CitizeAi_
On this page
  1. Foreword
  2. Executive summary
  3. Why now?
  4. Sharper ICP / user segmentation
  5. Core principles
  6. CitizeAi_ by the numbers
  7. Status, assurance, and participation readiness
  8. Why CitizeAi? (unique value)
  9. Product mission: transparency in the reading flow
  10. How a user experiences CitizeAi_
  11. The problem
  12. Solution overview
  13. Use case validation
  14. Civic mission and incentive discipline
  15. Project evolution
  16. System architecture
  17. Phase 1 costs & adoption (France-first)
  18. Phase 1 gas payment model
  19. Gas Model (dApp & product)
  20. Category positioning and competitive map
  21. Product surfaces
  22. Extension rewards — split & phase-1 flows
  23. Why this suite fits together
  24. Company revenue model
  25. Revenue, programme treasury & sustainability
  26. Token & economics
  27. Treasury reserve strategy
  28. Supply discipline across lanes & geographies
  29. Active reward inventory vs total supply
  30. Programme lanes & allocation rounds
  31. Fixed supply scaling logic (diagram)
  32. Programme-lane budgeting (illustration)
  33. Geographic rollout & allocation rounds
  34. France-first, UK-next & treasury gating
  35. When to revisit total supply
  36. Public presale economics
  37. Presale proceeds — use of funds
  38. Launch pricing rationale
  39. France allocation & treasury discipline
  40. France-first treasury architecture
  41. Treasury monitoring & KPI readiness
  42. Smart contracts
  43. Contract hardening backlog
  44. Governance
  45. Governance participation & emissions
  46. Security & compliance
  47. Roadmap — product, protocol & market
  48. Reward economics roadmap
  49. Go-to-market & distribution
  50. Success metrics
  51. Public KPI dashboard framework by product lane
  52. Organization & contact
  53. Appendix — methodology notes
  54. Document changelog
  55. Disclaimer & transparency

CitizeAi_ · CTZAI · Civic-tech suite

White paper — Vision & Execution (civic transparency infrastructure)

CitizeAi_ is a France-first civic-tech suite: it begins in the reading flow with two live browser products—Political Transparency and Media Transparency—that give readers immediate political and media context while navigating French news. The strategic horizon is broader: it also includes prototype-stage extensions for Content Moderation and News Debunking, followed by later layers for participation, democratic coordination, and modular governance infrastructure. CTZAI remains a fixed-supply ERC-20 on Solidity / EVM: a settlement, budgeting, and coordination backbone for bounded, proof-based, optional incentives—not passive browsing pay-outs, attention mining, or the project’s purpose. This document is the canonical strategic and economic reference: architecture, one token / one treasury / multiple programme lanes, eight-bucket treasury reserve (40% of supply), company revenue logic, presale, allocation discipline, contract catalogue (deployed today + future modular lanes), security, roadmaps, and metrics. Roadmap governance leads the present-day governance story; DAO-style surfaces remain scoped and secondary. Deployed contracts and official configuration override marketing copy.

Last updated
Last updated: 2026-04-15
Document version
Document version: 5.1.0

Foreword

CitizeAi_ is not designed as a token project searching for a use case. It is designed as a civic-tech suite that begins where ordinary citizens already are: inside the reading flow, on familiar news pages, confronting political names, media brands, ownership structures, public subsidies, and accountability questions in real time. The first mission is practical civic utility, not wallet acquisition.

That design choice gives CitizeAi_ a second strategic role: it can serve as an accessible entry point into dApp participation for regular citizens who would not begin with a wallet, a token, or a governance interface on their own. The bridge is intentional. A citizen first encounters useful transparency tooling in-browser; only later, if the citizen chooses, the experience can continue into a wallet-native dApp for proof review, claims, staking, or roadmap-governed participation. In other words, CitizeAi_ does not ask citizens to become “crypto users” first. It asks whether civic-tech can make optional on-chain participation legible, useful, and worth choosing.

