A sovereign network has no authority above its members.

The architecture forbids a global validator set with authority over records, and the prohibition is not a scaling compromise. It is the property that makes a jurisdiction willing to run a deployment at all. A jurisdiction that accepted a network quorum’s determination of what its own registry says would have delegated its registry (Accession Networks, the four boundaries). So the network cannot vote on what happened. Deciding contested state by consensus is incompatible with that boundary. Identity is not authority: a signed statement proves who spoke, and it does not make the speaker the judge of what the statement means.

A record is not a remedy.

The proof objects establish what the system did: which rules ran, on which inputs, producing which signed outcome, at which time. They are evidence. They cannot establish what a party undertook and failed to do, because undertakings live in instruments the deployment does not interpret. They cannot move money out of a defaulting party’s account, because moving money requires coercive power that no record has. And a record is not legal finality: a ledger entry says that a provider moved value on its own books, and the moment at which that transfer became irrevocable is fixed by the rule that governs the provider in its legal order (section 9.4).

The provable and the arguable are different categories.

Some contested propositions are settled by looking: whether an operation was recorded, whether a rule pack (the versioned set of rules an evaluation ran under) was the one the jurisdiction ratified, whether two signatures conflict. Others are not settled by looking at all: which of two properly recognised rule sets governed, whether a condition attached to a recognition grade held (the grade is the level at which a receiving jurisdiction accepts a foreign evaluation, defined in How Compliance Composes), whether conduct was negligent, what quantum follows when quantum is not arithmetic. The first category requires a query. The second requires a tribunal. Treating a query as an adjudication undermines the query. Sending a question of legal construction to software produces a result that binds no one.

Adjudication therefore requires an authority outside the deployment. The design uses arbitration for covered private disputes. Its cross-border recognition route explains that choice.

What the clause creates.

Two parties can establish a cross-border arbitration route in their contract even when their states have no bilateral judgment-recognition treaty. Consent is the parties’ own written agreement under Article II; no digest, rule pack, register entry or state accession substitutes for it. The result remains forum-specific. A state that made the reciprocity reservation in Article I(3) applies the Convention only to awards made in another contracting state. A state that made the commercial reservation applies it only to relationships its law considers commercial. The Convention establishes a recognition and enforcement route, not collection. Article III uses each state’s own procedure. Article VI permits adjournment and security while a setting-aside application is pending. Immunity, asset location, priority and insolvency remain separate conditions (section 9.9). Voluntary payment, settlement, enforcement of security, an independent guarantee, set-off and a consent order can produce recovery without an award. The model in section 9 records the legal origin of each receipt and forces none through an award or a court.

The network’s formation mechanism uses the same legal structure. A recognition network is built by unilateral accession to a published standard rather than by pairwise negotiation, and Accession Networks proves when that construction reproduces what bilateral negotiation would have produced. The Convention applies that structure to recognition and enforcement of awards. Corridors carry typed compliance state under an accession instrument. An arbitration clause governs the private obligations attached to that state. Neither mechanism requires a bilateral treaty. Together they govern the cross-border regulatory state and the private obligations attached to it.

The multi-hop problem, and what the clause reaches.

Recognition composes along paths. An entity’s compliance state reaches jurisdiction C through B, having originated in A, and How Compliance Composes treats the composition and its grading. When a transaction that crossed A \to B \to C goes wrong, who decides, under which law, and can the answer be collected in C? It is two questions. The first is prospective and regulatory: will C’s law give effect to a determination composed across A and B? That is the recognition question, answered in advance to the extent the accession instrument, the conformance suite (the published tests a participant must pass) and the grade the corridor carries fix it, and Accession Networks states what remains open. The second is adjudicative and becomes live at the moment of failure: when the transit breaks, whose forum hears it, and does its answer bind assets in C? Until a dispute exists, transitive acceptance is a policy statement. At the moment of dispute it is a jurisdictional question in a forum nobody chose.

Recourse answers the second through the parties’ agreement. A single network arbitration clause is written into the corridor instrument at every hop and into every participation agreement: one seat, one set of rules, one appointing authority, and one governing law for the corridor obligation. The parties therefore fix the tribunal and governing law at accession. Where the Convention applies in C, it supplies a recognition and enforcement route. Collection remains subject to C’s procedure, the available asset and every other route-specific fact. A composition refusal becomes a merits question in the forum the parties specified, rather than a jurisdictional question in a forum they did not.

The clause reaches private obligations, and it stops there. C’s regulator retains every part of its statutory authority. An award cannot license an entity, register an offering, or clear a payment C prohibits. The clause instead makes the private obligations attached to composed state enforceable in C. It supplies a forum for the parties’ bargain without changing any regulatory approval the transaction requires. Two risks remain. Article V(2)(a) permits a court to refuse enforcement where the subject matter is not capable of settlement by arbitration under its own law, and Article V(2)(b) where enforcement would be contrary to its public policy. A state may hold that a dispute over its own regulatory determination is not arbitrable. The clause is therefore drawn to cover the private obligation, whether the party performed, whether the bond is forfeit, whether the corridor fee is owed, and does not purport to adjudicate a regulator’s decision. That is the boundary the network already draws between conformance and recognition, and drawing it consistently keeps the enforcement layer inside the Convention.

Disputes after a bilateral commit.

A corridor operation can await completion while both endpoints reserve resources for it. A prepared endpoint has made that reservation but still awaits the joint outcome. The final recorded outcome is the terminal decision. The bilateral protocol preserves one ordered terminal decision. A lease sets the local waiting deadline. Lease expiry records that deadline and can initiate a request for the decision. Prepared resources remain reserved until the durable terminal outcome authorises their disposition. A local expiry alone supplies no joint abort or release authority (The Sovereign Jurisdiction Network, section 5.4).

The recorded reservation, expiry, decision and missing evidence are separate facts. A proposition the record decides enters the record tier of section 5. The corridor instrument can determine loss allocation by arithmetic on recorded values. Other questions of loss allocation require the competent tribunal. Escrow release follows its qualifying basis, mandate and applicable law. Recovery uses the collection rule in section 9.4. An assertion of equivocation raises an integrity question for the full tribunal. Different local progress at the two endpoints supplies no inference of blame.

Does the record decide the proposition?

Five conditions must hold. The proposition names a closed evidence snapshot and uses the bounded query language below. Evaluation returns a known value with the required evidence. The query chooses no governing rule between properly recognised alternatives. It traverses no discretion the applicable rules leave open, including a typed discretion hole of Lex, which marks a decision left to an authorised actor. Any absence result concerns only the named retained log intervals.

The evidence snapshot.

Re-execution must examine the same retained evidence. The record therefore fixes a snapshot before evaluating the query. A snapshot \Sigma fixes its view time, schemas, verification profile, authority bindings and key-status evidence. Each source log has an identifier, inclusive retained interval [\ell,u] and head observation cutoff. The snapshot carries the commitment before \ell, the commitment at u and every raw entry between them. The verifier checks consecutive positions and reconstructs the upper commitment from the lower commitment and complete interval. The upper head carries the required watcher attestations. A corridor query verifies each endpoint’s interval separately. These checks establish coverage of committed intervals under the named authentication assumptions. Truthful reporting and coverage of external events require their own evidence.

Source tables are typed views derived from complete raw intervals. The snapshot fixes their row order and derivation rules. A missing interval entry, unresolved required dependency or unsupported schema prevents a known result. A failed proof or asserted integrity defect invokes the integrity rule below. Selected inclusion proofs alone establish no complete search result.

The admitted query language.

A published profile fixes maximum input bytes B, syntax nodes M, source rows N, tuple arity K and scalar width W. It fixes output, memory and instruction limits. Scalar expressions contain literals, typed row fields, checked arithmetic, comparisons, Boolean operations and finite conditional expressions. They can read authentication results established by the snapshot verifier. Every primitive has a deterministic specification and finite cost bound. Missing required values and arithmetic overflow produce typed obstructions.

The query can select rows, count them, add a recorded quantity, test for an entry, or test for its absence. Let each L_j be a snapshot table. The domain D contains the tuples formed by their product. The predicate p selects tuples, and e or \bar e specifies their scalar output. A query has one of five forms: \begin{split} D=L_1\times\cdots\times L_k,\qquad 1\leq k\leq K,\\ q\in\{\mathrm{select}_{p,\bar e}(D),\ \mathrm{count}_{p}(D),\ \mathrm{sum}_{p,e}(D),\\ \mathrm{exists}_{p}(D),\ \mathrm{none}_{p}(D)\}. \end{split} The predicate and output expressions use the scalar constructors above. Evaluation visits source tuples in fixed order. Aggregation uses checked arithmetic and respects the output limit. Queries contain no nested queries, recursion, program hooks, network reads or mutable external state. Comparisons between recorded rule-pack digests remain available. Executing a rule-pack program requires the separate institutional runtime.

Admission checks syntax, types, source bindings and resource bounds. For m\leq M syntax nodes, at most (N+1)^k source tuples are visited. A conservative instruction bound is c_{\mathcal P}(W)\bigl(B+(m+1)(N+1)^k\bigr), where c_{\mathcal P}(W) bounds the profile’s parsing, verification and scalar primitives. Admission also bounds complete output and working memory. Excess requests receive \mathrm{Unknown}(\mathrm{ResourceBound}). The interpreter meters instructions and allocation. Exhaustion returns that typed result and discards partial output.

