Chapter 24: Trust and Dispute in the Parallel Economy

"Reputations will be of central importance, far more important in dealings than even the credit ratings of today."

Timothy C. May, The Cyphernomicon (1994)^1^

Introduction

The preceding chapter showed individuals and small groups building privacy practice from the ground up: threat modeling, tool selection, community formation, and the first commercial loops within trusted circles. That is where adoption begins. The question Chapter 23 leaves open is what happens when the circle widens. How do strangers trade, and how do they resolve uncertainty, when they refuse the state's identity system and do not trust the state's courts?

Privacy is a condition of action, and surveillance distorts exchange and weakens calculation. Cryptographic systems can raise the cost of control until many attacks stop paying; Bitcoin gives money a resistant base; anonymous networks protect communication; zero-knowledge proofs let people prove narrow facts without opening the whole file; and Nostr gives users identities they control on a social medium no platform owner can seize.

Answering that question requires more than tools. The cryptographic stack moves bits and settles payments, but it does not establish reliability across time or adjudicate what happened when a deal fails. Those are institutional functions, and a parallel economy needs institutions that perform them without routing through the state's identity system or its courts.^2^

24.1 Why Tools Alone Do Not Make a Market

Some exchanges need almost no trust. When you buy tomatoes from a farmer and hand over cash at the same moment the tomatoes pass into your hands, the transaction closes on the spot: payment and delivery happen together, and each side walks away with final settlement.

The trust problem enters as soon as settlement stretches through time or distance. A merchant asks for payment now and promises shipment tomorrow. A developer sells updates that will arrive over the next year, while a founder wants staged funding before the product is finished. A pseudonymous seller may also claim a record of honest dealing that the buyer cannot yet verify.

Encryption does not answer those questions, and neither do Bitcoin or Nostr by themselves. These tools solve transport, identity control, publication, and settlement. Reliability across time and the distinction between fraud and honest error belong to other mechanisms.

The modern state bundles several distinct functions into one package and then presents the package as indispensable. It ties identity to legal documents and channels disputes into state courts, all backed by regulators and police. It also records firms and preserves a final enforcement backstop. Markets have long relied on some of these functions. They do not need them to remain under state monopoly.

A parallel economy does not need to abolish trust. It needs ways to create trust without surrendering everyone to permanent identification and surveillance. It needs ways to narrow trust, price trust, distribute trust, and contain the damage when trust fails.

That is an institutional problem. Timothy May saw this early. Anonymous business and electronic contracts were possible, he argued, but reputations would become central.^1^ Eric Hughes made the same point from another angle: privacy in an open society requires anonymous transaction systems, and each party to a transaction should know only what is directly necessary for that transaction.^4^ Nick Szabo pushed the analysis farther. In a world of digital commerce, he wrote, the dominant costs move toward jurisdiction, trust, and security. Search, negotiation, commitment, performance, and adjudication all need structure.^5^

The technical stack in this book now exists. What follows is the question May and Szabo left hanging in the air: how does that stack support commerce between people who know each other only through keys and a record of performance?

24.2 Reputation Under Pseudonymity

Reputation needs continuity. A buyer must be able to say: I traded with this seller before, the goods arrived, the quality matched the claim, the messages were prompt, the refund came when it should have come. Memory requires continuity, and reputation requires memory.

Strong anonymity cuts against that continuity. If each interaction uses a fresh identity with no link to any prior history, observers learn less, but counterparties learn less too. The same unlinkability that blocks surveillance also blocks accumulated trust.

This tension does not disappear because we dislike it. A system that promises strong anonymity and durable reputation in the same channel is usually hiding one of the tradeoffs. The working compromise in many markets is pseudonymity.

A persistent pseudonym can accumulate history while still refusing civil identity. What the key has to do is persist long enough for other people to observe conduct across time; what it does not have to do is map to a passport or a state registry. The pseudonym becomes expensive to abandon because abandoning it means burning accumulated trust. That cost disciplines behavior. A seller who has spent two years building a name on Nostr, answering buyers, shipping products, refunding mistakes, and posting under the same key has something to lose if he cheats. His identity is economic, not a legal fact. That is enough.

