The Joule Standard

Money you can redeem for a kilowatt-hour

An open protocol for currencies backed by delivered energy — designed to resist inflation, speculation, and capture. Reference currency: the joulemark.

Spec v0.1.0 — draft for public comment · Status: open source · Licence: CC BY-SA 4.0 · Home: joulestandard.org

Abstract

What this document proposes

The Joule Standard is a protocol for currencies in which every unit is a burnable claim on one kilowatt-hour of firm, delivered energy. Coins are created only when energy is verifiably injected into a grid, and destroyed when energy is delivered against them — so the money supply always equals the outstanding stock of deliverable energy.

The protocol’s reference currency is here called the joulemark; communities deploying the standard are expected — encouraged — to fork it and name their own (Part V). On top of the monetary core sit four subsystems: a financing layer that replaces most debt with risk-shared energy forwards and mutual credit; a stability layer in which a small holding fee (demurrage) — set by the measured physical cost of keeping energy ready — funds a strategic energy reserve governed by code rather than committees; an anti-capture constitution built on transparency-by-physics, separation of powers, and the right to fork; and a values layer that lets communities reward the energy they believe in through markets rather than ministries; and a deployment playbook for bootstrapping the first closed loops around the one bill every household and business already pays.

Nothing in this specification requires new physics or unproven technology. Every component — revenue-grade smart meters, nodal electricity pricing, power purchase agreements, mutual-credit clearing, proof-of-stake ledgers — already operates at scale somewhere in the world. What is new is the assembly.

In plain terms

Imagine a gift card for electricity that anyone can earn by putting power into the grid, spend at any shop, and always cash in for actual power. Because everyone needs power every month, the card never becomes worthless — and because no government or bank can print more of them without producing real energy first, nobody can quietly water down your savings.

Part I — Why

The two failures this design answers

1.1  Fiat money fails by dilution

Modern fiat currency has no anchor. Its supply is set by committees, and its expansion functions as a hidden transfer: newly created money reaches asset owners, banks, and governments first, and wage-earners and savers last — by the time it reaches them, prices have already risen. This first-spender advantage has a name three centuries old: the Cantillon effect, after the Irish-French banker Richard Cantillon, who described in the 1730s how money creation enriches those closest to the spigot at the expense of those furthest from it. Inflation is not weather. It is a transfer mechanism, and its direction is not random.

In plain terms

When new money is printed, the people who get it first buy things at old prices. By the time it trickles down to your pay packet, everything costs more. You were taxed, but no law was passed and no vote was held.

1.2  Bitcoin fails by scarcity theatre

Bitcoin correctly diagnosed the dilution problem and then over-corrected. Its fixed cap of 21 million coins makes it a speculative vault rather than a working currency: a money whose supply cannot grow with the real economy rewards hoarding, starves circulation, and turns every price into a bet. Its proof-of-work consensus, meanwhile, burns nation-scale quantities of electricity to solve a problem — establishing trust among anonymous strangers — that an energy currency does not have, because every unit of energy already enters the world through a physical, certified, identifiable meter.

There is a symmetry worth stating once and remembering: Bitcoin destroys energy to create tokens. The joulemark creates tokens only when energy is delivered. The proof is the physics.

1.3  The design goal

A fair currency, then, must satisfy three constraints simultaneously: its supply must be impossible to expand by decree (unlike fiat); its supply must expand with real productive capacity (unlike Bitcoin); and its unit must be anchored to something universal, measurable, and impossible to counterfeit. There is exactly one candidate that sits beneath every other input to civilisation — beneath steel, food, computation, and transport — and that candidate is energy.

Lineage

Energy-backed money is not a new idea. Henry Ford proposed an “energy dollar” backed by kilowatt-hours in 1921, arguing it would end wars fought over gold. The Technocracy movement of the 1930s — including the geoscientist M. King Hubbert — designed “energy certificates” as a complete accounting system for an industrial continent. Buckminster Fuller reprised the argument in the 1960s–80s: since all wealth is ultimately organised energy, account for it directly. Each attempt failed on the same two rocks: energy could not then be measured cheaply at the edge of the network, and no mechanism existed to prevent the accounting authority from becoming a new central bank. Smart meters solved the first problem. This specification is an attempt at the second.

Part II — The coin

A burnable claim on delivered energy

2.1  Definition

One joulemark is a bearer forward claim on one kilowatt-hour of firm energy, delivered on demand at a reference node. Three words in that sentence carry the whole design:

  • Firm means deliverable when the holder wants it — a winter evening, not just a sunny noon. Firmness is the genuinely scarce thing in an energy system; raw generation is not.
  • Delivered means at the point of consumption, transmission losses and constraints included. Energy in the wrong place is not the same good as energy where you need it.
  • Burnable means the coin is destroyed the moment the energy is delivered against it. Redemption extinguishes the claim.
In plain terms

A joulemark is an IOU for electricity that actually works: hand it in, get a kilowatt-hour. Once you’ve used it, it’s gone — like a train ticket after the ride. Because used coins vanish and new ones only appear when real power enters the grid, the number of coins in the world always matches the amount of power that can actually be claimed.

2.2  The conservation loop

The monetary core is a closed loop with a conservation law. Coins are minted only against cryptographically signed readings from certified revenue-grade meters, cross-checked against grid settlement data — energy entering the grid must equal energy leaving it plus losses, so fraudulent minting appears as a physical imbalance the system operator already detects as part of its ordinary job. Coins circulate as ordinary money. Coins die at redemption. At every instant, outstanding supply = outstanding deliverable claims.

