Navy: Designing the Structured Credit AppChain

1. The Problem

Banks gatekeep credit trust. That is the core issue.

If you want to lever up a BDC position at a retail brokerage, you get 2:1 max. If you want to short one, good luck finding a locate. Most BDCs and REITs sit on the Hard to Borrow list because the float is small and institutions hoard the shares. Dividends settle T+2. Your capital is stuck for days.

Institutions live in a different universe. Full return synthetics give them the complete economic return of an asset (price changes plus dividends) without owning a single share. Cross collateralized repo lets them lever 4x, 5x, 10x with dynamic margin. Synthetic shorts let them express a bearish view without borrowing. They get all of this through prime brokerage agreements that require seven figure minimums and an accredited investor stamp.

Banks charge hedge funds 1% to 3% annually for this access. Smaller funds cannot even get in the door.

On chain the gap is worse. DeFi has perpetual futures for crypto assets but nothing for the $2T+ universe of NAV anchored income assets. No synthetic BDCs. No leveraged REIT exposure with dividend pass through. No way to short a CEF trading at 20% above NAV.

Navy replaces the prime broker. Not by tokenizing securities. By rebuilding the entire stack on chain.

2. The Four Core Systems

Income securities sit in a fundamentally different design space than volatile tokens. BDCs have real NAV from SEC filings. REITs pay monthly dividends. CEFs trade structurally below their portfolio value. The Navy L1 is built around four systems that make synthetic income trading possible.

The Rebase Engine

Atomic dividend settlement. When Ares Capital goes ex dividend, the NYSE opens with a price $0.48 lower. Without atomic settlement, the system sees a "crash" and liquidates leveraged longs even though they should be receiving the dividend.

The Navy L1 solution: at exactly the first block of the ex date, the chain pauses trading for one block and executes a System Transaction. The oracle price adjusts downward. In the same block, the collateral of every Long increases by the dividend amount. Health Factors recalculate with both values. The "price drop" is perfectly offset by the "collateral increase" in a single millisecond.

This cannot be bolted on as a smart contract. It must be baked into the consensus layer because the price adjustment and the collateral credit must be atomic.

Dual Input Oracle (NBBO Midpoint + NAV)

A BDC might trade at $16 on the NYSE but own a portfolio of loans worth $20 per share (the NAV). Navy tracks both. The NBBO midpoint drives trading. The SEC filed NAV drives the circuit breaker floor. Two inputs, two jobs.

The Layered Liquidity Vault (LLV)

A single unified USDC pool with virtual tranching that replaces the prime broker's balance sheet. Senior depositors get protected yield. Junior depositors take first loss for outsized returns. The full architecture is in Section 3.

Points Defense (Zero Gas)

Gas fees eat into dividend yield. If you are earning 10% from a BDC and paying 2% in gas, the product fails. Navy uses a Points based reputation system. The L1's mempool prioritizes transactions based on the user's Points balance. High Points users get fast track execution for free. New or spam accounts are rate limited. No gas. No MEV. No front running.

3. The Layered Liquidity Vault (LLV)

Every other system feeds into or out of the LLV.

In the traditional world, a prime broker puts up its own balance sheet to warehouse risk. On Navy, two classes of liquidity providers do it instead.

Single Pool, Virtual Tranching

There is one USDC pool. The tranching is virtual: accounting logic inside the contract determines who gets paid first and who absorbs losses first. Every dollar in the vault is usable for counterparty positions.

How the Pool Earns

The pool takes the other side of every trade. It does not bet on direction. It earns from the cost traders pay to take risk. Five revenue streams:

Skew pricing. When the market is imbalanced (eg 80% long), the pool quotes a worse price for the popular side. If the NYSE price is $20.00, longs buy at $20.10. That $0.10 is instant margin for the pool.

Funding rates. Every 8 hours, the popular side pays rent. A stock can go up 1% and the trader still loses if they paid 2% in funding to hold the position. Rent flows to the pool.

Liquidation penalties. When a leveraged position gets closed, the pool keeps a penalty fee. More volatility means more liquidations means more revenue.

Trading fees. 0.10% on every trade. Volume drives this.

