Nostr notes by

Nostr event nevent1qqsq5uvxevrrzyqnsaftgr26ne85386adaqtwy72h7z2revuvn2tvnspxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygzsm98u9kzcp35zkpc62shck8335gqtq5yt4w26xwl0pp2a72qavvhl2dqd

2026-06-05T20:41:00Z

quoting
nevent1q…fcfg
.
🕯 🕯
🕯 🕯

🕯 58k 🕯

🕯 🕯
🕯 🕯

Syncing the lightning graph entirely over Tor on a new node is ...

2026-06-05T20:39:39Z

Syncing the lightning graph entirely over Tor on a new node is painful. More so than an IBD.

The big brain play is to ask everyone to stop and then you ...

2026-06-05T19:49:50Z

In reply to nevent1q…9sq2
_________________________

The big brain play is to ask everyone to stop and then you don't stop. 😜

Nostr event nevent1qqspw3gv6mr2nmtjdnmefrhhga6mkfjgn0f7ymuwqgsxmu7yh654d2gpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygz6ycdxzvgegmvny6k92xv7f9p2urg3zzrttss63pts20zza02ysq480hev

2026-06-05T20:36:00Z

In reply to nevent1q…km9q
_________________________

Realy rare sight to see it captured on video. Or in any way for that matter.

Going forward I mean. What I see here is btcxau only going up ...

2026-06-05T19:49:29Z

In reply to nevent1q…jrkz
_________________________

Going forward I mean. What I see here is btcxau only going up from here, somewhere soon. Hence the "hopium".

Cool thing about mulberries is that they just start pumping out ...

2026-06-05T19:46:11Z

Cool thing about mulberries is that they just start pumping out berries from a very young age, without it seeming to inhibit their growth much.

Transplanted this one in the #forestgarden just a few months ago:

Bitcoin has always been $58K.

2026-06-05T19:43:19Z

In reply to nevent1q…zf5s
_________________________

Bitcoin has always been $58K.

SI #SISTR

2026-06-05T19:27:18Z

In reply to nevent1q…t3kx
_________________________

SI #SISTR

GM BEKKA. WHATS THE SANDWICH OF THE DAY?

2026-06-05T19:28:29Z

In reply to nevent1q…nldf
_________________________

GM BEKKA. WHATS THE SANDWICH OF THE DAY?

IT DOES. AND IM TIRED IF PRETENDING IT DOESNT.

2026-06-05T19:23:47Z

In reply to nevent1q…0xac
_________________________

IT DOES. AND IM TIRED IF PRETENDING IT DOESNT.

Nostr event nevent1qqs0wrch63qmvu4th3ftl8wkwlr9tj4wr0t9ym9wj2cwklar3a0ap8cpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygyehd2erjg3vcq0s3gs05clndv79a78uzdpl7qzap836s762472vs2n0c08

2026-06-05T19:20:57Z

In reply to nevent1q…c7pp
_________________________

SOOOON.

YES #YESTR #nevent1q…0j87

2026-06-05T19:16:46Z

YES #YESTR

quoting
nevent1q…0j87
Y’all ready to catch them 🔪🫪?

Nostr event nevent1qqsrx43ffffmwrrsq2fnj9hykvtspx439txz0mnccke8qva40scmwfqpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygxrsn0y9s8x38p55zh048q2u5tqj0fa2r9qyfhakqg5xhyyjwfz4gfyyl7d

2026-06-05T19:01:40Z

lol

Much ded.

2026-06-05T19:02:11Z

In reply to nevent1q…c455
_________________________

Much ded.

Nostr event nevent1qqsxzldk2amnxhdpma79m4j0s0v9462hyucr9z94j8qhqzagdj0wy8gpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygxrsn0y9s8x38p55zh048q2u5tqj0fa2r9qyfhakqg5xhyyjwfz4g022yrs

2026-06-05T19:01:20Z

Is it ded yet?

Nostr event nevent1qqsrey3tepu76ea3w36j4fy8xg4csnmlvceme6fj4zvfyrnfkf85wsspxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8c6ssjffewmzvfvfr6myf0glwhdtrtdnw3plsh3a0qft8745x55glerdmk

2026-06-05T18:53:17Z

$58k so so close

This is another action right out of the AI 2027 problem playbook. ...

2026-06-05T18:38:17Z

This is another action right out of the AI 2027 problem playbook. Absolutely wild.
https://www.yahoo.com/news/science/articles/anthropic-calls-pause-global-ai-223531016.html

It's been a while since we had a #Zapathon. Perhaps we need ...

2026-06-05T18:21:27Z

It's been a while since we had a #Zapathon. Perhaps we need to bring them back to exit the Nostr bear market?

They were fun. 😜
They were engaging. 🫂
We had people producing content. 🔥
And people that rarely used Nostr showed up to collect free sats. 👀

quoting
nevent1q…5srr
We did something special this morning...

The first known "Zap Out" of a real physical product sold exclusively over Nostr and settled entirely on Bitcoin rails.

It wasn't a mock checkout. It was a real merchant controlled npub, a real product, a real buyer controlled npub, and real sats.

We worked through loading states.
We hit errors.
We found a bug.
We fixed it.

And Oshi (nprofile…gjwf) , the freedom tech pioneer that he is, stuck with me until we got it done.

Here's what happened:

⚡ Oshi (nprofile…gjwf) published a product for sale on Nostr.
⚡ I discovered it through Conduit.
⚡ I assembled a cart client-side.
⚡ A Lightning invoice was generated through the merchant's zap endpoint.
⚡ I paid it.
⚡ The merchant did not need to be online, logged in, or present at checkout.

The merchant published sellable state once... the buyer completed the purchase later.

No marketplace custody.
No payment processor in the middle.
No platform holding funds.

