Proof of Community Protocol — v3.0
Abstract
Proof of Community (PoC) is a consensus mechanism for blockchain token launches that makes pre-mines, insider allocations, whale manipulation, and rug pulls structurally impossible. Unlike traditional launch models that rely on team promises of fairness, PoC enforces fairness through mechanism design — tokens are only created when purchased, supply locks permanently when the community reaches critical mass, and anti-whale protections are embedded at the protocol level. PoC is deployed first on Solana and designed to be adopted by any project seeking a verifiably fair token launch.
1. Introduction
1.1 The Problem
Every token launch in crypto history has shared the same fundamental flaw: the rules can be broken by the people who wrote them.
Pre-mines allow teams to allocate 10–30% of supply to insiders before anyone else can participate. Whale wallets accumulate majority positions and dump on retail holders. Developers drain liquidity pools and disappear. Even projects with good intentions operate on trust — and trust, in an adversarial economic environment, is not a mechanism. It is a vulnerability.
The numbers confirm this. Over 99% of tokens launched on platforms like pump.fun fail to reach sustained trading. The majority of memecoins experience rug pulls or coordinated dumps within days of launch. Billions of dollars in community capital have been extracted through mechanisms that are technically legal but structurally predatory.
The problem is not bad actors. The problem is that every existing launch model permits bad actors to extract value. The architecture allows it.
1.2 Existing Solutions and Their Failures
Fair launch platforms (pump.fun, fair.xyz) remove pre-mines but do nothing to prevent whale accumulation, coordinated dumps, or liquidity extraction. They solve one symptom while leaving the disease intact.
Vesting schedules delay insider selling but do not prevent it. They create predictable dump events that sophisticated traders front-run, transferring value from retail to professionals.
DAO governance gives token holders voting power but typically activates after the damage is done. Governance cannot retroactively fix a concentrated token distribution.
Liquidity locks prevent rug pulls for a defined period but create a countdown clock. The community knows the lock will expire. The team knows it too.
None of these solutions address the root cause: the structure of the launch permits extraction. To fix the outcome, you must fix the structure.
1.3 The PoC Approach
Proof of Community inverts the model. Instead of launching a token and hoping the community shows up, PoC makes the community the mechanism through which the token achieves its final state.
Three core principles:
- No token exists until someone buys it. Supply starts at zero. Every token in circulation was purchased at fair market price through a bonding curve. There is no allocation, no pre-mine, no team supply, no investor round.
- The community locks the supply. When the number of verified unique holders reaches a protocol-defined threshold, the mint authority is permanently burned. No more tokens can ever be created. The community's growth is the consensus mechanism.
- Anti-extraction is enforced by code. Maximum wallet caps, graduated sell taxes, and transfer tracking are embedded in the smart contract. They cannot be changed, bypassed, or turned off.
The result is a token where the rules are not promises — they are physics.
2. Core Mechanism
2.1 Demand-Driven Minting
In a PoC launch, the initial token supply is zero. There is no genesis mint, no team allocation, no seed round, no airdrop reserve. The mint function is bound to the bonding curve contract: tokens are created exclusively when a buyer sends SOL to the curve.
When a buyer purchases:
- SOL is sent to the bonding curve program
- The program calculates the token amount based on the current price point on the curve
- New tokens are minted directly to the buyer's wallet
- The SOL is split according to the fee structure (Section 4.1)
When a seller sells:
- Tokens are sent back to the bonding curve program
- The program calculates the SOL return based on the current price point
- SOL is returned to the seller (minus applicable fees)
- The returned tokens are burned
This creates a symmetric model: buying mints, selling burns. The supply is always exactly equal to the net demand. There is no float, no unclaimed supply, no treasury tokens, no locked allocations waiting to unlock.
2.2 Bonding Curve Design
The bonding curve defines the relationship between token supply and price. PoC uses a polynomial bonding curve:
Where:
- S = current circulating supply
- P₀ = initial price (base price at supply = 0)
- K = scaling constant (controls how quickly price rises with supply)
- n = curvature exponent (controls the steepness of the curve)
Default parameters for a PoC launch:
| Parameter | Default Value | Purpose |
|---|---|---|
| P₀ | 0.000001 SOL | Low entry price for early participants |
| K | 1,000,000 | Supply scaling factor |
| n | 1.5 | Moderate curve steepness |
Why this curve shape:
- Low n (1.0–1.5): Gentle growth. Early buyers get a price advantage, but not an exploitative one. A 10x increase in supply produces roughly a 30x increase in price at n=1.5.