Accrued pricing. Traders pay the dirty price (Market + Accrued Dividend) on entry. The pool collects the dividend cost upfront. No surprise payouts.

The pool also has a hard stop: open interest caps. If the Junior tranche has $1M, the pool will not accept more risk than it can cover. The buy button turns off until more capital enters or the market rebalances.

$nSAFE: The Senior Tranche

Senior depositors mint $nSAFE tokens. They get 8% to 10% priority yield, paid before anyone else. Instant exit. No lockup. Junior capital absorbs losses first.

Think of it like a senior secured bond. You get paid first. You lose last. The yield is lower but the risk is structurally minimized.

Senior withdrawals carry a quadratic exit fee during stress periods. The fee scales with the square of the withdrawal percentage relative to pool size. Pull 1% of the pool? Negligible fee. Pull 10% during a drawdown? The fee gets expensive fast.

$nRISK: The Junior Tranche

Junior depositors mint $nRISK tokens. They earn 30% to 60% yield from the residual after seniors are paid. But they take first loss. If trading losses exceed insurance fund reserves, the Junior tranche absorbs it.

The tradeoff: 30 day commitment. Junior capital is locked for 30 days after deposit. When a Junior requests withdrawal, a Withdrawal NFT is minted representing the pending redemption. This NFT is tradeable on a secondary market. Need liquidity before the 30 days? Sell the NFT at a discount. Someone else takes the remaining lockup.

The 30 day lock stops depositors from pulling out during a crash. That is when the system needs Junior capital the most.

The Yield Waterfall

All protocol fees flow into the vault. Trading fees. Funding payments. Liquidation penalties. Net trader P&L. The waterfall distributes them in strict order:

Step 1. Seniors get their priority yield (8% to 10% annualized, calculated per block).

Step 2. Insurance fund gets its allocation.

Step 3. Everything remaining goes to Juniors.

In a good month, the residual is massive. Juniors earn 30% to 60% because they are taking the equity tranche of a leveraged trading platform. In a bad month, the residual might be zero. In a terrible month, the Junior balance shrinks.

The Navy Heartbeat

Yield is calculated once per day at a randomized block height. Not at midnight UTC. Not at a predictable time. The exact block is determined by a VRF (Verifiable Random Function) seeded by validator signatures.

Why randomized? If yield snapshots are predictable, capital can flash in right before the snapshot and flash out right after. Randomization prevents this. You have to be in the pool to earn the yield.

In Flight Loss Assignment

When a Junior is in the 30 day cooldown period, their capital is still at risk. Withdrawal does not equal escape. If trading losses hit the Junior tranche during your cooldown, your redemption amount decreases.

redemption_value = initial_deposit * (1 + accrued_yield) * (1 - loss_share)

The loss share is proportional to your fraction of total Junior capital. This prevents the classic DeFi exploit where insiders front run losses by queuing withdrawals. Your money is at risk until it is actually out.

ADL as Emergency Brake

If losses are severe enough that the Junior tranche hits $0, the protocol activates Auto Deleveraging. ADL force closes the most profitable open positions to recover capital. This is the absolute last resort before losses touch seniors. The full ADL mechanism is in Section 9.

4. The Oracle: NBBO Midpoint

The entire protocol depends on accurate price data. Navy does not outsource this to Chainlink and hope for the best. The oracle is validator native.

Validator Native Pricing

Every Navy validator runs a sidecar process that connects to market data feeds. During US market hours (9:30 AM to 4:00 PM ET), validators pull the NBBO (National Best Bid and Offer) midpoint for each listed asset. The midpoint is the average of the best bid and best ask across all US exchanges.

Validators submit price attestations every block. The consensus price is the weighted median of all validator submissions. Outliers beyond 0.5% deviation from the median are discarded and the submitting validator is flagged. Three consecutive flags trigger a slash review.

Market Hours vs Dark Hours

BDCs and REITs trade on the NYSE. They do not trade 24/7. During dark hours (nights, weekends, holidays), the oracle holds the last closing price as a stale reference. Trading on Navy stays open but with restrictions: maximum leverage drops by 50%, and margin requirements increase.