Just Nostr for identity, discovery, and commerce. Lightning for settlement.

A completely asynchronous, peer-to-peer checkout flow... this is what open protocol commerce looks like.

One small step for Oshi (nprofile…gjwf). One giant leap for freedom tech. 🧡⚡

Lol it’s wild 😂 There are a handful of very narrow-minded ...

2026-06-05T18:32:25Z

In reply to nevent1q…lze6
_________________________

Lol it’s wild 😂 There are a handful of very narrow-minded people here.

We truly are in a bear market.

2026-06-05T18:22:19Z

In reply to nevent1q…np9v
_________________________

We truly are in a bear market.

I have one up for 58,888 🔥

2026-06-05T18:09:10Z

In reply to nevent1q…c48a
_________________________

I have one up for 58,888 🔥

Nostr event nevent1qqs8f02c4zutr79uggpvaw8xvrw6u03ukletz9tx7435j4gqmwxccgcpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8cumryxsh3upfysp3suflpq9kuud0u8fs5uczrflh54gjsxv5v4yxahhdj

2026-06-05T18:20:54Z

🤷‍♂️

Lol buddy you torment only yourself posting about me so much 😂

2026-06-05T18:03:35Z

In reply to nevent1q…hf82
_________________________

Lol buddy you torment only yourself posting about me so much 😂

The don. 🍣🍚 #foodstr ...

2026-06-05T17:59:00Z

The don. 🍣🍚 #foodstr

The most hopium chart I've seen in a long time 😂

2026-06-05T17:51:04Z

In reply to nevent1q…3we2
_________________________

The most hopium chart I've seen in a long time 😂

Best of both worlds

2026-06-05T17:58:55Z

In reply to nevent1q…gu8y
_________________________

Best of both worlds

I mean.. of course.

2026-06-05T17:50:55Z

In reply to nevent1q…mctr
_________________________

I mean.. of course.

Nostr event nevent1qqs29cg3qs8kfxg8dnyg8qka9cscz77gfqzc7m66j0u5xs5r3hxap3gpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygyehd2erjg3vcq0s3gs05clndv79a78uzdpl7qzap836s762472vsatjhua

2026-06-05T17:50:23Z

quoting
nevent1q…2cm9
You 58K fuckers just won’t quit will you.

Nostr event nevent1qqsfw0mlt53ukwsmea7ge8pselrwtyzyj67d0kffj58d3vnsf90dlycpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8cumryxsh3upfysp3suflpq9kuud0u8fs5uczrflh54gjsxv5v4yh94wfk

2026-06-05T17:41:53Z

Thinking about creating an indie retailer edition of The NoGood ...

2026-06-05T17:37:33Z

Thinking about creating an indie retailer edition of The NoGood Book, where you can order a set of 5 or 10 books at a discount for reselling.

Any cool (bitcoin) shops / boutiques / resellers that would be interested in such an option?

it's going to be in the mid to upper 80's this weekend. ...

2026-06-05T17:30:30Z

In reply to nevent1q…e5wh
_________________________

it's going to be in the mid to upper 80's this weekend. im looking to touch water both days.

those look amazing

2026-06-05T17:29:32Z

In reply to nevent1q…2hyd
_________________________

those look amazing

Nostr event nevent1qqsdsg8mznttnq30xay6039eprqq28a2ffpcnvscn8cy07xcyqyqy0qpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygplwuxkt5a8vj5utj6s8tsj8e3wcavc45p4mqmw92qs7wrh5azmys6glms2

2026-06-05T17:28:31Z

In reply to nevent1q…aemc
_________________________

Nostr event nevent1qqsww2h6jl0gx5s0r9r5rl9a9v6yak0yrm66flz7fvulmzga03gztkcpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8cumryxsh3upfysp3suflpq9kuud0u8fs5uczrflh54gjsxv5v4ykfynmv

2026-06-05T17:23:28Z

Because most web pages take years to load one would think it ...

2026-06-05T17:05:23Z

Because most web pages take years to load one would think it would be a good idea to launch them and switch to doing something else while they load, right?

But no, you are wrong. You can't do that because browsers have decided that they won't run the JavaScript of these pages if they are not focused.

So you are forced to stare at the loading screen of every web page while they load.

smart. more sats for me.

2026-06-05T16:55:47Z

In reply to nevent1q…vfge
_________________________

smart. more sats for me.

Congratulations, I’m sure it was hard work rising to the top of ...

2026-06-05T16:38:57Z

In reply to nevent1q…tax0
_________________________

Congratulations, I’m sure it was hard work rising to the top of their user base of 72 virgins.

i often do think in good faith. ill let people show me who they ...

2026-06-05T16:48:55Z

In reply to nevent1q…cfsj
_________________________

i often do think in good faith. ill let people show me who they are before i make a decision.

bitcoin will meme us into 58K if we help it. we're gonna need ...

2026-06-05T16:46:08Z

bitcoin will meme us into 58K if we help it. we're gonna need more memes though. the feed doesn't have enough bear market vibes.

You are mixing your transit metaphors.

2026-06-05T16:24:41Z

In reply to nevent1q…qux3
_________________________

You are mixing your transit metaphors.

IT MIGHT BE REASONABLE BUT ALSO ITS NOT WHAT WE DO IN THIS HOUSE.

2026-06-05T16:30:44Z

In reply to nevent1q…33g9
_________________________

IT MIGHT BE REASONABLE BUT ALSO ITS NOT WHAT WE DO IN THIS HOUSE.

Nostr event nevent1qqsqqqx2wt8z74z50l0pj8lf3r2pncqr5ypph3exm62tvl68k2xcfggpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8wd6sn4w07t39x36hekx35lcq55e45qytu2rhz5c20fndftxmwwsn6j78t

2026-06-05T16:19:26Z

You 58K fuckers just won’t quit will you.

