--- title: >- Bitzion: how Bitcoin becomes a state ... This a publication by Moldbug. Full of good ideas, but it is a digression from my focus, and like all Moldbug, unduly verbose. Core idea. Hodlers, not miners, should have the power, and hodlers need a human board that represents them. But representing this as forming a state is going get us killed. Safer to represent it as forming a sovereign corporation. #Moldbug It probably won’t happen. It probably should. Statelike nonstates fascinate all political engineers. Can a nonstate become a state? How are states born? What paths, if it wants to live, should a baby state follow? History is full of examples. But most of them are too ancient for most of us to parse. The vulgar and legible present is frustratingly short of high-quality newborn states. One path to statehood is military. The CJNG or Jalisco New Generation Cartel, a Mexican narco gang, recently posted a video of an impressive military parade, with hundreds of uniformed soldiers and tens of armored vehicles—almost ISIS tier. ISIS in its day, as Gladstone said of the Confederacy, “had made an army, and made a nation.” But having made these things—a state must also keep them. Vae victis! In the end, sovereignty is empirical. Cartels, ISIS, the Confederacy and Rhodesia aren’t super encouraging examples. Yet after this list of almost-states comes very solid and palpable nations, like Israel, Singapore and our own dear United States. Empirically, states do get born. So, empirically, is Bitcoin a state? Or almost a state? Can it become a state? Or at least, a virtual state? Bitcoin has not yet made a nation. It has certainly made a treasury. Its path is not at all military—except if math is a weapon. But isn’t math a weapon? Surely math has as good a chance as the CJNG, and you wouldn’t want to mess with the CJNG. “Pura gente del Señor Mencho!” In fact, Bitcoin and the CJNG even have similar market caps... Three attributes of sovereignty When we examine the early life of successful states, we see that newborn regimes which live to become stable adults tend to focus on three attributes: independence, legitimacy, and coherence. Independence means the regime does not depend on the will of any outside power. Legitimacy means that the regime considers itself authentic and official, and conducts itself with the dignity of a state. Coherence means the whole state can act effectively as a single agent, with a united regime calling on the full resources of all its citizens. In the ways that Bitcoin works well, it has all three. Abstractly, the ledger itself is independent, legitimate and cohesive. But as a new state rises, reality tests it more and more stringently. Some respond to hard tests by becoming stronger. Others crumble. Bitcoin today has cracks in all three attributes of statehood. These cracks may or may not need to be filled. Filling them may or may not result in any kind of success. We can still describe how they should be filled—as a theoretical lesson in political engineering. We can also describe how Bitcoin, with these vertical cracks filled, can also expand horizontally. It will both increase its effectiveness, and expand its scope. We’ll project this growth outward until Bitcoin turns into Bitzion—a purely hypothetical utopia, which needs no fiddling with definitions to be a clear and obvious digital state. Historically, Bitcoin has been extremely resistant to innovation in governance. And, as we’ll see, the principles of effective digital governance are extremely counterintuitive. This makes it unlikely that anything like Bitzion will actually happen. But since it could happen, it makes the best possible kind of thought-experiment. Bitcoin: from algorithm to state Again, while Bitcoin has made neither an army nor a nation, it has made a treasury. This treasury is its market cap, which indeed resembles the balance sheet of a minor state—without any of the assets. But having made a treasury, it must keep it. One way to price Bitcoin is as a call option on monetary sovereignty. If Bitcoin becomes a state, or merges with a state—becoming either a standard hard currency, or a national or global hard currency, de facto or de jure—we can expect the option’s price to considerably increase. If this outcome grows less likely, the option’s price will fall. Are “becomes a state” and “becomes a standard” really equivalent? Certainly not without an argument—and that argument is the crux of this essay. The difference between Bitcoin as a standard, and Bitcoin as a state, is that a state has a government. The argument: to prevail as a monetary standard, Bitcoin must up its game. Its most effective way to up its game is to form its own government. But once it forms a government, it is a state—contradicting its libertarian, decentralized ideology. Interestingly, the 13 states faced a similar question in the mid-1780s. The birth of a centralized national government contradicted much of the ideology of the Revolution. Yet the Congress of the Confederation was such a shitshow—almost an 18th-century UN—that the pre-Constitutional United States has been almost written out of history. The case for Bitcoin as a state is that a monetary standard with a government can work much better than one without one. Bitcoin already has a government; but it is (mostly) algorithmic. A human government can work much better than an algorithmic one. All Bitcoiners agree that not having a government is an advantage, since a government is inherently a central point of failure. While this is the truth, it is not the whole truth. Having a central decision point is also an advantage. As hackers, we hate choosing between two such advantages. We would like them both. And if we cannot have all of both, perhaps we can at least get most of both. Such is the good old art of the tradeoff. Logical case for a Bitcoin government Why does Bitcoin need a (human) government? Bitcoin at present is a state without a government. If there is one thing political scientists know, it is that there is no such thing as a state without a government. When a state tries to have no government, it always has something. A blockchain is statelike because independence is the whole point of a blockchain. Bitcoin or any other blockchain has two layers of governance: serialization, which is inherently algorithmic (execution of the ledger protocol); and oversight, which is inherently human (management of the protocol and its reference implementation). Government is human; it means oversight. Bitcoin needs a human central government because centralized governments are more effective than decentralized governments. An effective government can be trusted to choose the best serialization algorithm; so algorithmic serialization is just an aspect of human oversight. Bitcoin today has serious oversight problems. No one even agrees on who has the responsibility of overseeing the blockchain—miners, nodes, or developers? This is why Bitcoin is a state without a government. The only correct answer is hodlers—who are the only group not now represented. They could be represented only by constructing a central government that represents them. This is just what they should do—though it would change the whole story of Bitcoin. But since Bitcoin’s independence today is secured by decentralization, any central government would need a different security mechanism to secure its independence. One such mechanism is pseudonymity. Pseudonymity has many technical limitations and is a broadly inferior substitute for decentralization. Engineers, in pursuit of the perfect tradeoff, must often use limited and inferior substitutes. Intuitive case for a Bitcoin government Ultimately, what is Bitcoin? It is a set of human beings with private keys, who all use a technical tool that lets them automatically agree on digital facts. Bitcoin is the people, their keys, and the ledger—the public record of how much money every key owns. Bitcoin’s algorithm and infrastructure are a cool tool that these people have used to act coherently for their mutual benefit—without uniting or cooperating in any other way. Nakamoto consensus is a rope of sand that can actually pull a load. The hodlers, a completely atomized non-society, nonetheless act coherently when they save in coins. Collective coherent action for mutual benefit is a tool of essentially unlimited power. Algorithmic, decentralized governance has unlocked a tiny slice of this power. The normal way in which sets of human beings undertake collective coherent action is through central organization. This normal government can unlock the rest of the pie. Bitcoin, by producing governance without a government, is the exception that proves the rule. What this exception tells us is that whatever Bitcoin has achieved so far, these achievements are a small fraction of what it could achieve with a government. While this magic rope of sand is cool and all—while Bitcoin could not have been born without it—what about switching to, like, a regular nylon rope? Must this be done? Why must it be done? Can it be done? How would it be done? If you have a moment or two, dear reader, we’ll answer these questions and more. Bitcoin’s oversight is a mess Bitcoin has a reputation for terrible oversight. This reputation is not the fault of