What can be held against it

Every choice in this design rules out other choices, and not every exclusion is obvious. Here is why it became energy and not gold, why not hydrogen, and where the model simply falls short. Anyone who wants to tear it down starts here.

---

Why not gold, and not a basket of commodities

Why not gold

Gold worked for centuries because it is scarce, does not rot, and everyone accepted it. We pick energy anyway, because energy is good for something.

Gold is, put bluntly, a stone with a colour. Scarce, certainly, but your heat pump does not run on it and your phone network does not stay up on it. A kilowatt-hour does both. That is the whole difference: one is rare, the other is needed.

Why not a basket of commodities

A basket of commodities (oil, copper, wheat, lithium) spreads the risk, but it brings two practical problems. It has to sit somewhere, and it spoils. Wheat rots, oil ages, all of it has to be hauled around and guarded. And no two units are alike. Wheat differs per harvest, oil per grade. A kilowatt-hour is the exact same kilowatt-hour anywhere in the world, and it can be read off on the spot. That very dullness is what makes it fit to measure with.

---

Why not hydrogen, and not uranium

Why not hydrogen

Hydrogen is not a source but a container. Turning electricity into hydrogen and later back into electricity costs you up to seventy percent along the way. As a measure for money that is fatal: your coin would evaporate in the conversion. Hydrogen may count towards the reserve, but only for what actually comes back out.

Why not uranium

Uranium holds an unbelievable amount of energy per kilo, but nobody has a reactor in the shed. A reserve of uranium is by definition a reserve held by a handful of parties, and at that point the shared account is no longer shared.

---

Why not just fiat, bitcoin or a digital euro

Why not plain fiat

Fiat money runs on debt and trust. As long as both hold, things go fine. But without an anchor the money supply grows along with the loans, the debts pile up, and every so often a crisis arrives in which it turns out the money is not there.

Why not bitcoin

Bitcoin introduces digital scarcity through cryptography and proves that a decentralised ledger can work. It has two fundamental drawbacks:

Bitcoin burns energy to manufacture scarcity. The electricity goes in and comes back out as heat; nothing of it is left. We store that same electricity instead. Same means, opposite direction.

And a bitcoin puts nothing in your hands. If the grid goes down you hold a balance and nothing else. A CBER coin is a claim on electricity sitting in the battery around the corner: that one gives light, even when the rest stops.

Why not a central bank digital currency

A digital euro makes the existing money digital and puts the state closer to your spending. The backing does not change: it stays debt money without collateral, only better lit for whoever is watching.

Why not anchor on consumption

You could also tie the coin to electricity that has been used, rather than to electricity that sits in storage. That sounds more direct, since consumption is what it is all about in the end. Yet it breaks down on four points.

Waste would print money. If a coin comes into being on consumption, then consuming creates money: leave a patio heater roaring all night and money appears. That is the exact opposite of what this system wants. As it stands it runs the other way: generation creates, consumption destroys, and the thriftiest citizen is not the poorest.

A claim on consumed electricity is a claim on nothing. Consumed electricity is gone, turned into heat and vanished over the rooftops. A receipt for something that burned up yesterday is not backing but a memory. That puts you back at money existing because we agree it exists, which is precisely where we came from.

The backing ratio becomes unusable. Backing is now a stock divided by claims: kilowatt-hours over kilowatt-hours, a pure number. Turn the reserve into a flow and you divide kilowatt-hours-per-interval by kilowatt-hours. The outcome then changes the moment you pick a different interval: measure per quarter-hour and your backing differs from measuring per day, without a single electron moving. Such a meter can be steered by whoever sets the interval length, and that is exactly the kind of knob that must not exist here.

And the fire exit would close. A neighbourhood that disconnects takes its claims along and converts them into electricity that physically exists (see architecture). There is no walking away from a claim on consumption, because there is nothing to take. The anchor and the right to leave hang together: without a stock there is no exit, and without an exit there is no counterweight to whoever holds the knobs.

---

What abolishing debt costs

No loans, no instalments, no mortgages: that clears away a great deal of misery, but it costs something too. Five things we ourselves rate as the weakest spots in this design.