- High K: A large scaling constant keeps prices from spiking too quickly at low supply levels, making early participation accessible.
- P₀ > 0: A non-zero base price prevents dust attacks where adversaries mint millions of tokens for negligible cost.
Cost to buy tokens (integral of the price curve):
This is computed on-chain using fixed-point arithmetic to avoid floating-point precision issues.
Curve behavior by phase:
| Supply Range | Price Behavior | Market Dynamic |
|---|---|---|
| 0 – 100K | Gradual rise | Discovery phase, accessible entry |
| 100K – 1M | Moderate acceleration | Community formation, organic growth |
| 1M – 5M | Steeper growth | Critical mass, supply approaching lock |
| Post-lock | Curve disabled | Free market on DEX (see Section 2.4) |
2.3 Supply Lock Mechanism
The supply lock is the defining event of a PoC token. When the number of verified unique holders reaches the protocol-defined threshold (default: 5,000 verified holders at Tier 3), the following sequence executes atomically in a single transaction:
- Mint authority is burned. The program's mint authority PDA is permanently invalidated. No new tokens can ever be minted. This is irreversible.
- Remaining bonding curve SOL migrates to a DEX liquidity pool. The SOL held in the bonding curve treasury is paired with a proportional amount of tokens to seed an AMM pool on a Solana DEX.
- Liquidity pool tokens are burned. The LP tokens are sent to a burn address, making the liquidity permanent and irremovable.
- The bonding curve is disabled. All trading moves to the open market.
- Sell tax schedule begins winding down. The graduated sell tax begins its reduction schedule, reaching 0% after 30 days.
Why holder count and not market cap or time?
Market cap can be manipulated by a single whale. Time-based locks are arbitrary and don't reflect actual community formation. Holder count — when properly verified against Sybil attacks (Section 5.1) — is the closest on-chain proxy for genuine community formation.
2.4 Post-Lock Dynamics
- Fixed supply. The token becomes deflationary by default. Any tokens sent to burn addresses reduce the circulating supply permanently.
- Free market pricing. Price is determined by DEX AMM dynamics, not the bonding curve.
- Sell tax wind-down. The graduated sell tax reduces to 0% over 30 days post-lock.
- Governance activation. Full community governance activates at Tier 3 (Section 7.3).
3. Tiered Milestone System
The path from launch to supply lock is structured into three tiers. Each tier unlocks protocol features, triggers community events, and progressively decentralizes control.
3.1 Tier 1 — Early Traction (500 Verified Holders)
What unlocks:
- Community dashboard goes live (holder count, supply, treasury balance publicly visible)
- First treasury disbursement authorized (up to 10% of accumulated treasury)
- Community proposal system activates (non-binding signal votes)
- Anti-whale max wallet increases from 1.5% to 2% of supply
3.2 Tier 2 — Community Formation (1,500 Verified Holders)
What unlocks:
- Hybrid governance activates: community votes on treasury proposals (team retains veto for 90-day transition)
- Treasury disbursement limit increases to 25% per quarter
- Sell tax schedule begins first reduction
- Governance council formation (elected community representatives)
3.3 Tier 3 — Critical Mass (5,000 Verified Holders)
What unlocks:
- Supply lock executes (see Section 2.3)
- Full community governance — team veto is removed
- Upgrade authority is burned (smart contract becomes fully immutable)
- All remaining treasury transitions to community-controlled multisig
- Sell tax begins 30-day wind-down to 0%
- Liquidity migration to DEX with permanent LP burn
Tier 3 is the end state. The protocol is fully decentralized, the supply is permanently fixed, and the community has full control. The token exists as a community-owned, immutable asset.
3.4 Fallback Mechanisms
| Scenario | Fallback | Timeline |
|---|---|---|
| Tier 1 not reached within 6 months | Community vote: continue, reduce threshold 20%, or wind-down | After 6 months |
| Tier 2 not reached within 12 months of Tier 1 | Same options, with treasury protection | After 12 months |
| Tier 3 not reached within 18 months of Tier 2 | Extended timeline or threshold reduction (max 30%) | After 18 months |
Graceful wind-down: If the community votes to wind down, the bonding curve remains active. Holders can sell back at the current price. Treasury funds are distributed proportionally. Exit is always possible.
