From a town's money to a network of towns

Röbel Münzen are live: a citizen-gated local currency running onchain, owned by the town's own multisig. Getting a town its own money turns out to be the easy part. The questions that decide whether this becomes infrastructure are structural ones: does a town run a single currency or a forest of them, how do two towns trade without a central bank between them, and how does value minted in a town of fifteen thousand ever buy something at a shop that has never heard of it?

This is the architecture we are building toward, with one rule of honesty: the protocol facts that are settled are stated plainly, and the parts we are still validating are marked as such.

One principle: a group is a currency plus a gate

Everything below follows from a single fact about Circles, the protocol Röbel Münzen run on. Creating a "group" creates a new fungible currency, and the group's trust set decides who is allowed to mint it. So the real design question is never "how many features" but "how many distinct currencies, and who mints each." More currencies means more confusion and thinner liquidity, so the discipline is to keep the number of currencies as low as possible and let trust do the connecting.

One town, one money

A town runs one unit. Röbel Münzen are the money, and almost everything else is an account, not a currency.

• Businesses are not their own currencies. A shop does not mint anything. It is an account that accepts the town unit. Once merchants accept it, Röbel Münzen behave like ordinary money in town. Turning every business into its own currency would shatter the money into hundreds of incompatible tokens.
• Citizens mint, everyone spends. This is the load-bearing asymmetry. Minting requires the town group to trust you, which is the verified-citizen gate. Holding, receiving, and spending require nothing. So a visitor or a non-citizen resident can use Röbel Münzen fully without ever gaining the right to print them.
• Subgroups only when a community genuinely wants its own unit of account. A sports club's membership credits, a co-op's internal ledger, a mutual-aid time-bank where one hour is one unit regardless of what Röbel Münzen are worth: each of those is a subgroup that the town currency trusts, so it stays convertible, while keeping its own scope. Most clubs, and all businesses, are better modeled as accounts than as currencies.

Two settled facts make this safe to build on. First, the group is collateral-backed: a Standard Treasury and per-group Vaults hold the citizens' own minted Circles as backing, so the town unit is more than a number. Second, a group's mint policy is immutable once registered, and it is worth being precise about what that actually freezes. The policy is the mint, burn, and redeem math. It is not the gate. Who is allowed to mint is a separate, owner-governed layer of trust and membership conditions, and that layer stays changeable. So the one-way door is the monetary mechanics, not the membership rule. And the membership rule is now automatic: becoming a verified citizen triggers an invitation into the currency on its own, with no hand-maintained list. The money's mechanics are frozen; who may mint simply follows the town's credential.

A network of towns

This is where a town currency stops being a feature and becomes a protocol. Circles' pathfinder computes how value can flow from one account to another across trust relationships and balances, and settles the whole multi-hop route in a single onchain operation. That is the machine that lets towns interoperate without a central issuer.

The model we are building toward first: towns trust each other, and the pathfinder routes between them. Each town runs its own currency. The town groups trust one another. A Röbel citizen then pays a merchant in a sister town, and the payment routes across the inter-town trust edge even though the two sides hold different currencies. No bridge, no shared token, no central bank.

The goal that keeps this safe is a principle we want to hold to: acceptance should federate while minting stays local. Trusting another town's money so you can receive and route it is not the same as granting that town the right to mint yours, and a duplicate human in one town should never be able to inflate another town's supply.

Whether that holds depends entirely on which trust edge you open, and this is a part we are still validating rather than asserting. A resident or business trusting the sister town's token gets acceptance and routing with no mint right: the safe edge. But a town group trusting another group as a mint-eligible member looks like a different thing entirely. In the protocol's composite-mint path, one group trusting another can let the second group's token serve as collateral to mint the first group's currency, which is exactly the leak the principle is meant to prevent. So "minting stays local" is not a property we inherit for free; it is one we have to engineer by being precise about which edges we open, and we treat it as open until it is checked against the contracts.

A heavier option exists, a regional meta-currency that sits above the town units as a single fungible regional money. It is attractive for real regional-scale commerce, but it introduces a governance question about who controls the regional layer, and the exact mechanics of stacking groups on groups are something we are still validating against the protocol rather than asserting. The peer-trust model needs no new issuer and preserves each town's sovereignty, so that is where we start. We are also honest that pathfinder routing depends on trust and liquidity actually existing along the path: between two well-connected towns it is seamless, and between a town and a distant stranger it can simply fail to find a route. That is the real-world limit, not a footnote.

The productization angle this opens for us is the cleanest version of "tooling for network states." A federation can itself be gated: a meta-group that only trusts town currencies running the verified-citizen stack turns "verified town" into a trust credential, and makes the operator of that federation a real role. We would not just sell each town its currency. We would run the trust fabric that lets verified towns trade with each other.

Reaching the real world

A town currency that can only be spent among people who already accept it has a ceiling. The hard problem is the exit: buying fuel, paying a bill, spending where nobody has heard of Röbel Münzen. The answer on the same chain is a card.

Gnosis Pay is a Visa card that settles onchain, debiting EURe, Monerium's regulated euro e-money, from a smart account through Visa rails. The way it fits is not to put Röbel Münzen on a card. It is to run two rails with a deliberate bridge between them:

• The community rail: Röbel Münzen. Citizen-gated, demurraged, in-town, and deliberately not redeemable one-for-one for euros. That non-redeemability is what keeps them an experimental community currency rather than regulated electronic money.
• The euro rail: EURe, a regulated euro e-money token on the same chain, spendable anywhere through the card.
• The bridge is a voluntary swap, not a peg. Someone who wants to spend outside town swaps Röbel Münzen for euros at a market rate, and the card spends the euros. There is no guaranteed redemption.

That distinction is the entire legal game. The moment a community currency becomes automatically redeemable and spendable everywhere through a card, it stops being a community currency and becomes electronic money, which in Germany means a licensing regime an order of magnitude larger than the whole project. Keep the swap voluntary, keep the card spending the regulated euro and not the town unit, and the line holds.

It also means a clean posture for us: we do not become a regulated issuer. A "custom town card" is a program riding on the existing licensed infrastructure, the way fintechs ride a sponsor, while the regulated weight stays with the licensed parties. And it forces one more separation we would insist on anyway. Citizenship in our stack is document-free; a payment card is not, because card rails require identity checks. So the card is a separate, opt-in layer for people who want real-world spend, and its checks never leak back into civic identity. A resident can be a full voting citizen earning Röbel Münzen with no documents, and separately choose to carry a card.

This is not the next thing we build. It is the far end of the same line, the point where a town's internal economy gains a real-world exit. But it is the difference between a currency you can only use among neighbours and one that reaches the rest of your life.

Why this is the shape of the vision

Read the three layers together and the thesis is plain. A single town gets money it mints itself and nobody can fake. A network of towns gets to trade across that money without surrendering sovereignty to anyone in the middle. And a card gives any of it a way out into the ordinary world, without pretending to be something a regulator would have to shut down.

That progression, one verified town, then a federation of them, then a bridge to the wider economy, is the same arc as network citizens becoming a network of states. Röbel Münzen were never the destination. They are the first node.