anyone involved. It is Satoshi’s fault, for leaving oversight to anarchy. It is not even clear which group holds the power of oversight: nodes, miners, devs, hodlers or users. (Satoshi was a genius; but not a god.) Fact: anarchy can make anyone behave badly. The only proper interpretation of Bitcoin oversight is that Bitcoin’s principals are its hodlers. Bitcoin is the ledger. The blockchain is an agent that maintains that ledger. The Bitcoin infrastructure must be operated in the exclusive service of the ledger, just as any agent must act in the exclusive service of its principals. Had Satoshi made this clear, or even built a mechanism to enforce it, much suck might have been averted. Anarchy is not the end of the world. But anarchy still sucks. Objectively minor meta-decisions, like setting the block size, turn into Icelandic sagas. Larger changes are inconceivable. Bitcoin, the OG of blockchains, is the couch potato of blockchains. Everyone knows this, so there is no reason to dwell on it. Bitcoin’s serialization isn’t perfect, either Bitcoin’s serialization—maintaining the integrity of the ledger—has a perfect record. No power has ever infringed the independence of Bitcoin. Yet hash proof-of-work is not perfect. It is not perfectly secure; and it is extremely expensive. Today, 65% of the world’s mining capacity is in China. So it would be straightforward for the Chinese government to squeeze Bitcoin. The CCP has not felt the need to try—not because Bitcoin is too strong to attack; because it is not important enough to attack. This is not independence but the illusion of independence. If Bitcoin is indeed an call option on sovereignty, these kinds of illusions are dangerous. The cost of mining is the price of independence. Currently this price is huge: perhaps 5% of market cap per year. Imagine gold had a high vapor pressure—every year, 5% of every Krugerrand boiled off into the atmosphere. In this alternate universe, no one would even think of using gold as money. Bitcoin hodlers do not think they are paying this immense wealth tax. They are. And it seriously hampers the competitiveness of Bitcoin as a currency. Let’s look closely at how this works—these details matter. The price of Nakamoto consensus Mining revenue comes from fees and block rewards. Block rewards are straight-up monetary dilution. Proper accounting must measure ownership of any equity or cryptocurrency not as the number of units, but as the fraction of units outstanding. So creating 1% more units is exactly the same as a 1% wealth tax across hodlers—though easier to implement. Block-reward dilution is bounded, and fees are not dilutive. But fees have the same direct impact as rewards: since they need to pay for electricity, they are sold for fiat. Miners are generally not hodlers. So \$5B of mining means \$5B of selling. Obviously, the seller is the natural enemy of the hodler. As a currency—a stable bubble—Bitcoin acts like a battery or a pressure tank. Its market cap is the pressure in the tank, or the energy in the battery. To counteract \$5B in annual outflow and keep the price flat, Bitcoin needs \$5B of annual inflow. This mining leakage gets heavier as the price rises—a vicious stabilization loop which tends to cap the price. This is how the cost of governance by Nakamoto consensus costs the hodlers money—and tends to make hyperbitcoinization impossible. Imagine Bitcoin’s price if it had no mining leakage—meaning zero automatic outflow. Everyone selling would be a defecting hodler. There has never been a large number of these, even in the worst crashes. Algorithmic governance was essential in Bitcoin’s childhood. It created a system that was owned by no one. From its genesis block it had this essential quality of a state. Nakamoto consensus made Bitcoin independent from day one. No other design could have achieved this result. But statehood has its own ruthless laws. No startup can cling to its teddy bear. All must change as they grow. Some of those changes will even be in engineering. Today, the cost of Nakamoto consensus is keeping Bitcoin from advancing as a monetary standard; and its unbalanced decentralization leaves it under China’s thumb. Bitcoin imperialism By all except Bitcoin’s proof-of-work purists, it is generally admitted that proof-of-stake is the path forward in both layers of governance—serialization and oversight. Many alternate chains already use POS—an unfortunate acronym—as well as smarter agreement protocols, chain sharding, and all kinds of other fun stuff. (In fact, it would be hard to boot up a new proof-of-work chain today—it would be attacked as soon as it was worth attacking.) Why not just switch to a newer-generation blockchain platform? Alas, none of these alternate chains can solve the problems with Bitcoin. Instead, Bitcoin will have to defeat them and erase them utterly from the earth. Most Bitcoiners believe this victory is in some sense inevitable, and will happen on its own. Is it happening on its own? Or is anyone thinking about how to make it happen? This is the mindset of Augustulus, not Augustus—a poor start for any empire. For it does need to be made to happen. It is not just a matter of waiting for altcoins to go away. Rather, Bitcoin needs to actively clean them up. This uber-hardcore flavor of Bitcoin maximalism—call it Bitcoin imperialism—would probably shock even most Bitcoin maximalists. But it is an inherent consequence of the right theory of why Bitcoin is worth anything at all. Parallel ledgers considered harmful An alternate chain is a parallel ledger. All ledgers must be unified. Any partition of monetary energy makes not only each side of the partition, but both sides put together, a worse bet than the unified ledger. And there is no stable equilibrium between the sides of the partition. In any real economy, at least one asset must be overvalued. That asset is money. But given one money that is both standard and perfect, the only stable equilibrium is one in which there are no other bubbles, and all other assets are priced by yield in that standard. Any such asset which has no use has no value, and will sell for no price. There is one mathematical revolution in money. Forks and altcoins are just bad for it. The revolution in money will be complete when there is one standard digital money. This means one standard ledger—the “Highlander principle.” This standard ledger has to begin with Bitcoin. Bitcoin is the gorilla. In any world where Bitcoin ends up worthless, lesser cryptos end up worthless too. So there are two ways to resolve any parallel ledger: merge it with Bitcoin, or send it to zero. Generally, any alternate chain worthy of any notice at all has some technical advance, purported or real, over Bitcoin. This may be privacy, computation, finalization time, mining leakage, Byzantine security, or some other useful area of improvement. But the real competition is monetary competition between ledgers. This, it is hard to imagine Bitcoin losing. Muscle matters more than mind. The chimpanzee can ask for a banana in sign language. The gorilla is three times as big as the chimpanzee. The traditional Silicon Valley approach to this conundrum is for the gorilla to just kill the chimpanzee and steal his banana. Sometimes, the chimp can jump the gorilla from behind, and get him with a rock. Neither outcome seems quite right. A cryptosystem that aims at the legitimacy of a state cannot behave like any kind of ape. We’ll return to this issue with an actual plan. However: there can be only one. Proof-of-stake and political engineering Altcoins delenda est. But while their parallel ledgers must vanish with the Oscans and the Samnites, as their genuine engineering innovations are shamelessly looted like Houston lifting the Nazi space program, many have also innovated in governance. Scholarship asks us to start by noticing their work; and we will start by following it. While proof of work is one thing, proof of share is a huge family of things. This family is united by one general principle. The general principle of proof-of-stake is that the ledger belongs to its owners—who must therefore be charged with governing it. That principle is sound. Bitzion uses it. But it is as general as the principle that the nation must be governed by its citizens—and as vague. Even if everyone agrees on democracy, there are infinitely many possible democratic constitutions. Proof-of-stake is not democratic, of course, because power is by wallet, not by head. The ledger belongs to its owners, in proportion to their ownership. The ledger is managed for the benefit of its owners, in proportion to their ownership of it. The proper term for voting by wallet is plutocracy. That this is a pejorative makes it all the more delightful. But a plutocratic republic is still a republic—and faces the same general challenges in political engineering that vex any democratic republic. Here we will say democracy when we mean plutocracy. Since head-counting is impossible, there is no ambiguity; and euphemisms are nice. Most proof-of-stake altcoin designers are not trying to innovate in political theory. But their political engineering is still awful—because it comes from the awful fashions of an awful period, in which they happen to live. Why would they realize that following the