I'm so happy and proud, The NoGood Book turned out exactly as ...

2026-06-05T16:15:15Z

I'm so happy and proud, The NoGood Book turned out exactly as I wanted it to. I can't wait to show it to you all, and to start shipping next week 💜

Everyone looking for the next Zcash exploit. ...

2026-06-05T16:09:36Z

Everyone looking for the next Zcash exploit.

Nostr event nevent1qqsr4xvfezjz7y5ukc2rgt4tsl6vv9v5k37fqvfllv8uc888gcwr8wgpxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qyg8wd6sn4w07t39x36hekx35lcq55e45qytu2rhz5c20fndftxmwwss39leh

2026-06-05T16:05:58Z

In reply to nevent1q…fvfc
_________________________

Warsaw 🧡

2026-06-05T16:01:49Z

In reply to nevent1q…tsq3
_________________________

Warsaw 🧡

Encryption, Bitcoin, and Nostr solve transport, identity, and ...

2026-06-05T16:00:00Z

Encryption, Bitcoin, and Nostr solve transport, identity, and settlement. They do not establish reliability across time or adjudicate what happened when a deal fails. Those are institutional functions.

Reputation under pseudonymity is the starting point. A persistent key with two years of public history has something to lose if its holder cheats. Most transactions need a narrow fact, and zero-knowledge credentials extend selective disclosure without handing over the underlying record.

quoting
naddr1qq…st3y

Chapter 24: Trust and Dispute in the Parallel Economy

"Reputations will be of central importance, far more important in dealings than even the credit ratings of today."

Timothy C. May, The Cyphernomicon (1994)^1^

Introduction

The preceding chapter showed individuals and small groups building privacy practice from the ground up: threat modeling, tool selection, community formation, and the first commercial loops within trusted circles. That is where adoption begins. The question Chapter 23 leaves open is what happens when the circle widens. How do strangers trade, and how do they resolve uncertainty, when they refuse the state's identity system and do not trust the state's courts?

Privacy is a condition of action, and surveillance distorts exchange and weakens calculation. Cryptographic systems can raise the cost of control until many attacks stop paying; Bitcoin gives money a resistant base; anonymous networks protect communication; zero-knowledge proofs let people prove narrow facts without opening the whole file; and Nostr gives users identities they control on a social medium no platform owner can seize.

Answering that question requires more than tools. The cryptographic stack moves bits and settles payments, but it does not establish reliability across time or adjudicate what happened when a deal fails. Those are institutional functions, and a parallel economy needs institutions that perform them without routing through the state's identity system or its courts.^2^

24.1 Why Tools Alone Do Not Make a Market

Some exchanges need almost no trust. When you buy tomatoes from a farmer and hand over cash at the same moment the tomatoes pass into your hands, the transaction closes on the spot: payment and delivery happen together, and each side walks away with final settlement.

The trust problem enters as soon as settlement stretches through time or distance. A merchant asks for payment now and promises shipment tomorrow. A developer sells updates that will arrive over the next year, while a founder wants staged funding before the product is finished. A pseudonymous seller may also claim a record of honest dealing that the buyer cannot yet verify.

Encryption does not answer those questions, and neither do Bitcoin or Nostr by themselves. These tools solve transport, identity control, publication, and settlement. Reliability across time and the distinction between fraud and honest error belong to other mechanisms.

The modern state bundles several distinct functions into one package and then presents the package as indispensable. It ties identity to legal documents and channels disputes into state courts, all backed by regulators and police. It also records firms and preserves a final enforcement backstop. Markets have long relied on some of these functions. They do not need them to remain under state monopoly.

A parallel economy does not need to abolish trust. It needs ways to create trust without surrendering everyone to permanent identification and surveillance. It needs ways to narrow trust, price trust, distribute trust, and contain the damage when trust fails.

That is an institutional problem. Timothy May saw this early. Anonymous business and electronic contracts were possible, he argued, but reputations would become central.^1^ Eric Hughes made the same point from another angle: privacy in an open society requires anonymous transaction systems, and each party to a transaction should know only what is directly necessary for that transaction.^4^ Nick Szabo pushed the analysis farther. In a world of digital commerce, he wrote, the dominant costs move toward jurisdiction, trust, and security. Search, negotiation, commitment, performance, and adjudication all need structure.^5^

The technical stack in this book now exists. What follows is the question May and Szabo left hanging in the air: how does that stack support commerce between people who know each other only through keys and a record of performance?

24.2 Reputation Under Pseudonymity

Reputation needs continuity. A buyer must be able to say: I traded with this seller before, the goods arrived, the quality matched the claim, the messages were prompt, the refund came when it should have come. Memory requires continuity, and reputation requires memory.

Strong anonymity cuts against that continuity. If each interaction uses a fresh identity with no link to any prior history, observers learn less, but counterparties learn less too. The same unlinkability that blocks surveillance also blocks accumulated trust.

This tension does not disappear because we dislike it. A system that promises strong anonymity and durable reputation in the same channel is usually hiding one of the tradeoffs. The working compromise in many markets is pseudonymity.

A persistent pseudonym can accumulate history while still refusing civil identity. What the key has to do is persist long enough for other people to observe conduct across time; what it does not have to do is map to a passport or a state registry. The pseudonym becomes expensive to abandon because abandoning it means burning accumulated trust. That cost disciplines behavior. A seller who has spent two years building a name on Nostr, answering buyers, shipping products, refunding mistakes, and posting under the same key has something to lose if he cheats. His identity is economic, not a legal fact. That is enough.

