Introducing Lotless
Options infrastructure for tokenized stocks.
Technical documentation for fully covered calls with fixed strikes, tapering notional, and Stock Token delivery.Start here
System overview
Lotless separates option economics, collateral, settlement, and network coordination into a small set of explicit components.
Locked raw Stock Token units remain greater than or equal to aggregate remaining exercisable raw units.
Design decision
Three assets, three jobs
Lotless separates the delivery asset, the option right, and the network token so one token never pretends to be everything.
Stock TokenCollateral and delivery. Writers lock canonical raw units; exercise delivers those units. Stock Tokens provide economic exposure but are not underlying company shares.
Lotless claimThe option right. A transferable record of the fixed strike, immutable taper rate, and remaining raw notional.
$LOTLESSNetwork coordination. Operators lock it to activate approved markets. Holders may time-lock it into veLOTLESS to govern bounded future decisions.
USDGMoney and performance security. Pays premiums, strikes, protocol fees, and separate operator bonds.
Plain-English walkthrough
Pay once. Keep the strike.
- 1
A writer locks 0.10 NVDA Stock Token.
- 2
A buyer pays an example 4.80 USDG premium.
- 3
The buyer receives a claim with a fixed 180 USDG strike.
- 4
After 90 days at the example taper, approximately 0.071 NVDA remains exercisable.
- 5
Exercise collects approximately 12.78 USDG and delivers the remaining NVDA Stock Token amount.
The 4.80 USDG premium remains part of the buyer’s economics. A market price above the strike does not automatically mean the complete position is profitable.
Protocol concepts
Series anatomy
A Lotless series is the smallest independently priced market. Its economic terms are fixed before the first claim opens.
| Parameter | Meaning | Mutation rule |
|---|---|---|
| Collateral address | Canonical Stock Token contract | Immutable |
| Strike | USDG due per raw Stock Token unit | Immutable |
| Opening notional convention | Raw units represented at claim creation | Immutable |
| Taper rate | How remaining raw notional changes with time | Immutable |
| Corporate-action adapter | Predeclared event handling | Immutable for live claims |
| Fee band | Opening and exercise fee bounds | Future series only |
Governance may define a template for a future series. It cannot rewrite a live claim’s strike, taper, collateral, settlement asset, or exercise rights.
Protocol concepts
Taper mathematics
Lotless uses a deterministic exponential curve:
R(t) = R₀ × e^(−λt)
R₀ opening raw Stock Token notional
λ immutable taper parameter
t elapsed time
R(t) remaining exercisable raw notional
Exercise payment uses stored contract terms rather than a spot-price oracle:
USDG due = fixed strike × R(t)
External prices remain important for quoting and user decisions. They are not required to calculate the contractual delivery amount and strike payment.
Each series defines curve precision, rounding direction, minimum claim size, maximum taper, and time source.
Protocol concepts
Physical Stock Token settlement
“Physical settlement” means delivery of the referenced Stock Token contract. It does not mean delivery of the underlying company share.
- 1
Settle elapsed-time accounting and read remaining raw notional.
- 2
Collect
strike × remaining notionalin USDG. - 3
Burn or reduce the exercised Lotless claim.
- 4
Transfer the corresponding locked raw Stock Token units to the claimant.
- 5
Update aggregate coverage before any collateral release.
Before exercise, the buyer posts no margin and cannot be liquidated. The buyer can lose the premium paid. Gas, fees, liquidity, and taper still affect outcomes.
Stock Token accounting
Raw units before display units
Contract solvency must use canonical raw ERC-20 balances. Display multipliers may represent splits or other adjustments without changing raw balances. Interfaces can format; vault accounting cannot guess.
| Event | Required approach | Protocol handling |
|---|---|---|
| Split / multiplier change | Preserve raw-unit claims and derive display values from the canonical multiplier. | Multiplier-aware |
| Dividend-related display change | Follow issuer contract behavior; never double-adjust. | Issuer-defined |
| Merger / acquisition | Use a preapproved adapter or block the market. | Adapter required |
| Delisting / redemption | Predeclare delivery, closeout, and withdrawal behavior. | Fail-safe required |
| Issuer pause | Pause new claims without blocking valid customer exits where technically possible. | Exit-first |
Market coordination
Market approval
A token vote is not a substitute for professional review. A market reaches governance only after four independent checks:
Address, transfer behavior, raw units, multiplier, issuer dependencies.
Coverage, taper, exercise, rounding, corporate-action adapter, retirement.