Saving leads to a market that is tied to nothing. The leakage pushes everyone who saves towards a share in generation. Such a share is worth what somebody will give for it, and there is structural buying pressure because saving has nowhere else to go. That is how a bubble forms. What dampens it: the yield of every turbine stands publicly in the ledger, so anyone overpaying has to ignore a number sitting on the same page as the price. What it does not do is make it impossible.

There is no good place for unforeseen expenses. The wear on a washing machine and a broken boiler fit none of the routes: paying in advance does not work because you do not know when, and selling a share would have to happen at exactly the wrong moment. What is left is leaving money sitting, and that leaks. Renting and subscriptions catch part of it, but not all.

Whoever lives on the floor falls outside saving and credit. Without luxury income there is nothing to build up, and the floor cannot be pledged because it has to stay unseizable. That protection and that exclusion are the same mechanism. For this group the services route (renting, subscriptions) is not one of the options but the only one, and that makes it carry more than we would like.

Production on customer money is fragile in a downturn. With no banks extending credit, customers paying in advance are what finances production. The moment people turn uncertain those payments stop, precisely when things are already bad. Bank credit can in theory lean against that, customer money cannot. The risk does not disappear either, it moves from professionals to people who are worse at judging it.

And the transition hits homeowners hard. If the mortgage market disappears, houses no longer cost what can be borrowed but what people can pay. That is not a difference of a few percent. Anyone who owns a house with debt on it today watches the value drop while the debt stays put: under water, unable to move, and on sale a shortfall with nowhere to go. That happens to a whole generation at once, and it happens to exactly the people who did what they were told to do. This is politically the heaviest part of the whole plan. We have no tidy solution for it and we do not think one exists without somebody being handed the bill. Anyone who claims otherwise should say who pays.

---

The honest scale question

How much money actually fits in here? Do the arithmetic with us, so nobody else can use it against us.

• 1 CBER = 1 kWh at full backing, so one gigawatt-hour of storage carries exactly 1 million CBER of fully backed coin.
• The Netherlands today has, as an order of magnitude, a few gigawatt-hours of battery storage (grid batteries plus home batteries), and no pumped hydro. Fully backed, that is a coin supply of a few million kWh claims: at an energy value of roughly a quarter euro per kWh, that is around a million euros of backed purchasing power.
• The Dutch deposit money supply runs to hundreds of billions of euros. The gap is therefore five to six orders of magnitude.

What does that mean? Three things, and none of them is a death sentence:

1. CBER starts as community money next to the euro, not as a replacement for M1. Phase 0 next to the euro is the end state in miniature, and it is achievable today at neighbourhood and municipal scale.
2. The meter climbs as fast as construction. Every doubling of storage doubles the maximum backed money supply, and battery prices have been falling by double digits for years. The gap is not a wall but a decades-long slope, exactly as the ten-year path says.
3. Backing is not all-or-nothing. A coin backed 1:1 for a thousand households is real money with a real guarantee, however small the total next to the euro.

The promise was never "tomorrow we replace the euro"; the promise is a meter that climbs honestly. Whoever wants to use this arithmetic as an attack arrives too late: it is already printed here.

Which risks remain

• Storage can be broken. The reserve sits in real stations and real batteries, spread across the map. Spread out is not the same as safe: sabotage, theft and storms all reach it. The design is redundant, but wreck enough of it and the money is worth less that same day.
• Batteries wear out. Storage degrades, so the reserve has to be topped up and replaced forever. The leakage tax spreads that cost across the claim holders. It is not a one-off bill, it keeps arriving.
• It all runs on electronics. The audit hangs on sensors, smart meters and cryptography. A large electromagnetic pulse, or a serious break in the internet, leaves the ledger unable to prove anything for a while.

---

What rebuilding the privacy layer cost

The privacy layer was rejected outright in an adversarial review and built again from scratch. That produced better protection, but it cost something too, and the price is written down here because it is true and not because it sounds good.