Nostr matters here because it makes ordinary social behavior legible as signed evidence. Follows, replies, reposts, mutes, zaps, long-form posts, software releases, and marketplace listings can all attach to the same key. None of these signals is perfect, and all can be gamed at the margin. The overall pattern still carries information.

An account followed by people you already trust is not proven honest, but it is easier to take seriously. A merchant with years of public history under one key is not guaranteed to perform, but the cost of defection is higher than for a fresh key with no record. A developer whose releases are signed by the same identity that publishes essays, receives criticism, answers bugs, and gets endorsed by other developers offers a thicker signal than a nameless download link.

The signal can also stay local. Reputation does not need to be one global score handed down by a central authority; trust is contextual, and you may trust one account as a developer and a different one as a merchant. My graph differs from yours, and that difference is a feature, not a weakness. Centralized platforms flatten trust into one badge, while market systems let trust remain distributed and plural.

There is still a cold-start problem. New entrants begin with no history, so they typically start with small trades, introductions, or domain-linked proof of who they are in some narrower context. Some lean on escrow until they build a name; others earn trust inside a local community before trying to sell to strangers. None of this is frictionless, and commerce with no gatekeepers still has filters. The filters just move from permission granted by administrators to judgment exercised by participants themselves.^6^

Negative history creates a second pressure. A seller who burns one pseudonym can open another and return as a newcomer, which leaves purely local reputation systems weak against repeat fraud. Parallel markets need enough continuity to make defection costly without turning every market identity into a universal identifier.

Zero-knowledge proofs open a partial answer to this tension, though practical deployment is still early. Persistent pseudonyms resolve the tension between anonymity and continuity by keeping the same key alive, which means everything under that key becomes linkable in exchange for a visible track record. A different compromise becomes possible when reputational claims can be separated from the specific transactions and identities that produced them. Attestation-based protocols where attesters sign statements about a user that the user later proves under zero knowledge make it conceivable to claim "I have completed at least N trades at rating at least R, with people whom you follow." or "I have been vouched for by K members of this trader cohort" without revealing which trades or which other identities are yours.^7^ These systems still depend on attesters who observe the underlying facts, so cold-start and sybil resistance do not disappear; collusion among enough attesters can still reassemble a trail. As the tooling matures, the default shape of reputation could shift: claims accumulated under pseudonyms and presented at the point of use, with each interaction revealing only the piece the transaction needs.

That movement is healthy. The state wants reputation tied to civil identity because civil identity is easy to tax and easy to coerce. A parallel economy wants reputation tied to performance. Performance is the information that trade needs.^3^

24.3 Credentials and Selective Disclosure

Reputation is soft evidence. It grows from observed behavior. Many transactions need something harder.

One buyer may need proof that the seller controls a known domain. Another user may need proof that a release came from the developer who claims authorship. In other cases the relevant fact is continuity of the same key across two channels, or proof that a newcomer was vouched for by an existing member and meets a rule that governs participation.

The state solves these problems through over-disclosure. It demands the full packet: passport, driver's license, utility bill, customer profile. The institution gets a file thick enough to do far more than the immediate transaction requires.

That is bad design.

Most transactions need a narrow fact. The verifier does not need the whole person. The verifier needs only the piece of information on which the transaction turns.^4^

Nostr already supplies one simple model. NIP-05 lets a pubkey be associated with a DNS- and HTTPS-backed identifier without asking a platform for a badge.^8^ The trust still lies in the domain and in the entity behind it, and in the web PKI serving the nostr.json file. A company can attest that a given key belongs to one of its developers. An individual can attest that a given key is the one tied to his own website. The system does not abolish trust. It narrows the trust to the specific claim.