Threshold reduction limits: Tiers can be reduced by a maximum of 30% through governance (e.g., Tier 3 from 5,000 to 3,500 minimum).
4. Economic Model
4.1 Fee Structure
Buy fee: 3%
| Allocation | Percentage | Destination |
|---|---|---|
| Liquidity pool | 40% (1.2%) | Bonding curve reserve / post-lock LP |
| Holder rewards | 40% (1.2%) | Proportional distribution to registered holders |
| Treasury | 20% (0.6%) | Protocol treasury multisig |
Sell fee: Variable (see Section 5.3)
Base sell fee is 5%, with the same 40/40/20 split. The graduated sell tax (up to 25% for immediate flips) is additional and goes entirely to the holder rewards pool.
4.2 Treasury Mechanics
Structure: 2-of-3 multisig wallet with 48-hour timelock on all disbursements.
Transition to community control:
- Pre-Tier 1: Team controls treasury (2-of-3, all team signers)
- Tier 1: One signer replaced by elected community representative
- Tier 2: Second signer replaced (team retains 1 of 3)
- Tier 3: All three signers are community-elected; team has no treasury access
4.3 Liquidity Strategy
Phase 1: Bonding curve itself acts as the liquidity mechanism.
Phase 2: Up to 40% of treasury deployed as additional DEX liquidity.
Phase 3: At supply lock, bonding curve reserve migrates to a DEX AMM pool. LP tokens are burned — permanent, irremovable liquidity.
4.4 Post-Lock Market Design
- Permanent liquidity floor: Burned LP tokens ensure baseline liquidity exists forever.
- Deflationary pressure: Community governance can implement buy-back-and-burn programs.
- No inflation: The mint authority is burned. There is no mechanism to create new tokens.
4.5 Holder Incentive Alignment
Early buyers get lower prices but face the same anti-whale limits as everyone else.
Community builders benefit from growing the holder count — pushing toward supply lock, increasing reward distributions, and unlocking governance tiers.
Late buyers enter at higher prices but into a more mature, more liquid, and more decentralized project.
No one gets free tokens, special allocations, or privileged access. The playing field is structurally level.
5. Security Architecture
5.1 Sybil Resistance
Layer 1: Registration Requirement — Wallets must register through the PoC program. Registration requires a minimum token balance (0.1% of supply), a fee (0.01 SOL), and 24-hour wallet age.
Layer 2: Wallet Maturity Scoring — Each wallet receives a score based on age, transaction history, holding duration, and purchase diversity.
Layer 3: Economic Cost of Sybil
| Tier | Holders Needed | Min Cost / Sybil Wallet | Total Sybil Cost |
|---|---|---|---|
| Tier 1 | 500 | ~5 SOL | ~2,500 SOL |
| Tier 2 | 1,500 | ~8 SOL | ~12,000 SOL |
| Tier 3 | 5,000 | ~12 SOL | ~60,000 SOL |
Layer 4: Holder Diversity Analysis (Off-chain) — Indexer analyzes wallet clustering patterns. Flagged clusters can be excluded from the holder count.
5.2 Anti-Whale Enforcement
- Maximum wallet cap: 2% of circulating supply — enforced at the smart contract level on every buy
- Maximum single transaction: 1% of circulating supply — prevents large single-block accumulation
5.3 Anti-Dump Mechanics
| Holding Duration | Additional Sell Tax | Total Sell Fee |
|---|---|---|
| < 1 hour | 25% | 30% |
| 1–6 hours | 20% | 25% |
| 6–24 hours | 15% | 20% |
| 1–3 days | 10% | 15% |
| 3–7 days | 5% | 10% |
| 7–14 days | 3% | 8% |
| 14–30 days | 1% | 6% |
| 30+ days | 0% | 5% |
Token accounting uses FIFO (First In, First Out). When a holder sells, the oldest tokens are sold first. This prevents gaming the holding timer.
100% of the graduated sell tax goes to the holder rewards pool, rewarding long-term holders at the expense of short-term flippers.
5.4 Front-Running Prevention
- Maximum transaction size (1% of supply) limits front-running profitability
- Slippage-aware pricing includes full price impact in quoted price
- Commit-reveal option for large purchases (> 0.5% of supply)
5.5 Transfer Tracking (FIFO)
When tokens transfer between wallets, FIFO timestamps travel with the tokens. The receiving wallet inherits the original purchase timestamps. This prevents sell tax avoidance through wallet-to-wallet transfers.