This prevents manipulation during illiquid periods. You cannot open a massive leveraged position on Saturday night when there is no real market to anchor the price.

The Convergence Block

Monday morning at 9:30 AM ET, the NYSE opens. The first block after market open is the Convergence Block. The oracle updates from the stale weekend price to the live NBBO midpoint. If the gap exceeds 2%, a 5 minute trading pause kicks in. Margin calls are recalculated. Positions that are now underwater get flagged.

Weekend gaps destroy leveraged positions in traditional markets. The Convergence Block handles them directly.

Confidence Intervals and Protect Mode

Each price attestation includes a confidence score. When validators disagree by more than 0.3%, the confidence score drops and the protocol enters Protect Mode.

In Protect Mode: no new positions can be opened. Existing positions cannot increase leverage. Liquidations use the most conservative price (worst case for the protocol). This state lasts until confidence recovers. It is an automatic circuit breaker that activates when the oracle is uncertain.

NAV Consensus

When a BDC files a 10 Q, the top 10 validators independently scrape SEC EDGAR for Total Assets and Total Liabilities. If 8 of 10 agree on the NAV per share within 1%, the on chain value updates. Any validator posting fabricated data is slashed. This is a decentralized auditor, not just a price feed.

5. Skew Scale Pricing

Funding rates are powerful but slow. They settle every 8 hours. Navy adds an immediate layer: skew scale pricing.

When the pool's open interest is heavily skewed (say 90% long), the vAMM adjusts its quotes. Longs get worse entry prices. Shorts get better entry prices. The adjustment scales with skew:

skew_premium = base_spread * (long_oi / total_oi)^2

At 50/50 balance, the premium is zero. At 70% long, longs pay a small premium. At 90% long, the premium becomes significant. This creates an immediate arbitrage opportunity. A market maker can short the synthetic at the premium adjusted price, hedge with the real asset, and lock in profit.

The result: skew corrects in minutes, not hours. Funding rates handle sustained imbalance. Skew scale pricing handles spikes.

6. Funding Rates

Every 8 hours, the protocol calculates the skew between longs and shorts. The dominant side pays the minority side. Funding scales exponentially with imbalance:

F = baseRate * e^(k * skew)

This is not linear. At 60% long skew, funding might be 5% annualized. At 80%, it jumps to 15%. At 90%, it hits 40%+. The exponential curve creates massive pressure to rebalance before the system reaches dangerous territory.

Market Maker Incentives

When 90% of open interest is long and funding is elevated, market makers see a guaranteed yield from taking the short side. The position is hedged. They hold the actual BDC stock in a brokerage account and short the synthetic on Navy. Delta neutral. They earn the funding spread.

The math for a market maker shorting a 12% yielding REIT:

net_carry = funding_received (annualized) − dividend_cost (12%) − hedging_cost

When the market is skewed enough that funding exceeds 15% annualized, the market maker earns 3%+ net carry on a delta neutral position. That is positive carry for providing a service. Capital shows up on its own.

Funding and Dividends

When the pool is net short (most users are long), the elevated funding it collects from longs effectively pre funds the dividend obligation. The funding mechanism is the pre payment system. The skew pays for dividends.

7. The Repo Engine (Leverage)

Institutional repos work because they are cross collateralized. Navy replicates this with a Unified Margin Account.

Dynamic LTV

Instead of a flat 50% margin like at a retail brokerage, the smart contract calculates risk based on volatility. The risk engine maps each asset to a proxy basket of publicly traded equivalents and monitors realized volatility continuously.

initial_margin = base_margin * (1 + vol_multiplier * realized_vol / target_vol)

A steady REIT like O with 15% annualized vol might get 4:1 leverage (25% margin). A volatile mREIT like NLY at 35% vol gets 2.5:1 (40% margin). The system calibrates in real time. This is how institutional prime brokers operate. The difference is that Navy does it with transparent, auditable code instead of a relationship banker making a phone call.

Health Factor

Every account has a single number that determines its risk status:

HF = (Collateral * LTV) / (Debt + Unrealized_Loss)

Green zone (HF > 1.5). Position is healthy. Full trading capabilities. No restrictions.