Evaluation returns \mathrm{Known}(v) or \mathrm{Unknown}(o), where o identifies the obstruction. Unsupported syntax, incomplete evidence and missing external facts have distinct types. Unknown never becomes false, zero, an empty table or a successful absence result.

Log absence and external facts.

A successful absence query produces a \mathrm{NoEntry} certificate. It binds the query, snapshot digest, verification profile, log identifiers, retained intervals, boundary commitments, observation cutoffs and coverage evidence. It states that no matching entry occurs in those retained intervals. An interval starting after the first entry establishes nothing about earlier entries. A later observation can report an earlier external event.

NoEntry does not establish that an operation never occurred, a ratification never existed or a court issued no stay. An external proposition lacking its competent authority’s required determination returns \mathrm{Unknown}(\mathrm{ExternalFact}). A query can extract an attestation and identify its authority, scope and effective interval. It supplies no independent determination of that external proposition. Unknown follows the Tier 1 and Tier 2 routing rules. An asserted integrity defect takes priority.

Is the integrity of the record itself in issue?

Integrity is in issue where a party asserts forgery or key compromise, an append-only violation, a proof that does not verify, equivocation between two signed objects, a commitment that does not match the message it names, a stale or unquorate timestamp, a proof envelope missing a required element, or that the rule pack an operation pinned is not the pack the competent authority ratified.

Does resolution turn on law, construction, discretion or characterisation?

This includes which of two recognised packs governed, the construction of a corridor instrument or of its grade, whether a condition attached to a conditional grade held, the exercise of a discretion, the characterisation of conduct, quantum that is not arithmetic on recorded values, and every question of transitive acceptance.

A proposition the record decides, with no integrity question and no question of law, goes to Tier 0, record resolution. The registrar executes the admitted query against its immutable snapshot. A determination requires a Known result. It states the proposition, verbatim query, snapshot digest, verification profile, resource limits and result. It includes the extract and coverage evidence needed for independent re-execution. Any absence statement carries its NoEntry certificate and exact retained intervals. Checking instructions name the authentication assumptions and source authorities. No tribunal is constituted. No arbitrator is appointed. No hearing is held.

A proposition the record does not decide, with no integrity question and no question of law, goes to Tier 1, the expedited procedure: a sole arbitrator, on the documents, on a fixed timetable and for a fixed fee, who issues an award and not a determination. Where the matter cannot fairly be decided without oral evidence, that arbitrator does not decide it. The claim is re-routed to a full tribunal by procedural order and the fee is credited, which is what makes a documents-only tier defensible. A question of law goes there too where the amount is at or below a published monetary ceiling and no party requests a hearing, which is the condition Model Law Article 24(1) attaches to a documents-only procedure. The ceiling is published, uniform across parties, and never varied case by case.

Everything else goes to Tier 2, the full tribunal, and one rule dominates the others. Where record integrity is in issue, the head of claim goes to Tier 2 regardless of the other answers, regardless of amount, and regardless of any party’s agreement to the contrary. Tier 0 derives its entire authority from the integrity of the record. A machine cannot adjudicate the assertion that the machine is compromised. An institution that routes an integrity question to an automated tier has destroyed the evidential basis of every other tier it operates.

This governs an assertion that the record is compromised. It leaves untouched the verification steps that precede any tier: a digest that matches, a signature that verifies, a replay that reproduces the signed outcome, and a conforming equivocation certificate (two conflicting signed objects under one key at one index) that verifies on its face. These are performed mechanically and are not heads of claim. The Sovereign Jurisdiction Network develops that mechanical layer, the certificate it produces, and the watchers whose bonded attestations of the chain head make a history served differently to different parties surface as conflicting heads. It also states the ordering this section turns into a routing rule: integrity questions are machine questions with exact answers, interpretation questions belong to people who know the traditions, and integrity comes first. Recourse governs what happens when a party contests the mechanical result. A party’s assertion that a certificate is unsound puts integrity in issue and goes to a tribunal.

Emergency relief.

Emergency-arbitrator provisions run beside every tier, including matters routed to record resolution. The emergency arbitrator is a natural person appointed under the rules. Tier 0 issues no relief. Relief binds the private parties. It takes effect on a deployment’s record only through that deployment’s own signed act, and it never displaces a sovereign halt or the countermand window that protects the halt (The Sovereign Jurisdiction Network, section 9.8). Reversible throughput relief can use an expedited procedure. Value-moving relief requires notice and security. The Convention treatment of an emergency arbitrator’s order is forum-specific. Court enforcement of an interim measure depends on the forum’s law, including Model Law Article 17H where enacted.

Routing is administrative.

It is not a decision on the merits, it binds no tribunal, and a tribunal must not treat it as a finding. Routing errors are corrected in one direction: upward on a party’s unilateral request, never downward against objection. A head of claim routed to Tier 0 or Tier 1 that any party contends belongs higher goes higher, without grounds and without leave. A head routed to a tribunal is demoted only by the written agreement of every party. A party may always buy the fuller procedure. Tier 0 requires the admission, evidence and Known-result conditions above. Unknown follows the tribunal routing rules. Integrity assertions and escalation take priority over a Known result.

Extraction, adoption and adjudication.

An advisory extract reports a query, its bound evidence and its result. Issuing or reading it creates no contractual determination. A published service schedule may provide the extract without charge. A fee for producing evidence arises only under the separate service terms. A contractual determination additionally names the parties’ effective adoption, the proposition submitted, the permitted effect and the challenge procedure. An award requires the separate tribunal route. The instrument type, adoption basis and charging basis remain distinct fields throughout storage, transmission and succession.

An advisory extract becomes an input to a contractual determination only through the parties’ effective adoption and a determination within its scope. Silence after an unsolicited extract supplies no adoption. An adopted determination creates only the effect specified by the controlling instrument and law. Its query result supplies neither a tribunal nor a power to execute against an asset. These distinctions allow the same evidence service to support informal inquiry, agreed record resolution and subsequent adjudication without conflating their authority or economics.

So Recourse states the separation on the face of every instrument. Every Tier 0 determination carries, in its body and not in a schedule, a statement that it is a determination and not an arbitral award, that it is the result of a query executed against a record, that it has contractual effect between the parties under the rules they adopted and no other effect, that it is not enforceable under the Convention, that no arbitrator has been appointed and no tribunal has considered the matter, and that any party may require the matter to be decided by a tribunal within a published period, unaffected by anything else in the document.

The rules make the right to escalate unconditional. It requires no grounds, no leave and no showing of error. It carries no escalation fee beyond the fee of the tier escalated to. The rules do not permit advance waiver, shortening, a deposit condition, or any threshold of amount or merit; the governing law decides whether each restriction is effective. On escalation the determination ceases to bind and stands only as evidence. If no party escalates within the published period, the determination binds as a matter of contract in the manner of an expert determination. Under the English authorities cited here, fraud or a departure from the parties’ instructions remains reviewable (Jones v Sherwood Computer Services plc, Veba Oil Supply & Trading GmbH v Petrotrade Inc). Other governing laws require their own analysis. The automated function runs the query the parties adopted. Its result remains a determination and not an award.

An Unknown output is a routing receipt. It records the unanswered proposition and obstruction. Expiry of a response or escalation period cannot turn Unknown into Known. A NoEntry certificate retains its log scope throughout any later proceeding. Integrity assertions and a party’s escalation request take priority over a Known result.

Costs do not condition the right. The tribunal allocates them under the agreed rules and applicable law. It may consider the parties’ conduct. The rules state that exercising the escalation right is not, by itself, a ground for adverse costs.

This separation makes the machine tier compatible with tribunal access. Consent is the basis on which an award is enforceable. A procedure that prevents access to a tribunal and later labels a machine result an award creates possible defences under Articles V(1)(b) and V(1)(d). The unconditional escalation right preserves the adjudicative route.

A party who needs an enforceable instrument rather than a contractual one may submit the claim to arbitration once the escalation period has run. This is a new adjudicative proceeding, not a conversion by form. The claimant pleads the proposition under the arbitration agreement, the respondent has the period the rules allow to answer, and the arbitrator may proceed on default under Model Law Article 25 if it does not. The arbitrator is a natural person appointed under the rules, is not bound by the determination, independently assesses the material, and issues any award under the seat law and the rules. Absence of opposition does not turn the determination into an award. The tribunal’s own dispositive instrument does. A settlement may be recorded as an award on agreed terms under Model Law Article 30 when its conditions hold.

Forfeiture needs an authority.

Forfeiting a bond is a transfer of property against the owner’s will. Someone must have authority to declare it. Nothing in a permissionless network confers that authority, and the network’s own prohibition on a global validator forecloses the obvious substitute. What remains is an award, and, for the one class of fault a machine can decide, an instrument the bondholder agreed to in advance. Advance consent works in that class and in no other. A party can bind itself to a machine’s answer where there is nothing to contest: two conflicting signatures under one key at one index are checkable without judgment, given the registry’s key binding. It cannot bind itself in advance to a machine’s answer on a question the machine cannot decide, because there is then no determinate thing it consented to. That is the line the routing test draws. Without a forum, slashing is an administrative penalty register: a list of names the operator has decided to punish, with no mechanism to make the punishment stick against a participant who declines to cooperate, and no defence against the accusation that the operator punishes selectively. The larger the bond, the greater the incentive to contest forfeiture, and a contested forfeiture with no forum is an unenforceable claim on a solvent counterparty.

