A sovereign network has no authority above its members.

The architecture forbids a global validator set with authority over records. This restriction preserves the registry control on which a jurisdiction’s participation depends, regardless of scaling considerations. Accepting a network quorum’s determination of its registry would delegate that registry (Accession Networks, the four boundaries). The network therefore cannot decide contested state by vote. A signed statement identifies its speaker but confers no authority to judge the statement’s meaning.

A record is not a remedy.

Proof objects establish which rules the system ran, on which inputs, with which signed outcome and at which time. They cannot establish what a party undertook and failed to do, because the deployment does not interpret the instruments containing those undertakings. Nor can they move money from a defaulting party’s account, which requires coercive power beyond the record. A ledger entry records a provider’s movement of value on its own books. The rule governing that provider determines when the transfer becomes legally irrevocable (section 9.4).

The provable and the arguable are different categories.

A query can establish whether an operation was recorded or whether two signatures conflict. It can also compare a rule pack with the one the jurisdiction ratified. A rule pack is the versioned set of rules an evaluation ran under.

Other propositions require judgment: which of two properly recognised rule sets governed, whether a recognition-grade condition held, whether conduct was negligent, or what non-arithmetic quantum follows. The grade is the level at which a receiving jurisdiction accepts a foreign evaluation, defined in How Compliance Composes. These questions require a tribunal. Treating a query as adjudication compromises its evidentiary role, while a software answer to a question of legal construction binds no one.

Adjudication therefore requires an authority outside the deployment. The design uses arbitration for covered private disputes. Its cross-border recognition route explains that choice.

What the clause creates.

Two parties can establish a cross-border arbitration route by contract even when their states have no bilateral judgment-recognition treaty. Consent requires their own written agreement under Article II. No digest, rule pack, register entry or state accession substitutes for it.

The resulting route remains forum-specific. A state with the reciprocity reservation in Article I(3) applies the Convention only to awards made in another contracting state. A state with the commercial reservation applies it only to relationships its law considers commercial. Recognition and enforcement still leave collection dependent on further acts. Article III uses each state’s procedure, while Article VI permits adjournment and security during a pending setting-aside application. Immunity, asset location, priority and insolvency remain separate conditions (section 9.9).

Voluntary payment, settlement, enforcement of security, an independent guarantee, set-off and a consent order can produce recovery without an award. The model in section 9 records each receipt’s legal origin without requiring an award or court route.

The network’s formation mechanism uses the same legal structure. A recognition network is built by unilateral accession to a published standard rather than by pairwise negotiation, and Accession Networks proves when that construction reproduces what bilateral negotiation would have produced. The Convention applies that structure to recognition and enforcement of awards. Corridors carry typed compliance state under an accession instrument. An arbitration clause governs the private obligations attached to that state. Neither mechanism requires a bilateral treaty. Together they govern the cross-border regulatory state and the private obligations attached to it.

The multi-hop problem, and what the clause reaches.

Recognition composes along paths. An entity’s compliance state reaches jurisdiction C through B, having originated in A. How Compliance Composes treats the composition and its grading. A failed transaction across A \to B \to C raises two questions.

The regulatory question is prospective: will C’s law give effect to a determination composed across A and B? The accession instrument, conformance suite and corridor grade answer it to the extent they fix the relevant conditions. The conformance suite contains the published tests a participant must pass. Accession Networks states what remains open.

The adjudicative question arises on failure: which forum decides, under which law, and can its decision reach assets in C? Before a dispute, transitive acceptance states a policy. Once contested, it requires a jurisdictional decision. Without a prior forum agreement, the parties face that question in a forum they did not choose.

Recourse answers the second through the parties’ agreement. A single network arbitration clause is written into the corridor instrument at every hop and into every participation agreement: one seat, one set of rules, one appointing authority, and one governing law for the corridor obligation. The parties therefore fix the tribunal and governing law at accession. Where the Convention applies in C, it supplies a recognition and enforcement route. Collection remains subject to C’s procedure, the available asset and every other route-specific fact. A composition refusal becomes a merits question in the forum the parties specified, rather than a jurisdictional question in a forum they did not.

The clause covers private obligations attached to composed state, making them enforceable in C subject to the stated route conditions. C’s regulator retains every part of its statutory authority. An award cannot license an entity, register an offering, or clear a payment C prohibits. The agreed forum for enforcement in C leaves every required regulatory approval unchanged.

Two risks remain. Article V(2)(a) permits refusal where the forum’s law makes the subject matter incapable of settlement by arbitration. Article V(2)(b) permits refusal where enforcement would violate public policy. A state may hold that a dispute over its own regulatory determination is not arbitrable. The clause therefore covers private performance, bond forfeiture and corridor fees, without purporting to adjudicate a regulator’s decision. This follows the network’s distinction between conformance and recognition and keeps the enforcement layer within the Convention.

Disputes after a bilateral commit.

A corridor operation can await completion while both endpoints reserve resources for it. A prepared endpoint has made that reservation but still awaits the joint outcome. The final recorded outcome is the terminal decision. The bilateral protocol preserves one ordered terminal decision. A lease sets the local waiting deadline. Lease expiry records that deadline and can initiate a request for the decision. Prepared resources remain reserved until the durable terminal outcome authorises their disposition. A local expiry alone supplies no joint abort or release authority (The Sovereign Jurisdiction Network, sections 6.1 and 7).

The recorded reservation, expiry, decision and missing evidence are separate facts. A proposition the record decides enters the record tier of section 5. The corridor instrument can determine loss allocation by arithmetic on recorded values. Other questions of loss allocation require the competent tribunal. Escrow release follows its qualifying basis, mandate and applicable law. Recovery uses the collection rule in section 9.4. An assertion of equivocation raises an integrity question for the full tribunal. Different local progress at the two endpoints supplies no inference of blame.

Does the record decide the proposition?

Five conditions must hold. The proposition names a closed evidence snapshot and uses the bounded query language below. Evaluation returns a known value with the required evidence. The query chooses no governing rule between properly recognised alternatives. It traverses no discretion the applicable rules leave open, including a typed discretion hole of Lex, which marks a decision left to an authorised actor. Any absence result concerns only the named retained log intervals.

The evidence snapshot.

Re-execution must examine the same retained evidence. The record therefore fixes a snapshot before evaluating the query. A snapshot \Sigma fixes its view time, schemas, verification profile, authority bindings and key-status evidence. Each source log has an identifier, inclusive retained interval [\ell,u] and head observation cutoff. The snapshot carries the commitment before \ell, the commitment at u and every raw entry between them.

The verifier checks consecutive positions and reconstructs the upper commitment from the lower commitment and complete interval. The upper head carries the required watcher attestations. A corridor query verifies each endpoint’s interval separately. These checks establish coverage of committed intervals under the named authentication assumptions. Truthful reporting and coverage of external events require their own evidence.

Source tables are typed views derived from complete raw intervals. The snapshot fixes their row order and derivation rules. A missing interval entry, unresolved required dependency or unsupported schema prevents a known result. A failed proof or asserted integrity defect invokes the integrity rule below. Selected inclusion proofs alone establish no complete search result.

The admitted query language.

A published profile fixes maximum input bytes B, syntax nodes M, source rows N, tuple arity K and scalar width W. It fixes output, memory and instruction limits. Scalar expressions contain literals, typed row fields, checked arithmetic, comparisons, Boolean operations and finite conditional expressions. They can read authentication results established by the snapshot verifier. Every primitive has a deterministic specification and finite cost bound. Missing required values and arithmetic overflow produce typed obstructions.

The query can select rows, count them, add a recorded quantity, test for an entry, or test for its absence. Let each L_j be a snapshot table. The domain D contains the tuples formed by their product. The predicate p selects tuples, and e or \bar e specifies their scalar output. A query has one of five forms: \begin{split} D=L_1\times\cdots\times L_k,\qquad 1\leq k\leq K,\\ q\in\{\mathrm{select}_{p,\bar e}(D),\ \mathrm{count}_{p}(D),\ \mathrm{sum}_{p,e}(D),\\ \mathrm{exists}_{p}(D),\ \mathrm{none}_{p}(D)\}. \end{split} The predicate and output expressions use the scalar constructors above. Evaluation visits source tuples in fixed order. Aggregation uses checked arithmetic and respects the output limit. Queries contain no nested queries, recursion, program hooks, network reads or mutable external state. Comparisons between recorded rule-pack digests remain available. Executing a rule-pack program requires the separate institutional runtime.

Admission checks syntax, types, source bindings and resource bounds. For m\leq M syntax nodes, at most (N+1)^k source tuples are visited. A conservative instruction bound is c_{\mathcal P}(W)\bigl(B+(m+1)(N+1)^k\bigr), where c_{\mathcal P}(W) bounds the profile’s parsing, verification and scalar primitives. Admission also bounds complete output and working memory. Excess requests receive \mathrm{Unknown}(\mathrm{ResourceBound}). The interpreter meters instructions and allocation. Exhaustion returns that typed result and discards partial output.