The same logic extends farther. A known key can sign a one-time challenge and send the response through another channel, so that the verifier learns the person on the anonymous channel controls the same key whose public history he already knows. The verifier does not learn a legal name and does not need one, because the fact that matters for this interaction is continuity between a known reputational identity and the present conversation.^9^

Zero-knowledge systems push the same principle into richer credential problems. Chapter 15 already showed the general pattern. A system can prove age above a threshold without revealing birthdate. It can also prove membership or control of a credential without handing over the credential itself. For the parallel economy, this replaces bulk identity extraction with narrow proof.

The goal is selective disclosure: reveal control of the developer key, not a home address; reveal eligibility under the age rule, not a birthdate. Standing in a market community follows the same discipline: show the claim the transaction requires, not the web of relationships behind it.

Selective disclosure does not remove all risk. Credentials can become surveillance infrastructure if they are logged or centralized, especially when they become compulsory across contexts. A pseudonymous market can quietly rebuild the same dossier system it claimed to reject if every trade demands one more signed proof and each proof gets stored forever. The answer is still discipline. Reveal what the transaction needs and no more.

That rule links the cypherpunk side of the book to the praxeological side. The transaction determines the information requirement. Anything beyond that requirement is surplus extraction.

The tooling supporting this principle has reached production over the last several years. Group-membership attestations through protocols such as Semaphore have been deployed at conference-scale events for ticketing and credential presentation, with the cryptographic primitives carrying hundreds to thousands of users per deployment. Wallet-creation flows that derive a pseudonymous wallet from an existing identity-provider account, without the provider learning the derivation, are in production on at least one blockchain. Verifiable-credential standards through the World Wide Web Consortium provide a generic format in which selective-disclosure proofs can be expressed. The state-issued side of the same infrastructure is also maturing, with mobile driver's licenses based on an international standard now accepted at identity checkpoints in several countries.^10^

The book's framework insists on a qualification that the standards documents do not. A credential system that ships with selective disclosure as a feature is not the same as a credential system that is used with selective disclosure as a practice. The state-issued variants tend to use selective disclosure as a convenience (faster verification at an airport) instead of as a privacy primitive (minimal exposure in routine life), and the verifier-side incentives push toward requesting more than the transaction requires. The pseudonymous-community variants tend to use selective disclosure as intended, because the participants care about the underlying principle. The tooling is increasingly the same; the posture of the users is what determines whether the tooling protects privacy or rebuilds the dossier with extra steps.

24.4 Escrow and Simple Dispute Resolution

Some transactions do not need a court. They need a release condition.

If buyer and seller are strangers and the goods will ship later, one simple answer is escrow. Funds sit under the control of a third party until delivery is confirmed, or under a multisignature arrangement that requires agreement between the trading parties and an arbiter. The buyer no longer needs blind faith, and the seller no longer ships with no assurance of payment, so the trust surface shrinks on both sides.

Bitcoin makes these arrangements concrete. A two-of-three multisignature setup can split keys between buyer and seller, with a third key held by an arbiter. If the trade finishes smoothly, buyer and seller release the funds together. If trouble arises, the arbiter joins one side and the funds move with two signatures. No one person has unilateral control. That is already a better structure than the ordinary platform model where a company takes the money and writes the rules.^14^

Small markets often layer social practices on top of the cryptography. New counterparties trade in small size first, and sellers ship one item before asking for larger orders. Communities recommend known escrow agents whose own names are worth protecting. Repeat trade lowers uncertainty because each successful exchange becomes evidence for the next, and the accumulated evidence is itself part of what new entrants are later offered as social proof.

These mechanisms work because many disputes are simple. Sometimes the question is whether a package arrived, whether a repository shipped the promised release, whether funds cleared, or whether one side violated an agreed rule visible to both parties. In such cases, clear release conditions do much of the work.

The gain is real but should be stated with precision. Escrow and multisig do not eliminate trust; they reallocate and narrow it. The parties still trust the keys and the software, and some arrangements also require trust in an arbiter. Yet narrowed trust is often enough, because many market problems do not require perfect assurance but only a structure that makes fraud costly and honest trade easier than cheating.

