EconomyThe Map
The Economic Stack
Which crate owns which economic record, where each one sits in the workspace, and which of them the kernel's own manifest names.
The workspace keeps its economic code in one directory, crates/economy/, which holds 16 members. Several crates the Economy pages document are not among them: identity, passports, reputation and federation live under crates/trust/, and the tool manifest lives under crates/platform/. Both groups are listed below, with the workspace path each one carries in the root manifest.
Cargo.tomlat fe56570The economy directory
Every crate below sits at crates/economy/<name>. Each carries a narrow public API and its own Cargo.toml, and the one-line purpose is that manifest's own description expanded against the crate's README or module documentation.
| Crate | What it owns | Key types |
|---|---|---|
chio-anchor | Publishes checkpoints to external chains and verifies the proofs that come back: EVM root-registry publication, Bitcoin super-root aggregation over OpenTimestamps, Solana memos, and fail-closed multi-lane proof-bundle verification. Its second mechanism, chio.anchor_batch.v1, Merkle-batches checkpoint ids against a public witness. | AnchorServiceConfig, AnchorError |
chio-appraisal | Runtime-attestation appraisal and the deterministic marketplace invocation-pricing model, including the reputation-tier discount applied on top of advertised tool pricing. | RuntimeAttestationAppraisalResult, MarketplaceReputationTier, MarketplaceBasePrice, MarketplaceInvocationPrice, MarketplacePricingContext |
chio-autonomy | Bounded autonomous pricing, capital-pool optimization, and fail-safe execution automation. Each decision carries explicit references to the signed records it acts on instead of replacing them. | AutonomousPricingInputArtifact, AutonomousPricingAuthorityEnvelopeArtifact, AutonomousPricingDecisionArtifact, CapitalPoolOptimizationArtifact, AutonomousExecutionDecisionArtifact, AutonomousRollbackPlanArtifact |
chio-credit | Credit facilities, bonds, the capital book, the exposure ledger, credit scorecards, and the receivable-side primitives below. The accounting layer for delegated risk. | CreditFacilityArtifact, CreditBondArtifact, CreditScorecardReport, ExposureLedgerReport, CreditLossLifecycleArtifact |
chio-fincred | Wire-neutral financial credential contract types: the five credential families an agent carries across organizations, their verifier policy, and the thresholds a verifier applies to each. | FinancialCredentialFamilyV1, FinancialCredentialSubjectV1, FinancialVerifierPolicyV1, FinancialVerifierThresholdsV1 |
chio-finding | The signed cognition-market information good chio.finding.v1 and its supporting artifact families: challenge, audit epoch, purchase record, bond backing, and status feeds. Pure validation and inline signing, no storage and no kernel wiring. | Finding, FindingDescriptor, sign_finding, verify_finding |
chio-fiscal | Governed fiscal charters and fee schedules: the signed terms that fix what a marketplace may charge, and the bond classes and collateral references the open market prices against. | FiscalCharter, FiscalSchedule, VerifiedFiscalCharter, OpenMarketFeeScheduleArtifact |
chio-link | The oracle runtime for cross-currency budget enforcement. It resolves rates from Chainlink and Pyth behind a pluggable backend, cross-checks and caches them, checks L2 sequencer uptime, and converts amounts for budget decisions. | PriceOracle, ChioLinkOracle, ExchangeRate, OracleConversionEvidence |
chio-listing | The signed listing and namespace artifacts marketplace participants publish, the report-aggregation and discovery search paths that make them findable, and the local trust-activation flow that turns a discovered listing into an admissible one. It also owns the outcome-pricing family. | Listing, SignedListingPricingHint, ListingSearchResponse |
chio-market | The liability market: provider catalog, quote and bind flow, pricing-authority envelopes, claim packages, and adjudication. | LiabilityProviderArtifact, LiabilityQuoteRequestArtifact, LiabilityQuoteResponseArtifact, LiabilityBoundCoverageArtifact, LiabilityClaimAdjudicationArtifact |
chio-metering | Per-receipt cost attribution, cumulative cost queries, monetary budget enforcement, billing-export records, and hierarchical budget governance. Its manifest section is the workspace's observability heading rather than its economics one. | CostDimension, CostMetadata, BillingExport, BudgetEnforcer, BudgetTree |
chio-open-market | The open capability marketplace: the bid, ask and accept protocol that mints scoped capability tokens against published listings, and the fee-schedule and penalty state machines behind it. | SignedBidRequest, SignedAskResponse, SignedAcceptedBid |
chio-settle | The settlement runtime over the web3 contract family: EVM escrow, Solana settlement, Chainlink CCIP cross-chain messages, x402 and ERC-4337 payment helpers, streaming payment channels, and watchdog automation. | SettlementCommitment, PreparedEvmCall, CcipSettlementMessage, PreparedSolanaSettlement, X402PaymentRequirements, SettlementWatchdogJob |
chio-underwriting | Risk classification, premium pricing, simulation, and decision outcomes for governed actions. It produces decision artifacts and the appeal lifecycle records that follow them. | UnderwritingRiskClass, UnderwritingDecisionPolicy, UnderwritingDecisionOutcome, UnderwritingPremiumQuote, UnderwritingDecisionArtifact |
chio-web3 | The on-chain artifact shapes and their validators: signed identity bindings, trust profiles, contract packages, chain configuration, anchoring proofs, oracle FX evidence, and the settlement dispatch and execution-receipt lifecycle. | Web3ContractKind, Web3ContractPackage, Web3SettlementLifecycleState, Web3SettlementDispatchArtifact |
chio-web3-bindings | The generated Rust ABI bindings and compiled JSON artifacts for the Solidity contract family that chio-web3 describes. | IChioEscrow, IChioBondVault, IChioRootRegistry, IChioIdentityRegistry, IChioPriceResolver |
Economy crates in other directories
These five carry types the Economy pages cite constantly, and none of them sits in crates/economy/. The path column is the one the root manifest lists.