Evaluation returns \mathrm{Known}(v) or \mathrm{Unknown}(o), where o identifies the obstruction. Unsupported syntax, incomplete evidence and missing external facts have distinct types. Unknown never becomes false, zero, an empty table or a successful absence result.

Log absence and external facts.

A successful absence query produces a \mathrm{NoEntry} certificate. It binds the query, snapshot digest, verification profile, log identifiers, retained intervals, boundary commitments, observation cutoffs and coverage evidence. It states that no matching entry occurs in those retained intervals. An interval starting after the first entry establishes nothing about earlier entries. A later observation can report an earlier external event.

NoEntry does not establish that an operation never occurred, a ratification never existed or a court issued no stay. An external proposition lacking its competent authority’s required determination returns \mathrm{Unknown}(\mathrm{ExternalFact}). A query can extract an attestation and identify its authority, scope and effective interval. It supplies no independent determination of that external proposition. Unknown follows the Tier 1 and Tier 2 routing rules. An asserted integrity defect takes priority.

Is the integrity of the record itself in issue?

Integrity is in issue where a party asserts forgery or key compromise, an append-only violation, a proof that does not verify, equivocation between two signed objects, a commitment that does not match the message it names, a stale or unquorate timestamp, a proof envelope missing a required element, or that the rule pack an operation pinned is not the pack the competent authority ratified.

Does resolution turn on law, construction, discretion or characterisation?

This includes which of two recognised packs governed, the construction of a corridor instrument or of its grade, whether a condition attached to a conditional grade held, the exercise of a discretion, the characterisation of conduct, quantum that is not arithmetic on recorded values, and every question of transitive acceptance.

A proposition the record decides, with no integrity question and no question of law, goes to Tier 0, record resolution. The registrar executes the admitted query against its immutable snapshot. A determination requires a Known result. It states the proposition, verbatim query, snapshot digest, verification profile, resource limits and result. It includes the extract and coverage evidence needed for independent re-execution. Any absence statement carries its NoEntry certificate and exact retained intervals.

Checking instructions name the authentication assumptions and source authorities. Tier 0 constitutes no tribunal, appoints no arbitrator and holds no hearing.

A proposition the record does not decide, with no integrity question and no question of law, goes to Tier 1, the expedited procedure. A sole arbitrator decides on the documents, for a fixed fee and on a fixed timetable, and issues an award rather than a determination. A matter requiring oral evidence for a fair decision is re-routed to a full tribunal by procedural order, with the fee credited. The expedited arbitrator does not decide that matter.

A question of law also enters Tier 1 when its amount is at or below a published monetary ceiling and no party requests a hearing. Model Law Article 24(1) supplies the hearing condition for a documents-only procedure. The ceiling is published, uniform across parties, and never varied case by case.

Everything else goes to Tier 2, the full tribunal. Record-integrity assertions take priority: the head enters Tier 2 regardless of amount, the other answers, or any party’s contrary agreement. Tier 0 derives its entire authority from record integrity, so it cannot adjudicate an assertion that its own mechanism is compromised. Routing that assertion to an automated tier would leave every tier without an independently tested evidential basis.

This rule concerns assertions that the record is compromised. Mechanical verification still precedes every tier. It checks digest matches, signatures, replay of signed outcomes and conforming equivocation certificates. Such a certificate contains two conflicting signed objects under one key at one index and can be verified on its face. These checks are not heads of claim.

The Sovereign Jurisdiction Network develops the mechanical checks, their certificates and the watchers’ bonded attestations of chain heads. Those attestations expose conflicting heads when different parties receive different histories. That paper assigns exact integrity checks to machines and interpretation to people familiar with the relevant traditions, with integrity checked first. Recourse supplies the procedure when a party contests that mechanical result. An assertion that a certificate is unsound raises an integrity question and goes to a tribunal.

Emergency relief.

Emergency-arbitrator provisions run beside every tier, including matters routed to record resolution. The emergency arbitrator is a natural person appointed under the rules. Tier 0 issues no relief. Relief binds the private parties. It takes effect on a deployment’s record only through that deployment’s own signed act. An emergency-relief order displaces a sovereign halt only under a rule adopted by the halting authority. Any notice or countermand window follows the governing mandate (The Sovereign Jurisdiction Network, section 8.4). Reversible throughput relief can use an expedited procedure. Value-moving relief requires notice and security. The Convention treatment of an emergency arbitrator’s order is forum-specific. Court enforcement of an interim measure depends on the forum’s law, including Model Law Article 17H where enacted.

Routing is administrative.

Routing neither decides the merits nor binds a tribunal, which must not treat it as a finding. Any party can move a head from Tier 0 or Tier 1 to a higher tier without grounds or leave. Movement downward requires every party’s written agreement. A party may always pay for the fuller procedure. Tier 0 still requires the admission, evidence and Known-result conditions above. Unknown follows the tribunal routing rules, and integrity assertions and escalation take priority over a Known result.

Extraction, adoption and adjudication.

An advisory extract reports a query, its bound evidence and its result. Issuing or reading it creates no contractual determination. A published service schedule may provide the extract without charge. A fee for producing evidence arises only under the separate service terms. A contractual determination additionally names the parties’ effective adoption, the proposition submitted, the permitted effect and the challenge procedure. An award requires the separate tribunal route. The instrument type, adoption basis and charging basis remain distinct fields throughout storage, transmission and succession.

An advisory extract becomes an input to a contractual determination only through the parties’ effective adoption and a determination within its scope. Silence after an unsolicited extract supplies no adoption. An adopted determination creates only the effect specified by the controlling instrument and law. Its query result supplies neither a tribunal nor a power to execute against an asset. These distinctions allow the same evidence service to support informal inquiry, agreed record resolution and subsequent adjudication without conflating their authority or economics.

Every Tier 0 determination states these limits in its body, rather than in a schedule. It identifies itself as a determination, not an arbitral award, and as the result of a query executed against a record. It states that its only effect is contractual, between the parties under their adopted rules, and that it is not enforceable under the Convention. It records that no arbitrator has been appointed and no tribunal has considered the matter. It also states that any party may require tribunal adjudication within a published period. Nothing else in the document can affect that right.

Escalation requires no grounds, leave or showing of error, and carries no fee beyond that of the tier escalated to. The rules prohibit advance waiver, shortening, deposit conditions, and thresholds of amount or merit. The governing law determines whether each restriction is effective. On escalation, the determination ceases to bind and remains only evidence.

Without escalation within the published period, the determination binds contractually in the manner of an expert determination. Under the cited English authorities, fraud or departure from the parties’ instructions remains reviewable (Jones v Sherwood Computer Services plc, Veba Oil Supply & Trading GmbH v Petrotrade Inc). Other governing laws require separate analysis. The automated function runs the adopted query, and its result remains a determination rather than an award.

An Unknown output is a routing receipt. It records the unanswered proposition and obstruction. Expiry of a response or escalation period cannot turn Unknown into Known. A NoEntry certificate retains its log scope throughout any later proceeding. Integrity assertions and a party’s escalation request take priority over a Known result.

Costs do not condition the right. The tribunal allocates them under the agreed rules and applicable law. It may consider the parties’ conduct. The rules state that exercising the escalation right is not, by itself, a ground for adverse costs.

This separation makes the machine tier compatible with tribunal access. Consent is the basis on which an award is enforceable. A procedure that prevents access to a tribunal and later labels a machine result an award creates possible defences under Articles V(1)(b) and V(1)(d). The unconditional escalation right preserves the adjudicative route.

A party seeking an enforceable arbitral instrument may submit the claim to arbitration once the escalation period has run. This requires a new adjudicative proceeding. The claimant pleads the proposition under the arbitration agreement, and the respondent has the period allowed by the rules to answer. If it does not, the arbitrator may proceed on default under Model Law Article 25.

The arbitrator is a natural person appointed under the rules and independently assesses the material without being bound by the determination. Any award must be the tribunal’s own dispositive instrument under the seat law and rules. Absence of opposition cannot convert the determination into an award. A settlement may be recorded as an award on agreed terms under Model Law Article 30 when its conditions hold.

Forfeiture needs an authority.

Bond forfeiture transfers property against the owner’s will and requires authority to declare it. A permissionless network confers no such authority, and the architecture forbids a global validator from supplying it. An award provides one basis. For the class of fault a machine can decide, the bondholder’s prior agreement provides another.

That prior agreement is limited to determinate questions. Given the registry’s key binding, two conflicting signatures under one key at one index can be checked without judgment. A party cannot bind itself in advance to a machine’s answer on a question that machine cannot decide. In that case there is no determinate answer to which it could consent. The routing test preserves this limit.

Without a forum, a slashing register merely lists penalties selected by the operator. It supplies no means to compel an uncooperative participant or answer an allegation of selective punishment. Larger bonds increase the incentive to contest forfeiture. A contested forfeiture without a forum therefore remains an unenforceable claim even against a solvent counterparty.

Reliance demotion is distinct from bond forfeiture. A certificate can support a destination authority’s prospective tightening of recognition under its local rule. Restoring looser recognition requires endpoint ratification, route notice, and passport checks. Shared sanctions reliance also requires a current shared-authority certificate and revocation check (The Sovereign Jurisdiction Network, section 8.1). Each destination controls its own reliance.