Staged commitments begin to matter here as well. A funding arrangement that releases money in stages gives investors bargaining power throughout the life of the project. A buyer who can recover funds not yet released has a real position from which to negotiate. A service contract that encodes partial payment and conditional release brings discipline into the contract itself. Here the contract starts to move out of paper and into protocol. The machine does not replace judgment. It holds judgment inside a tighter frame.

24.5 Arbitration and Contested Facts

Escrow works well when the disputed fact is clean. It works less well when the conflict turns on quality disputes or evidence no script can settle.

A package may show delivered even though the buyer says the box was empty. A contractor may insist the job met the agreed spec while the client says the work is unusable. In another case the seller defends the product description or the developer claims a milestone was met, while the buyer or funders say the delivered result does not match the promise.

These are judgment problems sitting on top of the settlement layer, and settlement alone cannot solve them.

Modern courts bundle several functions at once: they collect evidence, define procedure, interpret contested facts, produce judgments, and connect those judgments to force. Much of the value in the bundle does not come from the monopoly itself. It comes from the existence of procedures, records, standing, and a forum that parties expect other parties to recognize.

A parallel economy must unbundle this stack, and some parts are already available. Reputation can punish obvious fraud and escrow can freeze funds until a ruling arrives; community standing can pressure a dishonest merchant or a corrupt arbiter into better behavior. In bounded communities, exclusion can be a severe sanction; a merchant who cheats may keep one payment and lose the next hundred, which is often enough to keep ordinary trade honest.

Harder cases remain underbuilt.

A serious arbitration system needs more than a chat room and a wallet.^11^ It needs procedures for submitting evidence and rules for weighing testimony. It also needs standards for conflicts of interest, along with some way to make precedent legible so each new dispute does not begin from zero. Participants also need reason to believe that arbiters have something to lose if they rule badly. In some contexts a posted bond may do that work. In others, repeated reputation or technical standing will carry more weight.

Merchants have long relied on private ordering and repeated dealing, often alongside municipal or state courts, to discipline trade where formal law was slow or poorly matched to the commerce at hand. Digital networks change the scale and the tooling without changing the underlying problem, which is that trade among strangers still needs a way to handle breach. One contemporary response is to codify an explicit libertarian private-law baseline that voluntary adopters can reference in their contracts and arbitration clauses, supplying the shared legal starting point that the unbundled layer still lacks.^12^

This layer remains immature.

There are experiments with bonded arbiters and community juries, along with a range of protocol-governed mechanisms.^15^ Some work for narrow cases. None yet carries the legitimacy or procedural maturity of a court system backed by long practice. That gap should not be hidden. The parallel economy has solved settlement more cleanly than it has solved adjudication.

Yet the direction is clear. Courts are institutions, and institutions can compete, specialize, fail, improve, and split into narrower services. The parallel economy has not built a full private-law order. The relevant question is whether the pieces needed for one can emerge from repeated exchange under reputational pressure and cryptographic control of funds. They can.

24.6 Merchant Discovery and Institutional Emergence

Markets do not appear because someone declares them open. Markets appear when people find each other and trade again.

That is why the institutional layer is larger than escrow and arbitration. It includes discovery.

A merchant with a good product is useless to the buyer who cannot find him. The same holds for a skilled developer whose release cannot be distinguished from a counterfeit, or for a fair arbiter unknown to the parties who need him. A market grows when the paths between these roles become cheap and legible.

Nostr helps here because one identity can carry across several contexts at once. The same key that posts notes can sign software releases, publish marketplace listings, receive payments, answer questions, and show a long public history of conduct. A buyer does not inspect one isolated listing and decide in a vacuum. The buyer can inspect the whole trail: who follows this seller and how long the key has been publishing, and whether complaints were handled in public view or answered with silence.

The result is thickness. A thick market preserves information about conduct across time and raises the cost of losing standing as repeated exchange grows denser. It also lets counterparties compare alternatives. A thin market sends the participants back to zero after each failure.

That thickening happens through repeated contact. Meetups, workshops, merchant circles, private group chats, bug reports, escrow recommendations, and signed listings all contribute. Digital and physical institutions reinforce each other. A merchant you met in person is easier to trust online. A developer whose code you used for two years is easier to trust when he begins selling hardware. A local Bitcoin meetup that turns into recurring trade stops being a social event and becomes infrastructure.