Reliance demotion is the network’s own consequence and is a different thing. On a certificate, a corridor’s trust level drops to its floor and is rebuilt through the same promotion thresholds as a new corridor (The Sovereign Jurisdiction Network, section 5.8). The network controls its own reliance. It cannot fine or compel a sovereign. A participating state’s written agreement can submit covered corridor obligations to arbitration. Recognition and execution against state property then depend on the forum’s statute, the asset class and any required consent to execution (section 9.9).

The escrow.

The seller can collect the reserved 60,000 only if the custodian has authority to release those funds. A custody mandate names its property, parties, trustee, bonded party and award-executor. It fixes the authorised actions, conditions, signing roles, governing authority and replacement procedure. A signature authorises one instruction. Its digest binds the mandate revision, property slices, predecessor, action, basis, recipient, amount, unit and nonce. Every signature uses that digest. The trustee and award-executor act independently of the network operator, which holds no key or beneficial interest.

The trustee controls custody. The bonded party owns the bonded interest, and the award-executor supplies the independent execution signature allowed by the mandate. Write T_\mu(k,t), B_\mu(k,t) and E_\mu(k,t) for these three roles’ valid signatures on instruction k at execution time t. Their authority must remain effective for that action. The signing condition is \mathrm{Keys}_\mu(k,t)=T_\mu(k,t)\wedge\bigl(B_\mu(k,t)\vee E_\mu(k,t)\bigr). The trustee with either other signer can authorise an eligible instruction. The bonded party and executor together cannot. A generic two-of-three threshold implements a different policy.

An instruction also requires an admitted legal basis, current release eligibility, funded property and its unconsumed predecessor. The mandate’s stage condition must hold for the exact action: \begin{aligned} \mathrm{EscrowPermit}_\mu(k,t)={}&\mathrm{Keys}_\mu(k,t)\wedge\mathrm{Basis}_\mu(k,t)\\ &\wedge\mathrm{Current}_\mu(k,t)\wedge\mathrm{Funded}_\mu(k,t)\\ &\wedge\mathrm{Fresh}_\mu(k)\wedge\mathrm{Stage}_\mu(k,t). \end{aligned} Here \mathrm{Fresh} requires the current custody predecessor and unused nonce. Execution consumes them atomically. \mathrm{Current} includes the custodian’s affirmative release-eligibility determination and every applicable hold. Missing or conflicting authority blocks the action. A conforming certificate proves its named condition. The accepted mandate supplies its authority. An award supplies a distinct basis. A signature creates neither basis.

Suspense and distribution.

A certificate can authorise movement from funded collateral into suspense when the mandate expressly provides that action. The trustee retains the identified property under that mandate. This reservation distributes nothing and reports no recipient recovery. The certificate, key binding, notice recipients and challenge deadline enter the custody record. The trustee moves the property through \mathrm{EscrowPermit}.

Distribution requires a separate instruction and current authority. An unchallenged certificate route requires completed notice, expiry of the prescribed period and a closed intake snapshot covering that period. The snapshot establishes notices received through the designated channels. It establishes no absence of external stays. A qualifying award, settlement, joint instruction or mandate condition can instead support its authorised action. An unresolved challenge blocks disputed distribution under the certificate route. An independently authorised, undisputed amount remains collectible.

A party can lodge a challenge with the trustee or independent review service without operator approval or an advance fee. A timestamped submission remains pending until the challenge enters the durable custody order. An accepted receipt identifies that committed position. The challenge goes to Tier 2. The custodian serialises accepted challenges, review dispositions and release instructions in one order. Distribution requires a fresh predecessor containing every earlier accepted receipt.

Closing the challenge period requires a complete intake cut from every designated channel. Every submission received within the period must enter the custody order before that cut can close. A disconnected channel leaves intake incomplete and blocks certificate-based distribution. Reconnection cannot discard its pending submissions. Legal hold expiry still follows the independent review rule below. Later notice does not erase a completed transfer. Its consequences follow the correction and return rules in section 9.4.

A challenge preserves a hold only for its authorised scope and interval. Before expiry, the independent reviewer must decide continuation, substitution, partial release or return under its authority. A timeout invokes that review path. It never distributes disputed property or extends a hold beyond its legal authority. A subsequent hold or transfer requires its own current basis and applicable signatures. Operators and watchers bond. State recognition and an operator’s bond remain separate instruments. An allocated-property mandate uses the same action and custody conditions.

Funded access and progress.

Before accepting collateral, the custodian records funded coverage for independent challenge intake, emergency review, custody and replacement service. Each active matter receives a disjoint reservation from a separate operating reserve. Disputed collateral, expected forfeitures and unpaid promises supply no coverage. The service contract names capacity, response times and an independent replacement route. Exercising the challenge right requires no claimant funding decision.

The reserve covers each committed procedural stage and custody until its next authorised review. Additional stages require funded commitments before existing coverage expires. Insufficient coverage stops new collateral intake and activates the funded continuity route. It cannot cancel an existing challenge or create release authority. Ordinary cost allocation remains a later decision under the applicable rules.

Progress requires completed notice, available review capacity and funding, and a competent decision within the procedural bound. It also requires the custody provider to execute eligible instructions within its service bound. Under those premises, an unchallenged conforming demand can reach distribution after notice. A challenged demand reaches an independent disposition within its review bound. That disposition can authorise collection, continued protection, substituted security or return. Continued protection carries its next review deadline and funding. A missed premise creates a dated service or authority obstruction with its independent next action.

Pre-funding is available only for obligations funded in advance. Corridor performance, counterparty default, licence-fee obligations and breach by a sovereign participant ordinarily are not pre-funded. A qualifying award supplies an adjudicative route for those obligations, and collection still requires voluntary compliance, security, a guarantee, set-off or execution under forum law. The Convention supports recognition and enforcement of the award. An escrow shortens the route only for controlled value within its mandate.

A selected remedy is not yet a valid remedy.

A remedy record names the obligation, the legal basis, the person or authority that may direct execution, the recipient, the asset or performance sought, the route, the amount and unit, the execution conditions, and the rule for any shortfall. It is executable at a view time only when five independent facts hold. The directing person has authority under the instrument and applicable law. The executing court, trustee, custodian or provider has authority and practical capacity to perform the instruction. The identified asset exists, is controlled on the named route, and is available after stays, sanctions, immunity, priority, insolvency and competing claims are applied. Any escrow or custody leg is funded and its mandate permits the exact release. The record preserves any shortfall as an outstanding obligation and names the next recovery route. A selected remedy whose execution would exceed controlled value is executable only to the controlled amount.

Execution is still not recovery. Execution creates the applicable custody, coercive or voluntary event. Recovery arises only from the recipient-credit and legal-finality evidence in section 9.4. A remedy can therefore be selected but unauthorized, authorized but infeasible, feasible but partly funded, executed but not final, or final with a residual shortfall. The status record keeps those cases separate.

What an award does to the record.

Commencement is recorded on the corridor as the DisputedOverlay branch of the corridor lifecycle, which records a proceeding without erasing the underlying state (The Sovereign Jurisdiction Network, section 5.9). An outcome re-enters a deployment’s record only by that deployment’s own signed act, which is the fourth boundary of Accession Networks: no act of the network creates, modifies or extinguishes a recognition edge without the node’s own signature. An award or a determination is a pinned input to the issuer’s next signed evaluation at a new index, never an edit of an earlier one. That is supersession. Revocation is an authority’s own withdrawal of an attestation, a key or a recognition. Compensation is a receipt that reverts an effect. Where the issuer is a sovereign, re-evaluation is its own act. Where the issuer is an operator bound by the corridor instrument, re-evaluation on award is a contractual term, collectible as money if refused. An award never creates, modifies or extinguishes a recognition edge or a grade. Damages price a withheld recognition. A deployment that declines an award binding on it faces the ordinary Convention remedy.

9.1 Times and evidence objects

A bank credit and the report of that credit need not arrive together. Likewise, a later court decision can change the assessment of an earlier act. The model must retain when an event occurred and when its evidence became available. Fix a dispute identifier d and an append-only raw evidence log L. Every raw entry z has an event identity, an event time t_e(z), an observation time t_o(z), an issuer, a subject, a type, a content digest, a schema version, authentication evidence, and the identities of the earlier entries it links. The event time is when the reported act occurred. The observation time is when the evidence entered L. The view time t is the cut at which a reader derives status. A late observation can describe an earlier event.

