For some time now, I’ve been working on a book called Tokencraft: The Art and Science of Designing Tokens That Work.

The holiday pause seemed like a good excuse to share a short preview.

The book is an attempt to make sense of crypto without jargon and hype—to explain tokens as tools for allocating risk, coordinating effort, and encoding economic relationships that traditional systems struggle to express.

It’s meant for anyone building or allocating capital in an increasingly unstable world.

Yesterday, I shared a draft of the fifth chapter.

Below is a succinct draft of the sixth, A Tale of Two Pledges: How Risk Fixers Came to Rule the World, and How Tokencraft Can Balance the Scales.

History has always been a struggle between three forces: Risk Bearers, Risk Fixers, and Risk Allocators.

Risk Bearers create real value under uncertainty. They are the farmers growing crops, artisans producing goods, merchants trading across dangerous routes, and builders improving land. Their income was variable. Their output depended on reality. They lived inside a mercurial realm of perpetual ambiguity.

Risk Fixers sought the opposite. Historically landlords, lenders, credit-extenders, and early financiers, their defining trait wasn’t necessarily greed but a preference for certainty. The Fixers wanted predictable returns, enforceable schedules, and obligations that did not bend with circumstance.

Fixed claims served this purpose perfectly because they insulated them from volatility by pushing uncertainty downward. When outcomes diverged, the Bearer absorbed the shock. The Fixer still mostly collected—until, that is, the system itself could no longer sustain the arrangement.

Between them sat the Allocators: kings, councils, states, and modern governments. Their role was never to eliminate risk, but to decide where it landed once the tension between Bearers and Fixers became unsustainable.

Sometimes Allocators enforced contracts and seized land. Other times they declared jubilees, suspended debts, or inflated currency to dilute fixed claims. Often they socialized losses entirely, but almost always tilted the board at convenient angles.

Every so often, you find yourself with powerful hybrids, like BlackRock, which operates as both a Risk Fixer and Risk Allocator. Like a traditional Fixer, BlackRock engineers products that transform uncertainty into predictable cash flows (ETFs, index funds, duration ladders), but it also sets de facto standards for what counts as investable (via indices, eligibility rules, and ESG frameworks).

Historically, hybrid Fixer–Allocator roles appeared in institutions like early central banks, chartered companies, and clearinghouses—private entities whose technical decisions quietly shaped capital flows at sovereign scale. BlackRock fits that lineage, updated for an index-driven, global financial system.

As a matter of system design, those three roles want separation. That’s why banks were split from trading to curb self-dealing, exchanges from brokers to stop front-running, rating agencies from issuers to preserve credibility, and central banks from treasuries to keep money beyond political capture. (Alas.) Every major financial crisis is a moment when this triad breaks balance:

→ builders carry more risk than they can absorb,

→ fixers accumulate protection without accountability,

→ and allocators are forced to step in as system backstops.

Historically, we bought time through two opposing instruments: the vif gage, which let outcomes resolve organically, and the mort gage, which imposed a schedule and forced certainty.

THE VIF GAGE (LIFE PLEDGE)

Before fixed schedules and standardized contracts, finance was not built around certainty. It was built around outcomes. That’s because value creation was inseparable from uncertainty. Harvests failed. Trade routes closed. Demand fluctuated. Wealth was generated unevenly and unpredictably, and everyone involved understood this as a fact of life.

From this logic of early outcome-based economics emerged the medieval vifgage, the living pledge. Under a vifgage, the output of the pledged asset—its crops, rents, or revenues—was applied directly to reducing the debt itself.

Farmers repaid loans through a share of each harvest, landlords applied rents toward extinguishing debts, and merchants financed trade by pledging a portion of voyage revenues rather than fixed payments. As value was created, the obligation diminished. Risk was shared. Outcomes mattered more than schedules. The vifgage leaned toward Bearers because it allowed obligations to flex with reality.

The vifgage thrived in uncertainty—but it could not scale in a pre-digital world. It required judgment, trust, and constant renegotiation. Courts couldn’t standardize it. Markets couldn’t trade it. States couldn’t easily govern it. The mortgage—or the death pledge—won because it was legible.

Today, vifgage-style arrangements exist, yes. But they survive only at the edges because they don’t scale through stress within today’s legal and market architecture. They appear mainly in revenue-based startup financing, income-share agreements, usage-based infrastructure contracts, and shared-equity housing.

Due to their complexity and reliance on discretionary enforcement, these deals amass accreditation requirements, friction, high costs, or other barriers to entry—even at small, local scales. As we’ll see, tokenization architecture leans toward vifgage logic, giving us the opportunity to bring back outcome-based, adaptive finance and, as a result, minimize systemic risk in places volatility would otherwise concentrate.

THE MORT GAGE (DEATH PLEDGE)

The mortgage also emerged from the medieval world. It secured certainty for Fixers in an uncertain environment. Land or property was pledged as collateral, but the debt itself did not shrink with use. Time did not heal the obligation.

If repayment failed, the asset was lost.