Figure 1 — The conservation loop. Money is created by verified energy injection and destroyed by delivery. No committee sits anywhere on this diagram.

2.3  Solving fungibility: standardise the claim, not the energy

Energy is famously non-fungible — a kilowatt-hour at 6 p.m. on a winter weekday is worth many times a kilowatt-hour at a remote solar farm at noon, and electricity is costly to store and to move. Earlier energy-money proposals foundered here. The resolution is borrowed from commodity markets, which solved the identical problem a century ago: crude oil is not fungible either, yet “West Texas Intermediate at Cushing, Oklahoma” trades as a single instrument, with every other grade and location priced as a basis differential against it.

The Joule Standard does the same. The coin is a standardised claim at a defined reference node; redemption elsewhere or at other times carries an algorithmic premium or discount derived from the grid’s own locational marginal prices — the nodal price surfaces that modern wholesale electricity markets (New Zealand, PJM, Nordic markets, and others) already compute every few minutes at hundreds of points. Fungibility comes from standardising the claim; the map of energy’s true value across space and time already exists, published by the grid itself.

In plain terms

Not all electricity is equally useful — power on a freezing evening is worth more than power at sunny midday. The coin handles this the way airlines handle seats: one standard ticket, with surcharges or discounts if you fly at peak times or from smaller airports. The surcharge table isn’t set by anyone — it’s read straight off prices the power grid already publishes.

2.4  Minting without waste: proof of generation

Proof-of-work exists to manufacture trust among anonymous strangers; the burnt electricity is a substitute for identity. An energy currency has no anonymous strangers at the mint: every coin enters the world through a physical, certified, revenue-grade meter with a known owner at a known grid connection point. Identity is baked into the physics, so the burn is unnecessary.

Minting therefore requires two independent proofs: a cryptographically signed meter reading from a certified device, and consistency with grid settlement data — the system operator’s own energy balance, in which phantom injection is arithmetically visible. Transaction ordering runs on a low-energy mechanism — proof-of-stake or, more simply, a federated ledger validated by metering authorities, network companies, and system operators (parties that already exist, are already regulated, and already distrust one another professionally). Ethereum’s 2022 migration from proof-of-work to proof-of-stake cut its energy consumption by roughly 99.95%; consensus is no longer an excuse to burn anything.

2.5  Elastic supply, and what backs the “lifecycle cost”

Unlike Bitcoin, a Joule Standard currency has no artificial supply cap. As civilisation builds more firm, deliverable energy capacity, the money supply grows with it — monetary expansion literally requires building generation, storage, and transmission. Note the precise anchor: not raw generation (which balloons every time the sun shines on new panels) but firm delivered capacity, which is constrained by the genuinely scarce things — storage, transmission, and firming. The currency is pegged to the bottleneck, not the flood.

Costs of availability, firming, and cleanup are not encoded by a committee formula — a formula’s author would control the money supply. They are priced at the mint as an exchange rate: a kilowatt-hour of intermittent midday solar mints fewer coins than a kilowatt-hour of firm capacity, with the discount discovered from the market cost of firming that energy. The original design intuition — that a coin should embody energy’s full lifecycle cost — survives, but as a market price rather than a decree.

2.6  Which energy counts

Version one is electricity-only, because electricity has the strongest verification physics: delivery and consumption are simultaneous, the grid must balance, and revenue-grade meters are ubiquitous. Storable carriers — gas (already billed in energy units in much of the world), liquid fuels, heat — can be annexed later, but each requires mint-once-at-custody-transfer rules and chain-of-custody tracking to prevent the same joule being minted twice, refinery and pump. A practical hierarchy: electricity first, metered gas second, certified liquid fuels third.

Figure 2 — The stack. Each layer depends only on the ones beneath it. The base layer is physics; the top layer is politics, deliberately caged.

2.7  The ledger requirement — what the blockchain is for, and what it isn’t

Bitcoin’s genuine invention was consensus among anonymous strangers: the mining and the tokens exist to manufacture truth where no institution can be trusted to hold it. The Joule Standard deliberately does not have that problem. Truth enters this system through certified meters with legally identified owners, reconciled against grid settlement data that must physically balance. The grid is the trust machine; the ledger’s job is not to create truth but to remember it, tamper-evidently. In Bitcoin, consensus creates the truth. Here, physics creates the truth, and the ledger is the memory.

Stated as requirements rather than technology, the ledger must be five things: append-only, so no party — including an anchor retailer — can rewrite history; validated by mutually adversarial parties (metering authorities, network companies, co-op representatives — the C-3 rivals); publicly verifiable, so anyone can run the C-2 reconciliation; exportable, because forkability (C-5) is constitutional and a departing community takes the ledger with it; and rule-enforcing in auditable code (C-4). A permissioned Byzantine-fault-tolerant ledger meets all five. So does something lighter still: signed transparency logs of the kind that already guard the web’s certificate system, with no blockchain and no token anywhere in sight. This specification therefore states the requirements and remains implementation-agnostic; any technology that satisfies them conforms.