Real buyers, writers, executable quotes, exit depth, budget caps.
Eligible users, jurisdictions, marketing, derivatives and securities analysis.
After review, veLOTLESS may approve bounded parameters. A timelock publishes them before the market accepts collateral.
Market coordination
Auction operators and performance bonds
An approved operator locks `$LOTLESS` to activate the market and posts a separate USDG bond to compensate objectively provable operational harm. Neither stake collateralizes an option.
Slashable
- Two conflicting signed clearing roots
- Commitment without reveal after the deadline
- Provably invalid clearing result
- Missed deadline with an available sequencer
Never slashable
- A subjective “bad price” judgment
- Low quote activity
- A governance disagreement
- Market loss borne under valid signed terms
Anyone may quote. Operator stake never buys order priority, and a permissionless fallback path must exist when the operator fails.
Market coordination
Maker Quality Budget
veLOTLESS voters can allocate a capped USDG budget among already approved markets. Makers earn from verified performance rather than token balances.
| Measurement | Why it matters |
|---|---|
| Firm filled notional | Rewards executable liquidity, not screenshots. |
| Fill ratio | Penalizes quotes that disappear when touched. |
| Valid quoted size | Measures useful depth inside a published band. |
| Commit / reveal completion | Measures operational reliability. |
| Settlement success | Requires clean payment and delivery. |
Wash volume and self-trading can imitate useful liquidity. The final metric set needs identity-independent anti-manipulation tests, market caps, global caps, and unused-budget recovery.
$LOTLESS
Token overview
`$LOTLESS` is the fixed-supply coordination asset. It activates approved markets through operator locks, creates veLOTLESS governance power, and connects genuine fee activity to a rules-based router.
| Maximum supply | Fixed at genesis | Core rule |
|---|---|---|
| Allocation | Public allocation | Transparent |
| Contributor vesting | Multi-year schedule | Aligned |
| Future minting | None after genesis | Immutable |
| Transfer tax | None | Zero tax |
`$LOTLESS` is not a Stock Token, option, company share, settlement asset, option collateral, or claim on protocol revenue.
$LOTLESS
veLOTLESS
Time-locking `$LOTLESS` creates non-transferable voting power. Lock duration, voting decay, delegation, early exit, and concentration limits define the vote-escrow configuration.
Intended scope
- Future protocol versions
- Approved market activation
- Capped Maker Quality Budgets
- Published fee bands
- Treasury budgets and risk-council elections
Forbidden scope
- Existing customer claim terms
- Customer collateral and withdrawals
- Exercise and settlement outcomes
- Unreviewed legal-market approval
- Arbitrary minting or direct voter-selected payouts
$LOTLESS
USDG fee router
- 1
Collect disclosed USDG opening and exercise fees.
- 2
Fund published operating requirements.
- 3
Fill the safety reserve to an independently reviewed target.
- 4
Fund the globally and per-market capped Maker Quality Budget.
- 5
Identify genuine surplus above every prior requirement.
- 6
Route the disclosed surplus share to transparent purchases and permanent `$LOTLESS` burns.
Operations, reserves, and market quality are funded before any purchase-and-burn allocation.
Governance
Proposal lifecycle and safeguards
The intended path is: discussion → independent review → formal proposal → voting delay → veLOTLESS vote → timelock → bounded execution.
Published changes need time for technical review and user response.
Delegates, operators, budget recipients, and reviewers disclose relationships.
Emergency authority cannot confiscate assets or block valid withdrawal and exercise.
Administrative control stays explicit, narrow, and follows a published transition path.
Developers
Protocol architecture
Stock Token ──→ Covered Writer Vault ──→ Claim Ledger
│ │
└──→ Exercise Router ←─┘
│
Stock Token delivery
$LOTLESS ──→ Operator Bond / Voting Escrow
│
Approved Markets / Market Gauge
USDG fees ──→ Operations ──→ Safety Reserve
│
Maker Quality Budget
│
Eligible surplus rule
Market RegistryStores independently approved templates and activation state.
Covered Writer VaultCustodies canonical raw Stock Token units and enforces full coverage.
Claim LedgerTracks transferable claim ownership, opening notional, transfers, and partial exercise.
Taper MathCalculates remaining raw notional from immutable series parameters.
Exercise RouterCollects USDG and atomically delivers locked Stock Tokens.
Corporate Action AdapterHandles predeclared multiplier and exceptional-event behavior.
Operator BondTracks `$LOTLESS` locks, USDG bonds, and objective slashing proofs.