Yellow zone (HF 1.0 to 1.5). Warning state. The UI shows alerts. New position opens are restricted. The trader needs to add collateral or reduce exposure.

Red zone (HF < 1.0). Liquidation eligible. The position enters the ADL queue.

Cross margin. Health factor is calculated at the portfolio level, not per position. If a trader is long xARCC at profit and long xNLY at loss, the profit from ARCC offsets the NLY loss. This prevents unnecessary liquidations and is how institutional prime brokers manage risk.

NAV Safety Net

BDC and REIT prices occasionally gap down 30% on low volume even though the underlying loans are perfectly healthy. This is a "scam wick" that wipes out leveraged positions that should survive.

The Navy L1 maintains a Last_Reported_NAV from Validator NAV Consensus. The Prime Council sets a Safety Buffer (e.g. 30%). The trigger:

if (Spot_Price < NAV * (1 - Safety_Buffer)) freeze_liquidations(asset)

During the freeze: trading stays open. Users can buy the dip or close voluntarily. But the liquidate() function is blocked. The freeze lasts 1 hour or until the Prime Council verifies whether the crash is market irrationality or a real credit event.

Discount Credit

When an asset trades below NAV, the underlying real assets provide a floor. The math:

Discount_Credit = max(0, (NAV - Spot_Price) / NAV) * credit_factor

Example: ARCC trading at $16 with NAV of $20 (20% discount). Standard maintenance margin is 5%. With Discount Credit (credit_factor = 0.5): the effective maintenance drops to 4.5%. The real assets backing the position reduce liquidation risk. For assets trading at a premium, there is no Discount Credit. The premium can evaporate.

8. The Dividend Engine

The hardest part of trading income assets synthetically. In traditional finance, the bank handles dividends for you and charges 1% to 3% for the privilege. Navy does it with a System Transaction.

Atomic Settlement

When the real world BDC or REIT goes ex dividend, the Rebase Engine fires. In a single block:

Slash. The contract deducts the per share dividend amount from every short position's collateral.

Check. The contract credits the same amount to every long position's collateral.

Reprice. The oracle adjusts the reference price downward by the dividend amount.

All three operations happen in the same block. There is no window between the price dropping and the dividend being paid. Health Factors stay constant. No spurious liquidations. T+0 settlement. Not T+2 like at a brokerage.

DRIP

If DRIP is enabled, the dividend credit automatically mints additional synthetic tokens at the current price instead of adding USDC to collateral. Auto reinvestment. Compounding. One toggle.

Dividends on Leverage

Dividends apply to the full notional position, not just collateral.

leveraged_yield = base_yield * leverage_multiple

At 3x leverage on a 12% REIT: 36% gross yield on collateral. Funding might cost 5% to 8% annualized depending on market skew. Net yield: 28% to 31%. Compare that to the 12% you would earn unlevered at a TradFi brokerage with no ability to amplify. Full return synthetics make this possible.

Where the Dividend Money Comes From

No cash comes from the actual company. The dividend is a collateral transfer between market participants.

When ARCC declares $0.48 per share, the protocol slashes $0.48 from every short's collateral and credits $0.48 to every long. The stock price drops by $0.48 on the exchange. The short gains $0.48 from the price drop but loses $0.48 from the slash. Net zero on the event itself.

When longs outnumber shorts, the Junior pool covers the gap. If dividends owed exceed what shorts can pay, the difference comes from Junior principal. Juniors accept this because they also collect all funding rates from those same longs.

The Two Yield Numbers

Every asset has two yield metrics. Both are shown on the trading terminal.

Current Yield is Dividend divided by Market Price. A stock at $0.60 paying $0.06 annually shows 10%. This is the return on capital deployed today.

NAV Coverage is Dividend divided by NAV. The same stock with $1.00 NAV shows 6%. This measures whether the company can sustain the payout. If NAV Coverage exceeds 12%, the dividend is at risk of being cut.

The spread between these two numbers is the opportunity. A stock at a deep discount has high Current Yield but low NAV Coverage. The payout is safe but the market is pricing it like it is not. That gap is where Navy traders make money.

