The Instrument Returns: An Introduction to Bitcredit

For months I have written around a specific absence. Bitcoin settles payments and Nostr coordinates speech, and both protocols work as designed. Value moves across space and signals cross any jurisdiction, and still, every post on this theme ended at the same edge. A merchant who needs credit to bridge the supply chain time gap cannot get it from either protocol, and no amount of idle sats in circulation creates the instrument he requires. Previous essays named this gap and sketched the shape of the solution. This one names the project that fills it.

Bitcredit is a peer-to-peer protocol for electronic bills of exchange, settled on Bitcoin, transported over Nostr, complemented by a Chaumian ecash layer, and governed as a DAO under the MIT license. Its domains are bit.cr and bitcr.org, its source lives publicly on GitHub under BitcreditProtocol, and its pilots are already live on Bitcoin Testnet across soft commodities including cacao, coffee, wine, and timber. Design has moved past whitepaper stage. Components are shipping as open Rust code, with mints running in production while businesses in several countries issue digital drafts against one another and redeem them into bitcoin.

The protocol has a small number of moving parts, and the architecture tracks directly onto the categorical distinctions the prior essays developed. Every piece exists to reconstruct a property the pre-1914 bill market possessed and that the legacy banking system either destroyed or never reproduced.

At the center sits the ebill, an electronic bill of exchange executed and circulated through the Bitcredit eBill software. A buyer, who in the Bitcredit convention is also the drawer of his own promise, issues a written, unconditional order to pay a specified sum on a specified date to the seller, who holds the bill as payee. By signing at issuance, the buyer accepts the obligation and becomes primarily liable. What the payee holds is an instrument with legal recourse through the worldwide framework of bill of exchange law, descending from the 1930 Geneva Uniform Law and its common-law counterparts, which means a default triggers a court title of execution against the debtor's assets in any ratifying jurisdiction. The court is the legal backstop and not the operating enforcement layer. Historical bill markets ran first on merchant ostracism, where a defaulter lost access to all future credit across the network, and second on mercantile arbitration through bodies the merchants themselves convened, with court execution reserved for the cases that survived both filters. Signatures are digital while settlement is bitcoin, and this layered enforcement mechanism is the one that made bills bankable for centuries. A holder has options: endorse the bill onward to pay a supplier, sell it to a third party for working capital, present it at maturity for payment in the currency of denomination, or take it to a Bitcredit mint and convert it to ecash. Drawing the bill in bitcoin directly or in a fiat unit is a choice with consequences. Geneva framework rules presume a sum certain in money, which most ratifying courts read as a recognized national currency, so a bill denominated in a fiat unit with bitcoin settlement carries the strongest legal recourse, while a bill denominated directly in bitcoin gains in unit-of-account integrity what it concedes in jurisdictional clarity. Bitcredit supports both, and the merchant chooses which property he needs more.

The ebill alone solves the merchant's credit problem between issuance and maturity, but it does not solve his wage fund liquidity problem. A Turkish textile producer who accepts a ninety-day bill from his German buyer cannot pay his loom operators with that bill. He needs something that looks like cash today and stays denominated in the same unit as the obligation he is holding. The mint layer answers this need.

A Bitcredit mint runs Wildcat, the open-source Rust implementation that takes in accepted ebills and issues blinded ecash tokens against them. The mechanism is Chaumian. The mint signs tokens blind so it cannot link subsequent spends back to issuance, the holder circulates the tokens as bearer cash, and the final redeemer brings them back to the mint at maturity to claim settlement from the underlying bill. Each token is a divisible portion of a real bill backed by real goods in transit, which means the ecash inherits the self-liquidating property of the indivisible non-fungible instrument that birthed it. When the consumer pays for the finished goods with ecash, the seller's ecash pays the mint, the mint retires the outstanding tokens, and the credit extinguishes itself in the same cycle the prior essays traced through the London discount market of 1910. The holder controls the bearer token at all times and can redeem to bitcoin at any point, with one honest qualification. Redemption depends on the mint honoring its obligation, and a mint that vanishes or refuses leaves the holder with a token that no one will accept. The protocol disciplines this risk through three layers: the e-IOU guarantee pool that bridges the gap until court recovery, public competition among mints over published guarantee ratios, and the bearer token property that lets a holder exit to a different mint as soon as confidence wavers. The mint itself can be operated by anyone willing to post guarantee capital and compete on fees, service level, and the ratio of guarantees to issuance.