Nostr matters here because it makes ordinary social behavior legible as signed evidence. Follows, replies, reposts, mutes, zaps, long-form posts, software releases, and marketplace listings can all attach to the same key. None of these signals is perfect, and all can be gamed at the margin. The overall pattern still carries information.

An account followed by people you already trust is not proven honest, but it is easier to take seriously. A merchant with years of public history under one key is not guaranteed to perform, but the cost of defection is higher than for a fresh key with no record. A developer whose releases are signed by the same identity that publishes essays, receives criticism, answers bugs, and gets endorsed by other developers offers a thicker signal than a nameless download link.

The signal can also stay local. Reputation does not need to be one global score handed down by a central authority; trust is contextual, and you may trust one account as a developer and a different one as a merchant. My graph differs from yours, and that difference is a feature, not a weakness. Centralized platforms flatten trust into one badge, while market systems let trust remain distributed and plural.

There is still a cold-start problem. New entrants begin with no history, so they typically start with small trades, introductions, or domain-linked proof of who they are in some narrower context. Some lean on escrow until they build a name; others earn trust inside a local community before trying to sell to strangers. None of this is frictionless, and commerce with no gatekeepers still has filters. The filters just move from permission granted by administrators to judgment exercised by participants themselves.^6^

Negative history creates a second pressure. A seller who burns one pseudonym can open another and return as a newcomer, which leaves purely local reputation systems weak against repeat fraud. Parallel markets need enough continuity to make defection costly without turning every market identity into a universal identifier.

Zero-knowledge proofs open a partial answer to this tension, though practical deployment is still early. Persistent pseudonyms resolve the tension between anonymity and continuity by keeping the same key alive, which means everything under that key becomes linkable in exchange for a visible track record. A different compromise becomes possible when reputational claims can be separated from the specific transactions and identities that produced them. Attestation-based protocols where attesters sign statements about a user that the user later proves under zero knowledge make it conceivable to claim "I have completed at least N trades at rating at least R, with people whom you follow." or "I have been vouched for by K members of this trader cohort" without revealing which trades or which other identities are yours.^7^ These systems still depend on attesters who observe the underlying facts, so cold-start and sybil resistance do not disappear; collusion among enough attesters can still reassemble a trail. As the tooling matures, the default shape of reputation could shift: claims accumulated under pseudonyms and presented at the point of use, with each interaction revealing only the piece the transaction needs.

That movement is healthy. The state wants reputation tied to civil identity because civil identity is easy to tax and easy to coerce. A parallel economy wants reputation tied to performance. Performance is the information that trade needs.^3^

24.3 Credentials and Selective Disclosure

Reputation is soft evidence. It grows from observed behavior. Many transactions need something harder.

One buyer may need proof that the seller controls a known domain. Another user may need proof that a release came from the developer who claims authorship. In other cases the relevant fact is continuity of the same key across two channels, or proof that a newcomer was vouched for by an existing member and meets a rule that governs participation.

The state solves these problems through over-disclosure. It demands the full packet: passport, driver's license, utility bill, customer profile. The institution gets a file thick enough to do far more than the immediate transaction requires.

That is bad design.

Most transactions need a narrow fact. The verifier does not need the whole person. The verifier needs only the piece of information on which the transaction turns.^4^

Nostr already supplies one simple model. NIP-05 lets a pubkey be associated with a DNS- and HTTPS-backed identifier without asking a platform for a badge.^8^ The trust still lies in the domain and in the entity behind it, and in the web PKI serving the nostr.json file. A company can attest that a given key belongs to one of its developers. An individual can attest that a given key is the one tied to his own website. The system does not abolish trust. It narrows the trust to the specific claim.

The same logic extends farther. A known key can sign a one-time challenge and send the response through another channel, so that the verifier learns the person on the anonymous channel controls the same key whose public history he already knows. The verifier does not learn a legal name and does not need one, because the fact that matters for this interaction is continuity between a known reputational identity and the present conversation.^9^

Zero-knowledge systems push the same principle into richer credential problems. Chapter 15 already showed the general pattern. A system can prove age above a threshold without revealing birthdate. It can also prove membership or control of a credential without handing over the credential itself. For the parallel economy, this replaces bulk identity extraction with narrow proof.

The goal is selective disclosure: reveal control of the developer key, not a home address; reveal eligibility under the age rule, not a birthdate. Standing in a market community follows the same discipline: show the claim the transaction requires, not the web of relationships behind it.

Selective disclosure does not remove all risk. Credentials can become surveillance infrastructure if they are logged or centralized, especially when they become compulsory across contexts. A pseudonymous market can quietly rebuild the same dossier system it claimed to reject if every trade demands one more signed proof and each proof gets stored forever. The answer is still discipline. Reveal what the transaction needs and no more.

That rule links the cypherpunk side of the book to the praxeological side. The transaction determines the information requirement. Anything beyond that requirement is surplus extraction.

The tooling supporting this principle has reached production over the last several years. Group-membership attestations through protocols such as Semaphore have been deployed at conference-scale events for ticketing and credential presentation, with the cryptographic primitives carrying hundreds to thousands of users per deployment. Wallet-creation flows that derive a pseudonymous wallet from an existing identity-provider account, without the provider learning the derivation, are in production on at least one blockchain. Verifiable-credential standards through the World Wide Web Consortium provide a generic format in which selective-disclosure proofs can be expressed. The state-issued side of the same infrastructure is also maturing, with mobile driver's licenses based on an international standard now accepted at identity checkpoints in several countries.^10^

The book's framework insists on a qualification that the standards documents do not. A credential system that ships with selective disclosure as a feature is not the same as a credential system that is used with selective disclosure as a practice. The state-issued variants tend to use selective disclosure as a convenience (faster verification at an airport) instead of as a privacy primitive (minimal exposure in routine life), and the verifier-side incentives push toward requesting more than the transaction requires. The pseudonymous-community variants tend to use selective disclosure as intended, because the participants care about the underlying principle. The tooling is increasingly the same; the posture of the users is what determines whether the tooling protects privacy or rebuilds the dossier with extra steps.