5.6 Emergency Mechanisms
Circuit breaker: trading pause for up to 24 hours, maximum 3 invocations total. Every activation emits an on-chain event with a reason string.
Post-lock: There are no emergency mechanisms. The contract is immutable. This is a feature, not a limitation.
6. Holder Verification
6.1 Registration System
Holder counting is based on explicit registration, not raw wallet balances.
- Wallet holds the minimum token balance (0.1% of supply or 100 tokens, whichever is higher)
- Wallet submits a
register_holderinstruction to the PoC program - Program verifies balance, charges 0.01 SOL, creates a HolderRecord PDA
- Wallet is now counted in the holder total
Deregistration: If a wallet's balance drops below the minimum, their HolderRecord is flagged. A 48-hour grace period prevents momentary dips from causing deregistration.
6.2 Wallet Maturity Requirements
| Factor | Minimum for "Verified" | Weight |
|---|---|---|
| Wallet age | 7 days since first on-chain tx | 25% |
| Transaction count | 5+ transactions (any program) | 25% |
| Token hold duration | 48 hours since acquisition | 25% |
| Purchase pattern | 2+ separate buy transactions | 25% |
A wallet must score above 60% (weighted) to count as "verified" for tier threshold purposes.
6.3 Transaction History Scoring
Wallets with longer holding duration have proportionally more governance weight and receive higher reward distributions — a soft seniority system.
6.4 Holder Diversity Analysis
The off-chain indexer monitors clustering: common funding sources, synchronized timing, identical balance patterns. Flagged clusters are published on the dashboard and can be excluded through governance vote.
7. Governance
7.1 Pre-Lock Governance (Team-Led)
Team controls treasury multisig but cannot modify core parameters (bonding curve, fees, anti-whale limits, tier thresholds). The team holds no tokens.
7.2 Tier 2 Governance (Hybrid)
Community votes are binding on treasury proposals. Team retains a 90-day veto (can be overridden by 75% supermajority). Proposal quorum: 10% of holders. Approval: simple majority for standard proposals, 66% for parameter changes.
7.3 Tier 3 Governance (Community-Led)
Full decentralization. Team has no special permissions. Smart contract upgrade authority is burned. Treasury is community-controlled.
7.4 Treasury Governance
- Proposal submission (holder with >0.5% supply or 10 co-signers)
- 72-hour review period
- 120-hour (5-day) voting period
- 48-hour execution timelock
- Multisig execution
Spending limits per quarter: Pre-Tier 2: 10% • Tier 2: 25% • Tier 3: 40% (up to 60% with supermajority)
7.5 Upgrade Authority Lifecycle
- Launch to Tier 2: Team multisig, critical bug fixes only
- Tier 2 to Tier 3: Timelock contract, governance approval + 7-day delay
- Tier 3: Permanently burned. The contract becomes immutable.
8. Technical Architecture
8.1 Solana Program Design
PoC is implemented as a native Solana program (Anchor framework) on mainnet-beta.
Core instructions:
initialize_protocol— One-time setupbuy— Purchase tokens from the bonding curve (mints)sell— Sell tokens back (burns)register_holder— Register as a verified holdercleanup_holder— Deregister wallet below minimumtrigger_tier_check— Permissionless tier advancement
8.2 Account Structure
8.3 Program Derived Addresses
| PDA | Seeds | Purpose |
|---|---|---|
| Protocol State | ["protocol", mint] | Global singleton state |
| Bonding Curve Vault | ["vault", mint] | Holds SOL reserve |
| Holder Record | ["holder", mint, wallet] | Per-wallet registration |
| Treasury | ["treasury", mint] | Treasury funds |
| Mint Authority | ["mint_auth", mint] | Token mint authority |
8.4 On-Chain vs Off-Chain
On-chain (trustless): Token minting/burning, bonding curve pricing, fee distribution, holder registration, FIFO tracking, anti-whale enforcement, supply lock, governance voting.
Off-chain (supplementary): Wallet maturity scoring, clustering analysis, dashboard, notifications, price charts.
If the off-chain indexer goes down, on-chain operations continue uninterrupted.
8.5 Oracle Integration
PoC does not require external price oracles for core operations. Pyth Network is used for SOL/USD display values, with Switchboard as fallback.