Competition among mints matters. The nineteenth-century London discount market worked because a dozen or more houses bid for every bill, and the rate at which any given bill cleared reflected aggregated commercial information about creditworthiness, goods, season, and route, with the acknowledged caveat that the rate also tracked Bank of England policy and was never a pure market signal. Wildcat mints recreate that competitive structure digitally and inherit the same caveat that any monetary backdrop will shape the absolute level of rates. A mint that prices guarantee capital conservatively and honors its tokens reliably will attract endorsement flow, and a mint that mispays or vanishes loses its capital. No central authority sets the discount rate. The rate emerges from the same mechanism that set it in 1910, namely the competitive willingness of independent operators to post their own capital against documentary instruments (Urkundengeld) they have examined themselves.

Default is the harder problem, and the guarantee layer exists to bridge and, where needed, absorb it. The protocol operates on an asset called e-IOU, or Enhanced IOU, which functions as special guarantee capital bridging the gap between a bill default and eventual court-based recovery. The acceptance houses of the old City of London played a related role when they added their stamp to a bill, pledging reputation and capital that the underlying obligation would clear. Bitcredit encodes this function into a programmable asset that lives on a public ledger and pays out by protocol logic. The DAO issues e-IOU as a reward for contributions to the project, creating a demand pipeline where every increase in trade finance volume raises the value of the guarantee pool that collateralizes it. The asset is the structural answer to the problem that destroyed every previous P2P lending attempt, because exposure flows across a pool of dedicated guarantee capital and disperses across every endorser who has touched the paper, and because that capital is committed and not speculatively redeployable.

Transport runs over Nostr. The project ships its own relay implementation, bcr-relay, alongside a Postgres backend for rust-nostr that lets relay operators maintain the volume of signed events active ebill circulation produces. The choice reuses existing infrastructure the parallel economy already maintains and avoids introducing a dedicated overlay. Nostr keypairs double as bill signatures, and the transparency of the relay network means endorsement chains and reputation histories propagate to every counterparty who cares to check. The graduated trust dynamic the prior essays described, in which a new keypair can only endorse trivial amounts while long-lived keypairs accumulate credit capacity through visible history, runs on top of existing Nostr social graphs without requiring a separate identity layer.

Governance is a DAO and not a company, with the repositories under MIT license and the roadmap visible on GitHub. The DAO construction is a survival measure. A company that issues the bills, runs the mints, sets the rules, and holds the keys is a bank in everything but name, and a bank is a jurisdictional target. A protocol with no legal entity at the center, assembled from independent node operators and mint operators and endorsers and holders, presents no surface for the kind of capture that absorbed every prior attempt to reconstruct commercial credit in the digital era.

Over the next several posts I will work through this architecture in detail. Coming pieces will examine Wildcat's mint construction and the cryptography that keeps the ecash non-custodial, the mechanics of endorsement chains under pseudonymous identity, the design of the e-IOU guarantee pool and its economics, the interaction between Bitcoin settlement and the worldwide legal framework for bills, and the specifics of what the pilots in cacao, coffee, wine, and timber are learning about real commerce on this rail. Each piece will think through the engineering and economic problems the protocol has to solve, where it succeeds, where questions remain open, and what the appearance of this infrastructure means for the parallel economy that has been waiting for its credit layer.

The merchants who financed global commerce through 1914 assembled their instrument themselves, through competitive practice, under no one's permission. That instrument died. Its reincarnation is now running code.