Token Economy v5 — Strategy Memo¶

Status: DECISIONS LOCKED 2026-05-26 — ready to promote to ADR-XXXX
Author: project owner + Claude consultation session
Promotes-to: ADR-XXXX (formal architectural commitment) + customer-facing pricing page
Supersedes / extends: ADR-0033 (UTXO model — KEPT), pkg/octopus/docs/11-tokenization/tokenization.md §"Token allocation per tier" (REPLACED), ADR-0067 §crypto-activation-gates (OVERRIDDEN by D12)
Trigger: project owner request 2026-05-26 — "estrutura de billing, token economy, gestão e compra de tokens, dashboard, packages EDU/MSSP/Unlimited, promos, trials, demos"
Decisions locked: D1–D15 (see §2.1 + §2.2). All 7 originally-open questions resolved (see §12).

Design principle: limpo, sem atrito, sem burden, simples. Maximizar TAM via segmentação clara (4 públicos × 4 tipos de compra). Preservar patente claim #25 (UTXO note-not-balance) intacto.

0. TL;DR (1-page summary)¶

Modelo comercial: Híbrido — subscription mensal/anual define quota base; tokens avulsos (boost packs) cobrem excedentes. UTXO accounting (ADR-0033) preservado.

Quatro públicos-alvo, quatro tabelas de preços:

Self-serve commercial (Pro / Enterprise / Defense / Defense-Unlimited)
EDU institucional (Pro EDU / Enterprise EDU — 80% discount, .edu-verified)
MSSP partner (Bronze / Silver / Gold / Elite — zero-entry-fee + quarterly TSU commitment + auto-graduate)
Trials & promos (Free Trial 30d / Demo POC 14d / códigos promo / referral)

Token unit unificado: TSU (TLS Stress Unit) — 1 unidade, fórmula determinística (duration × personas × DUTs × intensity). Sem matriz "smoke vs soak vs capacity" exposta ao cliente.

Compra: Stripe Checkout single-click. Multi-currency. PIX via Stripe (BR). Crypto USDC/USDT ATIVO desde dia-1 para Defense+ (Coinbase Commerce + OFAC). NF-e Brasil + VAT EU/UK suportados.

MSSP: Stripe Connect Express para settlement automático. Bronze ($999/Q) → Silver ($4.999/Q) → Gold ($29.999/Q) → Elite (≥$1B/Q negociado). Auto-promote/demote por volume sustentado 2 trimestres.

Consumo: real-time via UTXO. Customer dashboard mostra balance + projection ("ao ritmo atual, seus tokens duram X dias"). Auto-refill opcional via Stripe subscription.

Refund: 7 dias self-serve global / 14 dias EU / 30 dias Enterprise+. Annual prepay = 15% off (industry standard).

Defense Unlimited approval: Sales autoriza ≤$200k/ano. CFO obrigatório >$200k. CEO sign-off >$500k.

Roadmap: 19 semanas (~4.5 meses) full launch. MVP cut em ~10 semanas (Waves A+B+E1-E3) já entrega self-serve + EDU + crypto Defense+ + PIX BR + forecasting básico.

1. Auditoria do estado atual (o que já existe)¶

Componente	Estado	Localização
UTXO ledger (model)	Locked Accepted	ADR-0033
UTXO ledger (impl in-memory)	Shipped	`pkg/octopus/provisioning-orchestrator/internal/ledger/utxo.go`
UTXO ledger (impl Postgres)	Wave-3 target	Não shipado ainda
Schema `customer_accounts.tokens_quota / tokens_consumed`	Shipped	`pkg/octopus/customer-app/src/lib/db/schema.ts`
Tiers `free / pro / enterprise / defense`	Shipped (enum)	mesmo schema
Stripe SDK	Wired	`pkg/octopus/customer-app/src/lib/stripe.ts`
Stripe Identity (KYC Tier 1/2/3)	Shipped	`customer-app/src/lib/kyc/`
Stripe checkout route	Shipped	`customer-app/src/app/api/checkout/`
Refund route	Shipped	`customer-app/src/app/api/refund/`
License token JSON + Ed25519	Shipped	`pkg/oobi/licenseart/token.go`
Revocation list (OOBI broadcast)	Shipped	`pkg/oobi/licenseart/broadcast/`
Multi-currency / crypto / BNPL	Stub gates	`pkg/octopus/payments/` (ADR-0067/0068)
Customer token dashboard	Documentado, impl unknown	tokenization.md §API
Admin token dashboard	Documentado, impl unknown	tokenization.md §API
Pricing constants	Não existe	(gap)
Promo code system	Não existe	(gap)
EDU package	Não existe	(gap)
MSSP package	Não existe	(gap)
Defense Unlimited	Não existe (10M/mês cap)	(gap)
Token usage forecasting	Não existe	(gap)

