Z00Z logo

Z00ZBlockchain

Policy-Shaped Money

Scenario guide for bounded policy, vouchers, rights, smart-cash state machines, receiver safety, and non-VM programmability.

Policy-shaped money is where Z00Z becomes more than confidential transfer without becoming a generic public contract platform in disguise. The key claim from Smart Cash and Assets, Rights, And Vouchers Whitepaper is that bounded meaning should travel with the spendable object itself. Expiry, merchant scope, recurring windows, redemption limits, refunds, or staged release can live inside a voucher or right without forcing the whole workflow into visible public application state.

The Object Split That Makes This Family Work

The corpus keeps returning to one clean triad.

Object Main meaning Why the split matters
Asset Final spendable value Native cash should stay clean and legible
Voucher Conditional value Bounded policy and redemption can exist without making cash itself “dirty”
Right Authority without value Delegation and action control do not have to be hidden inside money

This is the reason policy-shaped money belongs in a separate family. The interesting point is not that “rules exist.” The interesting point is that the rules do not have to live in a public smart-contract account surface by default.

What The Chain Is Actually Checking

The smart-cash paper is careful here. The chain does not verify every hidden business rule in the broadest possible sense. It verifies a narrow public settlement boundary over typed artifacts and bounded policy surfaces.

What the public layer can check What still lives locally or in surrounding workflow
Structured settlement evidence, replay safety, and policy-facing transition consistency Richer service, merchant, or issuer workflow meaning
Whether the object stays within the declared bounded settlement grammar Whether every business process around the object was socially or commercially ideal
That the resulting public transition is well formed That the system has become a general hidden execution platform

That distinction is what keeps “smart cash” stronger and more honest than vague private-programmability language.

Scenarios That Fit This Family Well

Scenario Why it fits
Merchant-bound voucher or coupon The restriction belongs to the object, not to a public merchant contract
Subscription slice or recurring claim The user can hold a bounded claim instead of a broad recurring account allowance
Refund or staged-release note Intermediate purchase logic can stay object-local and privately settled later
Partially redeemable claim Conditional value can shrink or convert without redefining native cash

These scenarios belong together because the underlying novelty is the same: private object-local policy rather than visible application-state choreography.

Why This Family Is Different From A Public Smart Contract

Public contract systems usually expose the policy as public state. The corpus argues for a different center:

  • the holder carries the bounded object privately;
  • local meaning and acceptance can happen before final checkpoint settlement;
  • the public surface sees only the narrower settlement evidence it needs.

That is why the family is described as smart cash before it is described as general private programmability. The bounded object is the primitive, not an unrestricted hidden execution engine.

Current Versus Target Posture

Surface Current posture Target direction
Object-level policy thesis Strongly articulated in the corpus More runtime families can widen it over time
Native cash staying clean Clear current design rule The docs should keep preserving that boundary
Rich voucher and right families Architecturally coherent, but not all equally mature More policy engines, action pools, and settlement families can still land later
Universal private VM interpretation Explicitly rejected as the default story Remains outside the main wedge unless future work proves otherwise

This maturity split is important because the family is powerful precisely when it stays bounded.

Why This Family Comes Before Institutional Or Agentic Cases

The use-cases paper places policy-shaped money near the front because it strengthens the core without yet depending on full enterprise disclosure tooling or full agent-rights ecosystems. It is a cleaner next step after offline cash and private external-asset rights:

  • offline cash proves private local exchange plus later settlement;
  • external-asset rights prove private reassignment over outside value;
  • policy-shaped money proves that bounded rules can travel with the object itself.

After that, organizational, distribution, and capability-rights scenarios become much easier to read as extensions of the same model.