8.6 Bonding Curve to AMM Transition
At Tier 3, a single atomic transaction: calculates migration parameters, seeds a DEX liquidity pool with 90% of vault SOL + proportional tokens, burns LP tokens, burns mint authority, and disables the bonding curve. If any step fails, the entire operation reverts.
9. Platform & Scalability
9.1 PoC as a Service
PoC is a protocol that any project can use. Each launch is an independent instance sharing the same audited program code, with its own token mint, curve parameters, tier thresholds, fee structure, treasury, and governance.
9.2 Customizable Parameters
| Parameter | Default | Min | Max |
|---|---|---|---|
| P₀ (base price) | 0.000001 SOL | 0.0000001 SOL | 0.01 SOL |
| K (scaling constant) | 1,000,000 | 100,000 | 100,000,000 |
| n (curvature) | 1.5 | 1.0 | 3.0 |
| Tier 1 threshold | 500 | 250 | 2,000 |
| Tier 2 threshold | 1,500 | 750 | 5,000 |
| Tier 3 threshold | 5,000 | 2,500 | 25,000 |
| Max wallet % | 2% | 1% | 5% |
| Buy fee | 3% | 1% | 5% |
| Base sell fee | 5% | 2% | 8% |
| Max sell tax (< 1hr) | 25% | 10% | 30% |
9.3 Chain Reaction Model
Cross-generational growth where descendant projects share fees with parent communities:
9.4 Protocol Revenue
- Protocol fee: 0.5% of all bonding curve transactions across all PoC launches
- Launch fee: One-time fee to initialize a new PoC token launch
- Chain Reaction fees: Revenue from descendant project launches
9.5 Cross-Chain Future
Solana first; EVM implementation (Ethereum L2s) planned second. Cross-chain holder counting via oracle bridges is architecturally possible but out of scope for v3.0.
10. Launch Protocol
10.1 Pre-Launch Requirements
Technical:
- Smart contract deployed to Solana mainnet
- Contract audited by at least one reputable firm
- All PDAs initialized and verified
- Off-chain indexer running and syncing
- Community dashboard live and accurate
- Bonding curve parameters finalized and published
- Emergency multisig configured and tested
Community:
- Project website live with protocol documentation
- Social channels established (Telegram, X/Twitter, Discord)
- Tokenomics and mechanism design publicly documented
- FAQ published addressing common concerns
- Team identities disclosed (or credible pseudonymous reputation)
10.2 Launch Sequence
- T-7 days: Public announcement of launch date, parameters, thresholds
- T-3 days: Smart contract address published, audit report released
- T-1 day: Final parameter verification, community AMA
- T-0: Bonding curve goes live. First buy mints first tokens.
- T+1 hour: Verify all systems operational
- T+24 hours: First community status update
10.3 Post-Launch Monitoring
Automated: holder count, reserve balance, fee accuracy, anti-whale enforcement, Sybil detection (hourly). Manual: daily growth review, weekly treasury audit, monthly security assessment.
10.4 Emergency Procedures
| Emergency | Response | Authority |
|---|---|---|
| Critical bug | Pause trading + public disclosure | Team multisig / Governance |
| Oracle failure | Fallback to cached data | Automatic |
| Sybil attack | Flag wallets, exclude pending review | Team / Governance vote |
| Liquidity crisis | Treasury-funded injection | Governance proposal |
| Indexer failure | On-chain continues, stale data notice | Ops team restores |
11. Legal Considerations
11.1 Securities Analysis
PoC's structural differences from traditional securities:
- No pre-sale, no ICO, no SAFT. Tokens are purchased on an open bonding curve available to everyone simultaneously.
- No team allocation. The team holds no tokens and has no economic interest in the token price.
- Decentralization by design. The protocol fully decentralizes by Tier 3.
- Utility mechanism. PoC tokens serve as governance tokens and community membership credentials.
Disclaimer: This analysis is informational, not legal advice. Projects using PoC should obtain independent legal counsel.
11.2 Regulatory Framing
PoC positions itself as a protocol (not a company issuing securities), a mechanism design (not a financial product), and a community coordination tool (not an investment vehicle). The progressive decentralization model mirrors the "sufficient decentralization" framework.
11.3 Compliance Approach
KYC/AML: On-chain protocol is permissionless; front-end interfaces may implement geo-blocking or KYC as required by law.
Tax reporting: Detailed on-chain events enable straightforward taxable event calculation.