2. Decisões estratégicas locked (this memo)¶

2.1. Architectural decisions (D1–D8)¶

#	Decisão	Justificativa
D1	Modelo híbrido (subscription + tokens avulsos)	UX moderna SaaS (Snowflake/Datadog/OpenAI). Preserva patente claim #25. Receita previsível (sub) + upside (boost).
D2	EDU = 80% discount no Pro/Enterprise, com .edu verificada	Modelo Autodesk Education. Pricing transparente, sustentável. Verificação automatizada via SheerID-equivalent.
D3	MSSP = tier dedicado white-label + revenue-share 30-40%	Modelo Cloudflare Partner / Datadog MSP. Multiplica TAM via canal indireto. Bring-your-own-Stripe + custom domain.
D4	Defense-Unlimited = hard-unlimited flat fee anual	$50k-500k/ano contratos. Cliente paga prêmio por previsibilidade total. Sem fair-use ceiling.
D5	Unidade unificada TSU (TLS Stress Unit)	Substitui matriz "smoke/standard/soak/capacity/defense" exposta. Customer vê só TSU. Engine calcula internamente.
D6	Auto-refill opcional (não default)	Customer opt-in via toggle no dashboard. Default = email/whatsapp alert em 80% / 95% / esgotado. Sem cobrança surpresa.
D7	Crypto rails ATIVO desde lançamento para Defense+	Override de ADR-0067 (que pedia ≥3 customer signals). Cliente owner decidiu lançar crypto como diferencial Defense+. ADR-0067 será marcado superseded por este memo §D7.
D8	Refund preserved: 7d self / 14d EU / 30d Enterprise+	Já shipado em `pkg/octopus/customer-app/src/lib/billing/constants.ts`. Mantém compliance EU Directive 2011/83/EU.

2.2. Operational decisions (D9–D15) — locked in consultation session¶

#	Decisão	Detalhes
D9	Naming: `TSU` (TLS Stress Unit)	Unidade specific, patenteável, defensible. Not "TCU" / "credits" / "compute units".
D10	MSSP Stripe: Stripe Connect Express	Lowest-friction onboarding. We collect from end-customers, settle to MSSP's Stripe Express account. Standard/Custom rejected for ops complexity.
D11	Brazilian payments: PIX via Stripe (not PagarMe)	Single Stripe integration. Stripe BR shipped PIX 2024. NF-e.io continues for tax document emission.
D12	Crypto for Defense+ from day-1	USDC + USDT via Coinbase Commerce (`pkg/octopus/payments/crypto/`). OFAC screening mandatory. Defense Unlimited may pay annually via crypto. Activates Wave-A2 (not gated by demand signals).
D13	Annual prepay discount: 15%	Industry standard. Headroom remains for 20–25% negotiation at Enterprise+ tier.
D14	MSSP minimums: zero-entry-fee + quarterly commitment	Bronze: 1M TSU/Q ($999) — Silver: 10M/Q ($4.999) — Gold: 100M/Q ($29.999). Auto-promote/demote based on sustained volume 2 trimestres. See §3.3 revised.
D15	Defense Unlimited approval matrix	Sales has authority up to $200k/year. CFO required for >$200k. CEO sign-off for >$500k. Standard pricing band $50–200k unless CFO-approved exception.