As legal systems matured, the mort gage scaled. Courts could enforce it. Markets could trade it. States could regulate it. Over centuries, it escaped land and became the template for modern finance. The mortgage leaned toward Risk Fixers because it locked in certainty.

But mort gage work best in stable environments. In volatile ones, they concentrate risk until they break. Major financial crises share a common structure. Fixed obligations are layered onto volatile reality until adjustment becomes impossible.

In the Great Depression, falling prices met rigid debt and produced mass foreclosure. In the Savings and Loan crisis, rate volatility overwhelmed fixed mortgage structures. In 2008, fixed payment schedules amplified losses as housing prices and incomes shifted.

Sovereign debt crises follow the same pattern, with fixed claims colliding with volatile growth and resolving through restructuring, austerity, or inflation. In fact, death pledge logic plays a central role in why entire nations carry persistent, growing debt loads. The issue is borrowing through instruments that do not flex with reality, leaving adjustment to arrive late, loudly, and politically rather than early and mechanically.

In systemic breaks, losses spread widely, but the lasting damage concentrates on (guess who?) the Builders, who absorb volatility without the buffers available to Fixers or Allocators.

THE THIRD THING (TOKENIZATION)

So right now we’re caught in a weird place. We’re operating a financial system optimized for mort gage fixed schedules, enforceable promises, and predictable cash flows, while the world supplying those cash flows has become volatile, nonlinear, and shock-prone.

Courts are built to enforce fixed claims, not adaptive ones. Markets favor standardization over contingent flows. Accounting systems resist continuous adjustment. Enforcement remains episodic and discretionary. As a result, outcome-linked instruments survive only as niche, bespoke solutions—useful at the margins, but unable to function as core financial primitives.

In downturns, for example, revenue-based financing and income-share agreements routinely require renegotiation or ad hoc forbearance, revealing the same limitation: adaptation exists in theory, but not as a first-class, mechanical feature. Adaptation happens, but only when it’s too late.

In medieval vifgage systems, renegotiation was the system, not a failure of it.

Adjustment happened continuously, locally, and as a default mode of operation. Obligations flexed as reality changed, and enforcement was relational rather than binary. Negotiation wasn’t an exception triggered by crisis; it was how the contract lived day to day.

Structurally speaking, that’s why tokenization leans toward vifgage logic. Tokens are native to flows, states, and continuous adjustment. They settle repeatedly, respond to measured outcomes, and can encode proportional claims that evolve over time. That makes them well suited to expressing life-pledge–style obligations, where claims shrink or expand with reality rather than follow a fixed calendar.

Tokenization has the potential to turn adaptation into infrastructure. It can’t eliminate risk or erase uncertainty, but it can make flexible claims legible. It allows obligations to be expressed as claims on flows rather than promises on schedules.

Instead of “pay X every month regardless,” a tokenized vifgage says “this claim entitles its holder to a defined share of a measurable outcome”—revenue, usage, throughput, appreciation. This moves pressure from rigid schedules to adaptive claims, restoring balance for Builders who operate under real uncertainty and giving investors more optionality.

Under the life pledge, payments adjust automatically. Defaults become rarer because obligations flex before breaking. More lenders stop receiving fixed payments on a calendar and start receiving a share of realized outcomes. Yield looks less bond-like and more equity-like, though without full exposure to collapse.

Upside caps replace foreclosure rights where enforcement destroys more value than it protects. The lender’s protection shifts from control in failure to participation in success, with a defined ceiling. Predictability gives way to resilience. Enforcement shifts from courts to code. Risk redistributes continuously rather than catastrophically. What once required politics now happens mechanically.

Losses resolve earlier and more gently. Tail risk shrinks. Costs fall. Design replaces leverage (structure skill > legal enforcement). Seizures become less common. Portfolios become more durable.

But, of course, this only works if Tokencraft principles are taken seriously and the design choice is made explicit. Outcomes must be real. Claims must be bounded. Adjustment must be automatic and neutral, not discretionary. Complexity must be abstracted, so the interface is intuitive (sometimes known as the “DeFi mullet” in crypto circles). Enforcement must be credible. When those conditions hold, the vifgage stops being a historical curiosity and becomes a modern primitive.

Housing can be financed without foreclosure cliffs. Businesses can raise capital without bankruptcy cascades. Infrastructure can pay for itself without guarantees. Labor can be funded without lifelong debt traps. Risk is still the constant bugaboo—but it shapeshifts continuously and adaptively instead of all at once and violently.

The mortgage fixed risk.

The vifgage shared risk.

Tokenization allows shared risk to scale.

What changes? Rigidity stops being assumed everywhere and has to earn its place. Tokens make that choice explicit, allowing systems to mix certainty and flexibility rather than pretending one size fits all.

Tokencraft, then, represents the potential restoration of choice: deciding, asset by asset and context by context, whether an obligation should be dead or alive. In a world defined by volatility, that choice matters. Volatility isn’t the enemy. The true enemy? It’s rigidity without choice, locked in before outcomes are known.

Tomorrow, we’ll see The 8 Heavenly Virtues of Tokencraft.