Policy And Action-Pool Boundary

flowchart TB Cash["Native Z00Z asset<br/>clean final value"] Voucher["Voucher<br/>conditional value"] Right["Right<br/>authority without value"] Policy["Bounded policy<br/>expiry, scope, refund, redeem"] ActionPool["ActionPool<br/>declared allowed actions"] Wallet["Wallet safety<br/>inspect, reject, quarantine"] Settlement["Checkpoint settlement<br/>narrow public evidence"] Cash --> Settlement Voucher --> Policy Right --> Policy Policy --> ActionPool ActionPool --> Wallet Wallet --> Settlement style Cash fill:#F3E5F5,stroke:#8E24AA,stroke-width:1px,color:#4A148C style Voucher fill:#F3E5F5,stroke:#8E24AA,stroke-width:1px,color:#4A148C style Right fill:#F3E5F5,stroke:#8E24AA,stroke-width:1px,color:#4A148C style Policy fill:#F3E5F5,stroke:#8E24AA,stroke-width:1px,color:#4A148C style ActionPool fill:#ECEFF1,stroke:#546E7A,stroke-width:1px,color:#263238 style Wallet fill:#FFE0E0,stroke:#D32F2F,stroke-width:1px,color:#B71C1C style Settlement fill:#F3E5F5,stroke:#8E24AA,stroke-width:1px,color:#4A148C

The diagram separates final cash from objects that carry policy. Native cash should stay clean: it should not become an arbitrary bag of hidden restrictions. Vouchers can carry conditional value with redeem, refund, expiry, partial redeem, or acceptance rules. Rights can carry authority without value, such as delegated access or a scoped capability. Policies and action pools define the bounded grammar of what may happen. Wallets then become safety-critical because they must inspect unknown policy, present understandable choices, reject unsupported transitions, and quarantine objects that cannot be interpreted safely.

This is not arbitrary programmable money. A universal private VM would invite the docs to claim that any hidden application can run inside the object. The corpus is narrower and stronger: object-local rules can be designed so the public settlement surface verifies only the necessary transition discipline, while richer workflow meaning remains local, service-side, or issuer-side. That boundary is what lets policy-shaped money stay close to cash instead of turning into public contract state with better privacy marketing.

Unsupported Claims To Remove

Remove claims that say policy-shaped money replaces all smart contracts, proves universal private computation, guarantees refund fairness in every merchant workflow, or lets an issuer impose arbitrary clawbacks on clean cash. Safer language says that bounded vouchers and rights can support explicit conditions, receiver safety, reject or refund paths, wallet quarantine, and checkpointed settlement where the paper-defined object grammar supports those transitions. The assets, rights, and vouchers paper is especially important here because it insists that refund is not arbitrary clawback and that vouchers are not final cash.

For a real user, the most important interface question is “what am I accepting?” The page should make room for policy summaries, unsupported-policy warnings, issuer identity, refund windows, expiry dates, and quarantine behavior. Those details are not UI polish; they are part of receiver safety.

Receiver Safety And Quarantine

Receiver safety is central to policy-shaped value because policy can surprise the holder. A wallet should not silently accept an unknown voucher policy, hidden merchant scope, unclear expiry, refund path, or action pool it cannot explain. Quarantine is the safe state for unsupported policy. It lets the wallet preserve the object, warn the holder, and wait for explicit interpretation or rejection instead of treating every conditional object as ordinary cash.

This is also why native cash should stay clean. If final cash were allowed to carry arbitrary hidden policy, every receiver would have to inspect every payment as a possible trap. By separating asset, voucher, and right, the corpus keeps clean payment, conditional value, and bounded authority understandable.

Refund language needs the same care. A refund path can be an explicit condition of a voucher or policy-shaped object. It should not be retold as arbitrary issuer clawback over final cash. That distinction protects receiver expectations and keeps policy-shaped money from weakening the cash thesis.

Read Assets, Vouchers, And Rights for the object split, Smart Cash for bounded state machines, and Glossary when terms like VoucherPolicy or ActionPool appear.

Evidence and Further Reading

  • Use Cases Whitepaper section 6 explains why this family sits in the top three scenario wedges and why it should be read as object-local policy rather than as broad private-contract theater.
  • Smart Cash sections 4 through 10 are the primary source for the smart-cash boundary, client-side object logic, supported FSM families, and the distinction between bounded rules and universal hidden execution.
  • Assets, Rights, And Vouchers Whitepaper section 7 is the primary source for CashPolicy, VoucherPolicy, ActionPool, core-safe conditions, wallet responsibilities, and package or witness boundaries.
  • Assets, Rights, And Vouchers Whitepaper sections 3, 5, and 6 support the Asset / Voucher / Right split, clean native cash, and conditional-value semantics.
  • Main Whitepaper is the shared source for wallet-local possession, checkpoint settlement, and maturity language that still governs this extension family.