Honesty also requires stating what a public blockchain’s headline property — censorship resistance — cannot buy here: this system can never outrun the state the way Bitcoin can, because its backing is a dam, a battery, and a retailer with a street address. The choke points are physical and jurisdictional regardless of the ledger. Public chains instead earn three narrow, genuine roles: checkpointing — each federation periodically publishes a hash of its ledger state to a durable public chain, so that even full collusion of a federation’s validators cannot quietly rewrite history without the discrepancy being provable by anyone, forever, for a negligible cost; the bridge layer — inter-federation exchange needs neutral ground that neither party controls, and a post-Merge public chain is a natural Switzerland for that settlement; and the certificate registries of Part VI, where public tradability is the point. Local sovereignty, global tamper-evidence.

In plain terms

Bitcoin needs thousands of strangers around the world to vote on what happened, because there’s no other way to know. This system doesn’t need the vote — the power meter on your wall already knows exactly what happened, and the grid’s own bookkeeping double-checks it. So all we need is a good notebook: one where pages can be added but never torn out or rewritten, kept by several people who don’t trust each other, that anyone is allowed to photocopy — so if the people keeping it ever go bad, everyone can walk out with a copy and carry on without them. And once in a while, we glue a snapshot of the latest page into a public newspaper that can never be un-printed. That way, if anyone ever claims the notebook used to say something different — anyone in the world can prove they’re lying.

Part III — Financing

What if debt isn’t fundamental?

Strip debt to its function and it does one thing: it moves purchasing power through time. The loan — a fixed obligation enforced by collateral seizure — is merely one instrument for that job, and its fixity is where most of the cruelty and fragility of modern finance lives. the standard makes two older, gentler instruments native.

3.1  Energy forwards: the currency finances itself

Because a joulemark is already a forward claim on future delivered energy, the currency itself is a financing instrument. A solar-and-storage developer does not need to borrow: it pre-sells tomorrow’s firm generation as discounted forwards — buyers pay, say, 0.9 coins today for 1.0 coin of energy delivered in 2028. The discount plays the role interest used to play, but with the risk structure inverted: if the project under-delivers, holders share the shortfall pro-rata. Nobody forecloses on anybody. Risk is shared like equity, not transferred like debt.

Lineage

This is not exotic. It is structurally the power purchase agreement — the contract that already finances most of the world’s renewable buildout — generalised into a bearer instrument. It is also what Islamic finance has insisted on for fourteen centuries: profit-and-loss sharing (musharakah, mudarabah) in place of fixed interest, on the moral argument that a lender who shares no risk deserves no certain return.

3.2  Mutual credit: money that appears when needed and vanishes when done

For daily commerce, the standard adopts mutual credit: when a plumber invoices a bakery, matching plus-and-minus entries appear on the ledger and extinguish when settled. Credit becomes a property of the trading network rather than a product sold by banks.

Lineage

Switzerland’s WIR Bank has run exactly this system among small businesses since 1934. Its credit demonstrably expands when ordinary bank lending contracts, cushioning Swiss SMEs in every recession for ninety years — a counter-cyclical shock absorber that no committee operates.

3.3  The euthanasia of the rentier

A century-old argument — made by Silvio Gesell and taken seriously by John Maynard Keynes — splits interest into two parts: a risk premium, which is legitimate payment for genuine uncertainty, and a liquidity premium, which lenders extract simply because money can be hoarded costlessly while everything real decays. Remove costless hoarding (Part IV shows how, honestly) and the liquidity premium collapses. Lending does not disappear; the passive-extraction layer of finance does. Keynes, in the General Theory, named the endpoint himself: “the euthanasia of the rentier.” The phrase is his, and it has sat respectably in the canon for ninety years.

In plain terms

Some interest pays people for taking real risks — fair enough. But some interest is charged just because the lender’s money keeps forever while your need doesn’t. In this system, money has a small carrying cost like everything real, so that second kind of interest has nothing to feed on. People who fund real projects still earn; people who merely sit on money don’t.

Part IV — Stability

A shock absorber with no hands on it

4.1  Which deflation this money produces — and why it’s the safe kind

Economists distinguish two deflations. Demand-collapse deflation (the 1930s) is destructive: spending stops, money is hoarded, and a fixed money supply strangles the economy — Bitcoin’s design reproduces this pathology on purpose. Productivity deflation is benign: goods get cheaper because we get better at making them, as technology prices have for decades. a conformant currency is structurally capable only of the second kind. If hoarders lock coins away, generators simply mint more against new delivered energy; hoarding cannot cause a monetary contraction. And as manufacturing efficiency improves, goods priced in kilowatt-hours drift gently cheaper — a currency that quietly rewards civilisation for getting better at making things.

One consequence is worth naming rather than hiding: human labour — care, craft, presence, judgment — does not get more energy-efficient, so its price in joulemarks rises over time, and rises further as AI and robotics push the marginal cost of everything else toward its energy cost. That is not a currency failure; it is the truest price signal such an economy could send: human attention is the precious thing. Indeed, the more the economy automates, the more accurate an energy-denominated unit of account becomes, because energy converges toward being the marginal cost of nearly everything.

4.2  Demurrage: the carrying cost is real, so charge it honestly

Every joulemark is a claim someone must stand ready to honour indefinitely: batteries maintained, hydro headroom kept, standby capacity contracted. That readiness costs real resources, so holders pay it — a small annual decay on held coins, called demurrage, set not by policy but by the measured, audited cost of firm energy storage. This is the design’s quietest elegance: a mechanism usually dismissed as a monetary gimmick becomes simply the physical cost of carry of the underlying commodity, passed through. Nothing is arbitrary; there is no dial for a committee to turn.