The network cannot fine or compel a sovereign. A participating state’s written agreement can submit covered corridor obligations to arbitration. Recognition and execution against state property then depend on the forum’s statute, the asset class and any required consent to execution (section 9.9).

The escrow.

The seller can collect the reserved 60,000 only if the custodian has authority to release those funds. A custody mandate names its property, parties, trustee, bonded party and award-executor. It fixes the authorised actions, conditions, signing roles, governing authority and replacement procedure. A signature authorises one instruction. Its digest binds the mandate revision, property slices, predecessor, action, basis, recipient, amount, unit and nonce. Every signature uses that digest. The trustee and award-executor act independently of the network operator, which holds no key or beneficial interest.

The trustee controls custody. The bonded party owns the bonded interest, and the award-executor supplies the independent execution signature allowed by the mandate. Write T_\mu(k,t), B_\mu(k,t) and E_\mu(k,t) for these three roles’ valid signatures on instruction k at execution time t. Their authority must remain effective for that action. The signing condition is \mathrm{Keys}_\mu(k,t)=T_\mu(k,t)\wedge\bigl(B_\mu(k,t)\vee E_\mu(k,t)\bigr). The trustee with either other signer can authorise an eligible instruction. The bonded party and executor together cannot. A generic two-of-three threshold implements a different policy.

An instruction also requires an admitted legal basis, current release eligibility, funded property and its unconsumed predecessor. The mandate’s stage condition must hold for the exact action: \begin{aligned} \mathrm{EscrowPermit}_\mu(k,t)={}&\mathrm{Keys}_\mu(k,t)\wedge\mathrm{Basis}_\mu(k,t)\\ &\wedge\mathrm{Current}_\mu(k,t)\wedge\mathrm{Funded}_\mu(k,t)\\ &\wedge\mathrm{Fresh}_\mu(k)\wedge\mathrm{Stage}_\mu(k,t). \end{aligned} Here \mathrm{Fresh} requires the current custody predecessor and unused nonce. Execution consumes them atomically. \mathrm{Current} includes the custodian’s affirmative release-eligibility determination and every applicable hold. Missing or conflicting authority blocks the action. A conforming certificate proves its named condition. The accepted mandate supplies its authority. An award supplies a distinct basis. A signature creates neither basis.

Suspense and distribution.

A certificate can authorise movement from funded collateral into suspense when the mandate expressly provides that action. The trustee retains the identified property under that mandate. This reservation distributes nothing and reports no recipient recovery. The certificate, key binding, notice recipients and challenge deadline enter the custody record. The trustee moves the property through \mathrm{EscrowPermit}.

Distribution requires a separate instruction and current authority. An unchallenged certificate route requires completed notice, expiry of the prescribed period and a closed intake snapshot covering that period. The snapshot establishes notices received through the designated channels. It establishes no absence of external stays. A qualifying award, settlement, joint instruction or mandate condition can instead support its authorised action. An unresolved challenge blocks disputed distribution under the certificate route. An independently authorised, undisputed amount remains collectible.

A party can lodge a challenge with the trustee or independent review service without operator approval or an advance fee. A timestamped submission remains pending until the challenge enters the durable custody order. An accepted receipt identifies that committed position. The challenge goes to Tier 2. The custodian serialises accepted challenges, review dispositions and release instructions in one order. Distribution requires a fresh predecessor containing every earlier accepted receipt.

Closing the challenge period requires a complete intake cut from every designated channel. Every submission received within the period must enter the custody order before that cut can close. A disconnected channel leaves intake incomplete and blocks certificate-based distribution. Reconnection cannot discard its pending submissions. Legal hold expiry still follows the independent review rule below. Later notice does not erase a completed transfer. Its consequences follow the correction and return rules in section 9.4.

A challenge preserves a hold only for its authorised scope and interval. Before expiry, the independent reviewer must decide continuation, substitution, partial release or return under its authority. A timeout invokes that review path. It never distributes disputed property or extends a hold beyond its legal authority. A subsequent hold or transfer requires its own current basis and applicable signatures. Operators and watchers bond. State recognition and an operator’s bond remain separate instruments. An allocated-property mandate uses the same action and custody conditions.

Funded access and progress.

Before accepting collateral, the custodian records funded coverage for independent challenge intake, emergency review, custody and replacement service. Each active matter receives a disjoint reservation from a separate operating reserve. Disputed collateral, expected forfeitures and unpaid promises supply no coverage. The service contract names capacity, response times and an independent replacement route. Exercising the challenge right requires no claimant funding decision.

The reserve covers each committed procedural stage and custody until its next authorised review. Additional stages require funded commitments before existing coverage expires. Insufficient coverage stops new collateral intake and activates the funded continuity route. It cannot cancel an existing challenge or create release authority. Ordinary cost allocation remains a later decision under the applicable rules.

Progress requires completed notice, available review capacity and funding, and a competent decision within the procedural bound. It also requires the custody provider to execute eligible instructions within its service bound. Under those premises, an unchallenged conforming demand can reach distribution after notice. A challenged demand reaches an independent disposition within its review bound. That disposition can authorise collection, continued protection, substituted security or return. Continued protection carries its next review deadline and funding. A missed premise creates a dated service or authority obstruction with its independent next action.

Pre-funding is available only for obligations funded in advance. Corridor performance, counterparty default, licence-fee obligations and breach by a sovereign participant ordinarily are not pre-funded. A qualifying award supplies an adjudicative route for those obligations, and collection still requires voluntary compliance, security, a guarantee, set-off or execution under forum law. The Convention supports recognition and enforcement of the award. An escrow shortens the route only for controlled value within its mandate.

A selected remedy is not yet a valid remedy.

A remedy record names the obligation, the legal basis, the person or authority that may direct execution, the recipient, the asset or performance sought, the route, the amount and unit, the execution conditions, and the rule for any shortfall. It is executable at a view time only when five independent facts hold. The directing person has authority under the instrument and applicable law. The executing court, trustee, custodian or provider has authority and practical capacity to perform the instruction. The identified asset exists, is controlled on the named route, and is available after stays, sanctions, immunity, priority, insolvency and competing claims are applied. Any escrow or custody leg is funded and its mandate permits the exact release. The record preserves any shortfall as an outstanding obligation and names the next recovery route. A selected remedy whose execution would exceed controlled value is executable only to the controlled amount.

Execution creates a custody, coercive or voluntary event. Recovery requires the separate recipient-credit and legal-finality evidence in section 9.4. The status record therefore distinguishes selection, authority, feasibility, funding, execution and finality, including any residual shortfall. Selection can lack authority, authority can lack feasibility, and a feasible remedy can remain partly funded. An executed remedy may still await finality, while a final one may leave a shortfall.

What an award does to the record.

Commencement enters the corridor lifecycle as DisputedOverlay, recording the proceeding while retaining the underlying state (The Sovereign Jurisdiction Network, section 8.1). An outcome enters a deployment’s record only through that deployment’s own signed act. This is the fourth boundary of Accession Networks: no network act creates, modifies or extinguishes a recognition edge without the node’s own signature.

An award or determination is a pinned input to the issuer’s next signed evaluation at a new index. This supersession leaves earlier evaluations intact. Revocation is an authority’s own withdrawal of an attestation, a key or a recognition. Compensation is a receipt that reverts an effect.

A sovereign issuer performs its own re-evaluation. For an operator bound by the corridor instrument, re-evaluation on award is a contractual term, collectible as money if refused. The award itself never creates, modifies or extinguishes a recognition edge or grade. Damages price a withheld recognition, and a deployment declining an award binding on it faces the ordinary Convention remedy.

9.1 Times and evidence objects

A bank credit and the report of that credit need not arrive together. Likewise, a later court decision can change the assessment of an earlier act. The model must retain when an event occurred and when its evidence became available. Fix a dispute identifier d and an append-only raw evidence log L. Every raw entry z has an event identity, an event time t_e(z), an observation time t_o(z), an issuer, a subject, a type, a content digest, a schema version, authentication evidence, and the identities of the earlier entries it links.

The event time is when the reported act occurred. The observation time is when the evidence entered L. The view time t is the cut at which a reader derives status. A late observation can describe an earlier event.

Let \mathrm{auth}_L(z;t) mean that z has a canonical encoding, a supported schema, and authentication evidence that verifies against the recorded issuer and key epoch. This test does not apply a later compromise finding. Let K_t be the authenticated key-status relation supplied by the registry or key-binding authority under its separate root of trust. It maps an affected key or object to the earliest compromised event time. Its construction does not call \mathrm{valid}_L, so the definition is not recursive. Let \mathrm{valid}_L(z,t_e;t) mean that \mathrm{auth}_L(z;t) holds and K_t contains no applicable compromise at or before t_e.

The authentication subsystem computes K_t, \mathrm{auth}_L and \mathrm{valid}_L before the dependency fold starts, and their values stay fixed throughout that fold. An ordinary later key expiry does not invalidate a signature that was valid when made. A compromise entry in L records a finding already present in K_t; it does not authenticate itself. Below, “valid” abbreviates the fixed value of \mathrm{valid}_L. The model uses the following evidence objects.