fashionable ideas of their era would produce awful results? If everyone is using the same bad ideas, everyone’s results will be awful, and no one will notice. They will just think the problem is very hard—which it is. Let’s look at how to take this principle, proof-of-stake, in an unusual direction. Instead of building ideal governance structures, let’s reengineer existing governance structures. These designs are not fashionable—since they predate the 20th century. No one would invent them now. But everyone still inhabits them. Isn’t that weird? If our fashionable ideals are realistic, this plan will just mean inheriting ancient cruft. If today’s ideals are not realistic, it may produce dramatically improved governance. From Bitcoin to Bitzion To turn Bitcoin, the ledger and blockchain, into Bitzion, the digital state, we adopt the plutocratic principle of allocating authority and responsibility by stake. We declare that Bitcoin is the ledger, not the protocol or the infrastructure. We declare that the ledger is owned by the hodlers; it should be governed by the hodlers, for the hodlers; and we, the hodlers, will cultivate it into a virtual state that will astonish the world. Although it uses proof-of-stake, Bitzion makes three large theoretical adjustments to the viewpoint of most classic altcoin-style POS governance designers. These are not technical changes; but they lead toward completely different technical challenges. First, most designers focus on ledger governance (algorithmic serialization); we’ll focus on systems governance (human oversight). Second, most designers consider direct democracy the ideal form of democracy. Actually, indirect democracy creates much more effective governance structures. Third, most designers think decentralization is the only tool for secure independence. But there is another such device: pseudonymity. Serialization, oversight, and trust Serialization means recording a fair, unified, reliable and independent ordered list of transactions. Serialization is the job of every blockchain. Centralized, trusted serialization is easy. Decentralized, untrusted serialization is hard. So serialization is what most cryptosystem architects think of, when they think of governance. Of course, humans cannot be in the serialization loop. Serialization is inherently algorithmic, if just because it has to be fast, secure and scalable, as well as fair (it does not censor or reorder transactions) and independent (no outside force can influence it). Here is a small philosophical crack in the thinking of most cryptointellectuals. Why is Bitcoin like a state? Because it is fair, reliable, and independent. Why is it fair, reliable, and independent? Because it is decentralized. We all agree on this, but— It is easy to overlook the small but important fact that what users value in Bitcoin is not its decentralization. What users value is a consequence of its decentralization: that Bitcoin is fair, reliable and independent. More broadly: that it is legitimate, effective, and sovereign. Still more broadly: that it is good at being like a state. The Bitzion thesis is that Bitcoin has ways to become much better at being like a state. If Bitcoin is an option on statehood, this should make its price much higher. Any tactical path that produces this result must be at least worth considering. It is essential that we understand this difference between cause and consequence. We trust that Bitcoin is fair, reliable, and independent, because math proves that its decentralized protocol makes it so. Or so the nerds tell us. Most of us cannot do the math—we probably don’t even know what an elliptic curve is. Byzantine what? But we trust the nerds. Trust is beautiful. Suppose we trust that Bitcoin is fair, reliable, and independent, because it is run by the god Apollo. Apollo keeps the ledger on a big SCSI RAID rack in his basement, with a nest of ribbon cables running into a Compaq 386 PC-XT. It’s as fast as Nakamoto consensus, and even as reliable—because he’s Apollo, and Apollo is perfect. Or so the priests of Apollo tell us, and we trust the priests. Trust is beautiful. The only relevant statement in both cases is: “we trust that Bitcoin is fair, reliable, and independent.” The cause of trust, whether decentralization or Apollo, makes no difference. What counts is the trust itself. (It’s better if the trust is rational, though.) Besides serialization, which is governance in the proper blockchain sense, all chains have parameters; all chains have protocols; some have full operating systems. The power to update these rules, values, and systems is oversight. Oversight is an inherently human function—though the identity and procedure of those humans may depend on the state of the ledger. Since all blockchains require some oversight, there is no choice but to trust the oversight nerds. Trust is beautiful. As previously mentioned, oversight in Bitcoin has historically been a shitshow. In POS altcoins, extending voting by stake from serialization to oversight is a natural idea. But that makes oversight a natural afterthought. Bitzion attacks the same problem from the other end. It reasons: effective oversight can choose the best serialization algorithm. Get oversight right, and oversight will get serialization right. Again, oversight is just government. The solution to the serialization problem is: form an effective government, and trust it to develop and manage an efficient serialization network resilient to attacks by global adversaries. Animal control is a natural function of physical government. Serialization is a natural function of digital government. Both powers can be extremely dangerous if misused. Malicious serialization cannot forge transactions, but it can censor and revoke them. Malicious animal control can dart and capture humans, bundle them into white vans, do some processing in an underground lab, and peddle the organs on the dark web. Don’t a lot of people just disappear? What do you think is happening to them? When citizens of a physical government think about how to keep bears and leopards off the street, without opening the door to rogue dogcatchers who secretly moonlight as human organleggers, they tend to focus not on this specific state function, but on delegating their consent and loyalty to a whole government which is stable and sane. Citizens of a virtual government also trust that their stable and sane government will operate a secure and efficient serialization mechanism. Again, trust is beautiful. Since Apollo isn’t returning our calls, any serialization network will almost certainly be decentralized. The government that creates it, since it must be highly effective, is likely to be... centralized. Obviously, to any cryptointellectual, this is a huge red flag. By default, any central organization is a big step away from sovereignty. Independence is one of the three attributes of sovereignty. A decentralized non-organization is very hard to pressure. By default, a centralized organization is very easy to pressure— By default. To apply the lesson we just learned, decentralization is not a design goal of a cryptostate. Decentralization is a mechanism. The purpose of this mechanism is independence. The purpose of independence is sovereignty—or at least, monetary sovereignty. So as engineers, we are free to use other mechanisms of independence. But independence, in Steve Jobs’s words, is a feature—not a product. Let’s design our new regime, then figure out how to make it independent. Indirect democracy: magic in plain sight The main assumption that makes proof-of-stake governance ineffective is the almost wholly false assumption that direct democracy is better than indirect democracy. This is a weird belief in a civilization whose realization of democracy is, and has always been, indirect. Democracies are rare in history. But direct democracies are extremely rare. Nor has the judgment of the past given them great reviews. When Athens was a direct democracy, it was the assembly who voted to execute Socrates. But direct democracy is more consistent with 20th-century ideology. We feel, quite reasonably, that indirect democracy is one of our many quaint legal anachronisms. Obviously not everyone had Internet in the 1780s. They had to use dialup, or horse-drawn ballot wagons, or something. Even now, attention is in limited supply—but, at least in theory, every citizen should have the right to vote directly on every decision. Also, politics sucks and politicians suck. That’s the normal perspective. We love democracy and hate politics. When we realize that our new cyberstate can have democracy without politics or politicians, since it can count zillions of ballots in zilliseconds, this seems like an easy win. We don’t even think of doing it the old way, even though everything in the real world works the old way—indirect democracy. Actually, direct democracy sucks. Virtual states will be weak and passive at best, chaotic and ineffective at worst, until they somehow reinvent indirect democracy. A jury is not a government All systems of direct democracy, including all proof-of-stake designs that I know of, use their stakeholders as a jury. A jury is a group of people who vote to ratify or reject decisions framed and proposed by some other process. A legislature