| Crate | Workspace path | What it contributes |
|---|---|---|
chio-manifest | crates/platform/chio-manifest | The signed tool manifest with its pricing and SLA hints. ToolManifest, ToolPricing, PricingModel, SignedManifest. The protocol adapters depend on it, not the kernel. |
chio-reputation | crates/trust/chio-reputation | Deterministic local scoring from a caller-supplied corpus of receipts, capability lineage, and budget records. LocalReputationCorpus, LocalReputationScorecard, ReputationWeights, ImportedReputationSignal. |
chio-federation | crates/trust/chio-federation | Bilateral peer pinning, the federation activation exchange, cross-org reputation clearing, and quorum policy. FederationActivationExchangeArtifact, FederationQuorumReport, FederationAntiEclipsePolicy, FederatedReputationClearingArtifact. |
chio-credentials | crates/trust/chio-credentials | Agent Passport verification and the portable reputation summary. AgentPassport, PortableReputationSummaryArtifact and its envelope SignedPortableReputationSummary, carrying schema chio.portable-reputation-summary.v1. |
chio-did | crates/trust/chio-did | Self-certifying did:chio identifiers and DID document resolution, where the method-specific identifier is the hex form of an Ed25519 public key. DidChio. |
The shared vocabulary sits below all of them. chio-core-types (crates/core/chio-core-types) names no other workspace crate in its dependencies, and it defines the capability, receipt, and canonical-JSON types every crate here consumes. chio-core sits one level up and is where the economy reaches the rest of the system.
Which of them the kernel names
The dependency direction is settled by the manifests, and it runs the opposite way from the record flow in several places. crates/kernel/chio-kernel/Cargo.toml lists five members of crates/economy/ as direct dependencies:
chio-appraisalchio-creditchio-linkchio-settlechio-underwriting
Most of the others reach it through chio-core, which re-exports the domain crates under one chio_core::* import path, so the kernel reaches them by naming chio-core alone. The ten crate re-exports sit between lines 17 and 43, interleaved with the module re-exports of chio-core-types:
pub use chio_appraisal as appraisal;
pub use chio_autonomy as autonomy;
pub use chio_credit as credit;
pub use chio_federation as federation;
pub use chio_governance as governance;
pub use chio_listing as listing;
pub use chio_market as market;
pub use chio_open_market as open_market;
pub use chio_underwriting as underwriting;
pub use chio_web3 as web3;Two members of crates/economy/ sit outside that closure entirely. chio-anchor depends on chio-kernel rather than the other way round, so it sits above the kernel and publishes what the kernel has already signed. Nothing in the kernel's dependency graph reaches chio-metering; the only crate that depends on it is chio-data-guards.
An interchangeable backend is swapped behind a trait, not by dropping a crate dependency. PriceOracle is declared in chio-link/src/lib.rs:248 and implemented there by ChioLinkOracle at :790. The kernel holds it as Option<Box<dyn PriceOracle>> and takes whichever implementation the operator installs through set_price_oracle. A kernel with no oracle installed holds None.
The receivable side inside chio-credit
Three receivable-side primitives land in chio-credit rather than a new crate: obligation atoms and factoring (chio_credit::obligation and chio_credit::factor), a clearinghouse netting round (chio_credit::clearing::compute_netting_round), and streaming payment channels over a single ChioEscrow deposit. The invariant that makes them safe to compose is one immutable obligation atom per unit of value, so no second economic claim can be minted for the same value.
Two budget layers inside chio-metering
BudgetEnforcer evaluates a single policy scoped per session, per agent, or per tool. BudgetTree expresses organizational structure, organization to department to team to agent, where each node has its own caps and window and draft spend is evaluated against every ancestor. The tree does not replace the enforcer: the enforcer stays per grant while the tree is per organization, and the tree renders a fail-closed BudgetDecision from a caller-supplied SpendSnapshot. Neither owns storage. Callers read the snapshot from whatever backing store they use and pass it to BudgetTree::evaluate.
Schema identifiers
Every signed record carries its schema identifier, versioned per record type, so a consumer can refuse a version it does not recognize. A bump from v1 to v2 is a breaking change. Five of them from the credit crate:
pub const EXPOSURE_LEDGER_SCHEMA: &str = "chio.credit.exposure-ledger.v1";
pub const CREDIT_SCORECARD_SCHEMA: &str = "chio.credit.scorecard.v1";
pub const CREDIT_FACILITY_REPORT_SCHEMA: &str = "chio.credit.facility-report.v1";
pub const CREDIT_BOND_REPORT_SCHEMA: &str = "chio.credit.bond-report.v1";
pub const CAPITAL_BOOK_REPORT_SCHEMA: &str = "chio.credit.capital-book.v1";pub const TOOL_MANIFEST_SCHEMA: &str = "chio.manifest.v1";See also
- Building a provider: Manifests for
chio-manifest, Pricing for the metered models, and Discovery forchio-listing. - Buying: Passports for
chio-credentialsand Open Market for the bid, ask and accept records. - Underwriting and capital: Underwriting, Credit Facilities, and Liability Market for
chio-underwriting,chio-credit, andchio-market. - Operating a peer: Bilateral Federation for
chio-federationand Operating for the settings behind them. - One transaction through these crates: the procurement tour, which cites each crate where it acts.