Let \mathrm{auth}_L(z;t) mean that z has a canonical encoding, a supported schema, and authentication evidence that verifies against the recorded issuer and key epoch. This test does not apply a later compromise finding. Let K_t be the authenticated key-status relation supplied by the registry or key-binding authority under its separate root of trust. It maps an affected key or object to the earliest compromised event time. Its construction does not call \mathrm{valid}_L, so the definition is not recursive. Let \mathrm{valid}_L(z,t_e;t) mean that \mathrm{auth}_L(z;t) holds and K_t contains no applicable compromise at or before t_e. The authentication subsystem computes K_t, \mathrm{auth}_L and \mathrm{valid}_L before the dependency fold starts, and their values stay fixed throughout that fold. An ordinary later key expiry does not invalidate a signature that was valid when made. A compromise entry in L records a finding already present in K_t; it does not authenticate itself. Below, “valid” abbreviates the fixed value of \mathrm{valid}_L. The model uses the following evidence objects.

Agreement C.

The arbitration agreement and its authenticated binding context. The context identifies every party, covered claim, applicable law and basis on which that law binds the party. It records capacity, the seat, the rules and the authority that determines disputed applicability.

Jurisdiction inquiry J.

The asserted agreement, parties, claims, appointment evidence, notice and authority to decide jurisdiction. It identifies the natural persons conducting an arbitral inquiry or the competent court. Its authority and disposition remain separate from merits admission.

Case K.

Commencement, notice, response, claims, service and case identity. A party, a process server, an administering institution, the centre’s registrar or a tribunal can supply it. No administrator is required.

Tribunal T.

Appointment and acceptance evidence for each natural-person arbitrator, binding the tribunal to d, C, the appointment method, the rules and the seat, and recording challenges and replacements.

Award A.

The tribunal’s signed dispositive instrument, deciding contested issues or recording agreed terms. It binds parties, dispute, tribunal, claims, seat, rules, date, and a set of relief items I(A), each with an amount and a unit or a non-money performance.

Recognition N.

A forum act that recognises an award as binding or grants an enforcement order. It identifies the award, forum, legal route and covered relief items. Its lifecycle certificate identifies the legally supported effective interval and termination conditions. The certificate can refer to a rule supplied by the competent forum. An unresolved duration remains unknown.

Interim measure M.

An interim measure ordered by the tribunal or by a court and given effect in a forum against an asset, before or after the award.

Review V.

A correction, interpretation, challenge, stay, suspension, refusal, set-aside, discharge or supersession, naming the competent authority, the affected routes and relief items, its effect and its effective interval.

Settlement \sigma and joint instruction \iota.

An authenticated settlement of d, and an authenticated instruction signed by both parties to a custodian.

Custody mandate \mu.

An authenticated instrument binding its parties, custodian, identified property, actions, conditions, delegated authority and effective interval. Its governing authority determines applicability independently of arbitration consent. Each instruction binds the exact mandate revision and condition evidence.

Voluntary compliance P.

An authenticated instruction or completed transfer by the obligor under a stated basis.

Custody release U.

An accepted release by a contractual custodian, identifying the mandate, the controlled property, the release basis and the conditions satisfied at the event time.

Coercive execution X.

A completed act under forum law against identified property, identifying the forum, the asset, the executing authority, the basis and the procedure. A plan, a levy request or a filing is not a completed act.

Attestation.

\mathrm{Attest}(\alpha,\pi,I,v) records a named authority’s determination of predicate \pi over legal interval I. A determination about an act at one time can use a singleton interval. A continuing status requires its own supported interval. Evidence freshness is separate from that interval. The lapse of evidence freshness does not terminate the legal act.

Source checkpoint.

An authenticated checkpoint identifies a source stream, sequence number, prefix digest, covered subjects, complete-through time and evidence-expiry time. It certifies the source-issued updates included through that cutoff. It supplies evidence about the stream and no recognition or actionability determination of its own.

Compromise.

\mathrm{Compromise}(z', t'): the log record of a finding in K_t that object z' is forged, misidentified or signed under a key compromised from t'.

Economic effect \epsilon.

Defined in section 9.4.

9.2 Routes and predicates

The seller may receive voluntary payment, collect under the escrow mandate, or seek execution in a particular forum against particular property. A route identifies that means of performance and the authority on which it depends. A route is one of \rho ::= \mathrm{Court}(f, a) \mid \mathrm{Custody}(c, a) \mid \mathrm{Voluntary}(b), where f is a forum, c a custodian, a identified property and b a payment basis. Route identity prevents authority in one forum, over one asset, or under one mandate from being reused elsewhere.

A legal predicate is a question such as whether a particular asset is currently available for execution. Its value comes from the competent authority. Every legal predicate carries two times: the event time it speaks about and the view time at which it is evaluated. The route predicates are \begin{align*} &\mathrm{RecognizedAt}(A, f, i, t_e; t), &&\mathrm{ActionableAt}(A, f, a, i, t_e; t),\\ &\mathrm{ReleaseEligibleAt}(\beta, c, a, t_e; t), &&\mathrm{VoluntaryBasisAt}(b, t_e; t). \end{align*} Here i is a relief item and \beta \in \{\mathrm{Award}(A),\ \mathrm{Settlement}(\sigma),\ \mathrm{JointInstruction}(\iota),\ \mathrm{MandateCondition}(\mu,k)\}.

The voluntary-basis predicate resolves b to an accepted award, settlement or joint instruction for the exact parties, claim and action. Settlement and instruction authority are independent of arbitration consent. For \gamma\in\{\sigma,\iota,\mu\}, \mathrm{InstrumentApplies}(\gamma,d,s;t) records formation, capacity, party binding, scope and action authority under the instrument’s applicable law. It also binds any representative’s delegated authority. An affirmative instrument predicate creates no coercive power or arbitration agreement. For \mathrm{MandateCondition}(\mu,k), the accepted mandate supplies the basis and k identifies the exact action and condition evidence. The custody guard checks both. A certificate can satisfy a mandate condition and cannot satisfy \mathrm{QualifyingAward}. Custody applicability supplies no voluntary-payment basis. The process predicates are \begin{align*} &\mathrm{AgreementApplies}(C, d, t_e; t), &&\mathrm{ProperNotice}(K, t_e; t),\\ &\mathrm{ProperlyConstituted}(T, t_e; t), &&\mathrm{QualifyingAward}(A, t_e; t),\\ &\mathrm{RecognitionAct}(N, f, t_e; t), &&\mathrm{ReviewAct}(V, t_e; t),\\ &\mathrm{InterimAct}(M, f, a, t_e; t). \end{align*} Indexing recognition and actionability by relief item lets the model represent partial recognition and partial set-aside. Article V(1)(c) and Model Law Articles 34(2)(a)(iii) and 36(1)(a)(iii) provide for both. The fold never evaluates a legal predicate. It reads determinations from entries of L. The route fixes which authority may determine each predicate. The forum determines court predicates, the custodian determines release eligibility, and the tribunal or seat court determines process predicates. The resolver below distinguishes missing, false and conflicting determinations. The legal assumptions in section 9.6 state when an authoritative determination is correct.

For every party p and head of claim h, the binding context resolves \mathrm{PartyBound}(C,p,h,s;t). It identifies the agreement, scope, capacity and applicable-law basis. \mathrm{AgreementApplies}(C,d,s;t) requires affirmative binding determinations for every party and head admitted in d. A reliance record alone supplies none of these determinations. \mathrm{InquiryAuthority}(J,s;t) separately identifies the seat-law or court-law authority to decide a contested jurisdictional basis. An inquiry disposition can supply a binding determination through its competent authority. It creates no agreement or merits award by itself.

9.3 Recognition lifecycle

The seller need not obtain a new recognition act merely because time passes. Yet an intervening stay may block a proposed levy. The record must reuse the recognition basis while checking the later events that affect its use. A recognition act and evidence about its continuing effect have separate lifecycles. Let \nu identify the forum’s lifecycle profile. The profile names the competent sources, update scopes, freshness rules and legal supersession rules. The competent forum supplies these parameters.

For each recognised relief item, a lifecycle certificate binds \ell=(N,A,f,i,\nu,I,\mathcal{T},\Gamma). Here I is the legally supported effective interval. Its endpoint can be open when the applicable rule supports continuation until a named event. \mathcal{T} contains the termination and suspension conditions. \Gamma identifies every update source required by the profile. Each condition names the authority and evidence that resolves it. An unresolved condition produces an explicit obstruction.

The certificate establishes the recognition basis once. A reader reuses that basis while its legal interval and conditions support the requested use. The reader refreshes evidence about subsequent events. That refresh requires no new signature on the recognition act.

9.4 Economic effects and collected cash

9.5 The state and the fold

The preceding definitions answer four different questions: what happened, what can be done now, what value moved, and what remains unresolved. The derived state at view time t is a product S_t(d, L) = (H_t, C_t, E_t, O_t). H_t is the currently accepted historical projection. It contains accepted legal and procedural entries, including jurisdiction inquiries and committed claim adjustments. The raw log retains reports even when later evidence changes their acceptance. Review-only extensions preserve H_t under the theorem’s conditions. Compromise findings and new legal attestations have the separate effects specified below. C_t records current recognition, actionability, release eligibility and other route predicates. Missing, false and conflicting predicate values create distinct obstructions. E_t contains occurrence assertions, their current support projections, attribution journals and the separately reconciled funding records. O_t contains typed obstructions, rejected relationships, shortfalls and provenance. A disputed legal allocation or relationship leaves the underlying cash occurrence in E_t.