Agreement C.

The arbitration agreement and its authenticated binding context. The context identifies every party, covered claim, applicable law and basis on which that law binds the party. It records capacity, the seat, the rules and the authority that determines disputed applicability.

Jurisdiction inquiry J.

The asserted agreement, parties, claims, appointment evidence, notice and authority to decide jurisdiction. It identifies the natural persons conducting an arbitral inquiry or the competent court. Its authority and disposition remain separate from merits admission.

Case K.

Commencement, notice, response, claims, service and case identity. A party, a process server, an administering institution, the centre’s registrar or a tribunal can supply it. No administrator is required.

Tribunal T.

Appointment and acceptance evidence for each natural-person arbitrator, binding the tribunal to d, C, the appointment method, the rules and the seat, and recording challenges and replacements.

Award A.

The tribunal’s signed dispositive instrument, deciding contested issues or recording agreed terms. It binds parties, dispute, tribunal, claims, seat, rules, date, and a set of relief items I(A), each with an amount and a unit or a non-money performance.

Recognition N.

A forum act that recognises an award as binding or grants an enforcement order. It identifies the award, forum, legal route and covered relief items. Its lifecycle certificate identifies the legally supported effective interval and termination conditions. The certificate can refer to a rule supplied by the competent forum. An unresolved duration remains unknown.

Interim measure M.

An interim measure ordered by the tribunal or by a court and given effect in a forum against an asset, before or after the award.

Review V.

A correction, interpretation, challenge, stay, suspension, refusal, set-aside, discharge or supersession, naming the competent authority, the affected routes and relief items, its effect and its effective interval.

Settlement \sigma and joint instruction \iota.

An authenticated settlement of d, and an authenticated instruction signed by both parties to a custodian.

Custody mandate \mu.

An authenticated instrument binding its parties, custodian, identified property, actions, conditions, delegated authority and effective interval. Its governing authority determines applicability independently of arbitration consent. Each instruction binds the exact mandate revision and condition evidence.

Voluntary compliance P.

An authenticated instruction or completed transfer by the obligor under a stated basis.

Custody release U.

An accepted release by a contractual custodian, identifying the mandate, the controlled property, the release basis and the conditions satisfied at the event time.

Coercive execution X.

A completed act under forum law against identified property, identifying the forum, the asset, the executing authority, the basis and the procedure. A plan, a levy request or a filing is not a completed act.

Attestation.

\mathrm{Attest}(\alpha,\pi,I,v) records a named authority’s determination of predicate \pi over legal interval I. A determination about an act at one time can use a singleton interval. A continuing status requires its own supported interval. Evidence freshness is separate from that interval. The lapse of evidence freshness does not terminate the legal act.

Source checkpoint.

An authenticated checkpoint identifies a source stream, sequence number, prefix digest, covered subjects, complete-through time and evidence-expiry time. It certifies the source-issued updates included through that cutoff. It supplies evidence about the stream and no recognition or actionability determination of its own.

Compromise.

\mathrm{Compromise}(z', t'): the log record of a finding in K_t that object z' is forged, misidentified or signed under a key compromised from t'.

Economic effect \epsilon.

Defined in section 9.4.

9.2 Routes and predicates

The seller may receive voluntary payment, collect under the escrow mandate, or seek execution in a particular forum against particular property. A route identifies that means of performance and the authority on which it depends. A route is one of \rho ::= \mathrm{Court}(f, a) \mid \mathrm{Custody}(c, a) \mid \mathrm{Voluntary}(b), where f is a forum, c a custodian, a identified property and b a payment basis. Route identity prevents authority in one forum, over one asset, or under one mandate from being reused elsewhere.

A legal predicate is a question such as whether a particular asset is currently available for execution. Its value comes from the competent authority. Every legal predicate carries two times: the event time it speaks about and the view time at which it is evaluated. The route predicates are \begin{align*} &\mathrm{RecognizedAt}(A, f, i, t_e; t), &&\mathrm{ActionableAt}(A, f, a, i, t_e; t),\\ &\mathrm{ReleaseEligibleAt}(\beta, c, a, t_e; t), &&\mathrm{VoluntaryBasisAt}(b, t_e; t). \end{align*} Here i is a relief item and \beta \in \{\mathrm{Award}(A),\ \mathrm{Settlement}(\sigma),\ \mathrm{JointInstruction}(\iota),\ \mathrm{MandateCondition}(\mu,k)\}.

The voluntary-basis predicate resolves b to an accepted award, settlement or joint instruction for the exact parties, claim and action. Settlement and instruction authority are independent of arbitration consent. For \gamma\in\{\sigma,\iota,\mu\}, \mathrm{InstrumentApplies}(\gamma,d,s;t) records formation, capacity, party binding, scope and action authority under the instrument’s applicable law. It also binds any representative’s delegated authority. An affirmative instrument predicate creates no coercive power or arbitration agreement. For \mathrm{MandateCondition}(\mu,k), the accepted mandate supplies the basis and k identifies the exact action and condition evidence. The custody guard checks both. A certificate can satisfy a mandate condition and cannot satisfy \mathrm{QualifyingAward}. Custody applicability supplies no voluntary-payment basis. The process predicates are \begin{align*} &\mathrm{AgreementApplies}(C, d, t_e; t), &&\mathrm{ProperNotice}(K, t_e; t),\\ &\mathrm{ProperlyConstituted}(T, t_e; t), &&\mathrm{QualifyingAward}(A, t_e; t),\\ &\mathrm{RecognitionAct}(N, f, t_e; t), &&\mathrm{ReviewAct}(V, t_e; t),\\ &\mathrm{InterimAct}(M, f, a, t_e; t). \end{align*} Indexing recognition and actionability by relief item lets the model represent partial recognition and partial set-aside. Article V(1)(c) and Model Law Articles 34(2)(a)(iii) and 36(1)(a)(iii) provide for both. The fold never evaluates a legal predicate. It reads determinations from entries of L. The route fixes which authority may determine each predicate. The forum determines court predicates, the custodian determines release eligibility, and the tribunal or seat court determines process predicates. The resolver below distinguishes missing, false and conflicting determinations. The legal assumptions in section 9.6 state when an authoritative determination is correct.

For every party p and head of claim h, the binding context resolves \mathrm{PartyBound}(C,p,h,s;t). It identifies the agreement, scope, capacity and applicable-law basis. \mathrm{AgreementApplies}(C,d,s;t) requires affirmative binding determinations for every party and head admitted in d. A reliance record alone supplies none of these determinations. \mathrm{InquiryAuthority}(J,s;t) separately identifies the seat-law or court-law authority to decide a contested jurisdictional basis. An inquiry disposition can supply a binding determination through its competent authority. It creates no agreement or merits award by itself.

9.3 Recognition lifecycle

An intervening stay may block the seller’s proposed levy even though the recognition act remains effective. Reusing that act requires checking later events that affect its use, rather than obtaining a new recognition act merely because time passes. The act and evidence about its continuing effect therefore have separate lifecycles. Let \nu identify the forum’s lifecycle profile. The competent forum supplies its sources, update scopes, freshness rules and legal supersession rules.

For each recognised relief item, a lifecycle certificate binds \ell=(N,A,f,i,\nu,I,\mathcal{T},\Gamma). Here I is the legally supported effective interval. Its endpoint can be open when the applicable rule supports continuation until a named event. \mathcal{T} contains the termination and suspension conditions. \Gamma identifies every update source required by the profile. Each condition names the authority and evidence that resolves it. An unresolved condition produces an explicit obstruction.

The certificate establishes the recognition basis once. A reader reuses that basis while its legal interval and conditions support the requested use. The reader refreshes evidence about subsequent events. That refresh requires no new signature on the recognition act.

9.4 Economic effects and collected cash

9.5 The state and the fold

The preceding definitions answer four different questions: what happened, what can be done now, what value moved, and what remains unresolved. The derived state at view time t is a product S_t(d, L) = (H_t, C_t, E_t, O_t). H_t is the currently accepted historical projection. It contains accepted legal and procedural entries, including jurisdiction inquiries and committed claim adjustments. The raw log retains reports even when later evidence changes their acceptance. Review-only extensions preserve H_t under the theorem’s conditions. Compromise findings and new legal attestations have the separate effects specified below.

C_t records current recognition, actionability, release eligibility and other route predicates. Missing, false and conflicting predicate values create distinct obstructions. E_t contains occurrence assertions, their current support projections, attribution journals and the separately reconciled funding records. O_t contains typed obstructions, rejected relationships, shortfalls and provenance. A disputed legal allocation or relationship leaves the underlying cash occurrence in E_t.

9.6 Assumptions

The theorem establishes what the record preserves when its evidence mechanisms have the stated properties. It does not establish the truth of an award, a custody mandate or a provider report. Five formal assumptions carry the theorem.

F1, authentication.