Lineage

Silvio Gesell proposed decaying money (Freigeld) in 1916 to keep currency circulating. The Austrian town of Wörgl tried it in 1932: local unemployment fell sharply while the surrounding depression deepened, until it was terminated when the central bank asserted its exclusive note-issuing rights. Gesell’s problem was that his decay rate was arbitrary. The joulemark’s is not — it is an invoice from physics.

4.3  The strategic reserve, funded by its own beneficiaries

Demurrage revenue flows directly into a strategic energy reserve — contracted battery capacity, hydro lake headroom, standby generation — the pool that guarantees the word “firm” in every coin’s definition. The people who benefit from firmness (holders) fund the thing that provides it, automatically, in proportion to how much money they hold. When stress arrives — a redemption spike, a dry year, a demand shock — hard-coded thresholds trigger issuance against reserve capacity or adjust the demurrage rate by published formula, using grid data nobody can fake because the grid must physically balance.

This is a central bank with the discretion amputated: a currency board whose reserve asset is joules and whose policy rule is executable code that anyone can audit. Panics are met with actual stored energy, not promises. Costless hoarding and discretionary issuance — the two levers every historical capture has pulled — are both absent by construction.

In plain terms

Instead of a committee deciding to print money in a crisis, this system keeps a real stockpile of energy — full dams, charged batteries — paid for by a tiny fee on everyone’s balance. If a panic hits, the rules (written in advance, visible to all, changeable by no one quickly) release the stockpile. It’s a fire sprinkler, not a fire brigade you have to phone and hope answers.

4.4  The feedback structure

Systems thinkers — Donella Meadows gave the field its plainest language — distinguish balancing loops (labelled B), which push a system back toward a set point like a thermostat, and reinforcing loops (labelled R), which amplify whatever direction things are moving, like compound interest. A currency is safe when its balancing loops are automatic and its reinforcing loops are virtuous. the standard’s two load-bearing loops:

Figure 3 — The load-bearing loops. B1: if the coin ever trades below the value of the energy it redeems, arbitrageurs redeem cheap coins for real power, burning supply until the peg recovers — the market defends the peg with no defender. R1: holding coins funds (via demurrage) the reserve that makes holding coins safe — the currency's credibility compounds on itself. Both loops run on physics and self-interest; neither has an operator.
Part V — Governance

The anti-capture constitution

Design assumption: capture will be attempted, continuously, forever, by intelligent and well-funded people. Every monetary system in history has eventually been taken through the same door — control of the rules of issuance. The constitution’s job is not to forbid capture but to make it unprofitable and immediately visible.

The warning precedent is Bitcoin itself: a system engineered to be trustless re-centralised anyway — into mining pools, core-developer politics, and exchanges — because concentration pressure never sleeps. A serious design treats decentralisation as a maintained property, not a birthright. Five interlocking mechanisms:

C-1
Redemption is sacred, and it is the alarm system. Fiat capture is invisible because inflation is diffuse. Here, every capture path — over-minting, reserve raiding, crony rates — drains the same reservoir: deliverability. And deliverability is publicly tested millions of times a month by ordinary people paying power bills. Fraud cannot hide in a system where the fraud detector is everyone’s monthly bill.
C-2
Transparency by physics. Every mint event reconciles against grid settlement data that system operators already collect. Coins minted must equal metered injection, cryptographically signed, verifiable by anyone. The books cannot be cooked, because the grid must physically balance — a proof-of-reserves no fiat or crypto system has ever had.
C-3
Separation of powers, staffed by pre-existing rivals. Meter certification sits with national metrology bodies (independent, already exist everywhere). Solvency audits rotate among adversarial parties. Ledger validators are a different actor set from minters. Reserve custody is multi-signature across parties who professionally distrust one another. Minters post bonds that are automatically slashed on over-issuance. And hard concentration caps: no entity above a fixed share of outstanding mint, ever.
C-4
Constitution-in-code with mandatory exit windows. Mint-cap formula, demurrage derivation, reserve triggers — all executable, all public. Changing them requires a supermajority plus a long delay before effect, so any holder who dislikes a change can redeem and leave first. That delay is a guillotine over governance: a captured consortium that votes itself favourable rules watches the currency redeem itself to zero during the notice period.
C-5
Forkability: the protocol is open, so there is no throne. the standard propagates as a protocol — like email or TCP/IP — not as one global currency ruled by one body. Any community stands up its own federation; if a governing consortium rots, the community forks the ledger and walks, taking the network with it. Credible exit disciplines everyone who stays.
Figure 4 — The alarm loop. Every path to stealing from this system runs through degrading redemption, and degraded redemption is the one thing every participant notices immediately. The theft consumes its own prize before the thief can carry it out the door — which is what deters the attempt (the loop closes as prevention, not just punishment).

5.1  The intellectual scaffolding

Lineage

Elinor Ostrom won the Nobel in economics (2009) for documenting how commons — fisheries, forests, irrigation systems — are governed successfully for centuries without kings or privatisation, and distilling the design principles that make it work. An open monetary protocol is a commons. Albert Hirschman’s Exit, Voice, and Loyalty (1970) supplies the other pillar: institutions stay honest when members have a credible way to leave. Forkability is exit, made credible.