9.6 Assumptions

The theorem establishes what the record preserves when its evidence mechanisms have the stated properties. It does not establish the truth of an award, a custody mandate or a provider report. Five formal assumptions carry the theorem.

F1, authentication.

For a fixed log cut and view time, the root authorities supply a deterministic authenticated key-status relation K_t, and verification returns deterministic \mathrm{auth}_L and \mathrm{valid}_L values for every entry. Constructing K_t does not call either function. A successful \mathrm{auth}_L test binds issuer, subject, content, event time, schema and key epoch, except with negligible cryptographic failure probability. A finding in K_t effective at or before the event time makes \mathrm{valid}_L false without changing \mathrm{auth}_L.

F2, identity binding.

Dispute, party, agreement, tribunal, award, route, asset, account, occurrence, assertion, allocation and claim-revision identifiers refer to their intended objects.

F3, canonical order.

Event times, observation times and assertion identities define deterministic total orders. Content digests are collision resistant. The admitted schema fixes units, precision, slice identities and deterministic correction-allocation rules. Each lifecycle profile fixes source identity, predecessor binding, scope comparison and deterministic update interpretation. Legal supersession requires its named authority relationship.

F4, authoritative economic evidence.

A wrapper is valid and comes from a source authorised to report its named event. It binds the occurrence assertion, account, unit, event time and evidence cutoff. Collection requires a complete applicable finality-policy certificate from the competent route authority. That certificate binds the supported assertion revision, accounting leg, policy scope and exhaustive window set. Under the declared provider assumptions, its list contains every applicable window and its cutoff supports the stated horizon. An empty list requires that same completeness evidence. Source corrections and balance statements identify the earlier assertions or adjustments they supersede or include.

F5, occurrence and journal authority.

The canonical occurrence relation identifies one recipient-side movement independently of legal origin or reporter. Authoritative correspondence distinguishes aliases from separate causal legs. Each attribution journal has one authenticated committed successor per predecessor. Atomic multi-claim transactions bind every consumed predecessor and resulting claim revision. Committed records preserve their evidence cutoffs and consumed slice identities. Balance reconciliation identifies which actual occurrences and corrections its checkpoint includes. These assumptions concern authority, identity and commit integrity. The transition rules impose the quantity guards.

Six legal predicates remain external. L1, consent, governs agreement formation, scope, capacity, party binding, separability and survival under the named applicable law. A relying participant’s intake status supplies no binding predicate. L2, arbitral process, governs notice, appointment, jurisdiction inquiries, merits competence, equal treatment, the opportunity to present a case and qualifying awards. L3 governs forum-specific recognition and review. L4 governs coercive actionability, including property, priority, insolvency, immunity and procedure. L5 governs custody-mandate applicability, release authority, operative holds and each mandate’s conditions. L6 governs settlements, joint instructions, claim adjustments and the authority for reallocating consumed credit. A competent tribunal, court, custodian or other named authority supplies each determination for its exact parties, claims, route and time. The paper proves no legal predicate.

9.7 Trace integrity

The main theorem checks the distinctions required by the seller’s dispute. An award needs its own procedural ancestors. Execution and release need their own authorities. Recovery needs a distinct, supported payment quantity. Later review changes current permissions without manufacturing or erasing cash. L3 also supplies the recognition lifecycle and competent review sources. Each concrete route establishes whether its source set covers all relevant events. Freshness and completeness retain the meaning certified by those sources. Authentication alone establishes neither legal coverage nor factual completeness.

The result is a trace-integrity theorem. It does not compel recognition or collection, and it does not prove that an authenticated source reported the world truthfully beyond F1 to F5. What it removes is the possibility that a status reader is told that one stage occurred because another did.

9.8 Boundary cases

The monetary totals below use the collection and attribution conditions of section 9.4. A completed debit can reduce current backing before it qualifies for a collected net-recovery total.

No agreement.

A notice is filed and administered and no agreement of the parties is in the log. No commencement enters. Case administration cannot create consent.

Recognition without actionability.

Forum F recognises the award and execution immunity protects the identified asset. In the current state, \begin{aligned} C_t(\mathrm{RecognizedAt}(A,F,i,t;t)) &= \mathsf{true},\\ C_t(\mathrm{ActionableAt}(A,F,a,i,t;t)) &= \mathsf{false}. \end{aligned}

Different forums.

F_1 recognises and F_2 refuses. One scalar recognition status would be false reporting. The route-indexed state records both.

Partial recognition.

F recognises relief item i_1 and refuses i_2. A levy for i_2 in F has no basis and enters O_t.

Later stay.

A custodian releases while its mandate permits and a court later stays further action. The release and its receipt remain. Current release eligibility can become false.

Voluntary payment.

The debtor pays after the award without court process. The ledger records a voluntary origin and a receipt. It does not invent recognition or coercive execution.

Unrelated payment.

The debtor pays a separate invoice between the same parties. Its occurrence remains in the cash ledger. Its allocation does not belong to dispute d, so it does not increase that dispute’s recovery.

Payment under an invalid award.

A collected credit of 100 names an award later held invalid. Its cash occurrence remains. An authorised attribution of 60 to that matter records 60 of recovery with the award defect, while 40 remains unallocated. An unrelated invoice cannot consume those same 60 slices. A claim discharge or restitution duty requires its own competent determination.

Partial receipts and reversal.

Two receipts of 40,000 attributed to d give \mathrm{Gross}_t=80{,}000. A completed return of 20,000 attributed to the same dispute gives \mathrm{Net}_t=60{,}000. Repeated evidence counts that debit once. An actual debit of 50,000 remains a debit of 50,000 even if its reference names only a 40,000 receipt. Its matched part is 40,000. The excess remains an explicit discrepancy or receives its own authorised allocation.

Consumed allocation.

A receipt of 100 discharges claim A. Deleting its allocation row cannot make the same 100 available for claim B. Reassignment requires one authorised adjustment of both claims and preserves the original consumption identity.

Spent before observation.

The recipient spends a valid receipt before its evidence reaches the dispute record. The later evidence can still establish payment of the original claim. Current free cash does not govern attribution of that earlier receipt.

Corrected quantity.

An authority corrects a reported 100 credit to 80. The original report and committed claim transitions remain in history. Current substantiated attribution is at most 80, and the affected 20 appears as an attributed-credit deficit. Reconciliation applies the adjustment once, including when a newer balance statement already reflects it.

A fee refunded.

The provider refunds its 100 fee. The refund’s sign is the negative of the fee’s sign, so \mathrm{Net}_t returns to 80,000 and \mathrm{Gross}_t is unchanged.

Ad hoc case.

The claimant serves notice directly under the rules and no institution administers the case. Authenticated notice evidence can satisfy \mathrm{ProperNotice}.

Award on agreed terms.

The parties settle during valid proceedings and the tribunal records the settlement as an award. \mathrm{QualifyingAward} can accept it without pretending that unresolved merits remained.

Non-party custodian.

An award orders a bank to transfer funds. The bank accepted no custody mandate and no court order applies. Neither a release nor an execution has a basis.

Pre-award attachment.

A court attaches property on the tribunal’s interim measure before the award (Model Law Articles 17 and 17H). The attachment is an accepted interim measure, and a later execution cites it as its basis together with the award.

Set-off.

The parties’ cross-claims are set off and the obligation is discharged. No receipt effect exists. The discharge is a satisfaction determination and the recovery vector is unchanged, which is the correct report.

Duplicate receipt evidence.

A provider callback and an account statement describe the same recipient-credit occurrence under authenticated correspondence evidence. Both remain evidence. The ledger counts the effect once.

Credit inside a reversal window.

Usable credit of 60,000 remains available while an applicable window is open. Collection requires complete policy evidence and closure at the supported cutoff.

Unknown windows.

Recipient credit and legal-finality evidence arrive without a complete route-policy certificate. An empty metadata list remains unknown. An authenticated complete policy that specifies no windows can support collection at its stated cutoff.

Late evidence and replay.

A provider’s late statement establishes a credit that occurred before the recorded award. Its occurrence and attribution can change the current report. Re-evaluating the report sends no payment. A resulting repayment duty requires an independently admitted command with its own funding and authority.

Relying nonparty.

A relying watcher submits evidence without an agreement or other binding basis for arbitration. Intake records the submission. A merits proceeding requires its own affirmative party-binding and scope determinations. A disputed jurisdictional basis can enter the separate competent inquiry route.

9.9 The three routes after an award, and immunity

After an award, each route keeps its own authority. Voluntary compliance needs the debtor’s instruction, mode-appropriate evidence, the entitled recipient’s confirmation and a separate satisfaction determination, and it needs no recognition order. Contractual custody action needs a valid prior mandate covering the instruction, the property, the owner, the conditions, expiry, revocation, stays and third-party rights, and a custodian that never accepted that role is not bound by an award. Court execution needs recognition where the forum requires it, enforceable court authority, available property, local procedure, priority, exemptions, and provider evidence of each named event through recipient credit. Article III of the Convention sends enforcement through each state’s procedure, Article IV identifies the material supplied to the court, Article V states the refusal grounds, Article VI permits adjournment and security during a setting-aside application, and Article VII preserves more favourable rights. None makes collection automatic.