24.4 Escrow and Simple Dispute Resolution

Some transactions do not need a court. They need a release condition.

If buyer and seller are strangers and the goods will ship later, one simple answer is escrow. Funds sit under the control of a third party until delivery is confirmed, or under a multisignature arrangement that requires agreement between the trading parties and an arbiter. The buyer no longer needs blind faith, and the seller no longer ships with no assurance of payment, so the trust surface shrinks on both sides.

Bitcoin makes these arrangements concrete. A two-of-three multisignature setup can split keys between buyer and seller, with a third key held by an arbiter. If the trade finishes smoothly, buyer and seller release the funds together. If trouble arises, the arbiter joins one side and the funds move with two signatures. No one person has unilateral control. That is already a better structure than the ordinary platform model where a company takes the money and writes the rules.^14^

Small markets often layer social practices on top of the cryptography. New counterparties trade in small size first, and sellers ship one item before asking for larger orders. Communities recommend known escrow agents whose own names are worth protecting. Repeat trade lowers uncertainty because each successful exchange becomes evidence for the next, and the accumulated evidence is itself part of what new entrants are later offered as social proof.

These mechanisms work because many disputes are simple. Sometimes the question is whether a package arrived, whether a repository shipped the promised release, whether funds cleared, or whether one side violated an agreed rule visible to both parties. In such cases, clear release conditions do much of the work.

The gain is real but should be stated with precision. Escrow and multisig do not eliminate trust; they reallocate and narrow it. The parties still trust the keys and the software, and some arrangements also require trust in an arbiter. Yet narrowed trust is often enough, because many market problems do not require perfect assurance but only a structure that makes fraud costly and honest trade easier than cheating.

Staged commitments begin to matter here as well. A funding arrangement that releases money in stages gives investors bargaining power throughout the life of the project. A buyer who can recover funds not yet released has a real position from which to negotiate. A service contract that encodes partial payment and conditional release brings discipline into the contract itself. Here the contract starts to move out of paper and into protocol. The machine does not replace judgment. It holds judgment inside a tighter frame.

24.5 Arbitration and Contested Facts

Escrow works well when the disputed fact is clean. It works less well when the conflict turns on quality disputes or evidence no script can settle.

A package may show delivered even though the buyer says the box was empty. A contractor may insist the job met the agreed spec while the client says the work is unusable. In another case the seller defends the product description or the developer claims a milestone was met, while the buyer or funders say the delivered result does not match the promise.

These are judgment problems sitting on top of the settlement layer, and settlement alone cannot solve them.

Modern courts bundle several functions at once: they collect evidence, define procedure, interpret contested facts, produce judgments, and connect those judgments to force. Much of the value in the bundle does not come from the monopoly itself. It comes from the existence of procedures, records, standing, and a forum that parties expect other parties to recognize.

A parallel economy must unbundle this stack, and some parts are already available. Reputation can punish obvious fraud and escrow can freeze funds until a ruling arrives; community standing can pressure a dishonest merchant or a corrupt arbiter into better behavior. In bounded communities, exclusion can be a severe sanction; a merchant who cheats may keep one payment and lose the next hundred, which is often enough to keep ordinary trade honest.

Harder cases remain underbuilt.

A serious arbitration system needs more than a chat room and a wallet.^11^ It needs procedures for submitting evidence and rules for weighing testimony. It also needs standards for conflicts of interest, along with some way to make precedent legible so each new dispute does not begin from zero. Participants also need reason to believe that arbiters have something to lose if they rule badly. In some contexts a posted bond may do that work. In others, repeated reputation or technical standing will carry more weight.

Merchants have long relied on private ordering and repeated dealing, often alongside municipal or state courts, to discipline trade where formal law was slow or poorly matched to the commerce at hand. Digital networks change the scale and the tooling without changing the underlying problem, which is that trade among strangers still needs a way to handle breach. One contemporary response is to codify an explicit libertarian private-law baseline that voluntary adopters can reference in their contracts and arbitration clauses, supplying the shared legal starting point that the unbundled layer still lacks.^12^

This layer remains immature.

There are experiments with bonded arbiters and community juries, along with a range of protocol-governed mechanisms.^15^ Some work for narrow cases. None yet carries the legitimacy or procedural maturity of a court system backed by long practice. That gap should not be hidden. The parallel economy has solved settlement more cleanly than it has solved adjudication.

Yet the direction is clear. Courts are institutions, and institutions can compete, specialize, fail, improve, and split into narrower services. The parallel economy has not built a full private-law order. The relevant question is whether the pieces needed for one can emerge from repeated exchange under reputational pressure and cryptographic control of funds. They can.

24.6 Merchant Discovery and Institutional Emergence

Markets do not appear because someone declares them open. Markets appear when people find each other and trade again.

That is why the institutional layer is larger than escrow and arbitration. It includes discovery.

A merchant with a good product is useless to the buyer who cannot find him. The same holds for a skilled developer whose release cannot be distinguished from a counterfeit, or for a fair arbiter unknown to the parties who need him. A market grows when the paths between these roles become cheap and legible.

Nostr helps here because one identity can carry across several contexts at once. The same key that posts notes can sign software releases, publish marketplace listings, receive payments, answer questions, and show a long public history of conduct. A buyer does not inspect one isolated listing and decide in a vacuum. The buyer can inspect the whole trail: who follows this seller and how long the key has been publishing, and whether complaints were handled in public view or answered with silence.