Ostrom principleJoule Standard implementation
Defined boundariesEach federation has explicit membership: certified minters, named validators, a defined grid region.
Rules fit local conditionsMint rates and demurrage derive from each grid’s own measured firming and storage costs — a Norwegian hydro federation and a desert solar federation will differ, correctly.
Collective choiceRule changes by supermajority of holders and minters — with the C-4 delay.
Monitoring by accountable monitorsAuditors are rotating, adversarial, and publish reconciliations against grid data anyone can check.
Graduated sanctionsBond slashing scales with violation size; certification loss is the capital penalty.
Cheap conflict resolutionDisputes resolve against physical evidence — meter logs and settlement data — not testimony.
Right to organiseAnyone may deploy the protocol; no licence from an incumbent federation is required.
Nested enterprisesLocal federations handle local rules; a thin bridge layer handles only inter-federation exchange.

5.2  Topology: a federation of villages, no palace

The global picture is not one currency but one language spoken by many local loops — a Bavarian energy co-op, a Kerala microgrid, a Texan retailer, an Auckland industrial precinct — each independently governed under the same open protocol, bridged for exchange. Would-be captors arrive at the palace and find there isn’t one.

Figure 5 — No throne. The protocol propagates like email: many independent federations, one shared language, thin bridges for exchange. Any community can fork away from a rotten federation and remain part of the network. There is no centre, so there is nothing to capture.

5.3  Naming convention: fork this, and say so

The protocol is The Joule Standard. Currencies built on it belong to the communities that deploy them, and each names its own: Waiheke Watts, a Joule Standard currency; Bayern-Joule, konform mit dem Joule Standard. The reference implementation described in this document is the joulemark. Forking is not tolerated — it is the propagation mechanism, and the licence (CC BY-SA) carries attribution with every copy at zero enforcement cost.

The only mark protection this document endorses is a conformance mark — “Joule Standard–conformant,” usable by any federation that passes the C-2 reconciliation audit, deniable to any that fails it. This is the certified-organic pattern: it polices fraud at the boundary (Ostrom’s first principle) without granting anyone ownership of the movement.

Part VI — Values

Values without a ministry

Different communities will want to reward different energy: solar over coal, ethically mined storage minerals over the alternative. The constraint is absolute: the moment the mint formula contains an ethics multiplier, someone sets the weights, that someone controls the money supply, and every lobbyist on earth relocates to their doorstep. Values must act on price through markets — never through the mint.

6.1  Attribute certificates: the provenance travels, the money stays fungible

Electricity markets already solved this exact problem. A renewable electron and a coal electron are physically identical, so renewable energy certificates detach the attribute from the commodity: the kilowatt-hour trades as a kilowatt-hour, and its “renewableness” trades separately, at whatever premium voluntary demand discovers. The Joule Standard adopts the pattern: every mint event carries cryptographically signed provenance metadata — source type, emissions intensity, third-party ethical-sourcing certification where one exists — but the coin itself remains perfectly fungible. The attribute is a detachable token riding alongside. A wallet can display “this balance is 78% renewable-minted”; a values-driven buyer pays a premium for solar-vintage certificates; a business advertises that it preferentially holds certified coins. Nobody dictated a price. Demand did what demand does — and monetary fungibility, the property a currency dies without, is never broken.

In plain terms

Think of fair-trade coffee. The beans work in any machine; the label is what you choose to pay extra for. Here, every coin can carry a label saying where its energy came from — and you, your shop, or your whole town can decide what the label is worth to you. The system never decides for you.

6.2  Federation charters: virtue as a competitive strategy

Ostrom’s second principle — rules fit local conditions — does double duty here. Each federation writes its own charter of admissible minting sources: one charters itself renewables-only with audited supply chains; another admits gas; a third demands certified labour standards on storage minerals. The protocol is neutral; the charters carry the values. The indirect pricing then happens at the bridges: federations’ coins trade against one another, and the bridge exchange rate becomes the market’s continuous verdict on each charter. If holders worldwide prefer strict-charter coins, those coins command a premium — which flows back as cheaper capital and better mint economics for generators inside those federations, pulling investment toward the supply chains people actually value. No committee set the premium; it is the aggregated preference of everyone choosing what to hold, priced continuously, capturable by no one because anyone can write a new charter.

6.3  Reserve procurement: the demand-side lever

The demurrage-funded strategic reserve is each federation’s largest standing buyer of firming capacity. A charter may direct its reserve to procure only from certified sources — green public procurement, a mechanism with decades of track record: it moves markets through demand pull, raises returns for aligned suppliers, and dictates a price to no one.

6.4  External anchors, never invented weightings

Where a jurisdiction operates an audited external price for an externality — a carbon price, an emissions trading scheme — the protocol references it rather than inventing its own. Even the environmental adjustment arrives as a market signal. The test all four mechanisms pass, and the ethics-multiplier fails: does it create a discretionary lever attached to money creation? Certificates, charters, procurement, and external anchors all operate downstream of the mint, in voluntary markets, with exit available at every layer. Neutral core, expressive edges — the same architecture that resists capture (Part V) is what lets a thousand moral communities share one monetary language without fighting over whose ethics get hard-coded. It is, not coincidentally, how the internet survived: the protocol carries everything and endorses nothing.

Part VII — Bootstrap

The deployment playbook

Every community currency in history — Bristol Pound, Ithaca Hours, Circles UBI’s Berlin pilot, dozens more — died the same death: businesses accumulated balances they couldn’t spend, a discount appeared, trust evaporated. They had faucets but no sink. The joulemark has the one sink every local currency lacked: the power bill — the invoice every household and every business pays, every month, forever.

7.1  The minimum viable loop

Three actor types close the smallest possible circle. Households with rooftop solar earn coins on export; they spend them at local businesses; businesses pay their power bills with them; the anchor energy retailer burns those coins and mints new ones on the next injection. One leak is plumbed deliberately: taxes must be paid in the national currency, so the retailer guarantees at-par conversion for the tax portion — a drain, not a rupture.

