One machine, five assets
Last article we made a big claim: one state machine — eight states, written once — can hold any asset class. The only fair way to check a claim like that is to try it on real life. So here are five assets you already know: a company bond, an insurance policy, a sack of grain in a warehouse, gold in a vault, and a flat. We walk each one through its ordinary life — and a few of its bad days — and watch the same machine carry all five.
Five very different assets, one machine, zero new states. A bond's broken promise, a lapsed policy, spoiling grain, a vault audit and a court order on a flat all land in the same eight states. What changes per asset is only the wiring — which events trigger which state, and who is allowed to sign.
- Each asset below is shown as its real-life lifecycle — the happy path first, then its two or three classic bad days — mapped straight onto the states from Article 6.
- No asset needed a new state. What differs per asset is a profile: which triggers fire, which inspectors sign, which planes are switched on. Configuration, not new code.
- Each asset's biggest real-world problem — the invisible covenant, the silent lapse, the untrusted receipt, the unused gold registry, the unsearchable title — turns out to be a state problem. Same disease, one cure.
The eight states, in plain words
Quick refresher from Article 6 — this is the whole vocabulary the five walks below will use:
1 · The corporate bond — a company's IOU
Real life: a company borrows from investors, promises interest twice a year, and promises to keep enough assets backing the loan (the "cover"). Today that cover promise is checked in quarterly filings — so it can quietly erode for months while the bond trades as if all is well.
| Bad day | What the machine does | Back to normal |
|---|---|---|
| Cover slips below the promised level | S3 — automatic, the moment the number breaches. Not a trustee's letter weeks later. | Cure the breach → back to S2, automatically |
| Default / restructuring | S4 — trading stopped; entitlements keep accruing during the workout | Workout completes → S2 or S7 |
| Regulator steps in | S5 — on the record, no issuer bypass | Regulator lifts it |
What to notice: the bond needed no warehouse inspector and no vault — its profile simply switches the physical plane off. And its killer problem — covenants nobody sees between filings — becomes a live trigger instead of a quarterly surprise.
2 · The insurance policy — the asset in the drawer
Real life: you buy a policy, pay premiums for years, and it quietly builds surrender value. The law has long allowed you to borrow against it — but since nobody can verify what it's worth, banks rarely lend, and families sometimes discover at claim time that the policy lapsed years ago.
| Bad day | What the machine does | Back to normal |
|---|---|---|
| Missed premium | S3 — instantly visible to holder, nominee and any lender. The grace period is the cure window. | Pay within grace → S2 |
| Grace period expires unpaid | S4 — what insurers call "lapsed". No more silent deaths in a drawer. | Revival within the allowed window → S2 |
| Fraud investigation | S5 — held by the supervisor | Investigation closes |
What to notice: borrowing against the policy doesn't need a new state either — the loan is a lien recorded on the policy while it stays in S2, priced against a surrender value the lender can finally read. And "lapsed" is not a new state: it's just S4 wearing insurance clothes.
3 · The warehouse receipt — the sack of grain
Real life: a farmer deposits grain, gets a paper receipt, and pledges it to a bank. The grain is graded once, at deposit — then it sits, and possibly spoils, while the receipt stays fresh. This is the fraud pattern from Article 1: record and reality drift apart until the loss surfaces. Banks respond by barely lending against receipts at all.
| Bad day | What the machine does | Back to normal |
|---|---|---|
| Inspection window missed, or moisture/temperature out of range | S3 — unattested stock goes illiquid instead of fraudulently liquid | Fresh inspection → S2 |
| Re-grade fails — the grain really has spoiled | S4 — value written down honestly, on the record | Per the workout |
| Moved to another warehouse | S6 — mandatory re-inspection at handover, exactly where receipt fraud has historically lived | Handover checks pass → S2 |
What to notice: this is the machine's sharpest idea in action — attestation is a state, not an event. A lender doesn't need certainty about the grain; they need a live grade and a stated haircut instead of blind fear. Partial withdrawal is easy too: the receipt is a lot divisible into fractions, so you burn fractions rather than re-issue paper.
Put the bond and the grain side by side. They share no industry, no regulator, no vocabulary — yet their killer problem is identical: the record says "fine" long after reality stopped being fine. Cover erodes between filings; grain spoils between inspections. One trigger pattern — wire the attestation to the asset's ability to trade — cures both. When two assets this different fall to the same fix, "universal" stops being a slogan.