Live Breakeven Price

Every open position has a real time breakeven price: the point where total return (price P&L plus accrued dividends minus funding costs) equals zero.

For longs on high yield assets, the breakeven drops every day. The dividend accrues in the background, lowering the price at which you break even. Even if the stock dips, you might still be in profit once you account for the yield.

A perp DEX does not do this. On Hyperliquid, your breakeven is your entry price plus fees. On Navy, your breakeven shifts every day because the underlying asset pays dividends. The trading terminal shows this as a live line on the chart. Green zone above breakeven. Red zone below.

Accrued Dividend Pricing (The Anti Front Run)

The obvious attack: buy right before ex dividend, collect the payout, sell immediately after. Navy kills this the same way bond markets do. Accrued pricing.

Instead of the dividend being a quarterly "jackpot," it accrues into the price every day. If ARCC pays $0.48 per quarter, the protocol adds roughly $0.005 to the Accrued Dividend value each day. When you buy the token, you pay the market price plus the accrued amount. This is the "dirty price."

On ex dividend date, the accrual resets to zero. The oracle price drops. Longs get credited. Shorts get slashed. The balance is flat because the value was already priced in over 90 days.

An insider who knows the dividend before the 8 K filing? By the time the announcement drops, 99% of the dividend is already in the price. There is nothing to front run.

This is how TRS desks and bond markets have operated for decades. One clean mechanism instead of tenure rules, exit taxes, or TWAP entry pricing. The dividend is not a surprise event. It is a slow, deterministic build up. The 8 K just confirms what the math already knew.

9. ADL: The Grace Period

Auto Deleveraging is the last resort. Navy adds a grace period.

The Public Queue

When the Junior tranche approaches zero or skew exceeds critical thresholds, positions are ranked by profitability and placed in a public ADL queue. Everyone can see the queue. No surprises.

The Warning Light

The top positions in the queue see a warning indicator in the UI. The protocol broadcasts an on chain event. Bots can watch for it. The message is clear: your position may be force closed. Act now.

60 Second Grace Period

From the moment a position enters the active ADL zone, the trader has 60 seconds to close voluntarily. Voluntary close during the grace period: zero ADL fee. The trader keeps their full P&L and exits cleanly.

If the 60 seconds expire without action, the protocol force closes the position. Force close fee: 1% of position value, paid to the Junior tranche. This turns forced liquidation into market driven deleveraging. Rational traders close voluntarily. Only inactive or negligent positions get force closed. And even those contribute to Junior recovery via the 1% fee.

The Ranking

ADL is ranked by profitability. The most profitable positions close first because they have extracted the most from the pool. In practice, ADL should almost never trigger. The exponential funding curve and skew scale pricing create sufficient pressure well before the system reaches ADL territory.

10. The Safety Stack

Navy uses layered defense. No single mechanism bears all the risk. Losses cascade through the stack in order:

Layer 1: Junior Tranche. First loss capital. The $nRISK holders knowingly accept this in exchange for outsized yield.

Layer 2: Insurance Fund. Funded by the fee waterfall and risk adjusted siphons from high leverage positions. Covers bad debt gaps.

Layer 3: Delta Neutral Hedge (V3). In V3, the protocol will hedge tail risk by taking offsetting positions on external venues (CME futures). This is the protocol level backstop.

Layer 4: ADL. Force close profitable positions to recover capital. The grace period mechanism from Section 9.

Layer 5: Senior Tranche. The absolute last resort. Seniors only take losses if every other layer is exhausted. In practice, this should never happen.

Quadratic Exit Fees

During stress (defined as Junior tranche below 50% of target), senior withdrawal fees scale quadratically:

exit_fee = base_fee * (withdrawal_pct / pool_pct)^2

Small withdrawals are cheap. Large withdrawals during stress cost more. The fee scales with pool utilization.

Crisis Triggers

When systemic stress exceeds thresholds, the protocol activates crisis mode:

Halt leveraged longs. No new leveraged long positions can be opened. Existing positions can only reduce.

Spike funding. Funding rates jump to emergency levels, making the dominant side extremely expensive.

Auction positions. Distressed positions are auctioned to market makers at a discount, transferring risk to participants who actively want it.

