# Canonical Native Asset Policy

## Canonical asset

The Besu QBFT ledger has one canonical native asset identity:

- role: canonical-native-asset
- name: PLAIS Coin
- symbol: PLAIS
- decimals: 18
- genesis supply: 10,000,000,000 PLAIS
- address format: EVM 0x address
- current public circulation: 0
- external transfers: locked
- public issuance: not approved

The genesis allocation is a candidate-network bootstrap allocation. It is not a
public sale, circulating supply declaration, exchange listing, or permission to
deposit or withdraw.

At startup and readiness time, the configured supply is converted to wei and
compared with the sum of all balances in the active canonical genesis file.

## Candidate distribution

`docs/TOKEN_DISTRIBUTION_POLICY.md` assigns 100% of the candidate supply across
eight separately controlled categories. It sets a maximum TGE unlock ceiling of
8%, no private-sale allocation, long-term ecosystem and node emissions, and
cliff-based foundation and team vesting. This schedule remains inactive while
public issuance and external transfers are locked.

Readiness verifies that allocation basis points total 100%, the TGE ceiling
matches the category schedule, supply and decimals match the canonical asset,
and current public circulation remains zero.

## Legacy application points

Existing Express wallet and reward records remain a separate compatibility
ledger:

- role: legacy-application-point
- display unit: plais Point
- storage decimals: 6
- settlement mode: simulation
- issuance: legacy-simulation-locked
- conversion to canonical PLAIS: disabled
- reset: disabled

The legacy stored symbol remains plais for data compatibility. Case-insensitive
symbol alignment does not make a legacy point balance an EVM coin balance.
Decimals are intentionally different and the boundary is explicit.

## Fail-closed gates

When security enforcement is enabled, the web control plane refuses to start if
the canonical symbol or decimals drift, legacy point issuance is unlocked,
reward settlement stops being simulation-only, public issuance is enabled,
legacy reset is enabled, or the policy cap differs from canonical genesis
supply.

Readiness also verifies genesis allocation, asset identity, legacy point
separation, distribution totals, and all issuance/conversion/transfer/reset locks.