is a jury in which the members themselves have the right of proposal. All actual legislatures either delegate this power to external structures, or evolve internal structures (a cabinet in the UK, committees in the US) which are hierarchical. Direct democracy just expands the jury to the whole electorate. While nowhere in the world, except perhaps some Swiss cantons, even pretends to be governed by direct democracy, many jurisdictions have adopted the referendum as a decorative bauble. Digital governance can trivially borrow the referendum, and count itself democratic. A proof-of-stake blockchain can use a jury, full or sortitioned, for serialization and/or oversight. Even Bitcoin oversight only differs from POS in that the jury is the nodes. Actually, juries suck. The jury is the most passive and reactive form of government that can be devised. It is so reactive that it is not even a complete government—it lacks any real executive arm. Any vacuum in sovereignty will fill itself. A sovereign jury evolves its own informal leadership. When Parliament replaced the Crown as the locus of English sovereignty, to replace King and Privy Council, it evolved a Prime Minister and a Cabinet. This was not anyone’s plan, or anyone’s theory—it happened only because it had to happen. Luckily the delegation from MPs to this pseudo-king, the PM, was well-structured. Normally, the outcome of the sovereign-jury design is an illegitimate and informal leadership agency, plus a jury which at best is a rubber stamp and at worst a zoo. What the jury design is best at: making large numbers of people feel important. As members of the jury, everyone can feel in charge of everything. This potent narcissistic energy is the principal marketing advantage of direct democracy—and what better moment for it to shine, than our historic golden age of narcissism? If a machine was designed to minimize generated power, while maximizing perceived power, it couldn’t be better designed than a gigantic jury. Let’s illustrate the difference with a design which minimizes perceived power, and maximizes generated power. The political amplifier Indirect democracy is not an anachronism. The reason that indirect democracy is more common than direct democracy is that delegation is amplification. Indirect democracy generates concentrated, coherent power. Direct democracy does not. Delegation is amplification because delegation concentrates and focuses trust—a laser for trust. A weak, coherent laser is stronger than a strong, incoherent flashlight. You can look at a 40-watt bulb. A 40-milliwatt laser will rip a new asshole in your eye. A mob, in which every participant retains freedom of action at all times, is much less effective than a much smaller army, whose soldiers delegate their freedom of action upward to one commander. The difference between a mob and an army is so strong and clear that it suggests the analogy of turbulent versus laminar flow. In indirect democracy, citizens delegate power to politicians. Citizens cannot act directly, only by voting. There are fewer politicians than citizens; so elections must concentrate power. But voters can use power only by deciding whom to give it to. Even in our indirect democracies, though their rational choice is between politicians, voters still think more about issues. They seem to feel they can somehow act through the politicians they elect—though there is little evidence that this works. On paper, their democracy is indirect. In their hearts, it is direct. So while they love democracy, they hate politics—or to be exact, they hate their enemies’ politicians, while merely disliking their own. Can we blame blockchain designers for starting from an ideal, rather than reverse-engineering this mess? In direct democracy, where there is no delegation, every citizen can act directly on every issue. There is no need for an illusion of indirection. You actually matter. Your voice is heard. And there are no politicians. But you are collectively weak—because you, the people, are a mob and not an army—a bulb, not a laser. If an electorate as a whole does not matter—just because it is not strong enough to keep its dominance, or even relevance—no one’s voice matters at all. So the narcissistic desire for power, which is the desire to feel good and powerful, and the ethical desire for power, which is the desire to see power do good, are generally opposites. Almost always, the strongest thing to do with power is not to use it, but to give it away—concentrating it in the hands of someone who can use it more effectively. So when we measure the power of an indirect democracy, we measure the amount of power that citizens delegate to politicians. This is the delegation efficiency of the election. If this is 1, the politicians have the unconditional loyalty of everyone who voted. If it is 0, voters voted for random, ironic, frivolous reasons, and didn’t actually care at all. And again, delegation is amplification. Here’s an example of how constitutional designers can adjust this knob: the length of a politician’s term. In the electronic world, terms could last any length; they could as easily be a week. When we shorten terms, does amplification decrease, or increase? It decreases, of course. When we elect a President every week, we the citizens are saying to the election’s winner: we trust you to serve, but just this week. We have our eyes on you! Right now, we definitely think you’re hot stuff! See you next Sunday! Obviously, if you have to run for President again next week, and you have no way to be sure anyone won’t change their mind about you, you are on a pretty tight leash. The shorter your chain, the weaker you are—simply because the voters who voted for you made a much smaller commitment. So shorter elected terms mean weaker delegation, which mean weaker amplification. Let’s go to the other extreme. We’ll elect a President not for four years, but forty. Or why not\... life? If we mean our votes sincerely, when electing a President for life, we are making a permanent political promise—half election, half marriage. The candidate for whom we are voting can expect our unconditional and lifelong loyalty and obedience. (Of course, our Supreme Court, for whom no one ever voted at all, is in exactly this position.) Surely any President-for-life will be much, much more powerful than any President-for-a-week. So the delegation is stronger. So this design gives the voters themselves more power—since the more power their delegates have, the more the voters have. By going from an election every four years to one every forty years, we concentrate the power of ten elections into one. At this point perhaps the awful irony is almost clear. But let’s go even farther. How would a constitution generate maximum amplification? How would we design the most powerful possible election? This election would elect not many politicians, but just one. No organization is so big it needs multiple leaders—in fact, the bigger it gets, the more important unity becomes. So the President would have unconditional control of the whole government. Crazy! Also, optimal for that attribute of sovereignty we were talking about—coherence. And there would be no term at all, not even life. The President would designate a successor. This would be the most powerful election ever—and, of course, the last. Until the next revolution, of course. So... we’ve just shown that absolute monarchy is the strongest form of democracy. An interesting result, n’est ce pas? Wily intellectuals have all seen proofs that 2+2 is actually 5. They may amuse themselves by checking the above logic once or twice. It is also worth noting that the constitution this election would create is merely that of the Roman Empire under the Antonine emperors—which Gibbon, 1500 years later, felt was the best government humanity had ever experienced. Amplification versus sensitivity This is not a suggestion that either Bitcoin or America should adopt the constitution of the Antonines. Either could certainly do worse; both can probably do better. But we are just illustrating a theoretical tradeoff that often goes unobserved. This is the tradeoff, in any republic, between sensitivity and amplification. Sensitivity is how accountable the leaders are downward to the will of the voters. Amplification is how much energy the voters delegate upward to the leaders. Our one-time election maximized amplification and minimize sensitivity. Our weekly elections maximized sensitivity and minimized amplification. When designers opt for high sensitivity, their decision suggests a powerful fear by themselves or their customers of a failure mode in which agents betray principals. Government is a dangerous agent and must be tightly leashed. But when principals micromanage their agents, the leash is so tight that it chokes—and the agent cannot serve at all. You can walk a dog on a leash. You can’t hunt with a dog on a leash. The optimal leash is the leash that does not even exist, except in the unlikely case where it is actually necessary—and in that case, the leash is inexorable. We are the hodlers. Government is our dog—but a dog that must hunt. Fortunately, we have the technology to let a dog run free and wild as a wolf, until its owners blow a magic whistle. This recall-only