An ordinary member can no longer recompute the books. The series you would need to check that no coin comes out of nothing are, at this scale, exactly the series that point at people. Whoever can subtract sees from a falling total that somebody has left. So those series were taken out, and with them the ability to check it yourself. At this scale that work is done by the auditor, the co-signing witnesses and an independent verifier under a confidentiality agreement. That is a real retreat: "anyone can recompute it" was one of the finest promises in this design, and at village scale it does not hold. When it comes back does not depend on a number of participants, by the way. The rule looks at how widely holdings are spread: only once the largest anonymous holding stays below a fixed threshold for twelve months running may all four core numbers go out again.

A data protection impact assessment (DPIA) is an admission requirement. No instance may start without one. That is not a formality: for as long as it is not settled what exactly gets written into the ledger, nobody can pass a privacy judgement on it, a regulator included.

And the regulator will probably have to look at it first. The project's own impact assessment concludes that the residual risk after mitigation stays high, mainly because almost every measure today exists as a sentence and not as a facility. Prior consultation of the data protection authority is then likely mandatory, and it has to be completed before the first enrolment. Reckon on months. So it belongs at the front of the path and not at the back.

And for as long as the safety route does not really exist, an instance may not let anybody lean on it. The route for people in danger is prescribed as a norm, but no accredited body has been contracted and the payout without a connection has nowhere been run end to end. Hence a recruitment ban: no recruiting or enrolling of people living at a confidential address until both facilities demonstrably run. A rule set may only oblige communities to build routes for people in danger because it also forbids leaning on them before they work.

---

What the last two rounds cost on top

This stands apart because it is newer, and because otherwise an outside reader finds it on their own and rightly concludes it was written away.

The number of coins is off the public set entirely. Not just per interval: not as an annual figure, not as a band and not as an order of magnitude either. Even the annual growth rate is no longer a standing publication, because together with the published quotas it reconstructs the annual total of settled entitlements. What you get back is a percentage plus a signature.

The number of missed deliveries is no longer published in any form. That is a real step back in public accountability, and on precisely the figure you would hold a bank to its promises with. The reason is that in a village the figure points at people. It does go to the auditor and the witnesses, signed.

The queue rounded upward is easier to invert than the old one. Rounding upward is a monetary choice: it never makes the backing look better than it is. But it also makes the series easier to work back than rounding downward would. That is the one place where a privacy rule loses to a monetary one, and that is a choice and not an accident.

The label can stand at under-backed while the backing ratio is above one. Everybody then knows a delivery was missed somewhere. That is exactly the point for accountability, and at the same time it leaks something in a small community about who was waiting for electricity. Both things are true.

And two seats stay empty. No specialist in statistical disclosure control has been involved who could say how many publications it takes to work the coin total back out after all; the safety margins chosen are therefore defensible lower bounds and not proven parameters. And no chartered accountant or regulatory lawyer has been involved who could say what the attestation this now all rests on actually takes in practice, and whether a regulator accepts it. Those are the first two questions an outside professional asks, and the answer is: we do not know.

---

What this does not solve

• The price of everything else. One coin stays tied to the kilowatt-hour. What bread, a house or an hour of work costs is not fixed by that. Those prices keep moving with the market and with scarcity nobody controls.
• Politics. This is a grammar for money, not a form of government. It does not stop bad laws and it does not stop countries falling out. It does make paying for a war by quietly minting more a good deal harder.
• Unequal ownership. Whoever owns more storage or more generation earns more Luxury Capacity, so wealth still differs. What the system guards is the floor: the Basic Pulse arrives unconditionally, for everyone.
• Pseudonymity is weak at small scale. In a village of two hundred households a public total can already reveal something about a single person: whoever can subtract sees from a falling number that someone has left. The rule set therefore prescribes thresholds and suppression, but thresholds protect against singling out, not against subtracting over time in a population where everyone knows everyone. Certainty at village scale does not exist, and that belongs in the open.
• Coercion inside the home. The most dangerous adversary is often in the same house. A system that pays a subsistence floor and makes moves visible can pin down the very person who is fleeing. The rule set now prescribes a safety route for this: payout and keys move immediately, with no announcement, and the outside world keeps seeing the old picture. That route has not been built, and it remains the heaviest open issue in the design. What is prescribed exactly, and where to turn, is in the privacy statement and in everyday life.