Immunity splits in two. An arbitration agreement can remove adjudicative immunity for arbitration-related proceedings under a forum’s statute. In the United States that result follows from the arbitration exception in 28 U.S.C. § 1605(a)(6), not necessarily from waiver. In the United Kingdom section 9 of the State Immunity Act 1978 removes immunity for proceedings relating to an arbitration the state accepted in writing, subject to the agreement’s terms. Execution remains separate. In the United States, 28 U.S.C. § 1610(a)(6) permits execution against property used for commercial activity when its other conditions hold. In the United Kingdom, section 13(4) permits process against property in commercial use or intended for commercial use. Central-bank and other protected property can remain immune: 28 U.S.C. § 1611(b)(1) and sections 13(3) and 14(4) of the 1978 Act state the forum-specific rules. Articles 17 to 19 and 21 of the United Nations Convention on Jurisdictional Immunities of States and Their Property (2004) likewise separate adjudication from measures against property. Any required consent to execution is therefore negotiated for the relevant participant, forum and asset class. The instrument answers that question before default. The ICSID Convention supplies a distinct route when Article 25 is satisfied: a legal dispute arising directly out of an investment, written consent, a contracting state or designated subdivision or agency, and a national of another contracting state. Article 54 requires each contracting state to recognise an award and enforce its pecuniary obligations as if it were a final domestic judgment. Article 55 preserves the forum’s law of execution immunity. Whether a deployment or corridor obligation falls within Article 25 depends on the parties, consent and investment facts; its label does not decide the question.

10.1 What exists before intake

A centre accepts no matter until eleven decisions are made and sourced. The legal host: the entity, its registry, form, capacity, governing instrument, controlling body and effective interval. Public-law status: each licence, approval, registration or exemption with its issuer, conditions, expiry and dated official source.

The rules: the adopted rules, version, commencement date and amendment process. Administration: filing review, notice, timetable support, records, fees and communications. Appointments: nomination, confirmation, challenge, replacement and removal authority, each of which derives from the arbitration agreement, the incorporated rules or applicable law and never from the centre’s own instrument.

Independence: disclosure, recusal, challenge and complaints procedures. Records: confidentiality, privilege, access, retention, deletion, legal hold and publication authority. Money: each payer, recipient, beneficial owner, fee basis, refund rule, tax treatment and authorised holder.

Service contracts: governing law, forum, claims procedure, liability, indemnity and insurance. The court interface: interim relief, supervisory review, set-aside, recognition, stays and execution. Leadership: accountable officers, protected roles, committees, succession, audit and removal.

The centre administers only the functions a valid arbitration agreement, its governing instrument, applicable law and the incorporated rules confer. The tribunal decides its own jurisdiction under applicable law, subject to the competent court (Model Law Article 16). Rules bind through party agreement or a statutory mechanism, and a centre’s unilateral adoption binds no one.

10.2 Demand, and the queue

An independent new venue must attract parties who can instead choose established arbitral institutions. A venue named in the corridor instrument receives the disputes that arise under that instrument. Because the forum is fixed at accession, cases can arrive before the panel has enough capacity. The resulting risk is delay. The centre therefore publishes a fixed award deadline for the expedited tier and a quarterly breach rate that identifies every matter that exceeded it and the reason.

10.3 Supply: four classes and three forms

The seller, the tribunal and the registrar need different professional services. Their engagement terms must preserve the distinction between representing a party, deciding the dispute and administering the procedure. The supply side has four classes with different controls. Neutral adjudication: arbitrators and emergency arbitrators, under independent appointment, conflicts rules, due process and outcome-neutral fees. The centre cannot buy an outcome or promise an appointment. Institutional operations: case managers, the registrar’s staff, translators, trainers and governance reviewers, engaged by the centre under defined scope, review and protected decision roles. Party services: counsel, experts and enforcement providers, engaged by each party directly or under a lawful segregated arrangement. The centre may present eligible providers on a published rule and receives no share of their fees, no referral fee and no origination fee. Bounded public work: research and data tasks with public inputs, mechanical acceptance and duplicate control, which contain no confidential fact and no matter-specific advice.

Three contract forms supply the work. A continuing service contract reserves availability for case management, registrar support, panel administration, training or translation. Protected work uses the funded terms in section 10.4. The contract fixes remuneration, capacity, service level, term and funded replacement coverage. A fixed-fee engagement buys a defined public work product, such as a citation check, public-source index or data extract. A controlled bounty offers a fixed prize for a non-duplicate result that satisfies an objective test. Its inputs are public and acceptance is mechanical. The offer states the prize, review cost, expected pay and any guaranteed stipend. Substantive legal judgment remains with its designated professional role. Public piecework creates no appointment right or additional protected remuneration.

Eligibility comes before price. A practitioner is eligible only after the engagement record confirms the client, role, governing professional rules, admission and supervision, conflicts clearance, repeat-appointment disclosure, privilege holder, insurance, sanctions controls, data and security requirements, fee structure, worker classification, and applicable tax, immigration, procurement and competition-law limits. An unresolved eligibility condition cannot reserve protected work. The centre publishes the qualification schedule, unit prices and payment register. Membership contracts prohibit collective fee setting, wage fixing, no-poach agreements and competitively sensitive exchange between centres.

The contract forms select different people, and the fee must reflect each person’s alternatives. A fee below the relevant market rate attracts only practitioners whose alternatives pay less. A higher fee can reserve capacity that would not accept a conventional retainer. The machine tiers generate recurring, narrowly defined tasks: assemble and independently check a record extract, verify an evidence bundle against its proofs, witness a conformance rerun, re-execute a determination’s query, or certify a translation. Each artefact is admitted on the proofs it carries. A published fraction is re-executed blind by a second worker, and the centre publishes the disagreement rate.

The bounty layer supplies public research and mechanical verification under independent admission. Its work creates no authority to decide, appoint, resolve a challenge or alter a matter’s material record. No bounty worker sits on a tribunal in a matter whose record that worker touched. A person exceeding a published share of the centre’s bounty spend in a year is ineligible for appointment for the two years that follow. A challenger reward drawn from a forfeited bond has a separate instrument and budget. The same person cannot review a bounty result and claim the related reward. A reviewer whose acceptance can influence a matter receives the funded-term remuneration in section 10.4.

Published, reasoned awards reduce the cost and uncertainty of later cases. Publication is a term of the rules the parties accept at accession, with a named redaction standard and a stated opt-out. Article 34(5) of the UNCITRAL Rules permits publication with the consent of all parties or where a legal duty or proceeding requires disclosure. The centre records consent before it publishes an award under the consent route.

10.4 Funded protected remuneration

A fee schedule can avoid rewarding a particular winner and still reward additional hearings or appeals. The stronger requirement below fixes the protected person’s remuneration for the term before assignment. Let O contain the prevailing party, award amount, recognition, execution, satisfaction and recovery of a matter. Protected roles comprise every person who decides, appoints, reviews a challenge, administers a matter or controls its material records. They include the relevant executives and developers. A public-work supplier enters this class when its role acquires such authority or access.

A protected person’s remuneration includes fees, salary, bonuses, benefits and payments through related persons. Covered economic interests include beneficial rights in the centre, a party or a provider whose income depends on the matter. A person with such an interest cannot occupy an incompatible protected role. The compatibility test in section 10.5 applies before appointment and after a material relationship change. Commercial ownership remains possible outside those protected functions.

A published hourly or event rate has a limited invariance. With the rate, hours, procedural events and assignments fixed, changing a disposition leaves the scheduled charge unchanged. An outcome can change those other inputs. A rate of 100 gives fees of 1,000 and 2,000 for ten and twenty hours. Additional appeals can increase event fees. Protected work therefore uses a stronger contract.

10.5 Independence controls

A party challenging the network’s record must not depend on the network operator to choose its reviewer. Fixed remuneration alone does not resolve that conflict. Appointment, challenge and record-control powers also require separation. Accession Networks carries the ratified precedent and the general result: the Cape Town registry’s three roles held by three bodies, the operator holding no authority over what the register means, and the certifier’s liability carried by a separate entity. Recourse applies that separation to adjudication.

The members of the appointments and challenges body pass the same control-group test as arbitrators. The test identifies persons connected through actual control, as defined below. No payment buys eligibility. The body acts only through an authorised route, which applicable law, the arbitration agreement or the incorporated rules designate (Model Law Articles 11 and 13). Its members serve fixed terms and removal requires stated cause. A person cannot decide a challenge to that person’s own conduct or interest. A control-group result is evidence for the authorised process and cannot by itself appoint, remove or invalidate an arbitrator.

The conflict record is a dated, sourced typed graph. Its vertices include the centre, host, controllers, financiers, providers and persons under consideration. An actual-control edge records ownership control, appointment or removal power, financing control or contractual control. Each edge retains its direction, source, effective interval and applicable threshold. Control groups are connected components of the undirected graph formed from actual-control edges. This conservative conflict test retains the direction of each underlying right.

Direct financial interests, professional ties and material family or household relationships have separate conflict types. The compatibility matrix applies them without inferring transitive control. Routine service edges have a third type. A routine service alone does not join control groups. One pair can carry both a routine service and an independently supported control edge. Excluding the former preserves the latter. The centre and host remain vertices in every projection.