Proxy Merchants and Bridge Roles

Markets also thicken by specialization. One of the most useful roles at the edge of a parallel economy is the proxy merchant: a person or small firm that interfaces with the exposed side of the economy so other participants can stay off that boundary. Sometimes the role is an OTC exchanger moving between bitcoin and local currency. Sometimes it is a purchasing agent who buys from legacy-facing suppliers on behalf of a counterparty who wants to keep his name and address off the order, or the operator of pickup points and forwarding routes that keep buyer and seller from meeting directly. The function stays the same. The arrangement concentrates exposure in a chosen specialist who prices the risk and builds a reputation for handling it well.^13^

These roles narrow trust and put a price on it. They also create a familiar danger, because a bridge used by everyone becomes a bridge watched by everyone. The institutional answer is the same one the chapter has already given for escrow and arbitration: plurality and easy replacement. A healthy parallel market keeps many proxy merchants and related bridge services in play so that no single operator becomes a bottleneck.

The phrase parallel economy means what it says: a second set of rails on which communication, payment, reputation, discovery, and trade can run. These rails may exist inside the same city and on the same streets as the old system, and they remain distinct when trade and information flows no longer depend on state-controlled intermediaries.

Institutional emergence follows use. No committee can draft the full order in advance. Merchants with good dispute practices get more business, and escrow providers who handle conflicts fairly get repeat demand. Marketplaces with better search and better spam resistance win users, while meetups that consistently bring serious traders together become nodes of economic value. Over time these practices harden into norms, and norms harden into institutions.

That process is slower than deploying software. It is also how markets have always grown.

24.7 Present Limits and Honest Boundaries

The institutional layer is still being built.

Reputation creates one obvious danger. The same continuity that lets others trust you also lets others track you: pseudonymity is workable because it carries history, and that same history can expose patterns and counterparties to anyone who watches long enough. A merchant may want one reputation for public commerce and a different one for sensitive trade, and a developer may want one identity for software and another for political writing. Identity separation remains hard in practice, because success creates the visibility it was meant to avoid.

Escrow creates another danger. The trusted third party may be narrower and less invasive than a state-regulated platform, but it can still become a chokepoint: an escrow agent with enough volume attracts coercion, and a well-known arbiter can be leaned on or made into a bottleneck for the commerce flowing through them. Decentralization lowers these risks without erasing them.

Physical goods remain difficult. Cryptography protects messages, but it does not hide the destination printed on a package or the schedule on which a courier arrives. Local pickup, lockers, drop points, and forwarding services reduce exposure in some cases, though none of them gives matter the freedom Tor gives packets. Digital commerce can become private faster than physical commerce ever will.

Adjudication is still thinner than settlement. Fund movement under pseudonymous arrangements already outperforms ordinary finance on trust minimization; complex dispute resolution has not yet reached comparable maturity. That gap is real.

Another gap waits beyond it. Money moves value through space, while credit moves value through time. A market that handles spot trade still needs ways to finance production and inventory. Bills of exchange, trade credit, bonded lending, and other forms of commercial trust belong to the next layer of buildout, and the tools for payment and communication have outrun the institutions for financing ongoing enterprise.

These limits do not weaken the argument of the book. They give it shape.

The architecture exists for people to start moving economic life outside systems built for observation and control. The tools are here. The first institutions have appeared, and the remaining gaps are visible enough to work on.

That is enough to proceed with bounded trade and institutional experimentation.

The next chapter returns to the book's largest claim. What happens when these tools and institutions stop being isolated practices and begin to compound into a real economy?