republic will be low in sensitivity, high in amplification; but its sensitivity is not zero. It is not (quite) the constitution of the Antonines. Pseudonymity versus decentralization Bitzion needs to retain Bitcoin’s independence and would ideally enhance it. How can a centralized organization achieve this? Simple: by replacing open decentralization with closed pseudonymity. Decentralized open networks are hard to kill because they are built out of many small fish, each hard to catch. Closed pseudonymous networks can be built out of a few big fish, each almost impossible to catch. Satoshi’s identity is still a secret—so it can be done. Again: decentralization is the means; independence is the end. Pseudonymity is trickier and more complex than decentralization. A gasoline engine is trickier and more complex than a steam engine. It has many more ways to go wrong. Sometimes the simplest answer ends up being the right answer. But you don’t drive a steam car. Independence is inherently a security problem. In all security problems, we need to begin with a threat model. The threat is a global adversary—a government or quasigovernmental force—which wishes to involve its will in our governance—to pressure us. Independence is boolean. Unless this pressure has absolutely no effect, our independence is compromised. History suggests that independence, once compromised, is quickly rent asunder. The power available to this adversary is not a constant. It will tend to increase over time. It also increases as a function of the nefariousness of its prey. Therefore, one core security measure is legitimacy—maximizing compliance, both legal and social. Any future state demonstrates heaven’s mandate by complying both with its own ethical standards of tomorrow, and the bizarre whims of today’s armed clowns. Suppose our closed pseudonymous system is a small committee—with between five and fifty members. Groups this small, if well-organized, can act with perfect cohesion. Ownership of a pseudonym is possession of a key, ideally sealed in a physical object—like one of Tolkien’s magic rings. Strong pseudonyms are synthetic—random syllable or word strings, never nicknames. Can a global adversary find any of the keybearers—assuming all their opsec is strong, and so is their compliance? Its best bet is to trace their patterns of communication. So their best bet is to communicate as little as possible. It is quite hard to trace occasional signed statements dumped onto the Internet. And when keys are literally passed from hand to hand, tracing custody chains is hard, even for a global adversary. Even if the first link in the chain is a known individual, one link that refuses to break, cannot be found, has randomized the transfer, etc, sends the adversary back to looking for the physical origin of an encrypted communique. Can pseudonymity deliver a more secure level of independence than decentralization? With a majority of mining capacity in China, decentralization is not very secure at all. What if all these keybearers were in China? Could they still communicate securely? It would be difficult—but possibly doable. In today’s West it is certainly doable. For economic reasons, China is a great place to mine Bitcoin—Satoshi never realized that the easiest way for a state to capture Bitcoin would just be to suck in the most miners with the cheapest electricity. China is not a great place to be part of any kind of secret organization, however legit. So probably none of the keybearers would be there. What if the Western Internet became as well-controlled as China’s? Politically, this is not utterly implausible. Technically, it would involve Western governments being as competent as China’s. This couldn’t happen right away. There would be time to evade. And it is impossible to devise a plan so perfect that it always wins without a struggle. Bitzion in a nutshell Bitzion is a design for a human government for Bitcoin. The goal of the design is to be independent, legitimate, and coherent—as befits a virtual state. (“Zion” can be interpreted in many senses—Biblical, Israeli, Mormon, Wachowskian or, of course, Rastafarian. The analogy to the LDS may be especially apropos.) The fundamental principle of Bitzion is that Bitcoin is the ledger. Therefore, Bitcoin is the property of its hodlers. It must be governed with their exclusive consent, and in their exclusive interest. No one else gets a vote—“no god or government.” Miners, nodes, developers, and even algorithms are infrastructure that serves the needs of the hodlers. Their opinions will always be interesting, relevant and valuable. They are not stakeholders in any legitimate decision process. All power to the hodlers! To paraphrase John Jay, a currency must be governed by those who own it. Such is the creed of Bitzionism. Until this creed is widely known and broadly agreed, Bitzion is not ready to happen. Technically, Bitzion must begin as a fork of the Bitcoin ledger. It cannot work as designed unless it is born as the dominant fork—ideally, roughly the relationship between Ethereum and Ethereum Classic. This requires Bitzion to achieve human reputational consensus, or something like it, before it can even launch. At best, this would be long, tough sledding! But afterward, the rest of the plan is actually quite realistic. The hodlers declare their sovereignty. To take what is theirs, they seize the ledger. They own and will now control it. The Bitcoin ledger, once managed by a Mos Eisley of miners, nodes, developers and algorithms, will now be managed by a new human regime, whose exclusive mission is to serve the hodlers of Bitcoin. This new regime, Bitcoin’s new government, is Bitzion—still the one and only Bitcoin. Samuel L. Jackson would like to know if you have any questions about the new regime. To govern Bitzion effectively as possible, the hodlers delegate their power to a board of trustees, whom they elect. These trustees inherit all the power of the old government. They cannot forge transactions. They do not filter transactions. They can and may do anything else—including creating any number of coins. Satoshi’s constitution is dead and overthrown. The hodlers, acting through their trustees, are now fully in the saddle. There are two reasons for the trustees to create coins. Regular: as a dilutive tax, to fund the normal operations of government. Special: as an assessment to fund some one-time event—which usually means cleaning up some altcoin. Every revolution has a financial premise. The financial premise of this revolution is that one of Bitzion’s first tasks will be a dramatic reduction in mining leakage. Since Bitcoin is currently leaking about 5% of its market cap per year via mining, it seems fair to assume that grateful hodlers would be happy to approve a dilution tax up to a tenth as high: 0.5% of market cap, more comparable to an expensive gold vault. This serious budget is wholly under the control of the trustees. But the trustees take no operational role in spending it. Instead, they delegate all their power to a single coordinator, who coordinates all the operations of Bitzion. The trustees’ job is: hiring and firing the coordinator; reviewing the coordinator’s performance; and approving regular and special tax requests. The coordinator can request and spend regular and special taxes. The trustees do not micromanage the coordinator. The coordinator has no secrets from the trustees. And the hodlers still have a job. If they become unsatisfied with the performance of their government, they can recall it—electing new trustees, who will choose a new coordinator. To trigger a recall, they need a quorum defined as a percentage of the stake that voted in the previous election. The trustees are securely pseudonymous. No one knows who they are. No one can pressure them. But given the legitimacy of Bitzion and its commitment to compliance, the coordinator’s office must be completely open, public, and transparent. But since the coordinator works for the trustees, the coordinator is a disposable part. All kinds of powers can pressure the coordinator. The coordinator’s job is to either perfectly resist any such pressure, or resign—but never to bend. A coordinator who bends will just get fired by the trustees, a very bad and shameful outcome. The trustees can spin up a new coordinator in another jurisdiction, or even fall back to pseudonymous coordination. This defense works best when the coordinator sources as much labor as possible not from employees, but from pseudonymous contractors. So the government of Bitzion has three teams: accountability (hodlers and trustees); coordination (mahogany desk, press releases, lawyers, interviews, conferences); and production (coders, writers, designers, etc). The accountability and production teams are pseudonymous (its members never leak their identities, even to each other); the coordination team is transparent (its staff are regular employees and have their pictures on the website). The security of trustee identity is mission-critical. The production team can be more casual. As a labor pool, it will always experience attrition. But any producer or trustee whose identity is revealed must quit and cannot return, even under a new pseudonym. The trustees’ job is: hiring and firing the coordinator; reviewing