections are the mechanism through which the role functions, not a corruption of it. The Allocator is named plainly as the most capture-vulnerable body in this architecture — a description of a structural feature rather than a design flaw. The role must be embedded in both chambers’ epistemic worlds to perform the synthesis the Council needs.
Either FS or TP may propose a candidate for Allocator. A T1 vote across all three chambers confirms the appointment. The Allocator serves without a term limit. Removal requires a T2 vote, triggered in the usual way by a single DR seat-burn; if the T2 vote succeeds in removing the Allocator, the rebalancing cost falls on the chamber that originally proposed them. A T2 vote that fails to remove the Allocator costs no chamber anything beyond the seat-burn itself. The Allocator may resign at any point, including between a seat-burn occurring and the T2 vote completing; resignation requires no procedural process and carries no structural consequence for any chamber. Full appointment mechanics, the publication requirements for the recommendation, and the Allocator’s public conduct are in (GOV.B §B.2).
6.3 The SWF Custodian
The SWF Custodian is the one body in this architecture whose existence is stated as a design choice rather than derived from the lever test. The Sovereign Wealth Fund must exist — the symmetric loss-refund mechanism is only credible if pre-funded rather than dependent on a future government’s willingness to honour a promise it inherits. A fund that exists has to be managed by someone. The mechanism’s own transactions do not produce a unique lever-holder for this function the way they produce the Valuation Bodies or the Allocator. Joint management by all three chambers was considered and rejected: a financially interested constituency overseeing the capital that backs its own refund claims is a poor design regardless of how the lever test would score it.
The Custodian holds a singular mandate: protecting the long-term stability of the fund — in practice, ensuring the refund liability remains pre-funded under all foreseeable conditions. It operates under a hard solvency floor that applies to aggregate fund exposure including all active bridging facility commitments. Above the floor, the Custodian exercises bounded discretion governed by three structural requirements against role-fidelity drift: pre-crisis public commitment to specific drawdown conditions stated before any crisis arrives — the precommitment logic developed in Kydland & Prescott (1977) and Elster (2000) — overlapping long non-renewable tenure insulating decisions from any single appointment cycle, and periodic stewardship statements creating a ratcheting reputational commitment that cannot be walked back without the walking-back itself being visible. In the UK reference jurisdiction, the Custodian maps to the Bank of England or a dedicated statutory body modelled on its independence architecture; the institutional form draws on the sovereign wealth fund governance literature, including Truman (2008) and Aizenman & Glick (2009). The full mandate specification, the symmetric bridging facility bond structure, and the institutional mapping are in (GOV.B §E).
6.4 The Administrator
The Administrator holds no vote, no chamber seat, and no discretion. It exists because governance outputs — votes, records, summaries, and the taxpayer history record — must reach the public and the chambers accurately and completely, and the moment whoever performs that transmission gains discretion over what is sent, how it is framed, or when it appears, that actor has acquired power the design never assigned it.
The Administrator’s defining principle is transmission with all discretion removed. It publishes exactly what the system generates on a fixed cycle with no judgment about whether an output is worth publishing or needs context first; applies a publication format set externally rather than by itself, with any change to that format logged as a dated event; publishes immediately on trigger, never delaying a contested result; and cannot embargo or sequence one chamber’s output ahead of another’s.
The Administrator’s data role follows from the same derivation: it is a credential issuer and consistency-confirmer, not a data custodian or truth-discovery authority. The distinction matters for capture exposure. A conventional tax authority engaged in truth-discovery has strong incentives to hold everything — to retain data, cross-reference it, and treat taxpayer declarations as adversarial claims requiring independent confirmation. The delta base is structured differently. The Administrator does not need to confirm that any declared value is correct; it needs to confirm that the delta between two declared values is arithmetically correct under the rules. Self-correction handles most errors: an incorrect basis today produces an incorrect delta next year, and the compounding cost falls on the taxpayer. The Valuation Bodies catch egregious Route D outliers. The auction mechanism handles the residual. None of these functions require the Administrator to hold truth about what assets are worth; arithmetic confirmation is sufficient.