Chapter Summary

Tools solve transport and settlement; they do not settle reliability or the judgment problems that arise when strangers trade under pseudonyms. A parallel economy needs institutional structure alongside its technical stack, and reputation under pseudonymity is the starting point. Persistent pseudonyms can accumulate trust while refusing civil identity, and the cost of abandoning accumulated reputation disciplines behavior. The tension is that the same continuity that enables trust also enables tracking. No deployed system maximizes both reputation and unlinkability at once, and reputation systems can reconcentrate into dossier infrastructure if every trade demands signed proof and each proof gets stored permanently. The discipline required is selective disclosure: reveal what the transaction needs and no more. Zero-knowledge credentials and attestation-based reputation protocols, still immature, open the prospect of separating reputational claims from the specific transactions and identities that produced them.

Escrow, multisignature arrangements, staged commitments, and release conditions make fraud costly and honest trade easier for most bounded disputes. These mechanisms reallocate trust instead of removing it: the parties still trust the keys and the software, and some arrangements also require trust in an arbiter, but narrow trust is often enough. Harder cases involving contested quality or ambiguous performance require arbitration structures that remain immature relative to state courts. The parallel economy has solved settlement more cleanly than it has solved adjudication, and private arbitration has not reached the procedural depth long practice builds. Institutional emergence follows use: merchants with good dispute practices attract repeat business, and meetups that bring serious traders together become economic infrastructure.

Proxy merchants belong to the same pattern. Exchangers and forwarding operators emerge because they solve a real bottleneck at the edge of the market, and they remain healthy only while their role stays competitive and replaceable.

The institutional layer is not complete. Credit and trade finance remain largely unbuilt for pseudonymous commerce, and the tools for payment and communication have outrun the institutions for financing ongoing enterprise. Physical goods remain constrained by the anonymity gap that digital tools cannot bridge. These limits give the project shape without undermining its direction. The architecture exists for bounded trade and institutional experimentation to proceed, and Chapter 25 returns to the larger question of what happens when these practices compound.

---

Endnotes

^1^ Timothy C. May, The Cyphernomicon (September 10, 1994), the comprehensive FAQ document May circulated on the Cypherpunks mailing list covering cryptography, anonymity, digital cash, and the political implications of strong encryption, https://nakamotoinstitute.org/library/cyphernomicon/. The epigraph is drawn from section 12.3. For the shorter programmatic statements, see May, "The Crypto Anarchist Manifesto" (1988), https://nakamotoinstitute.org/library/crypto-anarchist-manifesto/, and "Crypto Anarchy and Virtual Communities" (1994), https://nakamotoinstitute.org/library/virtual-communities/.

^2^ For readers who want to work through the literature on private institutions and polycentric governance, Elinor Ostrom, Governing the Commons (Cambridge, 1990) is the canonical empirical study of self-organized institutions solving coordination problems without state enforcement. Bruce Benson, The Enterprise of Law (Pacific Research Institute, 1990) and The Law in To Serve and Protect (NYU Press, 1998) cover historical examples of private law and private policing. Edward Stringham, Private Governance (Oxford, 2015) applies the same approach to modern financial and online systems. For the theoretical side, David Friedman, The Machinery of Freedom, 3rd ed. (2014) is the most readable case for polycentric law; Tom W. Bell, Your Next Government? (Cambridge, 2017) covers contemporary jurisdictional innovation. On reputation and commerce under weak enforcement, Paul Milgrom, Douglass North, and Barry Weingast, "The Role of Institutions in the Revival of Trade: The Law Merchant, Private Judges, and the Champagne Fairs," Economics and Politics 2, no. 1 (1990) is the key paper. For the longer civilizational framing, James Dale Davidson and William Rees-Mogg, The Sovereign Individual (1997), though dated in detail, remains the most ambitious attempt to describe the institutional implications of strong cryptography.

^3^ The framework Chapter 6 develops rules out reputation as a property entitlement. What May, Hughes, and Szabo each name is the empirical role reputation plays in anonymous business: counterparties form decisions based on signed attestations and consistent behavior over time, not on any property right in being well-thought-of. The reputation systems this chapter describes carry empirical signals; they do not implement ownership claims over what others believe. See Chapter 6, §6.5; Chapter 21, §21.5; and Stephan Kinsella, "Defamation as a Type of Intellectual Property," in A Life in Liberty (Mises Institute, 2024).