For a fixed log cut and view time, the root authorities supply a deterministic authenticated key-status relation K_t, and verification returns deterministic \mathrm{auth}_L and \mathrm{valid}_L values for every entry. Constructing K_t does not call either function. A successful \mathrm{auth}_L test binds issuer, subject, content, event time, schema and key epoch, except with negligible cryptographic failure probability. A finding in K_t effective at or before the event time makes \mathrm{valid}_L false without changing \mathrm{auth}_L.

F2, identity binding.

Dispute, party, agreement, tribunal, award, route, asset, account, occurrence, assertion, allocation and claim-revision identifiers refer to their intended objects.

F3, canonical order.

Event times, observation times and assertion identities define deterministic total orders. Content digests are collision resistant. The admitted schema fixes units, precision, slice identities and deterministic correction-allocation rules. Each lifecycle profile fixes source identity, predecessor binding, scope comparison and deterministic update interpretation. Legal supersession requires its named authority relationship.

F4, authoritative economic evidence.

A wrapper is valid and comes from a source authorised to report its named event. It binds the occurrence assertion, account, unit, event time and evidence cutoff. Collection requires a complete applicable finality-policy certificate from the competent route authority. That certificate binds the supported assertion revision, accounting leg, policy scope and exhaustive window set. Under the declared provider assumptions, its list contains every applicable window and its cutoff supports the stated horizon. An empty list requires that same completeness evidence. Source corrections and balance statements identify the earlier assertions or adjustments they supersede or include.

F5, occurrence and journal authority.

The canonical occurrence relation identifies one recipient-side movement independently of legal origin or reporter. Authoritative correspondence distinguishes aliases from separate causal legs. Each attribution journal has one authenticated committed successor per predecessor. Atomic multi-claim transactions bind every consumed predecessor and resulting claim revision. Committed records preserve their evidence cutoffs and consumed slice identities. Balance reconciliation identifies which actual occurrences and corrections its checkpoint includes. These assumptions concern authority, identity and commit integrity. The transition rules impose the quantity guards.

Six legal predicates remain external. L1, consent, governs agreement formation, scope, capacity, party binding, separability and survival under the named applicable law. A relying participant’s intake status supplies no binding predicate. L2, arbitral process, governs notice, appointment, jurisdiction inquiries, merits competence, equal treatment, the opportunity to present a case and qualifying awards. L3 governs forum-specific recognition and review. L4 governs coercive actionability, including property, priority, insolvency, immunity and procedure. L5 governs custody-mandate applicability, release authority, operative holds and each mandate’s conditions. L6 governs settlements, joint instructions, claim adjustments and the authority for reallocating consumed credit. A competent tribunal, court, custodian or other named authority supplies each determination for its exact parties, claims, route and time. The paper proves no legal predicate.

9.7 Trace integrity

The main theorem checks the distinctions required by the seller’s dispute. An award needs its own procedural ancestors. Execution and release need their own authorities. Recovery needs a distinct, supported payment quantity. Later review changes current permissions without manufacturing or erasing cash. L3 also supplies the recognition lifecycle and competent review sources. Each concrete route establishes whether its source set covers all relevant events. Freshness and completeness retain the meaning certified by those sources. Authentication alone establishes neither legal coverage nor factual completeness.

The trace-integrity theorem prevents a status view from reporting one stage merely because another occurred. It cannot compel recognition or collection. Nor does it establish truthful reporting by an authenticated source beyond F1 to F5.

9.8 Boundary cases

The monetary totals below use the collection and attribution conditions of section 9.4. A completed debit can reduce current backing before it qualifies for a collected net-recovery total.

No agreement.

A notice is filed and administered and no agreement of the parties is in the log. No commencement enters. Case administration cannot create consent.

Recognition without actionability.

Forum F recognises the award and execution immunity protects the identified asset. In the current state, \begin{aligned} C_t(\mathrm{RecognizedAt}(A,F,i,t;t)) &= \mathsf{true},\\ C_t(\mathrm{ActionableAt}(A,F,a,i,t;t)) &= \mathsf{false}. \end{aligned}

Different forums.

F_1 recognises and F_2 refuses. One scalar recognition status would be false reporting. The route-indexed state records both.

Partial recognition.

F recognises relief item i_1 and refuses i_2. A levy for i_2 in F has no basis and enters O_t.

Later stay.

A custodian releases while its mandate permits and a court later stays further action. The release and its receipt remain. Current release eligibility can become false.

Voluntary payment.

The debtor pays after the award without court process. The ledger records a voluntary origin and a receipt. It does not invent recognition or coercive execution.

Unrelated payment.

The debtor pays a separate invoice between the same parties. Its occurrence remains in the cash ledger. Its allocation does not belong to dispute d, so it does not increase that dispute’s recovery.

Payment under an invalid award.

A collected credit of 100 names an award later held invalid. Its cash occurrence remains. An authorised attribution of 60 to that matter records 60 of recovery with the award defect, while 40 remains unallocated. An unrelated invoice cannot consume those same 60 slices. A claim discharge or restitution duty requires its own competent determination.

Partial receipts and reversal.

Two receipts of 40,000 attributed to d give \mathrm{Gross}_t=80{,}000. A completed return of 20,000 attributed to the same dispute gives \mathrm{Net}_t=60{,}000. Repeated evidence counts that debit once. An actual debit of 50,000 remains a debit of 50,000 even if its reference names only a 40,000 receipt. Its matched part is 40,000. The excess remains an explicit discrepancy or receives its own authorised allocation.

Consumed allocation.

A receipt of 100 discharges claim A. Deleting its allocation row cannot make the same 100 available for claim B. Reassignment requires one authorised adjustment of both claims and preserves the original consumption identity.

Spent before observation.

The recipient spends a valid receipt before its evidence reaches the dispute record. The later evidence can still establish payment of the original claim. Current free cash does not govern attribution of that earlier receipt.

Corrected quantity.

An authority corrects a reported 100 credit to 80. The original report and committed claim transitions remain in history. Current substantiated attribution is at most 80, and the affected 20 appears as an attributed-credit deficit. Reconciliation applies the adjustment once, including when a newer balance statement already reflects it.

A fee refunded.

The provider refunds its 100 fee. The refund’s sign is the negative of the fee’s sign, so \mathrm{Net}_t returns to 80,000 and \mathrm{Gross}_t is unchanged.

Ad hoc case.

The claimant serves notice directly under the rules and no institution administers the case. Authenticated notice evidence can satisfy \mathrm{ProperNotice}.

Award on agreed terms.

The parties settle during valid proceedings and the tribunal records the settlement as an award. \mathrm{QualifyingAward} can accept it without pretending that unresolved merits remained.

Non-party custodian.

An award orders a bank to transfer funds. The bank accepted no custody mandate and no court order applies. Neither a release nor an execution has a basis.

Pre-award attachment.

A court attaches property on the tribunal’s interim measure before the award (Model Law Articles 17 and 17H). The attachment is an accepted interim measure, and a later execution cites it as its basis together with the award.

Set-off.

The parties’ cross-claims are set off and the obligation is discharged. No receipt effect exists. The discharge is a satisfaction determination and the recovery vector is unchanged, which is the correct report.

Duplicate receipt evidence.

A provider callback and an account statement describe the same recipient-credit occurrence under authenticated correspondence evidence. Both remain evidence. The ledger counts the effect once.

Credit inside a reversal window.

Usable credit of 60,000 remains available while an applicable window is open. Collection requires complete policy evidence and closure at the supported cutoff.

Unknown windows.

Recipient credit and legal-finality evidence arrive without a complete route-policy certificate. An empty metadata list remains unknown. An authenticated complete policy that specifies no windows can support collection at its stated cutoff.

Late evidence and replay.

A provider’s late statement establishes a credit that occurred before the recorded award. Its occurrence and attribution can change the current report. Re-evaluating the report sends no payment. A resulting repayment duty requires an independently admitted command with its own funding and authority.

Relying nonparty.

A relying watcher submits evidence without an agreement or other binding basis for arbitration. Intake records the submission. A merits proceeding requires its own affirmative party-binding and scope determinations. A disputed jurisdictional basis can enter the separate competent inquiry route.

9.9 The three routes after an award, and immunity

After an award, each route retains its own authority. Voluntary compliance requires the debtor’s instruction, mode-appropriate evidence, the entitled recipient’s confirmation and a separate satisfaction determination. It needs no recognition order.

Contractual custody action requires a valid prior mandate covering the instruction, property, owner, conditions, expiry, revocation, stays and third-party rights. An award does not bind a custodian that never accepted that role. Court execution requires recognition where the forum demands it, enforceable court authority, available property, local procedure, priority and exemptions. It also requires provider evidence of each named event through recipient credit.

The Convention governs the recognition and enforcement route without making collection automatic. Article III applies each state’s procedure, Article IV identifies the material supplied to the court, and Article V states the refusal grounds. Article VI permits adjournment and security during a setting-aside application. Article VII preserves more favourable rights.

Adjudicative immunity and execution immunity require separate analysis. An arbitration agreement can remove adjudicative immunity for arbitration-related proceedings under the forum’s statute. In the United States, this follows from the arbitration exception in 28 U.S.C. § 1605(a)(6), not necessarily from waiver. Section 9 of the United Kingdom’s State Immunity Act 1978 removes immunity for proceedings relating to arbitration the state accepted in writing. The agreement’s terms qualify that rule.