This distinction matters. The browser products remain the primary user-facing layer. They must deliver value without a wallet, without CTZAI, and without any obligation to continue on-chain. The dApp is the optional execution layer for explicit, auditable actions. CTZAI remains the settlement, budgeting, and coordination layer beneath that experience. Product utility first, dApp participation second, token mechanics third: that is the order that keeps the mission credible.

The broader civic-tech suite extends this same logic beyond the two live transparency products. Transparency is the gateway because it is the lowest-friction civic utility surface; prototype-stage information-integrity extensions and later participation layers build on that foundation without collapsing maturity into a single headline.

The broader civic-tech suite should now be read in three maturity bands. First, the live transparency layer: Political Transparency and Media Transparency. Second, the prototype layer: Content Moderation and News Debunking, both of which expand CitizeAi_ from transparency into information-integrity tooling while remaining early-stage products rather than finalized public deployments. Third, the longer-horizon participation and governance infrastructure layers. This sequencing keeps the narrative operationally honest: usefulness first, prototypes second, broader civic coordination later.

The EVM / Solidity stack exists to make settlement auditable and interoperable: extensions surface intentional actions; the wallet-connected dApp (Scaffold-ETH 2–style wallet flows) is where users review claims and sign routine transactions; smart contracts enforce caps, splits, and deployment rules. Reward and governance posture is summarized in Core principles below—so this foreword stays short while the commitments stay explicit.

France-first rollout keeps datasets, UX, and operator focus coherent before breadth—without new minting for geography. New products do not justify new CTZAI issuance: expansion uses treasury allocation rounds from the existing 2B cap, client-funded programme budgets, or both. Programme authorizations should expire, revert, or be re-approved—not leak silently. Predictability and auditability come before narrative complexity.

Executive summary

**Live today:** **Political Transparency** and **Media Transparency** browser extensions (France-first datasets and supported domains), plus the wallet-native **Solidity / EVM** dApp for claims, presale, vesting, staking, and governance surfaces (**testnet-stage maturity** where deployed). **Prototype stage** in this document: **Content Moderation** and **News Debunking** browser extensions in the broader suite—**not** described here as finalized public products. **Not live as full products** in this document’s sense: roadmap-governed **participation** and **institutional** modules beyond the live transparency pair—those remain **roadmap-described** unless separately announced.

CTZAI is a fixed-supply ERC-20: settlement, budgeting, coordination, and bounded incentivesnot the project’s purpose, not passive yield, not “earn for browsing,” and not default governance for everything. Presale native proceeds (raised through `CTZAIPresale`) fund execution readiness—engineering, security, legal, launch operations, and contingency—while CTZAI treasury reserve buckets (e.g. 800M / 40%) are a separate planning layer from those proceeds (see Presale proceeds — use of funds).

CitizeAi_ combines direct product revenue, bounded programme treasury logic, and token-based coordination: the live browser extensions are paid products, while CTZAI and the 80/20 reward architecture support the suite’s on-chain settlement and sustainability model.

A useful way to read CitizeAi_ is in two layers. Layer 1 is the actual product experience: a reader installs a browser extension, encounters structured political or media context while reading, and gains value without needing a wallet or token. Layer 2 is optional and begins only when a user chooses to continue into the wallet-connected dApp for proof review, claims, staking, or roadmap-governed actions. This separation is intentional: the civic product must remain legible and useful even for people who never claim CTZAI.

That layered model is also the project’s adoption thesis. CitizeAi_ is building a path by which ordinary citizens can encounter dApp participation through civic usefulness rather than through speculation, trading, or abstract protocol messaging. The browser extension layer lowers the entry barrier by meeting people in familiar reading behaviour; the wallet-connected dApp becomes relevant only when a citizen sees enough value to continue into explicit, reviewable, on-chain action. In this sense, the civic-tech suite is not only a product architecture but a citizen onboarding architecture: from transparency in flow, to optional wallet literacy, to bounded participation in auditable digital civic infrastructure.

For many users, the first practical entry into the CitizeAi_ ecosystem is therefore a paid civic-tech product, not a token purchase: the extensions are useful on their own, and optional dApp participation comes later.

**Problem (one line):** reading environments optimize engagement, not accountability; public data exists but rarely appears **in the reading flow**; wallet-native settlement can align participation with auditability only when emission rules stay narrow and honest.