^4^ Eric Hughes, "A Cypherpunk's Manifesto" (1993), https://www.activism.net/cypherpunk/manifesto.html: "Since we desire privacy, we must ensure that each party to a transaction have knowledge only of that which is directly necessary for that transaction."

^5^ Nick Szabo, "Formalizing and Securing Relationships on Public Networks" (1997), https://nakamotoinstitute.org/library/formalizing-securing-relationships/. Szabo identifies search, negotiation, commitment, performance, and adjudication as the phases that smart contracts and digital institutions must address.

^6^ Nick Szabo, "Negative Reputations" (1996), https://nakamotoinstitute.org/library/negative-reputations/. Szabo isolates the tension the main text describes: local nyms preserve privity, but once a pseudonym accumulates too much negative information it can be discarded for a fresh one unless counterparties demand stronger continuity or non-negative credentials.

^7^ Jan Camenisch and Anna Lysyanskaya, "An Efficient System for Non-Transferable Anonymous Credentials with Optional Anonymity Revocation," EUROCRYPT 2001, is the foundational paper for anonymous credentials; BBS+ signatures and the W3C Verifiable Credentials standard carry the idea into more recent practice. Semaphore, maintained by Ethereum Privacy and Scaling Explorations (https://semaphore.pse.dev), provides anonymous group-membership proofs suitable for anti-sybil signaling and has been used in projects including Zupass, Worldcoin, and Bandada. UniRep (https://developer.unirep.io) is an attestation-based protocol specifically targeting reputation: attesters sign statements about a user, the user later proves aggregate properties under zero knowledge, and linkability between the proof and the underlying attestation history is broken. These systems remain research-grade or early production, not yet deployed marketplace infrastructure, but the primitives are established.

^8^ Nostr Improvement Proposal 05 (Mapping Nostr keys to DNS-based internet identifiers) defines the DNS- and HTTPS-backed identifier mapping used for human-readable Nostr names, https://github.com/nostr-protocol/nips/blob/master/05.md.

^9^ Nostr already contains protocol pieces useful for challenge-response proof of key control. NIP-42 standardizes relay authentication challenges (https://github.com/nostr-protocol/nips/blob/master/42.md), while NIP-59 defines gift wrapping: a three-layer scheme of rumor, seal, and gift wrap that obscures message metadata including sender, recipient, and timestamp (https://github.com/nostr-protocol/nips/blob/master/59.md). NIP-59 provides privacy for message routing but is not identity proof by itself.

^10^ Selective-disclosure tooling has reached production scale on both community and state sides: Semaphore and Zupass at conference-scale events, zkLogin for OAuth-derived wallets on Sui, W3C Verifiable Credentials as the generic format, ISO/IEC 18013-5 mobile driver's licenses in several countries; whether the tooling delivers the privacy it encodes depends on verifier-side posture, not protocol feature set. Semaphore, https://semaphore.pse.dev/. Zupass, https://zupass.org/. zkLogin on Sui, https://docs.sui.io/concepts/cryptography/zklogin. W3C Verifiable Credentials Data Model, https://www.w3.org/TR/vc-data-model/. ISO/IEC 18013-5:2021, "Personal identification, ISO-compliant driving licence, Part 5: Mobile driving licence (mDL) application," https://www.iso.org/standard/69084.html. Apple Wallet driver's license support and state rollout at https://support.apple.com/guide/wallet/use-your-drivers-license-or-state-id-apd1b8b6b87e/web. EU Digital Identity Wallet reference implementation at https://github.com/eu-digital-identity-wallet. On the verifier-side incentive problem, see Center for Democracy & Technology, "The Limits of Zero-Knowledge Proofs as a Privacy Solution," https://cdt.org/.

^11^ Nick Szabo, "Rights, Remedies, and Security Models" (2004), https://nakamotoinstitute.org/library/rights-remedies-and-security-models/. Szabo's point is that digital systems can enforce only a narrow subset of what courts handle in the full range of disputes, because computer security relies on self-enforcing mechanisms and logs while law relies on remedies, procedure, and force behind judgment. That distinction is the one this section is drawing.