Sanctions: Front-end interfaces should screen against OFAC lists.
12. Metrics & Transparency
12.1 On-Chain Dashboard
Real-time public data: holder count, supply, price, treasury balance, tier progress, fee distribution, top 50 holders. All verifiable by anyone running a Solana node.
12.2 Community Health Score
Displayed as a 0–100 score with historical trend.
12.3 Holder Distribution Index
Based on the Gini coefficient: HDI = 1.0 is perfectly even distribution, HDI = 0.0 is complete concentration. PoC tokens structurally trend toward high HDI scores due to anti-whale caps and demand-driven minting. A declining HDI triggers an automatic dashboard alert.
13. Conclusion
Proof of Community replaces trust with mechanism design. It does not ask teams to be honest — it makes dishonesty structurally impossible. It does not ask communities to hope for fair distribution — it enforces fair distribution through anti-whale caps, demand-driven minting, and graduated sell taxes.
The protocol's three-tier milestone system creates a clear, verifiable path from launch to full decentralization. At every stage, the rules are transparent, the data is public, and the mechanisms are enforced by immutable code.
PoC is not a promise. It is a protocol. And protocols do not rug.
Appendix A: Bonding Curve Mathematics
Price Function
Cost to Purchase (Integral)
The curve is symmetric — revenue from selling equals cost to purchase over the same range (before fees).
Example Calculations (Default Parameters)
P₀ = 0.000001 SOL, K = 1,000,000, n = 1.5
| Supply | Price (SOL) | Market Cap (SOL) |
|---|---|---|
| 0 | 0.000001 | 0 |
| 100,000 | 0.0000014 | 0.14 |
| 500,000 | 0.0000024 | 1.2 |
| 1,000,000 | 0.0000028 | 2.8 |
| 5,000,000 | 0.0000065 | 32.5 |
| 10,000,000 | 0.0000113 | 113 |
Note: These are illustrative. Actual prices depend on net buy/sell activity.
Fixed-Point Implementation
On-chain calculations use 64-bit fixed-point arithmetic with 12 decimal places. Exponentiation computed via Taylor series (10 terms).
Appendix B: Sybil Cost Analysis by Tier
Assumptions: Registration fee 0.01 SOL, minimum balance 0.1% of supply, wallet creation ~0.002 SOL, SOL price $150.
Tier 1 (500 Holders)
Registration fees: 5 SOL. But buying 100K tokens pushes the price up significantly via bonding curve. Estimated total: 2,500+ SOL (~$375,000).
Tier 2 (1,500 Holders)
All Tier 1 costs plus 1,000 wallets at higher prices, stricter maturity. Estimated total: 12,000+ SOL (~$1,800,000).
Tier 3 (5,000 Holders)
All prior costs plus 3,500 wallets at significantly higher prices, full requirements. Estimated total: 60,000+ SOL (~$9,000,000).
Sybil cost scales super-linearly with tier thresholds, making attacks economically irrational.
Appendix C: Fee Flow Diagram
Appendix D: Glossary
Bonding Curve: A mathematical function that determines token price based on current supply. In PoC, buying increases supply (minting) and selling decreases it (burning).
Chain Reaction Model: Cross-generational launch structure where descendant projects share fees with parent communities.
Demand-Driven Minting: Token creation exclusively through purchase. No tokens exist until someone buys them.
FIFO (First In, First Out): Token accounting method where the oldest tokens are sold first, used for calculating graduated sell tax.
Graduated Sell Tax: Variable fee on sell transactions based on holding duration. Ranges from 25% (< 1 hour) to 0% (30+ days).
Holder Record: On-chain PDA storing registration info, purchase history, maturity score, and verification status.
Immutable: A smart contract state where the upgrade authority has been burned. Permanent and irreversible.
Maturity Score: Composite metric evaluating wallet age, transaction history, and holding pattern.
PDA (Program Derived Address): Deterministic account address on Solana derived from seeds and a program ID.
Registration: Explicitly joining the holder count by calling register_holder and meeting minimum balance.
Supply Lock: Permanent, irreversible freezing of token supply at Tier 3. Mint authority is burned.
Sybil Attack: Creating many fake wallets to manipulate a system counting unique participants.
Tier Threshold: Verified holder count to advance tiers (default: 500 / 1,500 / 5,000).
Timelock: Delay between a governance decision and its execution, allowing community review.