A named record custodian maintains source evidence. A reviewer independent of the affected groups resolves disputed classifications through the authorised process. Service administrators cannot delete or reclassify control evidence. Every classification names its source, responsible person, date and reasons. The assessment affirmatively covers relevant ownership chains, appointment rights, financing conditions and direct relationships. Absence of an edge supplies no clearance. Missing evidence blocks the affected pairing and creates no inferred transitive control edge.

The compatibility matrix classifies each protected-role pair as permitted, permitted with disclosure and recusal, or forbidden. It uses control-group membership, direct conflicts and unresolved pairwise obstructions. The authorised appointment or challenge process applies the result under section 10.1.

A centre administers and never decides. A tribunal consists of natural persons. No software, no ensemble of software and no automated process is a member of a tribunal or may be described as one. No appointment right over arbitrators, panellists or the centre’s executive passes to a private originator of the rules, whatever else that originator is granted: authorship credit, an honorary founding role, a seat on the panel at published rates. Published fee rates and fixed engagement charges use no prevailing-party input. Procedural volume and the centre’s commercial surplus remain separate variables. No payment, subsidy or benefit goes to any adviser, referrer or party representative for centre selection, and a demand-side subsidy takes the form of a published fee reduction to parties. Centre-interest legal opinions name the centre as client, use protected commissioning and review, and never touch jurisdiction, merits, appointments, challenges or awards.

10.6 Centre economics and earned expansion

Funding a new centre can consume cash that an existing matter still needs. The proposed expansion rule first protects those obligations, then limits expansion to cash earned and collected by the centre. Here collected has the exact meaning in section 9.4. The receipt requires usable recipient credit, legal-finality evidence and a complete applicable policy certificate at its supported cutoff. Every applicable window must have closed by that cutoff. A usable credit inside a return, recall or chargeback window is available and remains outside collected income. The centre attributes only its own earned receipts to this schedule. Client money, collateral, restricted funds, pass-through amounts, service advances and property held for others retain their separate ownership and accounting classifications.

The following accounting model uses its own period-indexed balances. Fix an entity, a currency and accounting periods t = 1, 2, \ldots. Let R(t) be the collected operating receipts from earned services in period t and P(t) every operating cash payment in t, fixed and variable, whose debit reached legal finality. The operating cash contribution is \mathrm{OCC}(t) = R(t) - P(t), signed. Let X_{\mathrm{in}}(t) be every external receipt: initial capital, grants, debt, equity, investing and other non-operating receipts, together with restrictions released and exchange-translation effects. Non-operating uses (expansion allocations, owner distributions, investing payments, financing repayments, transfers) are attributed by a pre-adopted order: a use draws the external balance only where the raising instrument of specific external capital restricts its proceeds to that use and that capital remains unspent, and every other use draws the earned balance. Write U_e(t) and U_x(t) for the two parts. The two balances are B(t) = B(t-1) + \mathrm{OCC}(t) - U_e(t), \qquad X(t) = X(t-1) + X_{\mathrm{in}}(t) - U_x(t), with B(0) = X(0) = 0, so that B(t) + X(t) is the closing cash represented by the two balances. The protected exposure union \mathrm{PE}(t) collects commitments that cash must cover before expansion. It contains unpaid due obligations, active-case commitments, working-capital needs, required reserves and, at full amount, every credit still inside a provider reversal window. Documented coverage and valid netting reduce it. Valid netting names its legal basis, a contractual set-off right, a statutory netting rule or the rules of a settlement institution, and that basis must remain enforceable in the counterparty’s insolvency under the relevant legal order. Netting without a named enforceable basis reduces nothing. Expansion-eligible liquidity is \mathrm{EL}(t) = \max(0,\, B(t) + X(t) - \mathrm{PE}(t)). The lawfully deployable amount D(t) applies solvency, capital-maintenance, fiduciary, regulatory-reserve, covenant, tax and exchange rules and the required approvals. The earned-expansion budget is E(t) = \max\bigl(0,\ \min(B(t),\ \mathrm{EL}(t),\ D(t))\bigr). It is the maximum amount the stated cash constraints permit. It does not confer spending authority.

A binding cap can absorb a deficit without changing the permitted budget. Let B=100, X=500, \mathrm{PE}=20 and D=10. Then \mathrm{EL}=580 and E=10. An additional deficit of 20 gives B=80 and \mathrm{EL}=560, while E remains 10. The earned balance records the full deficit. The deployable cap already limits expansion to 10.

A worked number shows why both constraints are needed. The stated budgets assume that the other caps permit them: D(1)\geq2{,}000, \mathrm{EL}(3)\geq3{,}000 and D(3)\geq3{,}000. These are assumptions of the numerical example, not findings of available legal or financial capacity. Initial capital of 500,000 arrives in period 1 and enters X. In period 1 one matter’s administration fee of 9,000 is collected, reserved case-management capacity costs 2,500, variable shared services cost 500 and fixed operating payments are 4,000. Then \mathrm{OCC}(1) = 9{,}000 - 7{,}000 = 2{,}000 and B(1) = 2{,}000. Closing cash is 502,000, the protected exposure union is 150,000, and \mathrm{EL}(1) = 352{,}000. The budget is E(1) = 2{,}000: the next centre may draw two thousand of earned cash because the rest is external capital. In period 2 receipts are 3,000 against payments of 7,000, so \mathrm{OCC}(2) = -4{,}000, B(2) = -2{,}000 and E(2) = 0. In period 3 a contribution of 5,000 gives B(3) = 3{,}000 and E(3) = 3{,}000, not 5,000. A zero floor would omit the earlier deficit. Treating a distribution as debt-funded would misclassify external capital as earned cash.

Centre and owner surplus can respond to matter volume and workload. Beneficial interests remain segregated from incompatible protected functions. Published concentration, assignment overrides, workload and payment records support independent evaluation of these channels. They establish neither constant commercial profit nor causal impartiality.

10.7 Wind-down and continuity

A centre’s states are operating, intake suspended, cure review, wind-down, emergency wind-down, transfer pending, case-administration-only, insolvency, closure review and closed. No wind-down state returns to operation. Authority loss, a protected-money breach, missing protected-money data, a required-reserve breach, protected-role unavailability and a centre-caused due-process failure override every other response and cause immediate intake suspension or emergency wind-down. Each open state names the responsible authority, effective time, funding source, missing-evidence branch and escalation authority. The operating response below is conditional on an externally specified demand test and a separate test called conversion in the operating policy. That policy must supply the conversion test’s subject, criterion and measurement. The term has no established meaning here and does not refer to the currency conversion rule in section 9.4. This paper supplies no numerical threshold for either operating test. One measured demand or conversion failure permits one changed design. A second failure starts wind-down, and a change of label does not reset the count.

Every active matter has a continuity record naming its agreement, rules, seat, tribunal, administrator, transfer authority, required consent, deadlines, records, deposits and successor. Authority loss cannot transfer or terminate a matter by itself. A party’s insolvency reaches the matter under the law that governs it (Regulation (EU) 2015/848 Article 18, Insolvency Act 1986 section 130(2), 11 U.S.C. § 362), and a host’s officeholder can disclaim the network’s continuity and shared-service contracts (Insolvency Act 1986 section 178, 11 U.S.C. § 365), so the continuity record binds no officeholder and the successor schedule names a route that needs none.

Closure requires that every matter is complete or validly transferred, and that every obligation for services, remedies, payments, refunds and clawbacks is satisfied, preserved, transferred or lawfully provided for. Every provider instruction must be released or must have reached legal finality under the provider’s recorded rule, with recipient-credit evidence where the provider is not the recipient’s own institution. An instruction can instead transfer with a funded reserve. Protected money and property must be returned or transferred and reconciled. Records, privilege and legal holds must have an authorised successor. Required notices, refunds, final audit and independent sign-off must be complete. Closure never depends on a provider reversal window that remains with the closed centre. Protected money is never a wind-down reserve.

Consent to arbitrate names an institution and its rules (Model Law Article 7, Convention Article II), so a clause executed before a centre’s removal from the network and never invoked is exposed to an argument that it is inoperative or incapable of being performed (Article II(3), Model Law Article 8(1)). The parties therefore consent to an irrevocable licence of the rules version in force at clause execution for every clause registered before removal, and to a published successor-administrator designation.

10.8 Seat, venue, and what a jurisdiction gains

The seat of an arbitration is its juridical place: the legal system whose arbitration law supervises the proceedings and whose courts hear applications to set the award aside. It is chosen by the parties or determined under the rules (Model Law Article 20(1)), and the Model Law supplies the supervisory framework most seats implement. The seat is not the place where hearings are held, and it is not the place where the administering institution keeps its offices. A centre established in one territory routinely administers arbitrations seated in another.

The protocol requires a Convention seat, a seat in a territory to which the Convention applies, because an award seated outside the Convention loses the recognition route in every enforcing state that made the reciprocity reservation of Article I(3). Many parties listed on the UNCITRAL status table have made that reservation. The commercial reservation is the second reason the clause recites that the relationship is commercial. The Convention’s territorial application is not uniform. Several territories with sophisticated commercial law sit outside it because no extension was notified on their behalf. Where a territory sits outside, the remedy is a notification under Article X(2) by the state responsible for that territory’s international relations, after which the Convention applies from the ninetieth day after receipt, or from the Convention’s entry into force for that state, whichever is later. Effective enforcement also requires domestic law that gives the Convention effect in the territory. Article X(3) asks each responsible state to consider extension, subject where constitutional arrangements require it to the consent of the territory’s own government. Where a party wants proceedings connected to such a territory, the protocol seats the arbitration in a Convention territory and designates the centre as administrator.