The result is thickness. A thick market preserves information about conduct across time and raises the cost of losing standing as repeated exchange grows denser. It also lets counterparties compare alternatives. A thin market sends the participants back to zero after each failure.

That thickening happens through repeated contact. Meetups, workshops, merchant circles, private group chats, bug reports, escrow recommendations, and signed listings all contribute. Digital and physical institutions reinforce each other. A merchant you met in person is easier to trust online. A developer whose code you used for two years is easier to trust when he begins selling hardware. A local Bitcoin meetup that turns into recurring trade stops being a social event and becomes infrastructure.

Proxy Merchants and Bridge Roles

Markets also thicken by specialization. One of the most useful roles at the edge of a parallel economy is the proxy merchant: a person or small firm that interfaces with the exposed side of the economy so other participants can stay off that boundary. Sometimes the role is an OTC exchanger moving between bitcoin and local currency. Sometimes it is a purchasing agent who buys from legacy-facing suppliers on behalf of a counterparty who wants to keep his name and address off the order, or the operator of pickup points and forwarding routes that keep buyer and seller from meeting directly. The function stays the same. The arrangement concentrates exposure in a chosen specialist who prices the risk and builds a reputation for handling it well.^13^

These roles narrow trust and put a price on it. They also create a familiar danger, because a bridge used by everyone becomes a bridge watched by everyone. The institutional answer is the same one the chapter has already given for escrow and arbitration: plurality and easy replacement. A healthy parallel market keeps many proxy merchants and related bridge services in play so that no single operator becomes a bottleneck.

The phrase parallel economy means what it says: a second set of rails on which communication, payment, reputation, discovery, and trade can run. These rails may exist inside the same city and on the same streets as the old system, and they remain distinct when trade and information flows no longer depend on state-controlled intermediaries.

Institutional emergence follows use. No committee can draft the full order in advance. Merchants with good dispute practices get more business, and escrow providers who handle conflicts fairly get repeat demand. Marketplaces with better search and better spam resistance win users, while meetups that consistently bring serious traders together become nodes of economic value. Over time these practices harden into norms, and norms harden into institutions.

That process is slower than deploying software. It is also how markets have always grown.

24.7 Present Limits and Honest Boundaries

The institutional layer is still being built.

Reputation creates one obvious danger. The same continuity that lets others trust you also lets others track you: pseudonymity is workable because it carries history, and that same history can expose patterns and counterparties to anyone who watches long enough. A merchant may want one reputation for public commerce and a different one for sensitive trade, and a developer may want one identity for software and another for political writing. Identity separation remains hard in practice, because success creates the visibility it was meant to avoid.

Escrow creates another danger. The trusted third party may be narrower and less invasive than a state-regulated platform, but it can still become a chokepoint: an escrow agent with enough volume attracts coercion, and a well-known arbiter can be leaned on or made into a bottleneck for the commerce flowing through them. Decentralization lowers these risks without erasing them.

Physical goods remain difficult. Cryptography protects messages, but it does not hide the destination printed on a package or the schedule on which a courier arrives. Local pickup, lockers, drop points, and forwarding services reduce exposure in some cases, though none of them gives matter the freedom Tor gives packets. Digital commerce can become private faster than physical commerce ever will.

Adjudication is still thinner than settlement. Fund movement under pseudonymous arrangements already outperforms ordinary finance on trust minimization; complex dispute resolution has not yet reached comparable maturity. That gap is real.

Another gap waits beyond it. Money moves value through space, while credit moves value through time. A market that handles spot trade still needs ways to finance production and inventory. Bills of exchange, trade credit, bonded lending, and other forms of commercial trust belong to the next layer of buildout, and the tools for payment and communication have outrun the institutions for financing ongoing enterprise.

These limits do not weaken the argument of the book. They give it shape.

The architecture exists for people to start moving economic life outside systems built for observation and control. The tools are here. The first institutions have appeared, and the remaining gaps are visible enough to work on.

That is enough to proceed with bounded trade and institutional experimentation.

The next chapter returns to the book's largest claim. What happens when these tools and institutions stop being isolated practices and begin to compound into a real economy?

Chapter Summary

Tools solve transport and settlement; they do not settle reliability or the judgment problems that arise when strangers trade under pseudonyms. A parallel economy needs institutional structure alongside its technical stack, and reputation under pseudonymity is the starting point. Persistent pseudonyms can accumulate trust while refusing civil identity, and the cost of abandoning accumulated reputation disciplines behavior. The tension is that the same continuity that enables trust also enables tracking. No deployed system maximizes both reputation and unlinkability at once, and reputation systems can reconcentrate into dossier infrastructure if every trade demands signed proof and each proof gets stored permanently. The discipline required is selective disclosure: reveal what the transaction needs and no more. Zero-knowledge credentials and attestation-based reputation protocols, still immature, open the prospect of separating reputational claims from the specific transactions and identities that produced them.

Escrow, multisignature arrangements, staged commitments, and release conditions make fraud costly and honest trade easier for most bounded disputes. These mechanisms reallocate trust instead of removing it: the parties still trust the keys and the software, and some arrangements also require trust in an arbiter, but narrow trust is often enough. Harder cases involving contested quality or ambiguous performance require arbitration structures that remain immature relative to state courts. The parallel economy has solved settlement more cleanly than it has solved adjudication, and private arbitration has not reached the procedural depth long practice builds. Institutional emergence follows use: merchants with good dispute practices attract repeat business, and meetups that bring serious traders together become economic infrastructure.

Proxy merchants belong to the same pattern. Exchangers and forwarding operators emerge because they solve a real bottleneck at the edge of the market, and they remain healthy only while their role stays competitive and replaceable.