the coordinator’s performance; and approving regular and special tax requests. (“Tax” means dilution.) The coordinator can request and spend regular and special taxes. The trustees do not micromanage the coordinator. The coordinator has no secrets from the trustees. And the hodlers still have a job. If they become unsatisfied with the performance of their government, they can recall it—electing new trustees, who will choose a new coordinator. To trigger a recall, they need a quorum defined as a function of the stake that voted in the previous election. The trustees can call a new election, too. The sophisticated observer will recognize that this version of indirect democracy, while owing little to historical Anglo-American political constitutions, is kind of a blatant ripoff of Anglo-American corporate governance. This is unsurprising in an architecture designed to get things done. No one says our corporations aren’t sharks. Which do you want on your side—a shark, or a hippo? As an ex-CEO, the joint-stock company has an antiquated, paper-belt feel in many ways. If there was anything much more powerful, some asshole would have invented it. Hyperdelegation That’s the whole constitution, except for one little detail: how the election works. Again, Bitzion is designed to have only one election ever, unless the hodlers or the trustees get unhappy with its results and decide to press the reset button. There are a lot of ways to elect trustees, but here is a clever one. A hyperelection is an election in which anyone can vote for anyone—so long as they’re not creating a loop. At the start, you have one election point for each coin you own. If you vote, you have zero points, and all your points, both from your own coins and from whoever votes for you, flow to whoever you vote for. The purpose of this design is to channel trust, respect and loyalty upward to the most trustworthy, respectable people. At the end, the N leaders become the N trustees. The trustees’ votes are weighted by the number of points they got. During the election period, the scoreboard is public, and anyone can switch their vote at any time (or this can be quantized into rounds). After the election, any trustee can resign their key to anyone else. As a total noob, the way you participate in a hyperelection is: (a) register your wallet; (b) figure out who you know that knows the most about Bitcoin; (c) ask that person for their pseudonym; (d) vote for them. If you want people to be able to vote for you, also register a pseudonym. If you have to, vote for a public candidate; but it’s always better to just vote for a friend. If you are a serious candidate, campaign. Publicize your pseudonym, with or without your real name. Speak publicly to the hodlers; speak privately with whales. During the election, if you’re not winning, vote for someone you admire who could win. The best precedent for this kind of social gameshow mayhem is an early 20th-century American political convention. In the end, most peoples’ votes will end up going to one of the winners, through a path of mostly ascending respect. Initial abnegation But if the election leverages existing reputations by letting pseudonyms campaign under their real names—how pseudonymous is it? It isn’t, of course. We fix this problem with another rule: after choosing the first coordinator, all the initial trustees resign immediately—each giving their key to someone they know, who they think will make an even better trustee. So the first board of trustees after an election has two jobs. They select both the first coordinator, and the second board. The result of initial abnegation is a political structure in which the second board did not choose the coordinator, so feel no attachment to that choice; the first has no lasting power, so cannot have been attracted to power; the second did not campaign, so were not selected by their craving for power or status; if the second board needs to ever use any power at all, something has already gone wrong; and the second board is securely pseudonymous, so membership cannot confer status on the humans behind it. This structure is a shock absorber. Its goal is to dampen inappropriate energy in the governance process. This bad energy could be external pressure; it could be internal cupidity; it could even just be bad luck. From the crooked timber of humanity nothing can be made straight, but a good engineer can do a lot with geometry and redundancy. Evaluation Can anything that is not a physical state ever be impervious to state pressure? Can all the devils of human cupidity ever be thoroughly banished? These are easy questions. The answers are “no” and “no.” But a stronger fortress than Bitzion will be hard to build. (The main risk is probably that the hodlers go collectively crazy—a risk we have to accept when we choose low, but not zero, sensitivity.) Although adapted to the very unusual conditions of its birth and existence, Bitzion is basically built like an early 21st-century technology company. For all their faults and the faults of their world, these can be very effective organizations—even at scale. Their devotion to their shareholders is generally not in question; and their shareholders take no actual part at all in managing them. Let’s assume that the hodlers and trustees make good personnel choices, and create an organization as effective and aggressive as a top technology company. What will it do? The Bitcoin space program Bitzion is Bitcoin—plus a trusted central government that has no excuse not to be as effective as any startup, if only because it is shaped like any startup. Let’s assume that, if the coordinator can demonstrate a use for it, the trustees will grant the coordinator a dilution tax of up to 0.5% per annum. At present valuations this is \$500M, which is a serious budget: certainly enough to start a space program. Again, it is only a tenth of the present cost of Nakamoto consensus. The mission of the coordinator is to advance the interests of the ledger—meaning the weighted interests of the hodlers. There is no other restriction on the scope or nature of Bitzion’s actions. All prudent actions designed to benefit the hodlers are authorized. If the hodlers needed a space program, it would be proper for the coordinator to start one. But other problems seem more pressing. For instance, it would not be hard to spend the budget of a space program on the full-stack Bitcoin user experience. And UX is inherently a shallow problem. Here are three of the deep architectural challenges Bitzion has to master. Coordinated serialization Nakamoto consensus is a security measure. Like any security measure, its effectiveness must be evaluated relative to the threat model. Like any measure, its productivity must be evaluated relative to its price. And its price is insane. With Bitzion as a trusted coordinator, the threat model assumes a different shape. The Bitcoin ledger must be more trusted than the coordinator, or even the trustees. In this design, we have not one but two layers of security: government and decentralization. The threat model of coordinated serialization is halfway between the threat model of Nakamoto consensus, and the threat model of a permissioned blockchain. It is neither completely wild, nor completely tame. Consider the classic threat of a 51% attack—hardly an abstract danger when most mining is in China. 51% of all Bitcoin holders by position are not in China or under Chinese control, so staking is more secure against China than miner or node voting. Also, controlling miners is easier than controlling nodes; controlling nodes is easier than controlling hodlers. Stake attacks also exist. But a governed ledger cannot be attacked in any such way. Not only can Bitzion reverse any such attacks, it can punish the attacker—by banning the staked coins from the serialization market. Bitzion, like all governments, governs by combining the predictable power of law with the unpredictable power of the prerogative or exception. Judicious use of exceptional power can curate a reliable, well-distributed volunteer serialization department. But since the ledger must be more secure than the government, there must be a way for the ledger to keep working if the government fails or, worse, goes crazy. It makes sense to tie this safety mechanism to the hodler-initiated recall mechanism. While the serializers remain decentralized and uncoordinated volunteers, it is hard to imagine a dying regime convincing or coercing them to filter out a valid recall. They have no incentive to obey the regime, and every habit and incentive to obey the recall. Any coordinated serializers constitute an attack against the regime, which the regime must repel assertively by one-strike banning. In practice, it can easily verify that most of its serializers are independent from most others. But any hint of an attempt by the regime to coordinate its own serializers cannot go undetected, nor can it succeed instantly; and it justifies an immediate recall. While a new government is being elected, the ledger is in “safe mode.” There is no exception. The volunteer serialization department operates as usual, but without any supervision, and with higher safety margins—which may be more expensive. The art of solving this design problem is the art