For execution in the United States, 28 U.S.C. § 1610(a)(6) permits measures against property used for commercial activity when its other conditions hold. In the United Kingdom, section 13(4) permits process against property in commercial use or intended for commercial use. Central-bank and other protected property can remain immune. The forum-specific rules are 28 U.S.C. § 1611(b)(1) and sections 13(3) and 14(4) of the 1978 Act. Articles 17 to 19 and 21 of the United Nations Convention on Jurisdictional Immunities of States and Their Property (2004) make the same distinction. Any required execution consent must therefore address the relevant participant, forum and asset class in the instrument before default.

The ICSID Convention supplies a distinct route when Article 25 is satisfied. It requires a legal dispute arising directly out of an investment and written consent. The parties must include a contracting state or designated subdivision or agency, and a national of another contracting state. Article 54 requires each contracting state to recognise an award and enforce its pecuniary obligations as if they were a final domestic judgment. Article 55 preserves the forum’s law of execution immunity. Whether a deployment or corridor obligation falls within Article 25 depends on the parties, consent and investment facts, regardless of its label.

10.1 What exists before intake

Before accepting a case, a centre must record eleven decisions and their sources:

1. The legal host: entity, registry, form, capacity, governing instrument, controlling body and effective interval.

2. Public-law status: each licence, approval, registration or exemption, with its issuer, conditions, expiry and dated official source.

3. The rules: adopted rules, version, commencement date and amendment process.

4. Administration: filing review, notice, timetable support, records, fees and communications.

5. Appointments: authority for nomination, confirmation, challenge, replacement and removal. Each derives from the arbitration agreement, incorporated rules or applicable law, never from the centre’s own instrument.

6. Independence: disclosure, recusal, challenge and complaints procedures.

7. Records: confidentiality, privilege, access, retention, deletion, legal hold and publication authority.

8. Money: each payer, recipient, beneficial owner, fee basis, refund rule, tax treatment and authorised holder.

9. Service contracts: governing law, forum, claims procedure, liability, indemnity and insurance.

10. The court interface: interim relief, supervisory review, set-aside, recognition, stays and execution.

11. Leadership: accountable officers, protected roles, committees, succession, audit and removal.

The centre administers only the functions a valid arbitration agreement, its governing instrument, applicable law and the incorporated rules confer. The tribunal decides its own jurisdiction under applicable law, subject to the competent court (Model Law Article 16). Rules bind through party agreement or a statutory mechanism, and a centre’s unilateral adoption binds no one.

10.2 Seat, venue, and what a jurisdiction gains

The seat of an arbitration is its juridical place: the legal system whose arbitration law supervises the proceedings and whose courts hear applications to set the award aside. The parties choose it, or the rules determine it (Model Law Article 20(1)). The Model Law supplies the supervisory framework most seats implement. The juridical seat is distinct from the hearing venue and the location of the administering institution’s offices. A centre established in one territory routinely administers arbitrations seated in another.

The protocol requires a Convention seat, a seat in a territory to which the Convention applies. An award seated outside the Convention loses the Convention route in every enforcing state with the reciprocity reservation under Article I(3). Many parties listed on the UNCITRAL status table have made that reservation. The commercial reservation also explains why the clause states that the relationship is commercial.

Territorial application varies. Several territories with sophisticated commercial law remain outside the Convention because no extension was notified on their behalf. The state responsible for a territory’s international relations can notify an extension under Article X(2). It takes effect on the ninetieth day after receipt or on the Convention’s entry into force for that state, whichever is later. Domestic law must also give the Convention effect in the territory.

Article X(3) asks each responsible state to consider extension, subject to the territory government’s consent where constitutional arrangements require it. For proceedings connected to a territory outside the Convention, the protocol uses a Convention seat and designates the centre as administrator.

Before a centre opens, two treaty configurations require dated sources. A seat without an extension on the United Nations treaty record remains outside Convention territory until an Article X(2) notification takes effect. A receiving state with the reciprocity reservation has no Convention route for an award from that seat until the extension is effective. A receiving state without the reservation may apply the Convention under Article I and its own forum law. Another domestic or treaty route may also apply.

Local centre authority, juridical seat, domestic arbitration law and Convention application are four separate facts. Each requires its own dated source.

The protocol places the seat outside either party’s control, so a corridor between two participating jurisdictions is seated in a third. The host gains counsel, experts, hearing services and the professional formation of a panel. Decided disputes under its supervisory law can build the seat’s standing. These benefits differ from the network’s own gains.

The chartering state can close a centre. Dubai Decree No. 34 of 2021 abolished the DIFC Arbitration Institute and the Emirates Maritime Arbitration Centre. It directed their caseloads to a successor administering different rules. A private arrangement six months later allowed the London Court of International Arbitration to continue matters commenced on or before 20 March 2022. Every such matter retained the parties’ chosen rules.

A corridor instrument must therefore name a fallback appointing authority and rule set, preserving the chosen rules for every matter commenced before closure. These measures provide capacity and continuity. Standing still requires decided cases in which the instrument has been used and tested. The founding panel indicates intended quality but cannot replace that record.

10.3 Demand, and the queue

An independent new venue must attract parties who can instead choose established arbitral institutions. A venue named in the corridor instrument receives the disputes that arise under that instrument. Because the forum is fixed at accession, cases can arrive before the panel has enough capacity. The resulting risk is delay. The centre therefore publishes a fixed award deadline for the expedited tier and a quarterly breach rate that identifies every matter that exceeded it and the reason.

10.4 Supply: four classes and three forms

The seller, tribunal and registrar need different services. Engagement terms must distinguish party representation, adjudication and administration. Four service classes require different controls.

Neutral adjudication covers arbitrators and emergency arbitrators under independent appointment, conflicts rules, due process and outcome-neutral fees. The centre cannot buy an outcome or promise an appointment. Institutional operations cover case managers, the registrar’s staff, translators, trainers and governance reviewers. The centre engages them under defined scope, review and protected decision roles.

Party services cover counsel, experts and enforcement providers engaged directly by each party or through a lawful segregated arrangement. The centre may present eligible providers under a published rule, but receives no fee share, referral fee or origination fee. Bounded public work covers research and data tasks with public inputs, mechanical acceptance and duplicate control. These tasks contain no confidential fact or matter-specific advice.

Three contract forms supply the work. A continuing service contract reserves availability for case management, registrar support, panel administration, training or translation. Protected work uses the funded terms in section 10.5. The contract fixes remuneration, capacity, service level, term and funded replacement coverage.

A fixed-fee engagement buys a defined public work product, such as a citation check, public-source index or data extract. A controlled bounty offers a fixed prize for a non-duplicate result that satisfies an objective test. Its inputs are public and acceptance is mechanical. The offer states the prize, review cost, expected pay and any guaranteed stipend. Substantive legal judgment remains with its designated professional role. Public piecework creates no appointment right or additional protected remuneration.

Eligibility must be established before price is considered. The engagement record must confirm the client, role, governing professional rules, admission and supervision. It must also confirm conflicts clearance, repeat-appointment disclosure, privilege holder, insurance, sanctions controls, data and security requirements, fee structure and worker classification. Applicable tax, immigration, procurement and competition-law limits complete the eligibility check. An unresolved condition prevents reservation of protected work.

The centre publishes the qualification schedule, unit prices and payment register. Membership contracts prohibit collective fee setting, wage fixing, no-poach agreements and competitively sensitive exchange between centres.

The contract forms select different people, so fees must reflect their alternatives. Below-market fees attract only practitioners whose alternatives pay less. Higher fees can reserve capacity unavailable under a conventional retainer.

The machine tiers generate recurring tasks with narrow scopes. These include assembling and independently checking record extracts, verifying evidence bundles against their proofs, witnessing conformance reruns, re-executing determination queries, and certifying translations. Each artefact is admitted on its proofs. A second worker blindly re-executes a published fraction, and the centre publishes the disagreement rate.

The bounty layer supplies public research and mechanical verification under independent admission. Its work creates no authority to decide, appoint, resolve a challenge or alter a matter’s material record. No bounty worker sits on a tribunal in a matter whose record that worker touched. A person exceeding a published share of the centre’s bounty spend in a year is ineligible for appointment for the two years that follow. A challenger reward drawn from a forfeited bond has a separate instrument and budget. The same person cannot review a bounty result and claim the related reward. A reviewer whose acceptance can influence a matter receives the funded-term remuneration in section 10.5.

Published, reasoned awards reduce the cost and uncertainty of later cases. Publication is a term of the rules the parties accept at accession, with a named redaction standard and a stated opt-out. Article 34(5) of the UNCITRAL Rules permits publication with the consent of all parties or where a legal duty or proceeding requires disclosure. The centre records consent before it publishes an award under the consent route.