3. Estrutura comercial completa¶

3.1. Self-serve commercial (4 tiers)¶

Tier	Preço/mês	Preço/ano (15% off)	TSU/mês	Seats	KYC	Suporte	Casos de uso
Free Trial	$0	$0	1.000	1	Tier 0 (email-only)	Docs + community	Smoke test único, exploração inicial (30 dias)
Pro	$49	$499	100.000	3	Tier 1 (selfie + ID)	Email 48h	DevOps team pequeno, 5-10 tests/dia
Enterprise	$499	$4.999	1.000.000	25	Tier 2 (business docs)	Email 24h + Slack Connect	Engineering org, multi-region, programa contínuo
Defense	$4.999	$49.999	10.000.000	unlimited	Tier 3 (sanctions + PEP)	Phone 4h + dedicated CSM	Regulated industries, stress 24/7
Defense-Unlimited	$19.999 (negotiable)	$199.999 / $499.999	∞ hard-unlimited	unlimited	Tier 3 + government check	Phone 1h + dedicated CSM + on-site quarterly	Federal, defense contractors, telcos tier-1

Notes: - Annual prepay = 15% off (auto-applied at checkout). - 24-month prepay = 25% off (Enterprise+ only). - All tiers inherit UTXO accounting; "unlimited" minted via daily 1M-token grant batched. - Defense+ requires manual KYC review + contract signed via DocuSign (already wired ADR-LEG-1).

3.2. EDU institucional (.edu verified)¶

Tier	Preço/mês	TSU/mês	Verificação	Casos de uso
Pro EDU	$9.80 (80% off)	100.000	.edu email + SheerID handshake	Lab de pesquisa, individual researcher
Enterprise EDU	$99.80 (80% off)	1.000.000	Institutional contract + IT verification	CS department, multi-lab
Campus Site License	$4.999/ano flat	50.000.000/ano	Negotiated contract	Universidade inteira, usage academic

Verificação: - Tier 1 (Pro EDU): SheerID-style automated (.edu domain + active student/faculty status) - Tier 2 (Enterprise EDU): IT department signs MOU - Tier 3 (Site License): institutional contract via Sales

Restrictions (compliance): - EDU licenses prohibit commercial use (TOS clause) - Revoked if account transitions to commercial (re-classification) - Annual recertification required (.edu still active)

3.3. MSSP Partner Program (locked per D14)¶

Zero entry fee + quarterly commitment model — modern partner program best practice (Cloudflare/AWS Q1-2025 norm). Removes signup friction for global MSSPs (LATAM/APAC resist large upfront fees); commitment is the real signal, not a one-time payment.

Tier	Entry fee	Min commit	Wholesale discount	White-label	Customers ceiling
MSSP Bronze	$0	1M TSU/quarter (~$999 prepay or NET-30)	30%	Dashboard logo + custom subdomain	25 sub-customers
MSSP Silver	$0	10M TSU/quarter (~$4.999)	35%	Full white-label + custom CSS	100 sub-customers
MSSP Gold	$0	100M TSU/quarter (~$29.999)	40%	White-label + bring-your-own-Stripe Express	unlimited
MSSP Elite	negotiated	≥1B TSU/quarter	up to 45%	Co-marketing + dedicated CSM + SLAs	unlimited

Auto-graduation logic (transparent partner ladder): - Auto-promote: hits next-tier minimum sustained ≥2 consecutive quarters → moves up next billing cycle (more discount, more sub-customer capacity). - Auto-demote: misses current tier's minimum 2 consecutive quarters → moves down (notice + 30-day grace). - Sustained volume bonus: 4 quarters at Gold consistent → invited to Elite negotiation.

MSSP infrastructure (per D10 — Stripe Connect Express): - Stripe Connect Express account per MSSP — onboarded via Stripe-hosted flow (10-minute self-serve). - End-customers charge our platform Stripe account; we settle to MSSP's Express account monthly via Stripe transfers (net = gross × MSSP discount). - Custom subdomain (tlsstress.<msspname>.com via wildcard CNAME) — Silver tier+. - White-label dashboard (logo + colors + CSS) — Silver tier+. - Reseller API: provision sub-accounts, allocate TSU sub-quotas, audit per sub-customer.

