1Executive premise
The global financial system still settles through correspondent banking, batch windows, and checks that arrive after the money has moved. JIL L1 is a permissioned settlement layer for nations, commodity desks, institutions, and other approved operators.
Each sovereign domain keeps its own books, its own rules, and its own counterparties. JIL does not set the sovereign's rate, does not custody the sovereign's banking, and does not replace that operator's domestic policy. JIL is not a lender and is not a central bank.
177 patent claims (filed, patent pending). ~2.8M lines of source. 350+ services. 332 platform checks. 9 trademarks (filed).
2How a domain is shaped
Depth is sovereign, hub, annex. A sovereign is the root. A hub sits one level inside it. An annex is a leaf and contains nothing under it.
A new hub under a hub is rejected. Depth is sovereign, hub, annex. The row is not written. The corridor credential stays on the root sovereign, and only after go-live. A hub or an annex cannot send on the corridor. Hubs and annexes cannot bypass their sovereign to trade externally.
Up to 10 hubs are included. A hub past that is $25,000 a year on the sovereign. That is not a second license. The hub's own license stays $0. An annex license is $0. A parent cannot mark a child paid.
3How value moves
Movement inside a hub is 0 basis points. The path runs hub, spoke, and multi-spoke, and it stays on the sovereign's book.
A cross-corridor hop has four steps. Escrow holds the gross and the fee. Verify checks origin proof, identity, the refusal list, and the cross-rate against local bands. Finalize requires dual-signed finality. The receipt is the record.
A settled hop on the L1 corridor is 5 basis points of settled gross, paid by the initiating sovereign. The fee is escrowed with the gross and routed to the network treasury on finality. A denied trade releases the escrow and settles no fee.
4Why JIL.ai Gas exists
The gas valve is not a cryptocurrency gimmick. It is the economic and cryptographic control that prevents global settlement capacity from becoming unlimited, unauditable, or controlled by administrative discretion.
JIL Sovereign L1 separates two activities. Inside a sovereign tree, institutions move value under their own rules without paying a federation toll. Crossing from one sovereign domain to another is different: that movement consumes shared network trust, validation, evidence, and finality. JIL.ai meters that shared cross-corridor capacity in a way that is scarce, transparent, and independently provable.
JIL.ai is the key that starts an approved international corridor. It does not become the money being sent. It does not buy a sovereign license. It does not override compliance. It proves that authorized federation capacity has been committed for the transaction to proceed.
5Scarcity without destroying principal
JIL.ai is designed so network utility creates economic value without requiring the protocol to consume the holder's principal.
A holder locks JIL.ai for one settlement epoch and signs a capacity authorization (Key A). The federation meter countersigns the same epoch, scope, capacity, and fee split (Key B). Once both signatures are present, the protocol derives authorization units from the locked JIL.ai. Those authorization units are what a corridor consumes. The JIL.ai principal itself is not burned by ignition.
Supply follows a strict usage-driven model: hard cap of 10,000,000,000 units. Genesis issuance is 250,000,000 units. Remaining supply begins locked in reserve. Later blocks unlock one at a time only when the published 70% utilization gate across three consecutive epochs is satisfied. There is no administrative unlock path.
6Class A and Class B gas scopes
The two gas classes define how broadly a unit of JIL.ai may ignite corridors:
- Class A Gas: Federation-scoped capacity. It can be presented on any sovereign root corridor that independently passes ATCE, sanctions inputs, identity controls, and destination arrival policy.
- Class B Gas: Constrained capacity bound to one Tier 3 root plus an immutable allowlist that names permitted peer roots, asset classes, and jurisdiction tags.
Scope cannot be stripped away. Class B scope is enforced at the hop. If a transfer omits the certificate or presents a Class B valve outside its permitted perimeter, the hop fails closed with INV-GAS-SCOPE.
7Fail-closed corridor mechanics
The gas valve does not approve the trade. It proves that the federation has live capacity to process the trade. The transaction must still survive every other rule in the settlement path.