10.5 Funded protected remuneration

A fee schedule independent of the winner can still reward additional hearings or appeals. The contract below therefore fixes each protected person’s remuneration for the term before assignment. Let O contain the prevailing party, award amount, recognition, execution, satisfaction and recovery of a matter. Protected roles comprise every person who decides, appoints, reviews a challenge, administers a matter or controls its material records. They include the relevant executives and developers. A public-work supplier enters this class when its role acquires such authority or access.

A protected person’s remuneration includes fees, salary, bonuses, benefits and payments through related persons. Covered economic interests include beneficial rights in the centre, a party or a provider whose income depends on the matter. A person with such an interest cannot occupy an incompatible protected role. The compatibility test in section 10.6 applies before appointment and after a material relationship change. Commercial ownership remains possible outside those protected functions.

A published hourly or event rate has a limited invariance. With the rate, hours, procedural events and assignments fixed, changing a disposition leaves the scheduled charge unchanged. An outcome can change those other inputs. A rate of 100 gives fees of 1,000 and 2,000 for ten and twenty hours. Additional appeals can increase event fees. Protected work therefore uses a stronger contract.

10.6 Independence controls

A party challenging the network’s record needs a reviewer chosen independently of the network operator. Fixed remuneration leaves that appointment conflict unresolved. Appointment, challenge and record-control powers therefore also require separation. Accession Networks develops the Cape Town registry precedent and the general result. Three bodies hold its three roles, the operator has no authority over the register’s meaning, and a separate entity carries the certifier’s liability. Recourse applies this separation to adjudication.

The members of the appointments and challenges body pass the same control-group test as arbitrators. The test identifies persons connected through actual control, as defined below. No payment buys eligibility. The body acts only through an authorised route, which applicable law, the arbitration agreement or the incorporated rules designate (Model Law Articles 11 and 13). Its members serve fixed terms and removal requires stated cause. A person cannot decide a challenge to that person’s own conduct or interest. A control-group result is evidence for the authorised process and cannot by itself appoint, remove or invalidate an arbitrator.

The conflict record is a dated, sourced typed graph. Its vertices include the centre, host, controllers, financiers, providers and persons under consideration. An actual-control edge records ownership control, appointment or removal power, financing control or contractual control. Each edge retains its direction, source, effective interval and applicable threshold. Control groups are connected components of the undirected graph formed from actual-control edges. This conservative conflict test retains the direction of each underlying right.

Direct financial interests, professional ties and material family or household relationships have separate conflict types. The compatibility matrix applies them without inferring transitive control. Routine service edges have a third type. A routine service alone does not join control groups. One pair can carry both a routine service and an independently supported control edge. Excluding the former preserves the latter. The centre and host remain vertices in every projection.

A named record custodian maintains source evidence. A reviewer independent of the affected groups resolves disputed classifications through the authorised process. Service administrators cannot delete or reclassify control evidence. Every classification names its source, responsible person, date and reasons. The assessment affirmatively covers relevant ownership chains, appointment rights, financing conditions and direct relationships. Absence of an edge supplies no clearance. Missing evidence blocks the affected pairing and creates no inferred transitive control edge.

The compatibility matrix classifies each protected-role pair as permitted, permitted with disclosure and recusal, or forbidden. It uses control-group membership, direct conflicts and unresolved pairwise obstructions. The authorised appointment or challenge process applies the result under section 10.1.

A centre administers proceedings without deciding them. The tribunal consists of natural persons. Software, software ensembles and automated processes can neither belong to a tribunal nor be described as one. A private originator of the rules receives no appointment right over arbitrators, panellists or the centre’s executive. Authorship credit, an honorary founding role or a panel seat at published rates leaves that prohibition unchanged.

Published fee rates and fixed engagement charges use no prevailing-party input. Procedural volume and the centre’s commercial surplus remain separate variables. Advisers, referrers and party representatives receive no payment, subsidy or benefit for centre selection. Any demand-side subsidy takes the form of a published fee reduction to parties. Centre-interest legal opinions name the centre as client and use protected commissioning and review. They never address jurisdiction, merits, appointments, challenges or awards.

10.7 Centre economics and earned expansion

Funding a new centre can consume cash that an existing matter still needs. The proposed expansion rule first protects those obligations, then limits expansion to cash earned and collected by the centre. Here collected has the exact meaning in section 9.4. The receipt requires usable recipient credit, legal-finality evidence and a complete applicable policy certificate at its supported cutoff. Every applicable window must have closed by that cutoff. A usable credit inside a return, recall or chargeback window is available and remains outside collected income. The centre attributes only its own earned receipts to this schedule. Client money, collateral, restricted funds, pass-through amounts, service advances and property held for others retain their separate ownership and accounting classifications.

The following accounting model uses its own period-indexed balances. Fix an entity, a currency and accounting periods t = 1, 2, \ldots. Let R(t) be the collected operating receipts from earned services in period t and P(t) every operating cash payment in t, fixed and variable, whose debit reached legal finality. The operating cash contribution is \mathrm{OCC}(t) = R(t) - P(t), signed. Let X_{\mathrm{in}}(t) be every external receipt: initial capital, grants, debt, equity, investing and other non-operating receipts, together with restrictions released and exchange-translation effects.

Non-operating uses (expansion allocations, owner distributions, investing payments, financing repayments, transfers) follow a pre-adopted order. A use draws the external balance only where the raising instrument restricts that specific capital to the use and the capital remains unspent. Every other use draws the earned balance. Write U_e(t) and U_x(t) for the two parts. The two balances are B(t) = B(t-1) + \mathrm{OCC}(t) - U_e(t), \qquad X(t) = X(t-1) + X_{\mathrm{in}}(t) - U_x(t), with B(0) = X(0) = 0, so that B(t) + X(t) is the closing cash represented by the two balances.

The protected exposure union \mathrm{PE}(t) collects commitments that cash must cover before expansion. It contains unpaid due obligations, active-case commitments, working-capital needs, required reserves and, at full amount, every credit still inside a provider reversal window. Documented coverage and valid netting reduce it. Valid netting names its legal basis, a contractual set-off right, a statutory netting rule or the rules of a settlement institution, and that basis must remain enforceable in the counterparty’s insolvency under the relevant legal order. Netting without a named enforceable basis reduces nothing.

Expansion-eligible liquidity is \mathrm{EL}(t) = \max(0,\, B(t) + X(t) - \mathrm{PE}(t)). The lawfully deployable amount D(t) applies solvency, capital-maintenance, fiduciary, regulatory-reserve, covenant, tax and exchange rules and the required approvals. The earned-expansion budget is E(t) = \max\bigl(0,\ \min(B(t),\ \mathrm{EL}(t),\ D(t))\bigr). It is the maximum amount the stated cash constraints permit. It does not confer spending authority.

A binding cap can absorb a deficit without changing the permitted budget. Let B=100, X=500, \mathrm{PE}=20 and D=10. Then \mathrm{EL}=580 and E=10. An additional deficit of 20 gives B=80 and \mathrm{EL}=560, while E remains 10. The earned balance records the full deficit. The deployable cap already limits expansion to 10.

The following example shows why both constraints are needed. Its budgets assume that the other caps permit them: D(1)\geq2{,}000, \mathrm{EL}(3)\geq3{,}000 and D(3)\geq3{,}000. These are assumptions of the numerical example, not findings of available legal or financial capacity.

Initial capital of 500,000 arrives in period 1 and enters X. In period 1, one matter’s administration fee of 9,000 is collected. Reserved case-management capacity costs 2,500, variable shared services cost 500 and fixed operating payments are 4,000. Then \mathrm{OCC}(1) = 9{,}000 - 7{,}000 = 2{,}000 and B(1) = 2{,}000. Closing cash is 502,000, the protected exposure union is 150,000, and \mathrm{EL}(1) = 352{,}000. The budget is E(1) = 2{,}000: the next centre may draw two thousand of earned cash because the rest is external capital.

In period 2, receipts are 3,000 against payments of 7,000, so \mathrm{OCC}(2) = -4{,}000, B(2) = -2{,}000 and E(2) = 0. In period 3, a contribution of 5,000 gives B(3) = 3{,}000 and E(3) = 3{,}000, not 5,000. A zero floor would omit the earlier deficit. Treating a distribution as debt-funded would misclassify external capital as earned cash.

Centre and owner surplus can respond to matter volume and workload. Beneficial interests remain segregated from incompatible protected functions. Published concentration, assignment overrides, workload and payment records support independent evaluation of these channels. They establish neither constant commercial profit nor causal impartiality.

10.8 Wind-down and continuity

A centre’s states are operating, intake suspended, cure review, wind-down, emergency wind-down, transfer pending, case-administration-only, insolvency, closure review and closed. No wind-down state returns to operation. Each open state names the responsible authority, effective time, funding source, missing-evidence branch and escalation authority.

Certain failures require immediate intake suspension or emergency wind-down, overriding every other response. These are authority loss, protected-money breach, missing protected-money data, required-reserve breach, protected-role unavailability and centre-caused due-process failure.

The operating response also depends on an externally specified demand test and a separate test called conversion in the operating policy. That policy must supply the conversion test’s subject, criterion and measurement. The term has no established meaning here and does not refer to currency conversion under section 9.4. This paper supplies no numerical threshold for either operating test. One measured demand or conversion failure permits one changed design. A second failure starts wind-down, and relabelling cannot reset the count.