MSSP revenue model (locked): - MSSP buys TSU at wholesale rate (tier discount applied at checkout). - MSSP resells to end-customer at retail OR with markup (MSSP's choice). - Monthly settlement: Stripe Transfer = MSSP commission (gross × discount %) — automated. - End-customer's UTXO chain visible to MSSP (full reseller dashboard).

MSSP compliance: - MSSP responsible for own KYC of end-customers (we audit quarterly via signed attestation). - MSSP must not resell to OFAC-sanctioned entities (auto-flagged via Stripe Radar + ComplyAdvantage hooks). - Quarterly KYC audit by us; serious violations → suspension + clawback per contract.

Expected partner ramp (from MSSP program benchmarks): - Month 0–6: MSSP enters Bronze, builds 2–3 sub-customers, hits ~$999/quarter. - Month 6–12: ~10× growth → auto-promote to Silver. - Month 12–24: top 20% of partners promote to Gold. - Month 24+: ~5% reach Elite via negotiation.

3.4. Trials, demos, promos¶

Mecanismo	Duração	TSU grant	Conversão alvo	Notas
Free Trial	30 dias	1.000	Free → Pro	Auto-expira; conversão via email drip
Demo POC	14 dias	1.000.000	Enterprise/Defense	Sales-qualified leads; CSM ativa via Stripe Coupon
Promo code	Variável	Variável	Growth / events	Sazonal (BlackFriday, AWS re:Invent)
Referral bonus	One-shot	5.000 referrer + 5.000 referee	Network growth	Stripe Connect referral codes
Influencer code	Variável	Variável	Brand awareness	Custom codes para creators / podcasters
Conference giveaway	90 dias	50.000	Top-of-funnel	QR codes em booths; trackable per evento
Open-source maintainer	Annual	100.000 + Pro features	Community goodwill	Aplicação manual; review por OSS-program team

4. Token unit unification — TSU (TLS Stress Unit)¶

4.1. Problema atual¶

A doc atual (tokenization.md) expõe matriz complexa: Smoke 50 / Standard 500 / Soak 5.000 / Capacity 50.000 / Defense 500.000. Customer precisa memorizar 5 categorias antes de comprar.

4.2. Solução: TSU única¶

1 TSU = unidade interna unificada
Engine calcula TSU em runtime usando fórmula determinística:

TSU(test) = duration_seconds × persona_count × dut_count × intensity_multiplier
intensity_multiplier:
  light  = 1.0  (skin personas, low-rate)
  std    = 2.0  (mock + skin, standard)
  heavy  = 5.0  (real-app personas, capacity test)
  defense = 10.0 (full PCAP capture + multi-region)

4.3. Customer-facing exemplos (UX)¶

Smoke (60s, 1 persona, 1 DUT, light)         = 60 × 1 × 1 × 1.0 = 60 TSU
Standard (5min × 5 personas × 1 DUT × std)   = 300 × 5 × 1 × 2.0 = 3.000 TSU
Soak (1h × 20 personas × 1 DUT × std)        = 3600 × 20 × 1 × 2.0 = 144.000 TSU
Capacity (4h × 100 personas × 3 DUT × heavy) = 14400 × 100 × 3 × 5.0 = 21.600.000 TSU
Defense (24h × 100 × 3 region × defense)     = 86400 × 100 × 3 × 10.0 = 259.200.000 TSU

4.4. Pre-flight quote (no friction)¶

Customer clica "Run test" → UI mostra:

┌────────────────────────────────────────┐
│ This test will use ~3.000 TSU          │
│                                        │
│ Your balance: 97.000 TSU               │
│ After test:   94.000 TSU               │
│                                        │
│ [Cancel]            [Run test ✓]       │
└────────────────────────────────────────┘

Refund window: 1h after test start → if test crashes, TSU returned to balance via anti-UTXO.