If the meter is unavailable, times out, or cannot produce a known verdict, the corridor does not settle. Missing or insufficient gas returns INV-GAS-VALVE. Out-of-scope use returns INV-GAS-SCOPE. Presenting JIL.ai as the transferred asset returns INV-GAS-ASSET. A nested hub attempting corridor.send returns INV-COR-HUB-ONLY. A single lessor attempting to sign more than 25% of epoch capacity returns INV-GAS-CAP. The system treats uncertainty as refusal.
The complete architectural specification for corridor valve capacity, daily lease mechanics, and commodity sovereign settlement (October 7, 2026). Explains the door between sites, the fuel can, the day it is lent, and the mathematical formulas governing holder returns and epoch capacity.
Download the Corridor, Valve & Lease Complete Specification (PDF) →
Gas blocks, valve leasing, and lessor settlement are managed via the sovereign wallet at wallet.getjil.com (purchasing blocks, assigning vested tokens, releasing blocks, and receiving dollar toll payouts).
8Identity before corridor keys
Every sovereign operator and every hub operator completes KYB and KYC, with biometrics where the jurisdiction requires them, before corridor keys are issued. Onfido is supported where the jurisdiction and the commercial configuration allow it. JIL stores that record.
A high velocity of severe compliance denials can suspend corridor keys. Reinstatement is an out-of-band identity check and a new key ceremony. The public showcase records identity before a corridor credential. It does not simulate that suspension.
9Evidence and finality
A receipt is not reversed in place. A correction is a new hop. CREB TM is the evidence bundle. CourtChain TM carries the record. The design supports a discussion under FRE 902(14). Admission is a decision for the court. The signature suite can move forward without rewriting history.
Agreement recorded on the showcase is 10 of 10 responding validators, all operated by JIL. The seals on that showcase use the suite shape ed25519+ml-dsa-65. They are showcase seals.
10The license
The commercial license is Class A or Class B. The figures below are the license. They are the same figures on the public showcase.
| Class | Who it is for | Joining fee | Annual maintenance |
|---|---|---|---|
| Class A | Global commodities and tier 1 nations | $2,500,000 | $400,000 |
| Class B | Regional hubs and philanthropic desks | $1,500,000 | $250,000 |
| Additional hubs | First 10 included. The seat is billed to the sovereign. | $0 | $25,000 a year on the sovereign |
| Annex | A leaf under a hub or under the sovereign | $0 | $0 |
| Movement | Fee |
|---|---|
| Inside a hub | 0 basis points |
| Settled L1 corridor hop | 5 basis points of settled gross, paid by the initiating sovereign |
| Denied trade | Escrow released. Settled fee is zero. |
Class B is the license for a regional hub or a philanthropic desk. The public worked example of Class B is the India banking sovereign. That example is not a purchase by the Reserve Bank of India or by any bank named on the page.
11Planning assumptions
The paper states a planning model. The $45 million figure is a four-year commercial scale-out and geographic infrastructure expansion program. It is separate from a software development budget. The same model names a $7.5 million baseline hardware deployment, an operational run rate that stabilizes near $3.5 million a year, and about $27 million of revenue over five years in a five-site commercial deployment. The model reaches cash-flow positive operations in year 5.
These figures are forward-looking operating assumptions. They are not guarantees, and they are not the license price.
12The worked example
The live worked example is https://jilsovereign.net/demo. Class A on that page is the UAE site. Class B is the India banking sovereign and twenty-four annex banks. Gold and Oil are annexes under the UAE site. None of those names is a purchase.
The PDF cover prints https://demo.jilsovereign.net. That host opens this same worked example.
The retail wallet is at getjil.com (and wallet.getjil.com for JIL.ai fuel cans, gas blocks, and corridor valve leasing). On the default service key, signing reconstructs the secret on the server. A user-held shard is not the live path.