System Architecture

13 contracts across four layers. Each layer has a single responsibility. Value flows inward, governance ratchets upward, nothing flows back.

Contract Layers

Core

Bridge, UCU token, supply control, and compute distribution

UCUToken
ERC-20 Unified Compute Unit — the native gas token of SVRN Chain.
OneWayBridge
L1 deposit-only bridge.
Bonfire
Revenue overflow burn mechanism adapted from EIP-1559.
UBCDistributor
Universal Basic Compute allocation.

Identity

Citizenship, sovereignty scoring, and support classes

CitizenRegistry
Biometric-verified citizenship.
SovereigntyIndex
Measures patron-serving vs sovereign behavior.
SupportClasses
Five built-in support classes (Builder, Creator, Educator, Researcher, Operator) with structured patronage distribution using configurable share weights.

Governance

Quadratic voting, conviction weighting, and constitutional limits

QuadraticVoting
sqrt(stake) voting power.
ConvictionWeighting
Time-weighted conviction multiplier: weight = power * (1 + ln(1 + days/30)).
ConstitutionalGuard
Ratchet principle enforcement.
Governor
Full proposal lifecycle with 7-day minimum voting period and 2-day execution delay.

Oracle

Compute basket pricing and creator grant verification

ComputeBasketOracle
Multi-oracle median consensus for the compute basket price.
CreatorGrantOracle
Log-quadratic grant curve verification: G(n) = 10^(-0.

Token Flow

UCU lifecycle from L1 deposit to burn. Every token enters through the bridge and either circulates or gets burned. None leave.

L1 USDC / ETH
Ethereum Mainnet
depositUSDC() / depositETH()
▼
OneWayBridge
Converts at basket rate
mint()
▼
UCU on SVRN L2
Native gas token
enrollCitizen()
▼
UBCDistributor
Universal Basic Compute
finalizeEpoch()
▼
Bonfire
Surplus burn (permanent)
L1 USDC → Bridge → UCU on L2 → UBC Distribution → Bonfire Burn

Contract Dependencies

Which contracts reference which. The dependency tree flows from Governor at the top down to the leaf contracts with no dependencies.

Governor→
ConstitutionalGuardQuadraticVotingConvictionWeighting
ConvictionWeighting→
QuadraticVoting
QuadraticVoting→
UCUToken
UBCDistributor→
UCUTokenCitizenRegistry
Bonfire→
UCUToken
OneWayBridge→
ComputeBasketOracle
SupportClasses→
UCUToken
Leaf contracts (no dependencies):
SovereigntyIndexCitizenRegistryComputeBasketOracleCreatorGrantOracleUCUToken

One-Way Design

Why no withdraw()?

The bridge has no withdraw() function. Not disabled, not paused, not behind a flag. It was never written. This is a deliberate architectural decision, not a missing feature.

Economic Irreversibility

UCU is a compute unit, not a speculative asset. Once USDC enters the SVRN economy, it becomes compute capacity. Reversing that would undermine the entire pricing model tied to the compute basket.

L2ToL1MessagePasser

The standard OP Stack L2ToL1MessagePasser at 0x4200...0016 is replaced with a contract that reverts unconditionally on initiateWithdrawal().

Deflationary Pressure

With no exit, value that enters must circulate or burn. The Bonfire mechanism permanently destroys surplus UCU each epoch, creating natural deflation as the economy grows.