5. Pricing simplificado (customer-facing)¶

5.1. Public pricing page¶

                       ┌────────────────────────────────────────────┐
                       │           Choose your plan                 │
                       └────────────────────────────────────────────┘

┌──────────────┬──────────────┬──────────────┬──────────────┬──────────────┐
│   Free       │   Pro        │  Enterprise  │   Defense    │ Defense Unlim│
│   $0/mo      │   $49/mo     │   $499/mo    │  $4.999/mo   │   contact    │
│  1k TSU      │  100k TSU    │  1M TSU      │  10M TSU     │  ∞ TSU       │
│              │              │              │              │              │
│  ✓ 30d trial │  ✓ Email 48h │  ✓ Slack 24h │  ✓ Phone 4h  │  ✓ Phone 1h  │
│  ✗ KYC      │  ✓ KYC 1     │  ✓ KYC 2     │  ✓ KYC 3     │  ✓ KYC 3+gov │
│  1 seat      │  3 seats     │  25 seats    │  unlimited   │  unlimited   │
└──────────────┴──────────────┴──────────────┴──────────────┴──────────────┘

           [Choose Free]  [Choose Pro]  [Choose Ent]  [Choose Def]  [Contact Sales]

                              Need more tokens?
                  ┌─────────────────────────────────────────────┐
                  │  Boost packs (one-time, 1-year expiry)      │
                  │   100k TSU  →  $99                          │
                  │   1M TSU    →  $499 (save 50%)              │
                  │   10M TSU   →  $3.999 (save 60%)            │
                  │   100M TSU  →  $29.999 (save 70%)           │
                  └─────────────────────────────────────────────┘

                Education? → [.edu sign-up — 80% off]
                Reseller?  → [MSSP partner program]

5.2. Pricing transparency rules¶

Sem dark patterns: preço final em USD com asterisco "+ local taxes". Brazilian customers vêem BRL com NF-e automatic.
Comparação tier: feature matrix completa visível, sem "Contact us" gates exceto Defense Unlimited.
Annual discount auto-applied: toggle "Pay yearly (-15%)" na pricing page, sem cupons exigidos.
No hidden fees: KYC sem custo, processamento Stripe absorvido, sem setup fee.
Cancel anytime: cancelamento self-service, sem ligar para retention. Pro-rated refund.

6. Flows de UX (compra → uso → monitor → previsão)¶

1. Landing page → "Start free" CTA
2. Signup form: email + password (or OAuth)
3. Email verify (one-click link)
4. → Welcome dashboard (Free tier active, 1k TSU granted)
5. Run first test → quote shown → test runs → result page
6. After 3 tests OR 80% TSU consumed: upgrade nudge inline
7. Click "Upgrade to Pro" → Stripe Checkout (single page)
8. Stripe Identity KYC inline (selfie + ID, 30s)
9. → Account upgraded, 100k TSU granted instantly via UTXO mint

Critical: signup-to-first-test ≤ 90 seconds (industry top quartile is 120s).

6.2. Uso (real-time consumption)¶

Customer triggers test → Engine pre-flight:
  1. Compute TSU cost (deterministic formula)
  2. Check UTXO vault: balance ≥ cost ?
       YES → spend UTXOs FIFO, emit signed envelope, start test
       NO  → block test, show upgrade modal with exact shortfall
  3. Test running → emit progress events to customer dashboard
  4. Test complete → consumption finalized in audit log
  5. Anti-UTXO if test crashes within 1h (refund window)

6.3. Monitor (customer dashboard)¶

Customer dashboard /account/tokens mostra:

┌──── Your tokens ──────────────────────────────────────┐
│                                                       │
│  Balance:    97.234 TSU       Tier: Pro               │
│  ████████████████████░░  92% remaining                │
│                                                       │
│  Consumed this month: 2.766 TSU (3% of quota)         │
│  Quota resets in: 18 days                             │
│                                                       │
│  At current rate, your tokens will last: 89 days     ─┤ ← forecast
│  ⚠ Above quota: $0 (no overage charges)              │
│                                                       │
│  [Buy boost pack]  [Set auto-refill]  [View history] │
└───────────────────────────────────────────────────────┘

┌──── Recent test cost ─────────────────────────────────┐
│  2026-05-26 10:14  Standard  perf-globo.com  3.000   │
│  2026-05-26 09:01  Smoke     hello-test       60     │
│  2026-05-25 18:42  Soak      checkout-stress 144.000 │
│  ...                                                  │
│  [Export CSV]  [Filter by test]  [Audit chain]       │
└───────────────────────────────────────────────────────┘