The institutional layer is not complete. Credit and trade finance remain largely unbuilt for pseudonymous commerce, and the tools for payment and communication have outrun the institutions for financing ongoing enterprise. Physical goods remain constrained by the anonymity gap that digital tools cannot bridge. These limits give the project shape without undermining its direction. The architecture exists for bounded trade and institutional experimentation to proceed, and Chapter 25 returns to the larger question of what happens when these practices compound.

Endnotes

^1^ Timothy C. May, The Cyphernomicon (September 10, 1994), the comprehensive FAQ document May circulated on the Cypherpunks mailing list covering cryptography, anonymity, digital cash, and the political implications of strong encryption, https://nakamotoinstitute.org/library/cyphernomicon/. The epigraph is drawn from section 12.3. For the shorter programmatic statements, see May, "The Crypto Anarchist Manifesto" (1988), https://nakamotoinstitute.org/library/crypto-anarchist-manifesto/, and "Crypto Anarchy and Virtual Communities" (1994), https://nakamotoinstitute.org/library/virtual-communities/.

^2^ For readers who want to work through the literature on private institutions and polycentric governance, Elinor Ostrom, Governing the Commons (Cambridge, 1990) is the canonical empirical study of self-organized institutions solving coordination problems without state enforcement. Bruce Benson, The Enterprise of Law (Pacific Research Institute, 1990) and The Law in To Serve and Protect (NYU Press, 1998) cover historical examples of private law and private policing. Edward Stringham, Private Governance (Oxford, 2015) applies the same approach to modern financial and online systems. For the theoretical side, David Friedman, The Machinery of Freedom, 3rd ed. (2014) is the most readable case for polycentric law; Tom W. Bell, Your Next Government? (Cambridge, 2017) covers contemporary jurisdictional innovation. On reputation and commerce under weak enforcement, Paul Milgrom, Douglass North, and Barry Weingast, "The Role of Institutions in the Revival of Trade: The Law Merchant, Private Judges, and the Champagne Fairs," Economics and Politics 2, no. 1 (1990) is the key paper. For the longer civilizational framing, James Dale Davidson and William Rees-Mogg, The Sovereign Individual (1997), though dated in detail, remains the most ambitious attempt to describe the institutional implications of strong cryptography.

^3^ The framework Chapter 6 develops rules out reputation as a property entitlement. What May, Hughes, and Szabo each name is the empirical role reputation plays in anonymous business: counterparties form decisions based on signed attestations and consistent behavior over time, not on any property right in being well-thought-of. The reputation systems this chapter describes carry empirical signals; they do not implement ownership claims over what others believe. See Chapter 6, §6.5; Chapter 21, §21.5; and Stephan Kinsella, "Defamation as a Type of Intellectual Property," in A Life in Liberty (Mises Institute, 2024).

^4^ Eric Hughes, "A Cypherpunk's Manifesto" (1993), https://www.activism.net/cypherpunk/manifesto.html: "Since we desire privacy, we must ensure that each party to a transaction have knowledge only of that which is directly necessary for that transaction."

^5^ Nick Szabo, "Formalizing and Securing Relationships on Public Networks" (1997), https://nakamotoinstitute.org/library/formalizing-securing-relationships/. Szabo identifies search, negotiation, commitment, performance, and adjudication as the phases that smart contracts and digital institutions must address.

^6^ Nick Szabo, "Negative Reputations" (1996), https://nakamotoinstitute.org/library/negative-reputations/. Szabo isolates the tension the main text describes: local nyms preserve privity, but once a pseudonym accumulates too much negative information it can be discarded for a fresh one unless counterparties demand stronger continuity or non-negative credentials.

^7^ Jan Camenisch and Anna Lysyanskaya, "An Efficient System for Non-Transferable Anonymous Credentials with Optional Anonymity Revocation," EUROCRYPT 2001, is the foundational paper for anonymous credentials; BBS+ signatures and the W3C Verifiable Credentials standard carry the idea into more recent practice. Semaphore, maintained by Ethereum Privacy and Scaling Explorations (https://semaphore.pse.dev), provides anonymous group-membership proofs suitable for anti-sybil signaling and has been used in projects including Zupass, Worldcoin, and Bandada. UniRep (https://developer.unirep.io) is an attestation-based protocol specifically targeting reputation: attesters sign statements about a user, the user later proves aggregate properties under zero knowledge, and linkability between the proof and the underlying attestation history is broken. These systems remain research-grade or early production, not yet deployed marketplace infrastructure, but the primitives are established.

^8^ Nostr Improvement Proposal 05 (Mapping Nostr keys to DNS-based internet identifiers) defines the DNS- and HTTPS-backed identifier mapping used for human-readable Nostr names, https://github.com/nostr-protocol/nips/blob/master/05.md.

^9^ Nostr already contains protocol pieces useful for challenge-response proof of key control. NIP-42 standardizes relay authentication challenges (https://github.com/nostr-protocol/nips/blob/master/42.md), while NIP-59 defines gift wrapping: a three-layer scheme of rumor, seal, and gift wrap that obscures message metadata including sender, recipient, and timestamp (https://github.com/nostr-protocol/nips/blob/master/59.md). NIP-59 provides privacy for message routing but is not identity proof by itself.

^10^ Selective-disclosure tooling has reached production scale on both community and state sides: Semaphore and Zupass at conference-scale events, zkLogin for OAuth-derived wallets on Sui, W3C Verifiable Credentials as the generic format, ISO/IEC 18013-5 mobile driver's licenses in several countries; whether the tooling delivers the privacy it encodes depends on verifier-side posture, not protocol feature set. Semaphore, https://semaphore.pse.dev/. Zupass, https://zupass.org/. zkLogin on Sui, https://docs.sui.io/concepts/cryptography/zklogin. W3C Verifiable Credentials Data Model, https://www.w3.org/TR/vc-data-model/. ISO/IEC 18013-5:2021, "Personal identification, ISO-compliant driving licence, Part 5: Mobile driving licence (mDL) application," https://www.iso.org/standard/69084.html. Apple Wallet driver's license support and state rollout at https://support.apple.com/guide/wallet/use-your-drivers-license-or-state-id-apd1b8b6b87e/web. EU Digital Identity Wallet reference implementation at https://github.com/eu-digital-identity-wallet. On the verifier-side incentive problem, see Center for Democracy & Technology, "The Limits of Zero-Knowledge Proofs as a Privacy Solution," https://cdt.org/.