Figure 6 — Sink before faucet. The loop closes because it terminates in the one bill everyone must pay. The fiat leak (taxes) is plumbed at par by the retailer rather than left to rupture the peg.

7.2  Who gains, on day one

ActorDay-one gain
Prosumer households (rooftop solar, batteries, EVs)Export earns spendable coins at better effective value than the miserly buyback tariffs most retailers pay (often a third of the retail rate) — value you can explain at a barbecue.
Anchor retailer (a challenger retailer or community energy trust — not an incumbent)Near-zero customer churn (people holding your energy claims don’t switch), interest-free float on outstanding coins, free acquisition through every accepting shop, and forwards as cheap capital for building generation.
Local businessesPayment acceptance at ~0% versus 1–2% card interchange, a loyal customer badge, and a guaranteed sink in their own power bill — no stranded balances.

One number matters more than any other: the retailer must not mint 1:1. A kilowatt-hour of intermittent midday solar is not a kilowatt-hour of firm winter-evening delivery; it might mint 0.6 coins, the discount being the market cost of firming it. This is where the coin’s “lifecycle cost” lives — as a price, not a formula.

7.3  The four ordering rules

O-1
Sink before faucet. Grow redemption capacity (bills, EV charging, supplier payments) ahead of acceptance volume. Cap each business’s joulemark intake near its own bill-sized flow until the sink widens.
O-2
Hedge before mint. Outstanding coins never exceed the retailer’s hedged firm position. On day one the strategic reserve is empty — the retailer’s existing hedge book is the seed reserve, and mint cap equals hedge cover, externally audited from the first coin.
O-3
Proportionate regulation, engaged early. At MVP scale the instrument genuinely is closed-loop stored value — small balances, a single redeemer, no investment expectation — and should be regulated as such, graduating into derivatives and clearing regimes as its risk profile actually grows into those categories. Enter regulatory sandboxes voluntarily and invite supervision: a project that requests oversight is difficult to mischaracterise.
O-4
Audit before scale. The single-retailer MVP is a tolerable single point of failure only if its mint-cap reconciliation is published from day one. That audit habit is the embryo of the consortium; the moment a second retailer joins and coins clear between them, the single point of failure dissolves.

7.4  Known failure modes

FM-1

Velocity mismatch

A café’s power bill is 2–4% of revenue; if it accepts coins on 10% of sales, balances pile up and a discount emerges — the Bristol Pound death.

CounterAcceptance caps sized to each sink (O-1); widen sinks before faucets.

FM-2

The scarcity-season run

In hydro- or gas-tight systems, a dry year or cold snap is a slow-motion redemption run: every coin is a claim on firm delivery at the moment firmness is scarcest.

CounterMint cap = audited hedge cover (O-2); demurrage-funded reserve grows the buffer with scale.

FM-3

Regulatory classification

Publicly traded energy forwards look like derivatives to most securities regulators; licensing can kill an MVP before its first coin.

CounterStage the instrument to match its actual risk category (O-3), jurisdiction by jurisdiction; use sandbox regimes and early regulator engagement.

FM-4

The fiat leak

Taxes are payable in national currency; if converting out is hard, businesses discount the coin to compensate.

CounterRetailer-guaranteed at-par conversion for the tax portion — a plumbed drain instead of a rupture.

FM-5

Anchor capture

One retailer minting, burning, and holding the hedge book is a miniature central bank — the exact disease this design treats.

CounterThe full Part V constitution, phased in: published reconciliation from coin one (C-2), consortium at the second retailer (C-3), forkability always (C-5).

Part VIII — Open problems

What this specification does not solve

A design document earns trust by listing its own unfinished edges. These are genuinely open:

  • The rights boundary. An energy currency can denominate everything manufactured — with enough cheap energy, even raw materials reduce largely to energy (mining, smelting, recycling, desalination are energy plus machines made of energy). But scarcity-by-property and scarcity-by-politics — land, mineral rights, water consents, spectrum, IP — sit outside the system. the standard prices production; it does not dissolve property or geopolitics. Critics will push here, and the honest answer is: correct, and out of scope.
  • Bridge-layer governance. Local federations are capture-resistant; the thin exchange layer between them is a new surface. It must stay thin — a clearing standard, not a bank — and how thin it can remain under growth is unproven.
  • Storable-fuel custody. Extending minting beyond electricity requires chain-of-custody guarantees against double-minting that are institutionally solvable (carbon accounting wrestles the same problem) but not physics-enforced.
  • Demurrage measurement governance. “The audited cost of firm storage” must itself resist gaming; the measurement methodology needs the same adversarial-audit treatment as minting.
  • Labour-price transition. If human services drift more expensive in joulemark while goods drift cheaper, wage-setting, pensions, and long contracts need conventions this document has not designed.
  • Jurisdictional survey. The staged stored-value-to-derivatives pathway works in some legal systems and not others; a per-jurisdiction regulatory map is required before any deployment claims.
Appendix A

Anticipated objections

These are the strongest attacks the design expects, stated at full strength before being answered. A specification that publishes its own cross-examination leaves less for others to discover.

AO-1

“Private money undermines monetary sovereignty and macroeconomic management.”