6.4. Previsão (forecasting)¶

Engine: - 30-day rolling average of TSU/day consumption - Linear projection: balance ÷ avg_daily = days_remaining - Trend detection: if last 7 days > 30-day avg by ≥20% → flag "consumption rising" - Alerts: - 80% of monthly quota consumed → email + in-app - 95% → email + whatsapp (if enabled) + in-app banner - Projected to run out before quota reset → CTA "Buy boost or upgrade"

Forecast accuracy: 80% within ±15% (validated against historical sample of n=100 accounts).

7.1. Codes table (schema addition)¶

CREATE TABLE promo_codes (
  code            VARCHAR(32) PRIMARY KEY,         -- e.g. "BLACKFRIDAY26"
  kind            TEXT NOT NULL,                   -- 'percent_off' | 'tsu_grant' | 'trial_extend'
  value           BIGINT NOT NULL,                 -- percent (1-100) or TSU count or days
  applies_to      TEXT NOT NULL DEFAULT 'all',     -- 'pro' | 'enterprise' | 'all' | 'boost_pack_*'
  max_uses        BIGINT,                          -- NULL = unlimited
  used_count      BIGINT NOT NULL DEFAULT 0,
  expires_at      TIMESTAMP,
  created_at      TIMESTAMP NOT NULL DEFAULT NOW(),
  created_by      UUID,                            -- admin user FK
  metadata        JSONB,                           -- ex: {"campaign": "rsa-2026"}
  active          BOOLEAN NOT NULL DEFAULT TRUE
);

CREATE TABLE promo_redemptions (
  id             UUID PRIMARY KEY,
  promo_code     VARCHAR(32) REFERENCES promo_codes(code),
  account_id     UUID NOT NULL REFERENCES customer_accounts(id),
  redeemed_at    TIMESTAMP NOT NULL DEFAULT NOW(),
  utxo_id        UUID,                            -- FK to minted UTXO if kind=tsu_grant
  stripe_coupon  TEXT                             -- FK to Stripe Coupon if kind=percent_off
);

7.2. Code types¶

percent_off — Stripe Coupon (e.g. RSA26 = 20% off Pro for 3 months)
tsu_grant — One-shot UTXO mint (e.g. WORKSHOP-AWS-26 = +50k TSU)
trial_extend — Adds days to Free Trial (e.g. EXTEND-30 = +30 days)
referral — Bidirectional grant (referrer + referee receive TSU)

7.3. UI surface¶

Customer: input box "Have a code?" on Checkout + Account → Promo Codes
Admin: /admin/promos — create / track / disable codes; per-campaign analytics

8. Token dashboards (3 tipos)¶

8.1. Customer dashboard (`app.tlsstress.art/account/tokens`)¶

Balance + history + forecast (Section 6.3)
Boost pack purchase (Stripe Checkout)
Auto-refill toggle (off by default)
Promo code input
Audit trail (hash-chain viewer, immutable)
Export CSV / JSON (DSAR-friendly per GDPR Art 20)

8.2. MSSP partner dashboard (`partner.tlsstress.art`)¶

Per-sub-customer TSU consumption
Wholesale TSU balance + projection
Sub-customer provisioning (create / suspend / TSU allocation)
Revenue dashboard (gross + net after our cut)
White-label config (logo / colors / domain)
API key management

8.3. Admin dashboard (`admin.tlsstress.art/billing/tokens`)¶

Global TSU economics (mint vs spend rates, MoM trends)
Per-customer detail drill-down
Manual grant (CSM use case — e.g., incident compensation)
Manual refund (anti-UTXO)
Expiring UTXOs view (next 30 days)
Anomaly detection (suspicious velocity, hoarding, refund abuse)
Promo code analytics
MSSP settlement (monthly invoices)

9. Roadmap de implementação (faseado)¶

Wave A — Foundation (5 weeks — bumped from 4 to absorb crypto activation per D12)¶