of a serialization solution which is cheap and secure, while the government is operating properly; and less cheap, but no less secure, if the government disappears, fails or turns evil. In other words: without a government, this solution must degrade into conservative proof-of-stake. This is not an easy problem, but intuitively it feels solvable. Bitcoin imperialism We return to the problem of altcoins and forks. The existence of parallel ledgers may not be a showstopper for Bitcoin—but it also might be a showstopper. The goal of Bitcoin is to become a standard. A standard must be certain. Competition between coins creates uncertainty. Without these alt-dogs nipping at its heels, Bitcoin has a stronger claim to be the one. As a challenger, it needs all the strength it can get. Standardizing digital money is just a flex. It demonstrates strength. It creates strength. All healthy and growing organizations are obsessed with their own strength. And since it must be done fairly, it it is a chance to demonstrate the grace of kings. So here is how Bitzion can execute a historic program of Bitcoin imperialism, crafted in the old Silicon Valley tradition of “extend and embrace” or “copy, acquire, kill.” Start by evaluating all the scarcity-based tokens currently trading (not “utility tokens,” which are virtual stonks, or “address space,” which is virtual real estate). Classify each as worthy or worthless. Publish this official directory and the research behind it. A worthy altcoin is one which has made a significant contribution to the cryptosphere—in technology, traction, or both. A worthless altcoin is every other coin—or any new coin started after the official directory was published. Bitzion will never recognize these worthless ledgers. It condemns them. They will go to zero, become deadcoins, and be forgotten. If you still have any after the directory appears, try to sell while there are buyers. Bitzion recognizes the worthy ledgers and declares its intention to merge with them—whether they like it or not. Hopefully most will like it. The task is not easy; just doable. This makes it an excellent flex. First, Bitcoin will incorporate all worthy innovations of these altchains. Second, it will emulate their protocols and semantics—including a computational emulator for computational chains. Third, it will build a completely smooth migration path in which anyone working with the altchain can trivially move to the real blockchain. Most users will not even notice the difference; developers will flip a few switches. Now the engineering work is complete, and the marriage can be consummated. Like a corporate merger, a blockchain merger is a diplomatic and financial affair. It requires (a) the consent of the altcoin holders to (b) accept some ratio of real coins per altcoin, which can be stated as a premium or discount relative to the current market ratio. A corporation’s board can typically force its shareholders to accept a merger. None of these altchains has a board; and there are no decentralized involuntary transactions. Therefore, to merge with these anarchic collectives, Bitzion must find, assemble, and negotiate with an informal reputation pool of potential endorsers. These negotiations will succeed or fail—which decides whether the merger is friendly or hostile. Even a friendly merger cannot be enforced, though its chances are better. If negotiations cannot set a fair price, Bitzion will set one. Generally the hostile price is lower than the friendly price—pour encourager les autres. Then, altcoin holders have a short period to make a decision. They can either sell their altcoins for real coins at the final ratio, or grimly hold on. If they sell, they get new but genuine coins—which the coordinator has minted with the trustees’ approval.. In exchange, the coordinator gets all their altcoins. After the merger and migration, the coordinator sells these altcoins—using the revenues, if any, to purchase real coins. If even a low double-digit percentage of altcoins gets tendered, selling them blows through the altchain’s whole buy-order book like a firehose up a salmon’s asshole, and takes the market price of this legacy chain to zero, where it should stay: a deadcoin. So grimly holding on is kind of a bad move. Are these the tactics of Genghis Khan? Yeah, kind of. Do you know more about imperialism than Genghis Khan? Bitzion starts this imperialist program on the bottom end of the worthy list—taking down its feeblest competitors first. As these involuntary mergers succeed, reducing any foolish holdouts to pyramids of 256-bit skulls, the empire’s negotiating position grows stronger and stronger. Oderint dum metuant! The Bitcoin intelligence agency The most important problem of any regime is security. For a blockchain, security is serialization plus imperialism. The second most important problem is intelligence. This isn’t James Bond stuff, of course. Intelligence in the modern sense of the term just means collection and analysis of accurate and official information. It doesn’t require any kind of secret volcano island base—although that would certainly be cool. There are no martinis and no silencers. Yes, we do like cats. Why do blockchains need official government intelligence? Intelligence is data plus analysis. Analysis is great—but the first thing blockchains need is data. They even have a word for an official data stream: an oracle. The Sun has been around for four billion years. On the full power of a computational blockchain plus an official data stream, the Sun has never yet looked. In theory, it is possible to build prediction markets with oracle reputation as a second moving part. In practice these weird, wobbly markets suck. Without this concrete and certain connection to official facts, a computational chain simply cannot think about the real world. A blockchain which can compute with facts about the real world is a different class of tool. “Prediction markets” does not cover the potential power of this architecture. Of course, the difference between data and analysis is not always clear. Once Bitzion becomes comfortable with its right to curate official data, it will inevitably find itself considering the next step of composing official analysis. Data feeds algorithms. Analysis feeds humans. The algorithms on a blockchain can only use data. But those algorithms are ultimately working for humans; and humans can use both data and analysis. The mission of Bitzion is to serve the hodlers. Authoritative open-source real-world intelligence, also known as “news,” is often suspect—less the data, more the analysis. If the only narrative available to the hodlers is this “news,” and the “news” contains systematic misjudgments, the hodlers must be likely to make systematic mistakes. So Bitzion’s intelligence agency starts by collecting real-world facts—which helps blockchain programs think about the real world. Finding its feet with this easy work, it continues by constructing real-world narratives—which helps blockchain users think about the real world. Again, these are exactly the nominal functions of any 21st-century intelligence agency. All these agencies still have some kind of weird 1950s James Bond historical mystique. The James Bond era was real; if it even lasted into the ’50s, that would be surprising. Today the intel agencies are mostly just government think tanks, whose wisest wisdom is not much different from the wisdom of the press and the universities. The best test of whether they matter is what would happen if they disappeared tomorrow, which is absolutely nothing. Yet their nominal function—research and analysis—remains real and relevant. Nothing, moreover, could be more legitimate. This proposed Bitcoin intelligence agency is, in the words of our peach-haired President, “very legal and very cool.” Of course, Bitzion keeps no secrets. All this intelligence product is public. And like the rest of Bitzion, it is independent of real-world power. Needless to say, raw input from “the news” or even “science,” even from the most “reliable” or “respected” sources, is never incorporated directly and without a clear positive argument into the output of the analysis directorate. Rather, its mission is to understand the world anew from scratch. Everything “known” is an invaluable resource, of course. But just a resource. How do we “know” this? Imagine trying to recreate Wikipedia with no “reliable” sources—but instead, the conviction that all information from the 20th century is unreliable until shown otherwise. So is all external information. While an intelligence agency wants to hear everything, its mission is to think entirely for itself. Nothing in its raw input stream is true until the agency has some clear positive reason to consider it true. “Always trust content from Microsoft Corporation” is not a valid form of reason. This question need not be asked story by story or paper by paper. It is best asked field by field, department by department, agency by agency. If the old 20th-century truth is a blueberry pie, we can pick out the moldy parts slice by slice, not berry by berry. The whole pie is never moldy—however old, there are always good parts in a pie. Pure math, for instance, remains sweet and delicious with only a very mild fermented bite. Then again, pure