11. Launch Assets

Navy launches with 10 assets across three categories. The protocol supports any publicly traded company with an audited NAV and regular dividends. There are hundreds of BDCs, REITs, and CEFs that qualify. New listings are added through governance. The 10 below are the launch set.

BDCs. ARCC (Ares Capital, 9.2%), MAIN (Main Street Capital, 6.4%), HTGC (Hercules Capital, 10.1%). These lend to middle market businesses. Deep floats, high volume, quarterly dividends.

REITs. O (Realty Income, 5.6%), STWD (Starwood Property, 9.8%), NLY (Annaly Capital, 13.1%), AGNC (AGNC Investment, 14.8%). Real estate and mortgage exposure. O pays monthly. NLY and AGNC are mortgage REITs with higher yield and volatility.

CEFs. PDI (PIMCO Dynamic Income, 13.5%), UTG (Reaves Utility, 6.9%), GOF (Guggenheim Strategic, 15.2%). Closed end funds that manage bond and utility portfolios. CEFs frequently trade at premiums or discounts to NAV, creating natural two sided flow.

Single Global Junior Pool

All assets share one Junior tranche. One pool. This diversifies the Junior's risk across uncorrelated positions. When BDC longs are losing, REITs might be flat and CEF shorts might be winning. The Junior pool nets it out. Risk is allocated within the pool based on asset weights set by the Prime Council.

12. Governance: The Prime Council

DeFi governance is slow. A DAO vote takes days. Markets move in seconds. Navy splits governance into two tiers.

The Prime Council (Fast Action)

7 seat council. Elected by Navy Points holders. The Council handles time sensitive decisions:

Open interest caps per asset. Circuit breaker thresholds. Emergency parameter changes. Margin requirement adjustments. NAV Safety Net freeze/unfreeze decisions.

Council actions execute immediately with a 4 of 7 multisig. Speed matters when markets are crashing.

The DAO (Strategic Action)

Navy Points holders vote on strategic decisions:

New asset listings. Fee structure changes. Protocol upgrades. Treasury allocations. These go through a standard proposal, discussion, and vote cycle.

Validator Veto

Validators can veto any Council or DAO decision with a supermajority (67%+). This is the ultimate check. If the Council tries to set dangerous parameters or the DAO votes to list a toxic asset, validators can block it. The people running the infrastructure have final say on what the infrastructure does.

13. The Validator Network

The oracle is only as trustworthy as the people running it. Navy validators are not anonymous nodes. They are reputation gated operators who stake real capital against their own accuracy.

Admission

To become a Navy validator, a node must stake $100,000 in $NAVY plus 1M Navy Points as slashing collateral. They must prove redundant, low latency connections to IEX, Nasdaq, and SEC EDGAR via a proprietary sidecar. Hardware requirements include dedicated NVMe storage and high speed CPU capable of NBBO midpoint calculations every 400ms.

Committee Assignment

For every listed asset, the L1 randomly assigns a sub committee of 10 validators each epoch. For dividends and NAV updates, 8 of 10 must submit identical data (80% supermajority). For spot price, 7 of 10 must agree within 0.5% (66% threshold). If consensus fails on a dividend or NAV event, Oracle Lock remains active and the Prime Council is alerted. No trades settle until resolved.

Validators must also update the accrued dividend value every 24 hours. Missing two consecutive updates triggers an automatic Strike 1.

Proof of Filing

Validators do not just submit a number. They submit a cryptographic hash of the specific SEC filing they extracted the data from. The chain can verify the source. Submissions must arrive within 3 blocks of the filing appearing on EDGAR. Late validators forfeit their reward. Wrong validators get flagged for slashing.

Slashing Ladder

Three strike system with escalating penalties.

Strike 1: price deviation greater than 0.5% or missed accrual update. The validator loses all fees and block rewards for that epoch. Strike 2: inconsistent data or minor 8 K entry error. 10% of staked Navy Points are burned, reducing governance power. Strike 3: collusion or deliberately false data. 100% of $NAVY stake is slashed. Funds move directly into the Junior pool ($nRISK). Validator removed from the network.