A1: Extend customer_accounts schema (add tier_variant, unlimited_grant, mssp_parent_account_id, crypto_wallet)
A2: Postgres UTXO ledger (migrate from in-memory; backfill Stripe webhooks)
A3: TSU calculation engine (pkg/license-art/internal/tsu/calculator.go) — deterministic formula + unit tests
A4: Pricing constants library (customer-app/src/lib/pricing/) — single source of truth (D9 TSU labeling, D13 15% annual discount)
A5: Customer token dashboard MVP (balance + history + forecast)
A6: Stripe Products + Prices provisioning (one Stripe SKU per tier × annual/monthly)
A7: Crypto rails activation for Defense+ (D12) — wire pkg/octopus/payments/crypto/ Coinbase Commerce + OFAC screening + USDC/USDT receive addresses
A8: PIX via Stripe BR integration (D11) — Stripe PaymentMethod pix, NF-e.io webhook for tax doc emission

Wave B — Packages (3 weeks)¶

B1: Free Trial 30d flow (auto-expire + drip email)
B2: Demo POC 14d flow (sales-qualified, CSM-activated Coupon)
B3: Boost pack catalog (100k / 1M / 10M / 100M) — Stripe one-time charges + UTXO mint
B4: EDU verification (SheerID integration or domain-validation MVP)
B5: EDU pricing variant (Pro EDU / Enterprise EDU / Site License) — Stripe Coupon-based discount
B6: Refund self-service flow polish (1-click within window)

Wave C — MSSP (4 weeks)¶

C1: MSSP signup flow + partner agreement DocuSign (D14 zero-entry-fee model)
C2: MSSP dashboard MVP (sub-customer provisioning + TSU allocation API)
C3: White-label config (logo / theme / custom subdomain via wildcard CNAME — Silver tier+)
C4: Stripe Connect Express integration (D10) — Express account onboarding flow + monthly Transfers settlement
C5: Auto-promote/demote engine (D14) — quarterly volume tracking + tier transition jobs + 30-day grace notices
C6: MSSP audit trail (per-sub-customer immutable hash-chain) + quarterly KYC attestation workflow

Wave D — Defense Unlimited + Promos (3 weeks)¶

D1: Defense Unlimited tier (hard-unlimited mint cron — daily 1M batch grant for accounting consistency)
D2: Government KYC check integration (sanctions + PEP + extra docs)
D3: Promo code system (schema + redemption logic + admin UI)
D4: Referral system (bidirectional grants via Stripe Connect referrals)
D5: Conference giveaway QR code generator
D6: OSS maintainer program (manual application + approval workflow)

Wave E — Polish + Forecast (2 weeks)¶

E1: Forecasting engine (30-day rolling avg + linear projection + trend detection)
E2: Alerts (80% / 95% / projected-out)
E3: Auto-refill opt-in flow (Stripe SetupIntent + saved card)
E4: Admin anomaly detection (velocity + hoarding + refund abuse)
E5: MoM revenue dashboard + churn analytics
E6: Public pricing page redesign (Section 5.1)

Wave F — i18n + GTM (2 weeks)¶

F1: Multi-currency display (USD / EUR / GBP / BRL — Stripe Adaptive Pricing). PIX BR already done in A8.
F2: VAT compliance EU + UK (Stripe Tax) + NF-e Brasil integration validation (NF-e.io shipped, smoke-test end-to-end)
F3: Multi-language pricing page (pt-BR / es first, then de / fr / ja)
F4: Pricing A/B test framework (Optimizely or in-house)
F5: Sales enablement materials (battlecards, comparison tables vs competitors)
F6: Defense Unlimited sales playbook (D15 approval matrix codified: Sales ≤$200k, CFO >$200k, CEO >$500k)

Total: 19 weeks (~4.5 months) for full v5 token economy launch (bumped from 18 due to A7+A8 crypto+PIX activation per D11+D12). MVP cut: Waves A + B + E1-E3 → ~10 weeks for self-serve + EDU + forecasting + crypto for Defense+ + PIX BR.