Voting Escrow + GaugeCreates veLOTLESS and allocates bounded budgets across approved markets.
Fee Router + Safety ReserveApplies the published USDG waterfall and reserve constraints.
Governance TimelockDelays future configuration changes and constrains execution targets.
Developers
Integration sequence
- 1
Read immutable series parameters and canonical collateral address.
- 2
Calculate remaining raw notional for the intended block time.
- 3
Quote the premium in USDG through an approved market path.
- 4
Open or acquire a claim and index its series, owner, and remaining amount.
- 5
Settle transfers and partial exercise before mutating aggregate balances.
- 6
Calculate exact USDG due from strike × remaining raw notional.
- 7
Exercise and verify atomic Stock Token delivery.
Settle accounting before mutation. Fail closed on unsupported corporate actions. Treat live claim economics as immutable.
Developers
Interface model
| Market Registry | Series templates and activation state | Read interface |
|---|---|---|
| Claim Ledger | Ownership, transfers, and remaining notional | Core interface |
| Exercise Router | USDG payment and Stock Token delivery | Write interface |
| Event schema | Series, claim, transfer, and exercise events | Indexer path |
| TypeScript SDK | Typed quoting and integration helpers | Client layer |
| Security artifacts | Invariants, test vectors, and audit outputs | Verification |
Security
Security model and invariants
locked raw Stock Token units ≥ aggregate remaining exercisable raw units
- Every mint increases claims only after collateral is locked.
- Every collateral release settles taper accounting first.
- Partial exercise reduces claim notional and collateral by the same raw amount.
- Rounding never creates more exercisable units than collateral.
- Governance cannot reach customer custody or rewrite existing series terms.
- Spot-price oracle failure cannot corrupt the exercise arithmetic.
- Unsupported corporate actions fail closed under a predeclared state.
- Operator failure has a permissionless fallback path.
The security program covers formal invariants, property tests, fuzzing, fork simulations, external audit, economic review, corporate-action review, incident response, and bug bounty operations.
Security + legal
Complete risk register
IP and licensing
The AmPO paper notes a provisional U.S. patent; implementation confirms the licensing and IP position.
Legal and eligibility
Options on Stock Token economic exposures may trigger derivatives, securities, marketing, jurisdiction, and user-eligibility requirements.
Stock Token dependency
Availability, transfers, redemptions, pauses, and issuer behavior can affect collateral and delivery.
Corporate actions
Mergers, delistings, redemptions, and unsupported transformations can make delivery or closeout ambiguous.
Contract solvency
Raw-unit, rounding, transfer, partial-exercise, or collateral-release bugs can violate full coverage.
Liquidity
A novel taper schedule may fail to attract credible buyers, writers, or makers.
Token governance
Concentrated voting, bribery, delegation conflicts, or captured operators can distort budgets and future markets.
Maker measurement
Wash volume can imitate useful liquidity unless accounting is manipulation-resistant and capped.
Fee router
A buy-and-burn can create legal or market-expectation risk and can starve reserves if activated too early.
Security + legal
Legal and market requirements
Stock Tokens provide economic exposure through tokenized instruments. They are not the underlying company shares and do not provide shareholder, voting, or ownership rights in the referenced company. Availability and eligibility can differ by jurisdiction.
- 1
IP: obtain author collaboration or appropriate licensing and qualified patent clearance.
- 2
Legal structure: define eligible users, jurisdictions, disclosures, and derivatives treatment with qualified counsel.
- 3
Code safety: prove full coverage through audit, invariant testing, rounding analysis, and corporate-action simulations.
- 4
Market proof: demonstrate genuine demand and executable liquidity without inflationary token incentives.
- 5
Token launch: publish fixed supply, allocation, vesting, control, liquidity, and conflict disclosures before deployment.
Resources
Source material and glossary
- Claim
- The transferable Lotless option right for one series.
- Raw unit
- The canonical onchain ERC-20 balance unit used for solvency accounting.
- Remaining notional
- The Stock Token amount still exercisable at a specific time.
- Taper
- The deterministic schedule that reduces remaining notional.
- Physical settlement
- Delivery of the Stock Token contract, not the underlying share.
- veLOTLESS
- Non-transferable voting power created by locking `$LOTLESS`.
- Maker Quality Budget
- A capped USDG budget allocated to approved markets and earned through measurable performance.
- Safety reserve
- Protocol-controlled USDG funds prioritized before eligible surplus routing.