**Differentiation:** political vs media rewards use **separate contracts**; actions are **proof-bound** and **capped**; users **sign** in the audited dApp—not inside privileged extension contexts.

  • Citizen bridge to dApp: the suite is designed to make optional dApp participation legible to regular citizens through useful civic-tech products first—not through token-first onboarding.

**Modular stack:** `CTZAIToken`, **`CTZAIPresale`** (native raise; contributor CTZAI release), **`CTZAIVesting`**, staking vault, **`ctzai_extension_reward`**, **`ctzai_media_extension_reward`**, **`ctzai_roadmap_governance`** (headline governance story now), **`ctzai_dao_policy`** (secondary / expandable)—each with a clear ABI boundary.

**Supply discipline:** **one** fixed ERC-20, **multiple** programme lanes, **no** new mint per product or geography. Phase 1 stays **fixed-reward**. **Roadmap governance** leads “what we build next”; DAO-style modules are **scoped**.

**12–24 month proof:** stable extension ↔ dApp ↔ chain handoff; install → active → wallet → **claim success**; bounded abuse; **treasury / KPI** alignment; credible reporting—**before** aggressive dynamic reward engineering.

Presale proceeds are expected to fund contract hardening, audits, integration, France-first rollout, liquidity optionality preparation, and runway—see Presale proceeds — use of funds for planning bands (not on-chain guarantees).

In plain terms: civic usefulness and comprehension in the reading flow first; wallet review and signing in the dApp only when you choose—the same order as the layered model above.

Civic-tech as a bridge to dApp participation

CitizeAi_ is built on a simple public thesis: many citizens will never start from a dApp, but some will continue into one if the first experience is useful, trustworthy, and tied to a civic purpose they already understand. The suite therefore begins with browser-native transparency products and only later offers optional wallet-native actions in the dApp. This turns the product stack into a bridge: from reading, to understanding, to intentional interaction, to optional on-chain civic participation. That bridge is one of CitizeAi_’s core strategic missions.

Why now?

The strategic case for CitizeAi_ is not only architectural. It is also historical, civic, and market-timed.

France does not suffer from a total absence of political or media information. It suffers from a distribution problem, a timing problem, and a usability problem. Public-interest data exists. Open data exists. Reports exist. Databases exist. But too much of that information still lives outside the citizen’s real decision moment: outside the article, outside the reading flow, outside the everyday interface through which public opinion is actually formed. In a high-speed information environment, that distance is no longer a minor UX flaw. It is a democratic weakness.

That is why the timing is right for CitizeAi_. We are entering a period in which adding structured civic context to political and media information is becoming essential democratic infrastructure. France is moving toward the 2027 presidential cycle at a moment of unusually deep mistrust in both politics and the information environment.

At the same time, the media landscape itself is under pressure. Traditional news organisations are facing declining engagement, trust erosion, and structural transformation. Yet this is not an argument against professional journalism. Quite the opposite. It is an argument for making professional news environments more legible, more contextualised, and more useful to citizens at the exact moment they read. Trust is not rebuilt by asking people to leave the article and go search through external repositories. Trust is rebuilt by helping them read better, with more context, more structure, and more memory.

This is the opening CitizeAi_ is designed for. The first deployment does not try to pull citizens away from the news ecosystem. It does the reverse. It starts on professional news and media domains, because that is where democratic attention still matters most. The wager is simple: if citizens return to classical news environments but are better equipped while reading — with structured context on political figures, accountability indicators, outlet ownership, public subsidies, funding structure, and other public-interest signals — then civic-tech stops being a niche repository model and becomes a practical reading companion.

No more PDF. No more database. No more repository browsed by fourteen insomniac experts. The information has to arrive under the citizen’s fingertips, at the exact moment interpretation happens.

This matters especially in an election cycle. In the noise of daily coverage, too many politically relevant facts disappear into churn: judicial affairs, attendance records, mandate performance, structural media interests, recurring accountability indicators. In a world of open data, those signals should not remain permanently available only to experts who know where to search. They should become durable civic markers inside ordinary reading behaviour. The democratic promise of open data is not fulfilled when data merely exists; it is fulfilled when citizens can actually use it in context.