The minimum-necessary-information principle follows from this as a compliance argument, not a privacy argument. The Administrator holding less than minimum-necessary information does not weaken enforcement; it reflects what enforcement actually requires from a body whose job is consistency-confirmation rather than truth-discovery. The privacy benefits are real, but they are a consequence of getting the institutional design right rather than a separate objective layered on top of it. An institution whose data architecture is correct on compliance grounds happens also to be more privacy-protective, and claiming privacy as the primary rationale would misstate why the architecture is the right one.
The risk the Administrator’s role carries is incompetent or captured transmission, not bad judgment. Both failure modes are visible in the permanent log by what is missing rather than requiring anyone to detect intent. Full Administrator specification — including the internal forum for DR members, vote authentication, live real-time broadcasting, the format requirements for the Tier 2 factual summary, and the data architecture implementing these principles — is in (GOV.B §B).
7. Limitations and Further Work
The safeguards in (GOV §5) are real. They are not sufficient.
7.1 Formal modelling gaps
No items in this paper. The institutional architecture is derived from the mechanism’s own transactions rather than from empirical modelling.
7.2 Phase One empirical unknowns
The DR chamber’s volunteer rate under lottery conditions has not been observed. The constituency dissolution mechanism (GOV.B §A.3.2) and (GOV.B §A.3.3) is designed to respond to it, but the actual rate, the distribution of dropout timing, and whether the asymmetric expansion and decay windows are well-calibrated to the population’s participation pattern are all Phase One observables.
Whether the three-body Valuation Body architecture produces the statistical legibility intended — whether flagging patterns across bodies over time are actually legible without qualitative judgment — is an architectural claim that only observation of the bodies operating can confirm.
Whether the Administrator-as-consistency-confirmer model is operationally sufficient, or whether the verifier-learns-minimum principle breaks down under specific edge cases (complex multi-asset portfolios, multi-jurisdiction positions, contested prior-year values), is a Phase One question.
The credential-issuance data architecture model (GOV.B §B.4.6) specifies that the Administrator issues verifiable credentials accumulated in the taxpayer’s own custody rather than in a centralised repository. Whether selective disclosure operates as intended in practice — whether taxpayers and their advisers actually use the credential stack for verification purposes, and whether the verifier-learns-minimum principle holds under the range of real verification requests — is a Phase One operational question.
The privacy election mechanism (GOV.B §B.4.7) specifies a rate differential calibrated so that the expected revenue under disclosed and private modes is equivalent in expectation. The equivalence condition determines the relationship between the discount and premium rather than their absolute levels; those absolute levels are Phase One calibration items.
Bond sizing ratios for the exit bridging facility (GOV.B §E.3) are set so that the bond proportional to estimated liability provides adequate security for the state in positive-delta cases and adequate security for the taxpayer in negative-delta cases. What “adequate” means in practice — given the distribution of exit delta sizes and the administrative cost of bond disputes — is a Phase One calibration question.
The corporate equity settlement facility’s (GOV.B §H) take-up rate across the assessment universe is a Phase One observable that bears directly on the calibration of all five facility parameters. Whether the population of companies using the facility matches the cash-poor growth company profile the facility is designed to serve — rather than being used as a general corporate financing tool by companies with adequate cash — is the primary Phase One diagnostic. Aggregate take-up data and the stewardship statement’s portfolio reporting provide the inputs.
7.3 Jurisdiction-specific legal and implementation work
The interaction of the enumerated structural clauses with parliamentary sovereignty in the UK reference jurisdiction requires legal analysis this paper cannot provide. The clauses are designed to be constitutionally entrenched; whether that entrenchment is achievable under parliamentary sovereignty, and in what form, is a jurisdiction-specific question.
The SWF Custodian’s statutory mandate extension process requires jurisdiction-specific legal design. The principles are specified in GOV and GOV.B; the legal instrument is not.
The SWF Custodian inflationary rotation mandate (GOV.B §E.7) — specifically the two parameters (inflationary trigger threshold and accelerated holding period for Route C positions) — requires jurisdiction-specific specification of what rate of sustained price-level increase constitutes a trigger. That determination is partly legal and partly empirical, and cannot be made until the mandate instrument is drafted in the reference jurisdiction.