Whistleblower Bounty

Junior ($nRISK) holders can challenge any validator submission. The challenger posts a $500 USDC bond to prevent spam, then submits a link to the SEC filing or timestamped NBBO screenshot that contradicts the validator consensus. The Prime Council reviews within 4 hours.

If the challenge is valid, the whistleblower receives 50% of the slashed validator bond. The rest goes to the Junior pool. On a $100K validator stake, that is $50,000 or more. If the challenge is invalid, the $500 bond is burned.

This turns every Junior holder into a protocol auditor. If 8 validators try to fake a dividend to help an insider, any Junior holder can blow the whistle and collect the bounty. A validator feeding false data loses $100,000 to catch a $5,000 trade. The math makes collusion unprofitable.

Rule Summary

14. Fee Structure

Fee Distribution: 70/20/10

70% to the LLV. This is the yield that powers Senior and Junior returns. The vault is the protocol. The protocol feeds the vault.

20% to the Insurance Fund. Until the fund reaches 25% of total open interest. After that, the Insurance allocation redirects to the LLV, boosting yields.

10% to Treasury. Operations, oracle costs, development, audits.

Revenue comes from trading fees, lending interest, and vault performance fees.

15. Navy Points

Use the protocol, earn points. Points are non transferable. Earned through trading volume, LLV deposits, and vault participation. When Navy launches its token, points convert. Early users get rewarded.

16. Roadmap

V1: Launch. 10 assets (BDCs, REITs, CEFs). Senior/Junior LLV. Core trading engine. Rebase Engine. Validator native oracle. Points system.

V2: Counter Cyclical Assets. Expand to assets that perform well in downturns. Treasury REITs. Infrastructure BDCs. Muni CEFs. The portfolio becomes a macro toolkit, not just income.

V3: CME Hedge. Protocol level delta neutral hedging via CME futures. The Insurance Fund and a dedicated hedging module take offsetting positions on regulated exchanges. This is the protocol level backstop for the Senior tranche.

17. Risk and Fragility

No system is unbreakable. We are honest about the risks.

Credit correlation. BDCs hold portfolios of middle market loans. In a severe recession, multiple BDCs can experience NAV declines simultaneously. Diversification across BDCs, REITs, and CEFs helps but does not eliminate correlation in a true credit crisis.

Oracle dependency. The entire system depends on accurate, timely price feeds. NAV data from fund managers can be stale (many BDCs report quarterly). The Validator NAV Consensus mitigates this but does not solve it for assets with infrequent reporting.

Reflexivity. In stress, liquidations push prices further, triggering more liquidations. The NAV Safety Net, progressive ADL, and insurance fund are designed to break the loop. They may not be enough in a black swan.

Regulatory. Synthetic assets and DeFi exist in evolving regulatory territory. A hostile regulatory action could restrict access or force protocol changes. The legal structure (Section 17) is designed to mitigate this but cannot eliminate it.

Junior depletion. If trading losses consistently exceed fee income, the Junior tranche erodes. Yield drops. Juniors withdraw (after lockup). The pool shrinks. Open interest must be reduced. The system can enter a contraction spiral. OI caps and dynamic margin are the circuit breakers.

18. Regulatory

Navy Labs Inc. Delaware C Corp. Builds and maintains the software: the web interface, the trading engine, the oracle sidecar, and related tooling. Navy Labs is a software company. It does not operate the protocol.

Navy Foundation. Cayman Islands entity operating under the VASP (Virtual Asset Service Provider) framework. Governs the autonomous smart contract system. Holds no user funds. Administers governance and parameter changes.

No custody of securities. Navy does not hold, issue, or transfer real securities. xTokens are synthetic contracts that reference price feeds. No actual BDC or REIT shares are involved. This is a critical distinction from tokenized securities platforms.

Open source. All smart contracts are published and auditable. The risk engine methodology is public. Anyone can verify the system's behavior. Regulators can inspect the code directly.

DeFi regulation is moving fast. Navy's architecture separates the software company (Navy Labs) from the protocol (Navy Foundation) deliberately. If regulation tightens in one jurisdiction, the protocol continues to operate autonomously.

19. What This Replaces

Status

Early access. Request access.