^11^ Nick Szabo, "Rights, Remedies, and Security Models" (2004), https://nakamotoinstitute.org/library/rights-remedies-and-security-models/. Szabo's point is that digital systems can enforce only a narrow subset of what courts handle in the full range of disputes, because computer security relies on self-enforcing mechanisms and logs while law relies on remedies, procedure, and force behind judgment. That distinction is the one this section is drawing.

^12^ Stephan Kinsella, Alessandro Fusillo, David Dürr, and Patrick C. Tinsley (Hans-Hermann Hoppe, adviser), The Universal Principles of Liberty (August 14, 2025), https://stephankinsella.com/principles/, is one such effort. It articulates a systematic libertarian private-law baseline including non-aggression, self-ownership, original appropriation, voluntary exchange, and rectification, alongside an Article IV on "Decentralised Legal Order" that explicitly endorses competitive arbitration and customary evolution of law without coercive monopoly. The Scope and Hierarchy section is explicit that adopters may build Secondary Codes and Laws on this baseline, with disputes over incompatibilities resolved by impartial arbitration. The document was itself inscribed on the Bitcoin blockchain, which illustrates how cryptographic rails can carry the institutional artifacts a parallel economy depends on.

^13^ On proxy merchants and adjacent boundary roles, see Smuggler and XYZ, Second Realm: Book on Strategy (Liberty Under Attack Publications, 2015), especially the sections on specialization, proxy merchants, shared services, and OTC exchangers. For the earlier transition logic behind the same move, see Samuel Edward Konkin III, New Libertarian Manifesto (1980). These sources are useful here because they name a real institutional function that the cryptographic stack alone does not name.

^14^ Satoshi Nakamoto, "Bitcoin: A Peer-to-Peer Electronic Cash System" (2008), https://bitcoin.org/bitcoin.pdf. Section 4 describes the chain of digital signatures that constitutes ownership in the Bitcoin protocol; the multisignature extension - enabling M-of-N key arrangements - was introduced via the OP_CHECKMULTISIG opcode in the original codebase and later standardized in P2SH (BIP 16, January 2012) and P2WSH (BIP 141, November 2015). For the BIP 16 specification, see https://github.com/bitcoin/bips/blob/master/bip-0016.mediawiki. For BIP 141, see https://github.com/bitcoin/bips/blob/master/bip-0141.mediawiki. The two-of-three arrangement described in the main text is the structure Bisq uses for its escrow mechanism: https://bisq.network/faq.

^15^ Kleros is the most widely deployed protocol-governed dispute resolution system: an Ethereum-based system in which disputes are submitted on-chain, jurors staked in PNK tokens are selected by Schelling-point coordination, and decisions are enforced through smart-contract fund release. Kleros, https://kleros.io; technical whitepaper: Clément Lesaege and Federico Ast, "Kleros: Short Paper v1.0.7," https://kleros.io/whitepaper.pdf. For the Aragon Court variant (now Aragon Govern), see https://aragon.org. An academic treatment of the Schelling-point coordination mechanism underlying token-curated juror selection is Thomas Schelling, The Strategy of Conflict (Harvard University Press, 1960), chapter 3. These systems handle narrow on-chain disputes reliably; their procedural depth for complex off-chain fact disputes remains limited by the jury's inability to inspect evidence outside what is submitted on-chain.

^16^ On credit, trade finance, and the capital structure of production in a free market, see Murray N. Rothbard, Man, Economy, and State, 2nd ed. (Ludwig von Mises Institute, 2004), chapters 5–6, which analyze capital goods, stages of production, and the time-preference theory of interest without which credit cannot be understood. Jesús Huerta de Soto, Money, Bank Credit, and Economic Cycles, 3rd English ed. (Ludwig von Mises Institute, 2012), traces the historical development of credit instruments including bills of exchange and the institutional conditions under which commercial trust makes production financing possible. The gap identified at the end of §24.7 - that payment and communication tools have outrun the institutions for financing ongoing enterprise - maps precisely onto the distinction Rothbard draws between the money relation and the credit relation: money moves purchasing power through space, credit through time, and the institutional prerequisites for each are different.

<- Previous: Implementation Strategy | naddr1qq…65e3 -> Next: Building the Parallel Economy | naddr1qq…ap0r

The Praxeology of Privacy -- third edition. New chapters publish daily at 1600 UTC.

I’m still gonna punch you for forgetting to set the env vars.

2026-06-05T15:55:15Z

In reply to nevent1q…0pmp
_________________________

I’m still gonna punch you for forgetting to set the env vars.

Nostr event nevent1qqsf8gy0hpt36djj2r2q7syamtrrr407k6g0hpxljk53r6r2spmgp4spxdmhxue69uhh2uewv9a85ctdduhxuet59a5kuar9de6r5atn9esh57npd4hjumn9wshkz7n6v9kk7tnwv46qygxrsn0y9s8x38p55zh048q2u5tqj0fa2r9qyfhakqg5xhyyjwfz4g5en3sj

2026-06-05T15:44:05Z

mic check

Time for those kids to start pulling their weight!

2026-06-05T15:41:19Z

In reply to nevent1q…haf3
_________________________

Time for those kids to start pulling their weight!