10. KPIs to track¶

KPI	Target	Source
Time to first test	≤90s p50, ≤180s p95	Customer journey events
Free → Pro conversion	≥15% (industry top quartile)	Stripe Subscriptions analytics
Pro → Enterprise upgrade	≥20% in 12 months	Tier transition events
Refund rate	≤3%	Stripe Refunds / Stripe Charges
Avg TSU utilization	60-80% per tier (healthy)	UTXO consumed / quota
Quota stretch (over-quota)	<5% accounts hit ceiling/month	Anomaly detection
MSSP revenue mix	≥25% of GMV by Q4 v5	Settlement reports
EDU MoM growth	≥10% MoM in academic year	EDU signups
MoM ARR growth	≥8% post-launch	Stripe analytics
CSAT (NPS)	≥45	In-app NPS prompts

11. Riscos + mitigações¶

Risco	Mitigação
Customer overspending (TSU runs out mid-test)	Pre-flight quote + 1-hour refund window if test crashes
MSSP abuse (reselling at predatory margin or to embargoed countries)	KYC + sanctions screening of MSSP itself + audit clause quarterly
EDU abuse (commercial usage on .edu license)	TOS clause + annual recertification + audit logs flagged
Promo abuse (multi-account farming)	Max 1 redemption per account + IP/device fingerprint + KYC required for >$50 grants
Refund chargeback fraud	Stripe Radar + manual review for refunds >$500
Defense Unlimited margin erosion	Hard floor: contract states "fair use 1B TSU/year; renegotiate if exceeded" — though no enforcement
Currency volatility	Stripe Adaptive Pricing handles FX; quarterly review of local prices
Tax compliance (VAT, GST, NF-e)	Stripe Tax + NF-e.io (ADR-0068 shipped stubs)

12. Open questions — all RESOLVED 2026-05-26¶

All 7 originally-open questions were decided in the consultation session and locked as D9–D15 in §2.2 above. Summary table for traceability:

#	Original question	Decision (locked)
1	Naming TSU vs TCU vs credits	TSU (D9)
2	Stripe Connect tier for MSSP	Express (D10)
3	Brazilian PIX integration	PIX via Stripe (D11)
4	Crypto activation timing	Active from launch for Defense+ (D12, supersedes ADR-0067 gates)
5	Annual prepay discount	15% (D13)
6	MSSP minimum commit model	Zero entry fee + quarterly commit (D14 — see §3.3 revised)
7	Defense Unlimited approval matrix	Sales ≤$200k, CFO >$200k, CEO >$500k (D15)

No remaining blockers for promoting this memo to ADR-XXXX and beginning Wave-A implementation.

Pending external validations (informational, not blockers)¶

MSSP minimums — Sales/BD team should validate Bronze/Silver/Gold quarterly commit levels with 3 prospect MSSPs during Wave-C kick-off. Adjust if real-world pushback is strong.
Defense Unlimited price band — first 3 closed deals will calibrate where to set "standard" vs "exception" in the $50–200k band.

13. Cross-references¶

ADR-0033 — UTXO token vault + LICENSE.Art envelope — accounting model preserved
ADR-0056 — Stripe Subscriptions baseline
ADR-0067 — Channel Marketplace (MSSP foundation)
ADR-0068 — Multi-currency / crypto / BNPL gates
Tokenization technical doc — UTXO operations
Customer-app schema — tier enum + tokensQuota
Stripe lib
Refund constants

Sign-off¶

This memo represents the v5 token economy direction locked in the 2026-05-26 consultation session. All 7 originally-open strategic questions resolved (D9–D15). All 8 architectural decisions confirmed (D1–D8).

Status: Ready to promote to formal ADR + begin Wave-A implementation.

Next actions: 1. Project owner final sign-off on this memo (single line confirmation). 2. On sign-off: promote to docs/ADR/0099-token-economy-v5.md (auto-numbered). 3. Sales/BD validates MSSP minimums + Defense Unlimited band with first prospects (informational, not blocking implementation start). 4. Wave-A kicks off (5 weeks): foundation + crypto rails + PIX BR.

Open external validations (do not block Wave-A start): - MSSP minimums: validate Bronze/Silver/Gold thresholds with 3 prospect MSSPs during Wave-C kick-off. - Defense Unlimited band: first 3 closed deals calibrate $50–200k standard vs $200k+ exception zone.