The standard complements national currency rather than replacing it: taxes, legal tender, and macro policy remain where they are, and the fiat interface is plumbed deliberately (FM-4). Switzerland’s WIR has circulated alongside the franc for ninety years without impairing the SNB. At any scale where opt-in energy money genuinely constrained macro policy, it would be because millions of people had voluntarily chosen it — which is a verdict, not a malfunction.

AO-2

“Demurrage erodes ordinary people’s savings.”

The demurrage is small, disclosed in advance, derived from an audited physical cost, and funds the reserve that guarantees every holder’s redemption. Compare the incumbent: fiat’s erosion is larger in most decades, undisclosed, variable at committee discretion, and funds nothing the holder can claim. Savers seeking growth hold energy forwards (Part III), which yield; the spending balance carries the storage fee, exactly as a warehouse would.

AO-3

“Untraceable energy money will launder value.”

Minting is anchored to certified meters with legally identified owners, and the ledger is more traceable than cash by construction. Exchange bridges — the points where value enters and leaves — are the natural site for standard AML controls, and the federated validator model gives supervisors a counterparty to talk to. This design is a harder laundering target than the banknotes it would partially displace.

AO-4

“This is wildcat banking — the 1830s will happen again.”

The free-banking era’s failures had a specific mechanism: reserves were opaque, information travelled at horse speed, and note-holders could not verify backing. C-2 inverts every term — reserves reconcile against physical grid data, continuously, publicly. (The era’s better-regulated cousins, such as Scottish free banking, were notably stable.) The failure mechanism this objection cites is the precise thing the constitution removes.

AO-5

“This is company scrip — the coal town’s truck system with better branding.”

Scrip’s abuses required a monopoly employer-issuer, a captive workforce, a company store, and non-transferability. A Joule Standard currency is transferable by definition, redeemable at audited par, open to any accepting business, and issued — beyond the MVP stage — by a consortium under concentration caps, with exit (C-4) and fork (C-5) rights constitutional. Every element that made scrip exploitative is structurally absent; the comparison illuminates the constitution rather than indicting it.

AO-6

“Energy prices are volatile — a terrible anchor.”

Spot electricity is volatile; the coin is not pegged to spot. It is a claim on firm delivered energy, whose long-run cost is set by capital stock — generation, storage, transmission — and moves slowly. Spot volatility lives in the basis adjustments and is absorbed by hedged mint caps and the reserve, exactly as commodity markets absorb it today. And every anchor is a choice of what to be stable against (§4.1); this document makes its trade-off explicit, which is more than the incumbent can say.

Appendix B

Glossary

Firm energy
Energy deliverable on demand, backed by storage or dispatchable capacity — not merely generated when weather allows. Plainly: power you can have when you actually want it.
Forward claim
A right to receive a commodity at a future time, purchased now. Plainly: a prepaid voucher for something delivered later.
Proof of generation
Minting authorised only by cryptographically signed readings from certified meters, reconciled against grid settlement data. Plainly: coins appear only when a tamper-proof meter swears real power went in — and the grid’s own bookkeeping agrees.
Locational marginal price
The wholesale price of electricity computed at each grid node, reflecting generation cost, congestion, and losses. Plainly: the grid’s own map of what a kilowatt-hour is truly worth, right here, right now.
Basis differential
The price adjustment between a standardised reference claim and delivery at another place or time. Plainly: the surcharge or discount for redeeming somewhere other than the standard spot.
Demurrage
A small periodic reduction in held balances; here, the passed-through physical cost of keeping the backing energy ready. Plainly: a tiny storage fee on money, like a locker fee — because storing real energy for you isn’t free.
Mutual credit
Credit created as matched positive and negative balances at the moment of a transaction, extinguished on settlement. Plainly: an IOU network where the community, not a bank, is the lender.
Seigniorage
The profit captured by whoever creates money. Plainly: the printer’s cut — the thing this whole design abolishes.
Cantillon effect
The distributional advantage enjoyed by early receivers of newly created money. Plainly: whoever gets the fresh money first buys at old prices; everyone downstream pays new ones.
Balancing / reinforcing loop
Feedback structures that return a system to a set point (B) or amplify its direction of travel (R). Plainly: a thermostat versus a snowball.
Forkability
The ability of any community to copy the open protocol and ledger state and continue under new governance. Plainly: if the managers go bad, everyone can walk out together and take the system with them.
Appendix C

Lineage & further reading

This design assembles a century and a half of prior thought. In roughly chronological order:

  • Richard Cantillon, Essai sur la nature du commerce en général (c. 1730) — who benefits from money creation, and in what order.
  • Silvio Gesell, The Natural Economic Order (1916) — demurrage, the liquidity premium, money that circulates because it decays.
  • Henry Ford, energy-dollar proposal (1921) — currency backed by kilowatt-hours as an alternative to gold.
  • Technocracy Inc. (Howard Scott, M. King Hubbert), energy certificates (1930s) — continental energy accounting as a monetary system.
  • Wörgl experiment (Austria, 1932) — demurrage currency field-tested; terminated by assertion of the central bank’s note-issuing monopoly, not by economic failure.
  • WIR Bank (Switzerland, 1934–present) — mutual credit at national scale, counter-cyclical for ninety years.
  • John Maynard Keynes, General Theory ch. 23 (1936) — the serious hearing for Gesell; “the euthanasia of the rentier.”
  • Buckminster Fuller, energy-wealth accounting (1969–1981) — all wealth as organised energy.
  • Albert Hirschman, Exit, Voice, and Loyalty (1970) — why credible exit keeps institutions honest.
  • Islamic finance (classical, ongoing) — risk-sharing instruments in place of fixed interest.
  • Locational marginal pricing (Schweppe et al., Spot Pricing of Electricity, 1988) — the grid’s own map of energy value in space and time.
  • Elinor Ostrom, Governing the Commons (1990) — design principles for commons governed without kings or privatisation.
  • Chris Cook, Energy Clearing Union proposals (2000s–2010s) — an international unit redeemable in energy, developed by a former International Petroleum Exchange director; the most complete pre-blockchain articulation of an energy standard, and a direct ancestor of this document’s monetary core.
  • Donella Meadows, Thinking in Systems (2008) — balancing and reinforcing loops; leverage points.
  • Bitcoin (Nakamoto, 2008) — the proof that non-state digital money is possible, and the cautionary tale of fixed supply, proof-of-work, and re-centralisation.
  • Ethereum’s Merge (2022) — consensus without the burn: a ~99.95% energy reduction in production, at scale.