math did pretty well in the USSR. At this point we imagine a genuine conflict between virtual and physical power—but this is probably a good stopping point for today. Once Bitcoin has gone so far toward making a nation that it has made an intelligence agency, the point seems proven. Both necessary and impossible Of course, the CJNG must feel the same way about its little panzer parade— and that actually happened. Anyone who has actually read all this perhaps feels the same intuitive sense as me: that Bitzion theoretically should happen, but actually can’t happen. It is both necessary, and impossible; both fantastic, and pragmatic. I have put a lot of words into why Bitzion is necessary. I already warned you that it is impossible. If it becomes possible, it will not become possible easily. Our theoretical interest, as political engineers, in what should be done, remains legitimate. But a thought-experiment and a practical conspiracy are two things. The conversation is not over without talking about why it cannot happen. So let’s do that. It’s simple. Bitzion cannot happen because vanity is poison and everyone is poisoned. Recently, Marc Andreessen wrote a much-cited essay which asked everyone to build. Everyone should build. Not everyone should be an architect. The trouble with asking the whole world to build is that this world is so poisoned by vanity that it can only hear one message: be an architect. Almost all these people should be learning to put one brick on top of another. But once a thousand architects have argued about how to build the house, there is often not a bricklayer to be found. Having done both—metaphorically speaking—I will tell you straight-up: it is more honorable to be a bricklayer. Architecture is a gift. Masonry is a craft. Never trust anyone who has a gift but no craft. If you have a gift, pursue your craft. Only fate can make you an architect; but fate seems to like a man who can lay a brick. To lay a brick is to pursue the path laid down for you; it is to follow. The mason is not an artist but an artisan. For an artist, the definition of perfect is broad; for an artisan, it is narrow. The same amount of effort and achievement can go into either. Yet the architect, who is an artist, leads; the mason, who is an artisan, follows. The wall needs to go where it is supposed to go. It needs to look like what it is supposed to look like. Yet in the hands of an ordinary mason, it will be okay; in the hands of a fine mason, it will be striking; anyone can tell the difference and no one can say quite why. While the society that forces an artist to be an artisan has failed, so has the society that forces an artisan to be an artist—or that exalt the artist above the artisan. The latter is simply a society without artisans—which is a society that cannot build. Oops. (In fact it is a curse to be a real artist or scientist. These people should be derided and shunned. It’s an admission against interest—but that way, they’ll do their best work.) This is where Bitzion fails. Bitzion is obvious. Bitzion would already have happened— in a world where people thought about collective action not in terms of leading, but in terms of joining and following—where they knew how to be masons, not architects. Not that anyone knows how to be an architect, either. Being an architect means making plans which masons follow. There are no masons; so there are no architects. No one has any experience in the actual profession of architecture. There are just dreamers who try to build beautiful dreams, by themselves, sloppily. Many houses are started; few are finished; many of these fall down. But the rest are beautiful. This metaphor is just a metaphor. It could describe many careers and professions. In all such cases, there is one factor in common: vanity is poison. In the case of Bitzion, vanity manifests itself as an inability to trust. To the average hodler, the thought of delegating collective control to the board of trustees—even through this clever mechanism, by which no one’s vote is lost—is horrifying. Even the thought of trusting the hodlerate collectively would horrify most hodlers. Literal collectivism? Why, isn’t Bitcoin supposed to be the exact opposite of that? But worst of all—hyperdelegation, or any sort of delegation, or election, or indirect democracy in general, means you are giving away your power. Why vote, when you could rule? It’s going from weed to meth—having ruled, it will never be enough to just vote. For example, when you vote, you vote every four years—for four years, except one day, you have zero power. When you rule, you get to rule every day of the week. And even worse: when you vote, you follow. You literally submit to another person. You almost feel your genitals shrinking. To be a mason is to say to some other human or humans: I will obey you, I will follow your directions, I will put the bricks how and where you tell me to put them, I will not create my own whimsical Art Nouveau motifs. Of course, to join together and follow a common leader, or leadership, or government, or constitution, is the fundamental act which creates all regimes. This act is necessary. Without such an act of common consent, no political structure can be created. But one and only one word of this recipe is utterly impossible. That word is follow. No one wants to follow. Worse: no one even knows how to follow. The practical consequence of this deficit is an inability to trust. The project of Bitzion is impossible because it depends on taking a hodler community dedicated, X-Files style, to trusting no one; and moving it to trusting each other; and implementing this by trusting a roomful of people, who then trust a single person. To a true Bitcoiner, this seems completely insane. It is also how every company in the world, major or minor, works—and Bitcoin has the market cap of a major company. And in any major company, the amount of time the shareholders spend even caring about the governance of the company, let alone trying to change it, is epsilon. If they are not delegating unconditional trust, they are delegating something close. They have no plan at all for running the company themselves, or even interceding in its decision loop. There are always exceptions; but this is the normal operating loop. The shareholders seem to trust their direct representatives, the directors, no less than they trust the CEO selected by those directors. This is an amazing amount of trust—which can only exist because the joint-stock company was invented long ago. Everything big that works is worked by these companies. They are clearly the most effective way to operate at scale. Yet we are incapable of recreating this level of trust in a new context. The joint-stock company design survives because it is grandfathered—and because it works so well. Nonetheless, a “capitalist” government is no more than one which allows joint-stock companies—so there remains a huge target on its back. And yet, the idea of the hodlers of Bitcoin collectively agreeing to turn themselves into the sharehodlers of Bitzion, which is the same as Bitcoin except that it governs itself rather than being governed by math, seems at a certain level preposterous—because it goes from trusting math, to trusting humans. And trusting humans is following. And following is servitude—which was exactly what we were trying to escape from, right? In practice Bitcoiners have to trust humans anyway; only a government which is both legitimate and human can be proactive, which means only such a government can be effective; and government by hash is incredibly expensive. And yet Bitcoin remains the leader—proving the power of monetary incumbency. Bitcoin can’t do a 180 and treat decentralization not as an end, but as a means—to the real goal, independence. This would open the door to independence through a wholly different means, pseudonymous centralization. It seems like a minor, obvious change. But it would require Bitcoin to entirely change its mind—or at least, its religion. Bitcoin is a cult, for better or worse. Cults don’t change their collective minds from the bottom up. Bitcoin is a cult with an accidental and mathematical government. Bitzion is the exact same cult, with an conscious and human government. An altcoin or a fork with this design could still be organized; but it would still be an altcoin. Please don’t try this. Bitzion has to be all of Bitcoin, or most of it; and if didn’t ask you to follow, it might have a chance at that. But it exists to ask you to follow. Honor still demands honesty. In a society where everyone is too good to lay bricks, no one can build a house. It’s a hard problem, and it won’t get solved here. But solving the problem has to start by talking about it. Consider the irony. This ancient human talent—the reflex for unconditional loyalty—which could make Bitcoin a thousand times more powerful—is, for a bunch of peasant narco-soldiers from Jalisco, as easy as falling off a log. Yet you might as well ask the hodlers, our fellow autistic rationalist superbrains, who whether they like it or not are citizens of this new thing with a B, to dunk a basketball. Our 20th-century prejudice is that intelligence is power. Sometimes it is weakness; and all we have to fight this weakness is intelligence itself.