^12^ Stephan Kinsella, Alessandro Fusillo, David Dürr, and Patrick C. Tinsley (Hans-Hermann Hoppe, adviser), The Universal Principles of Liberty (August 14, 2025), https://stephankinsella.com/principles/, is one such effort. It articulates a systematic libertarian private-law baseline including non-aggression, self-ownership, original appropriation, voluntary exchange, and rectification, alongside an Article IV on "Decentralised Legal Order" that explicitly endorses competitive arbitration and customary evolution of law without coercive monopoly. The Scope and Hierarchy section is explicit that adopters may build Secondary Codes and Laws on this baseline, with disputes over incompatibilities resolved by impartial arbitration. The document was itself inscribed on the Bitcoin blockchain, which illustrates how cryptographic rails can carry the institutional artifacts a parallel economy depends on.

^13^ On proxy merchants and adjacent boundary roles, see Smuggler and XYZ, Second Realm: Book on Strategy (Liberty Under Attack Publications, 2015), especially the sections on specialization, proxy merchants, shared services, and OTC exchangers. For the earlier transition logic behind the same move, see Samuel Edward Konkin III, New Libertarian Manifesto (1980). These sources are useful here because they name a real institutional function that the cryptographic stack alone does not name.

^14^ Satoshi Nakamoto, "Bitcoin: A Peer-to-Peer Electronic Cash System" (2008), https://bitcoin.org/bitcoin.pdf. Section 4 describes the chain of digital signatures that constitutes ownership in the Bitcoin protocol; the multisignature extension - enabling M-of-N key arrangements - was introduced via the OP_CHECKMULTISIG opcode in the original codebase and later standardized in P2SH (BIP 16, January 2012) and P2WSH (BIP 141, November 2015). For the BIP 16 specification, see https://github.com/bitcoin/bips/blob/master/bip-0016.mediawiki. For BIP 141, see https://github.com/bitcoin/bips/blob/master/bip-0141.mediawiki. The two-of-three arrangement described in the main text is the structure Bisq uses for its escrow mechanism: https://bisq.network/faq.

^15^ Kleros is the most widely deployed protocol-governed dispute resolution system: an Ethereum-based system in which disputes are submitted on-chain, jurors staked in PNK tokens are selected by Schelling-point coordination, and decisions are enforced through smart-contract fund release. Kleros, https://kleros.io; technical whitepaper: Clément Lesaege and Federico Ast, "Kleros: Short Paper v1.0.7," https://kleros.io/whitepaper.pdf. For the Aragon Court variant (now Aragon Govern), see https://aragon.org. An academic treatment of the Schelling-point coordination mechanism underlying token-curated juror selection is Thomas Schelling, The Strategy of Conflict (Harvard University Press, 1960), chapter 3. These systems handle narrow on-chain disputes reliably; their procedural depth for complex off-chain fact disputes remains limited by the jury's inability to inspect evidence outside what is submitted on-chain.

^16^ On credit, trade finance, and the capital structure of production in a free market, see Murray N. Rothbard, Man, Economy, and State, 2nd ed. (Ludwig von Mises Institute, 2004), chapters 5–6, which analyze capital goods, stages of production, and the time-preference theory of interest without which credit cannot be understood. Jesús Huerta de Soto, Money, Bank Credit, and Economic Cycles, 3rd English ed. (Ludwig von Mises Institute, 2012), traces the historical development of credit instruments including bills of exchange and the institutional conditions under which commercial trust makes production financing possible. The gap identified at the end of §24.7 - that payment and communication tools have outrun the institutions for financing ongoing enterprise - maps precisely onto the distinction Rothbard draws between the money relation and the credit relation: money moves purchasing power through space, credit through time, and the institutional prerequisites for each are different.

---

<- Previous: Implementation Strategy |

-> Next: Building the Parallel Economy |

The Praxeology of Privacy -- third edition. New chapters publish daily at 1600 UTC.