4 · Vaulted gold — the asset that refuses to decay
Real life: you deposit a bar, an assayer certifies purity, and you hold registered grams. Registries for this exist and go largely unused — because vault trust is a once-at-deposit ritual, and moving between registries means redeeming in one and re-depositing in the other.
| Bad day | What the machine does | Back to normal |
|---|---|---|
| Vault audit exception, or custody attestation lapses | S3 — same rule as the grain: unattested = illiquid | Re-attested → S2 |
| Vault-to-vault or registry-to-registry move | S6 — a state transition with re-attestation at handover, not a redeem-and-redeposit | Handover checks pass → S2 |
What to notice: gold is the elegant negative result. It doesn't decay — so the profile just sets the decay curve flat. The same machinery that prices a grain lot's deterioration prices gold's storage without modification. A design that needed a special case here would have flunked its own claim; a curve set flat is a parameter, not a special case.
5 · The property title — the flat
Real life: you buy a flat, register it, take a mortgage, maybe rent it out, and one day sell. In much of the world the registry only records that a transaction happened — not that the seller truly owned the flat — and liens and litigation hide in registries no buyer can reliably search. So every purchase re-runs a title investigation from scratch.
| Bad day | What the machine does | Back to normal |
|---|---|---|
| Mortgage taken | Not a bad day and not a state change — a lien recorded in S2, visible to every future buyer and lender | Repaid → lien released |
| Litigation / court attachment | S4 or S5 — executed by the registrar or regulator on the court's order, as a typed transition with a full audit trail | Court releases it |
What to notice: two shapes compose — one unique title token with fungible fractions above it — and the fractions inherit the title's state instantly. A lien on the flat restricts every fraction the same moment; no fraction can be cleaner than the asset it's a slice of. This is also the one profile whose core has run at sovereign grade: the title-and-encumbrance heart of it underpins a national land registry we have built.
The scorecard
| Asset | Shape of holding | Planes on | Its signature trigger | New states needed |
|---|---|---|---|---|
| Bond | Fungible units | Compliance + economic | Cover breach → auto-S3; cure → auto-S2 | None |
| Insurance policy | One unique token | Compliance + economic | Missed premium → S3; grace expiry → S4 ("lapsed") | None |
| Warehouse receipt | Lot + fractions | All three | Attestation lapse → S3; unattested = illiquid | None |
| Vaulted gold | Fungible grams | All three (decay curve flat) | Audit exception → S3; registry move → S6 | None |
| Property title | Unique title + fractions | All three | Lien as visible state in S2; court order → S4/S5 | None |
Two things fall out of the table:
- The machine never changed. A broken covenant, a missed premium, damp grain, a failed vault audit and a court order all landed in the same S3/S4/S5 grammar. Everything asset-specific fits in the profile row — triggers, inspectors, planes. Three shapes of holding covered all five; no fourth was needed.
- Every asset's famous problem was a state problem. Invisible covenants, silent lapses, stale grades, administrative vault trust, unsearchable titles — five industries, one disease: state that lives somewhere the people who need it can't see it, with liquidity still attached.
Five ordinary lifecycles, one machine, zero new states. A sixth asset class gets a sixth profile card — not a second machine.
What this doesn't prove
- This is a mapping, not five production systems. The property core runs at sovereign grade in our land-registry work; the other profiles are design, drawn from mechanisms that exist separately across markets. No single institution yet runs all five on one live core — that's the build this series argues for.
- Everything above trusts its attesters — the assayer, the vault auditor, the registrar, the premium feed. What attestation really is, how it goes stale, and what happens when it's wrong is the next article — and it's the deepest layer of the design.
- How real-world assets move today — the ecosystem problem
- Five people, five assets, one broken system — the problem made real
- Imagine the other world — financial Legos and the positions nobody can take today
- Nine problems, nine answers — what tokenization actually fixes
- Rules change. Should the asset? — the new problem tokenization creates
- The Universal Asset State Machine — Decibel Labs' answer
- One machine, five assets — the state machine tested against real asset classes (you are here)
- Three planes — compliance, physical, economic
- The Universal Asset Token stack — a record that can say no
- Containing the blast radius — what happens when a new rule lands