Two treaty configurations therefore need their own dated sources before a centre opens. The first is a seat in a territory with no extension on the United Nations treaty record: on that record it is not Convention territory until an Article X(2) notification takes effect. The second is a receiving state that declared the reciprocity reservation: its courts have no Convention route for an award made at the first seat until the extension is effective, while a receiving state without the reservation may apply the Convention to that award under Article I and its own forum law, and another domestic or treaty route may also apply. Local centre authority, the juridical seat, the domestic arbitration law and the Convention’s application are four separate facts, each with its own dated source.

The seat is chosen outside the control of either party to the dispute, so a corridor between two participating jurisdictions is seated in a third. What a jurisdiction gains from hosting a seat is distinct from what the network gains. A seat attracts counsel, experts, hearing services and the professional formation of a panel. It also builds standing as disputes are decided under its supervisory law. A chartered centre can be closed by the state that chartered it. Dubai Decree No. 34 of 2021 abolished the DIFC Arbitration Institute and the Emirates Maritime Arbitration Centre and directed their caseloads to a successor administering different rules. A private arrangement made six months later allowed the London Court of International Arbitration to continue administering every matter commenced on or before 20 March 2022 under the rules the parties had chosen. A corridor instrument must therefore name a fallback appointing authority and a fallback rule set, and preserve the chosen rules for every matter commenced before closure. These measures provide capacity and continuity. Standing follows only from decided cases in which the instrument was used and tested. The founding panel indicates the intended quality of that future record but cannot replace it.

Online dispute resolution.

eBay’s own dispute system, described by its director of online dispute resolution in 2010, handled more than 60 million disputes a year, 90 per cent of them resolved entirely by software, against more than 250 million registered users (Rule 2010). The figures are the operator’s own, and the largest tier is an automated problem-diagnosis step rather than an adjudication, so they indicate scale rather than a measured resolution rate. The indication is still the warrant for a machine tier: at consumer scale, most disputes are not arguable, and the ones that are can be identified cheaply. Katsh and Rifkin (2001) are the literature, and the UNCITRAL Technical Notes on Online Dispute Resolution (2016) supply the case-service role the registrar plays here. The public-sector counterpart fared differently. The European Union’s ODR platform, launched in February 2016, was closed in July 2025 under Regulation (EU) 2024/3228 after nine years in which traders had to carry a link to it and no obligation to answer a complaint made through it. Two to three million visitors a year produced on the order of two hundred resolved cases a year across the Union. The contrast identifies the condition rather than the technology. A machine tier works where the operator already holds the record and already controls the remedy, and fails where participation is optional.

On-chain adjudication.

Kleros (Lesaege, Ast and George 2019), Aragon Court and Augur (Peterson and others 2015) resolve disputes by incentivised voting among token-holding jurors, and their decisions bind what the protocol controls and nothing else. Where the contract executes the ruling, award, execution and receipt collapse into one transaction, and that is a custody release under a pre-agreed mandate, the \mathrm{Custody}(c, a) route of this paper, and not an award under Article I of the Convention or Articles 11, 12 and 31 of the Model Law. Ortolani (2016) draws the same conclusion from multisignature escrow. Where the parties made no written agreement between named parties, Article II is not met and Article IV(1)(b) cannot be complied with. Where they did, whether an award rendered by persons who cannot be identified is an award turns on the parties’ agreement and the seat’s law, and the resisting party may raise Article V(1)(a) and V(1)(d). Either way the decision cannot bind banks, custodians, creditors, regulators or any third party outside the protocol. The UK Jurisdiction Taskforce’s Digital Dispute Resolution Rules (2021) are the closest published instrument to awards that execute: an arbitrator may implement the decision directly on a digital asset, and the arbitration agreement may be made by digital signature. Their tribunal may itself operate the asset, so tribunal and custodian coincide, a case this paper keeps apart.

Institutional arbitration.

The International Chamber of Commerce reported 841 new cases in 2024 against 1,789 pending, an average amount in dispute of US$130 million for new cases against a median near US$5 million, and its administrative expenses are capped under Appendix III of its 2026 rules at US$180,000. The difference between the average and median shows that a small number of high-value matters materially affects the distribution. The Hong Kong International Arbitration Centre and the London Court of International Arbitration publish comparable caseload and cost schedules. The UNCITRAL Expedited Arbitration Rules (2021) and the expedited procedure of the ICC Rules (2021, Article 30 and Appendix VI) are the ancestors of Tier 1. Those institutions serve disputes that justify conventional arbitral procedure and cost. A network can also generate many low-value, record-decidable matters. The three tiers provide procedures for both groups.

Regional centre networks and treaty routes.

The Asian-African Legal Consultative Organization’s Integrated Scheme (1978) created a network of locally hosted arbitration centres under host-country agreements, from Kuala Lumpur (1978) and Cairo (1979) to Lagos (1989), Tehran (1997), Nairobi (2006) and Hong Kong (2021), and the Permanent Court of Arbitration concludes host-country agreements under which it administers proceedings on the host’s territory. Both show that a centre’s authority is local and hosted, which is section 10.1. ICSID Articles 53 to 55 are the treaty form of the sentence that an award is not recovery: enforcement as a final judgment with no Article V review, and execution immunity preserved. The state-immunity statutes cited in section 9.9 draw the adjudication and execution lines the model indexes by route.

Registries and standard-setting bodies.

The three-role separation of the Cape Town registry, the supervisory-body bargain in which fee-setting and open-data obligations pass upward in exchange for authority, and the liability line the standard-setting cases draw, on which the courts divide with control as the usual pivot, are carried in Accession Networks. This paper applies them to a venue.

Bitemporal records.

Event time, observation time and view time are the valid time, transaction time and query time of the temporal-database literature (Snodgrass and Ahn 1985, Jensen and Snodgrass 1999), standardised as system-versioned tables in SQL:2011 (Kulkarni and Michels 2012). Typed events, append-only logs and guarded transitions are established systems technique. This paper does not claim to invent them. Its formal contribution is the scoped product and the invariants that prevent event-time arbitral authority, current route-specific legal predicates and unit-indexed economic effects from being conflated.

Professional markets.

Rochet and Tirole (2003) and Armstrong (2006) supply the comparators for cross-side effects, price structure and multihoming in the two-sided market of section 10.3. Dezalay and Garth (1996) describe how the transnational arbitration bar and its institutions formed, which is the supply side this paper designs for. The IBA Guidelines on Conflicts of Interest (2024) are the disclosure standard the control-group rule sharpens.

What this paper adds.

Three things. A routing test that separates the provable from the arguable, with integrity dominance and a determination that is never an award, kept inside Article V by an unconditional escalation right. A bitemporal, predicate-indexed status fold whose seven invariants hold for every choice of the legal predicates, with an explicit rule that a later legal effect enters only as a new event. And a venue design that separates funded protected remuneration from outcomes, retains actual control in its conflict record, and bounds expansion by earned cash. The financial results state their fixed inputs and follow from the specified contracts and recurrences.

Theorems.

Proposition 5.1 establishes termination under the admitted query profile and resource limits. A Known result also requires the snapshot and evidence checks. Proposition 9.1 separates evidence evaluation from provider dispatch. Theorem 9.2, Corollary 9.3, Corollary 9.4 and Corollary 9.5 are paper proofs under F1 to F5. Proposition 8.1 follows from the route and effect separations in section 8 and section 9.4. Proposition 10.1 and Proposition 10.2 follow from the contracts and recurrences in section 10.4 and section 10.6. Proposition 10.5 gives local continuation correspondence under its encoding, authority and storage premises. Proposition 10.7 gives continuation and resource conservation under its stated source, decoder and custody premises. No result is machine-checked.

Conditional legal consequences.

F1 to F5 and legal predicates L1 to L6 are assumptions for each concrete case. The remedy analysis also assumes the stated authority, asset availability, execution capacity, funding and shortfall facts. The escrow analysis assumes a trust whose insolvency treatment has been established under the law of the situs, meaning the property’s location. Convention treatment assumes a qualifying arbitration agreement, award, seat and enforcement forum.

Open problems and hypotheses.

Deterrence is not proved. The reliance-demotion mechanism increases the cost of equivocation, but no payoff model here establishes deterrence. Other open questions are execution against sovereign assets beyond commercial property; arbitrability and public policy under Article V(2); certifier liability for economic loss; named-forum instantiation of the route predicates; canonical encodings and provider evidence; key-compromise timing and correction; comparison of arbitration with security, guarantees, set-off, judgments and settlement without double-counting; and the queue that can form before sufficient panel capacity exists. Four participation claims remain hypotheses: verified capacity may increase centre selection; observable matters may increase reserved practitioner capacity; paid assignments may retain capacity within the independence limits; and a stated fee change may move participation by a stated threshold. No universal critical-mass number follows.