7.4 Structural and irreducible limits of the design
Governance entropy has four sub-forms: definitional drift, procedural calcification, role-fidelity drift, and constituency dissolution. The correct partition is three irreducible sub-forms against one tractable one. Constituency dissolution is tractable because the DR volunteer rate is a byproduct number rather than a fabricable record. Definitional drift, procedural calcification, and role-fidelity drift are irreducible: no mechanism-shaped deterrent exists for them that does not reintroduce the discretionary judgment this architecture is built to avoid. The honest response is residue — the Public Valuation Register, the SWF’s actuarial record, the permanent published decision archive — assets that survive a captured period and give a future legitimate effort something to rebuild from.
The Phase Two DR scale problem — how the lottery mechanism operates at a dramatically larger population if Phase Two lowers the WDT threshold significantly — is acknowledged in GOV.B as an unsolved design question for Phase Two, not a current design gap.
Claiming the safeguards in (GOV §5) are sufficient would be the governance equivalent of the valuation problem VAL refused to solve the wrong way: it would produce a document that names risks and proposes counterweights, which is precisely what every captured institution’s founding documents also did.
7.5 Governing Council calibration parameters
The following quantities are settled in kind but open in value, deferred to Phase One calibration: the TP/FS internal split (currently at parity, with nothing in the derivation requiring equal shares, only that their combined total not exceed DR’s); mandatory notice period and frequency of structural votes; DR’s floor size; the expansion and decay trigger-window lengths for the constituency dissolution mechanism; the Route D auction trigger threshold and administrative fee schedule; the SWF Custodian’s specific drawdown conditions and stewardship-statement cycle; and the bridging facility bond sizing ratios.
The privacy election rate differential coefficient is a single Governing Council calibration parameter under the Tier 1 process. The constraint (revenue equivalence in expectation) determines the relationship between discount and premium; the absolute levels are set by the Governing Council.
The inflationary rotation trigger threshold and accelerated holding period (GOV.B §E.7) are Governing Council calibration parameters to be specified in the Custodian’s statutory mandate. GOV.B names them; the values await mandate drafting and Phase One data on how sustained inflation manifests in the Route C portfolio.
The corporate equity settlement facility (GOV.B §H) introduces five Governing Council calibration parameters: the pre-assessment volume-weighted average window length; the loan interest rate; the minimum annual repayment schedule; the margin call threshold as a percentage of outstanding loan; and the maximum holding period before mandatory sale. All five are named in the Custodian’s mandate instrument before the facility opens and published in the first annual stewardship statement. Subsequent revisions follow the (GOV.B §E.2) commitment discipline.
8. Conclusion
The derivation in (GOV §3) produced a smaller set of governing bodies than constitutional intuition typically reaches for. “Government” does not survive as a single entity; it dissolves into a valuation function, an allocation function, a custodial function, and a transmission function, each with a different relationship to the mechanism’s transactions and a different appointment and accountability structure. The Taxpayer chamber and the Dividend Recipient chamber each emerge from the derivation on their own terms: the Taxpayer as the unique holder of the delta measurement transaction, DR as the only party that can hold the anti-collusion guarantee without being the thing it checks. The 50/25/25 vote-share split follows from that derivation rather than from symmetry intuition, and DR’s share is a protected structural property rather than a calibration parameter.
Governance is a component of the mechanism, not scaffolding around it. The symmetric loss-refund is only credible if the SWF is pre-funded and its mandate is durable; without the Custodian’s structural independence the refund promise is a political promise rather than a mechanism. The cooperative architecture is only coherent if departure is treated as a legitimate termination event rather than an avoidance act requiring coercive response; the CLOSE framework settles that at the structural level and the Governing Council’s authority to recalibrate the bridging facility bond structure is how the institution maintains it in practice. The delta base is only observable over time if the Public Valuation Register remains intact and the Administrator cannot be directed to suppress inconvenient outputs. Governance failure is mechanism failure, not a separate category of institutional risk.
The architecture makes no claim to being capture-proof. The standard applied throughout has been comparative: harder to capture than the alternatives, more visible when capture is attempted, and leaving more worth inheriting if it happens anyway. The three irreducible sub-forms of governance decay — definitional drift, procedural calcification, and role-fidelity drift — are not a confession of inadequacy. They are the correct identification of the residual that any governance design faces, regardless of how carefully it is built. A design that acknowledges that residual and responds with visibility improvements and durable data assets is more honest, and more useful to any future legitimate effort, than one that claims to have closed what cannot be closed.