Every active matter has a continuity record naming its agreement, rules, seat, tribunal, administrator, transfer authority, required consent, deadlines, records, deposits and successor. Authority loss alone cannot transfer or terminate the matter.

A party’s insolvency affects the matter under its governing law (Regulation (EU) 2015/848 Article 18, Insolvency Act 1986 section 130(2), 11 U.S.C. § 362). A host’s officeholder can disclaim the network’s continuity and shared-service contracts (Insolvency Act 1986 section 178, 11 U.S.C. § 365). The continuity record therefore binds no officeholder. The successor schedule must name a route that needs none.

Closure requires completion or valid transfer of every matter. Every service, remedy, payment, refund and clawback obligation must be satisfied, preserved, transferred or lawfully provided for. Each provider instruction must be released, reach legal finality under its recorded provider rule, or transfer with a funded reserve. The completion evidence must include recipient credit where the provider is not the recipient’s own institution.

Protected money and property must be returned or transferred and reconciled. Records, privilege and legal holds need an authorised successor. Required notices, refunds, final audit and independent sign-off must be complete. Closure cannot leave a provider reversal window dependent on the closed centre. Protected money is never a wind-down reserve.

Consent to arbitrate names an institution and its rules (Model Law Article 7, Convention Article II). Removing a centre can therefore expose an earlier, uninvoked clause to a challenge that it is inoperative or incapable of performance (Article II(3), Model Law Article 8(1)). For every clause registered before removal, the parties consent to an irrevocable licence of the rules version in force when the clause was executed. They also consent to a published successor-administrator designation.

Online dispute resolution.

Rule (2010), then eBay’s director of online dispute resolution, reported more than 60 million disputes handled annually and more than 250 million registered users. He reported 90 per cent resolved entirely by software. These operator figures indicate scale rather than a measured resolution rate: the largest tier was automated problem diagnosis. They support a machine tier: at consumer scale, most disputes need no argument, and the rest can be identified cheaply. Katsh and Rifkin (2001) develop the online-dispute-resolution literature. The UNCITRAL Technical Notes on Online Dispute Resolution (2016) supply the registrar’s case-service role.

The European Union’s ODR platform illustrates the separate participation problem. Launched in February 2016, it closed on 20 July 2025 under Regulation (EU) 2024/3228. Its link requirement did not itself require traders to participate in alternative dispute resolution, and national participation duties remained separate. Recital 5 reports two to three million annual visitors but no more than two hundred cases transferred annually to alternative dispute resolution entities. Those referrals establish no resolution. Technical capacity, participation and access to a remedy therefore require separate evidence.

On-chain adjudication.

Kleros (Lesaege, Ast and George 2019), Aragon Court and Augur (Peterson and others 2015) resolve disputes by incentivised voting among token-holding jurors. Their protocols directly affect only the assets they control. Where a contract executes the ruling, its decision and recorded asset transfer can occur in one transaction. Legally effective custody action and usable receipt still require this paper’s mandate, asset and finality conditions.

Such a protocol decision is not by itself an award under Article I of the Convention or Articles 11, 12 and 31 of the Model Law. Ortolani (2016) examines this distinction for multisignature escrow. The arbitration agreement and evidence required by Articles II and IV must satisfy the applicable recognition route. UNCITRAL’s 2006 Recommendation treats Article II(2)‘s listed circumstances as non-exhaustive and preserves more favourable domestic or treaty rules through Article VII. Whether unidentified decision-makers can issue a qualifying award depends on the parties’ agreement and the seat’s law. The resisting party may raise Articles V(1)(a) and V(1)(d).

External banks, custodians, creditors and regulators retain their separate legal obligations and authority. The UK Jurisdiction Taskforce’s Digital Dispute Resolution Rules (2021) are the closest published instrument for direct award execution. An arbitrator may implement the decision directly on a digital asset, and the parties may make the arbitration agreement by digital signature. Its tribunal may operate the asset itself, combining tribunal and custodian roles that this paper keeps separate.

Institutional arbitration.

The International Chamber of Commerce reported 841 new cases in 2024 against 1,789 pending. New cases had an average amount in dispute of US$130 million and a median near US$5 million. Its 2026 Schedule of Fees sets a US$180,000 administrative-expense maximum. Appendix III permits additional administrative expenses in specified circumstances, and taxes remain separate. The mean-median difference shows the material effect of a small number of high-value matters on the distribution.

The Hong Kong International Arbitration Centre and the London Court of International Arbitration publish comparable caseload and cost schedules. Tier 1 draws on the UNCITRAL Expedited Arbitration Rules (2021) and the expedited procedure of the ICC Rules (2021, Article 30 and Appendix VI). These institutions serve disputes that justify conventional arbitral procedure and cost. The three tiers also accommodate the many low-value, record-decidable matters a network can generate.

Regional centre networks and treaty routes.

The Asian-African Legal Consultative Organization’s Integrated Scheme (1978) established locally hosted arbitration centres under host-country agreements. They include Kuala Lumpur (1978), Cairo (1979), Lagos (1989), Tehran (1997), Nairobi (2006) and Hong Kong (2021). The Permanent Court of Arbitration also uses host-country agreements to administer proceedings on the host’s territory. Both arrangements establish local, hosted authority of the kind specified in section 10.1.

ICSID Articles 53 to 55 provide enforcement as a final judgment without Article V review, while preserving execution immunity. The treaty thus distinguishes an award from recovery. The state-immunity statutes in section 9.9 distinguish adjudication and execution on the routes the model records.

Registries and standard-setting bodies.

Accession Networks develops three precedents used here. The Cape Town registry separates three institutional roles. Fee-setting and open-data obligations pass to the supervisory body in exchange for authority. Standard-setting cases address liability, with courts often dividing over control. This paper applies these results to an arbitral venue.

Bitemporal records.

Event time, observation time and view time correspond to valid time, transaction time and query time in temporal databases (Snodgrass and Ahn 1985, Jensen and Snodgrass 1999). SQL:2011 standardised system-versioned tables (Kulkarni and Michels 2012). Typed events, append-only logs and guarded transitions are also established techniques. The contribution here is the scoped product and its invariants. They keep event-time arbitral authority, current route-specific legal predicates and unit-indexed economic effects distinct.

Professional markets.

Rochet and Tirole (2003) and Armstrong (2006) supply the comparators for cross-side effects, price structure and multihoming in the two-sided market of section 10.4. Dezalay and Garth (1996) describe how the transnational arbitration bar and its institutions formed, which is the supply side this paper designs for. The IBA Guidelines on Conflicts of Interest (2024) are the disclosure standard the control-group rule sharpens.

What this paper adds.

The routing test separates record-decidable propositions from questions requiring judgment. Integrity assertions take priority, and unconditional escalation keeps the procedure within Article V while a determination remains distinct from an award. The bitemporal, predicate-indexed status fold has seven invariants that hold for every choice of the legal predicates. Later legal effects enter only as new events.

The institutional design separates funded protected remuneration from outcomes, retains actual control in the conflict record, and limits expansion to earned cash. Its financial results follow from the specified contracts and recurrences under their stated fixed inputs.

Theorems.

Proposition 5.1 establishes termination under the admitted query profile and resource limits. A Known result also requires the snapshot and evidence checks. Proposition 9.1 separates evidence evaluation from provider dispatch. Theorem 9.2, Corollary 9.3, Corollary 9.4 and Corollary 9.5 are paper proofs under F1 to F5. Proposition 8.1 follows from the route and effect separations in section 8 and section 9.4. Proposition 10.1 and Proposition 10.2 follow from the contracts and recurrences in section 10.5 and section 10.7. Proposition 10.5 gives local continuation correspondence under its encoding, authority and storage premises. Proposition 10.7 gives continuation and resource conservation under its stated source, decoder and custody premises. No result is machine-checked.

Conditional legal consequences.

F1 to F5 and legal predicates L1 to L6 are assumptions for each concrete case. The remedy analysis also assumes the stated authority, asset availability, execution capacity, funding and shortfall facts. The escrow analysis assumes a trust whose insolvency treatment has been established under the law of the situs, meaning the property’s location. Convention treatment assumes a qualifying arbitration agreement, award, seat and enforcement forum.

Open problems and hypotheses.

Reliance demotion increases the cost of equivocation, but no payoff model here proves deterrence. Open legal questions include execution against sovereign assets beyond commercial property, arbitrability and public policy under Article V(2), and certifier liability for economic loss. Named-forum instantiation of the route predicates also remains open.

Technical obligations include canonical encodings and provider evidence, and key-compromise timing and correction. Comparative work must assess arbitration alongside security, guarantees, set-off, judgments and settlement without double-counting. The queue that can form before sufficient panel capacity exists also remains to be studied.

Four participation claims remain hypotheses. Verified capacity may increase centre selection, and observable matters may increase reserved practitioner capacity. Paid assignments may retain capacity within the independence limits. A stated fee change may move participation by a stated threshold. No universal critical-mass number follows.