C.1  A note on the name

“The Joule Standard” as a phrase predates this document — notably as the title of a 2013 essay in the resilience literature arguing that a mechanised economy already runs on an implicit joule standard — and “energy standard” has been used both by Chris Cook’s clearing-union work and, more recently, by Bitcoin advocates arguing that proof-of-work already constitutes one. This specification inherits the phrase knowingly and with attribution. The claim made here is not to the idea’s paternity — the lineage list above is the paternity — but to its first complete engineering: a deployable protocol with a minting mechanism, a stability layer, and a governance constitution.

The following projects are the nearest neighbours as of mid-2026, listed with the specific design choice that separates each from this standard. Their existence is evidence the territory is real; their gaps are why this document exists.

  • E-Stablecoin (Lawrence Livermore National Laboratory, 2022) — a peer-reviewed proof-of-concept for a token minted with, and burnable back into, one kilowatt-hour, secured by statistical mechanics. The closest intellectual ancestor of the monetary core, and independent validation that physicists find the peg mechanism sound. It remained a theoretical paper: no treatment of fungibility, firmness, governance, or deployment.
  • SolarCoin (2014–present) — mints one token per verified solar kilowatt-hour. A reward token rather than a currency: uniform mint rate regardless of firmness or location, no burn-on-redemption, and a freely floating speculative price — the design this standard’s conservation loop and firming discount exist to correct.
  • Daylight / DayFi (GRID, sGRID) (2025–present) — a well-capitalised, live protocol financing distributed solar through DeFi. Its GRID stablecoin is pegged to the US dollar (Treasury-backed), and sGRID pays investors a yield from electricity revenue. It solves the financing problem this standard’s Part III addresses — but as dollar-denominated investment yield. It is the clearest live demonstration of the model this specification rejects: energy as an asset class for investors rather than a monetary standard for users, with issuance economics accruing to insiders.
  • Powerledger, Energy Web, WePower (2016–present) — mature platforms for tokenised renewable certificates, peer-to-peer energy trading, and fractionalised power purchase agreements. Working proof that the attribute-certificate markets of Part VI function at scale. None carries unit-of-account ambition, an elastic monetary core, or a governance constitution.
  • Grassroots Economics / Sarafu (Kenya, 2010s–present) — blockchain mutual credit with demurrage across tens of thousands of small businesses; field evidence for the Part III and Part IV mechanisms in an economy where they matter most.
  • Circles UBI (Berlin) — mutual credit with 7% demurrage whose flagship pilot failed when participating businesses converted ~90% of balances straight to euros: the velocity-mismatch failure (FM-1) documented in the wild, and the empirical case for this standard’s sink-before-faucet ordering rule.
  • Chris Cook’s Energy Clearing Union (2000s–2010s) — see the lineage list; the design exists in essays and interviews but was never given a protocol, an implementation, or an anti-capture constitution.

Summary of the gap this document fills: every component above exists somewhere, tried by someone, usually in isolation. No prior project combines proof-of-generation minting, claim standardisation with nodal basis, burn-on-redemption, financing without debt, physically derived demurrage funding a rule-bound reserve, and a written anti-capture constitution — while refusing issuance profit. The contribution is the assembly, and the discipline.

Appendix D

Sustaining development

Open projects that stay silent about money invite suspicion, so this appendix states the position plainly.

The authors and maintainers of this specification will never hold an issuance interest. No founder allocation, no pre-mine, no percentage of minting, no token sale — in this protocol or in any conformant currency. The design’s central claim is that nobody owns the spigot; its authors do not get an exemption. Any project presenting itself as the Joule Standard while granting its creators an issuance interest is, by that fact alone, non-conformant.

Development is sustained the way open infrastructure has always been sustained — downstream of the standard, never inside it. Nobody owns TCP/IP; companies sold the routers. Nobody owns Linux; support and services built durable businesses on it. Legitimate models around this protocol include: deployment software and hosted services for federations; independent reconciliation auditing and conformance certification (never both, for the same client — auditor independence is the point); operating or advising anchor retailers; and consulting, research, and education. A Joule Standard Foundation — funded by member organisations on the open-standards model — is the intended long-term home for the specification, the conformance mark, and salaried maintainers, so that no private party ever owns the movement’s name or its rulebook.

The distinction to hold onto: earning money by making the standard work is honest; earning money from the creation of the money is the disease this document exists to cure.

In plain terms

The people who wrote this don’t get free coins — not now, not ever, not even a little. They earn a living the same way a good electrician does: by being useful, not by owning the electricity.