That is also why CitizeAi_ should be understood as more than a browser extension strategy. It is an entry architecture for a new phase of civic-tech. The first layer is immediate and practical: help people read political and media information more intelligently, in context, on the pages they already visit. The second layer is optional and more ambitious: introduce wallet-native civic infrastructure in which proofs, incentives, participation, and governance become reviewable, bounded, and auditable. The point is not to force citizens into crypto culture. The point is to use the maturation of dApp and DAO infrastructure to make participation more legible, more explainable, and more accountable than it used to be.

In CitizeAi_, this evolution remains mission-first. The product begins with two crucial transparency extensions because the immediate democratic need is clear: help citizens navigate the news landscape before the next French presidential election with more context, more memory, and more critical distance. From there, the wider suite can open new forms of bounded civic participation: product-scoped governance, transparent moderation logic, structured public-interest review, and, where appropriate, new coordination surfaces bringing together journalists, experts, academics, citizens, politicians, and union representatives. Not DAO theatre. A gradual civic interface shift: from static repositories to live context, from passive reading to informed participation, from abstract Web3 promises to concrete democratic utility.

The crypto incentive matters in that architecture, but it must be read correctly. It is not a payment for passive attention, not a bounty on scrolling, and not a speculative substitute for civic purpose. It is a bounded re-engagement and participation mechanism: one way to make it more attractive for citizens to remain inside professional news environments while being better equipped to interpret what they read. In a context where parts of the public increasingly drift toward low-trust or low-quality information sources, a voluntary alliance with the news and media ecosystem is a strategic choice. CitizeAi_ does not seek to weaken that ecosystem. It seeks to help make it more legible, more navigable, and more democratically useful.

That is why now. Because trust is low. Because elections are approaching. Because media authority is contested but still essential. Because citizens need context where they read, not only where experts archive. Because civic-tech can finally move from the margins to the interface. And because the tools now exist to build that bridge responsibly.

The strategic timing of CitizeAi_ also depends on a clear view of who enters the ecosystem first, and why.

Sharper ICP / user segmentation

CitizeAi_’s first users are not a vague “general public.” They are a set of adjacent early-adopter groups connected by one practical need: they want political and media information to be easier to interpret, more transparent, and more trustworthy at the exact moment they read it. The project’s early market is therefore behavioural before it is demographic. It starts with people already inside the news flow, extends to people who have partly withdrawn from it, and also reaches users who approach the product from crypto utility or civic-engagement logic rather than from journalism alone.

The first core segment is news-engaged transparency seekers. These are readers who already consume professional news, already care about politics or public life, and want more context while reading rather than after the fact. They are the most natural first users because CitizeAi_ begins directly on news and media domains. France is not a market with no willingness to pay for news: Reuters Institute’s 2025 France profile reports that 11% pay for online news, while trust in news overall is only 29%. That combination matters. It means there is already a paying and attention-rich base for professional information, but that credibility and value must increasingly be delivered through better interfaces, not just stronger editorial claims.

The second core segment is mistrustful but re-engageable citizens. These are people who still care about politics, institutions, and public decisions, but who have partially disengaged from classical media or public discourse because they perceive the environment as noisy, partial, polarised, or structurally opaque. This is a large strategic opening in France. OECD data shows that only 34% of French people reported high or moderately high trust in the national government in 2023, while only 18% trusted political parties and 33% trusted news media; only 26% believed that the political system lets people like them have a say. In other words, the opportunity is not to ask citizens to trust more blindly, but to help them verify more easily and read with better civic context.

The third core segment is crypto-mature utility seekers. These are users already familiar with wallets, token logic, or on-chain participation, but increasingly selective about what deserves attention. They are not looking for another speculative object; they are looking for a product with visible utility, coherent economics, and a mission they can defend without irony. France now has a meaningful base for this segment. Adan’s 2025 study reports that 92% of French people have heard of digital assets, and the 2026 barometer reports that 11% of the French population own at least one crypto-asset, while 14% have already purchased crypto-assets at some point and 32% of non-holders say they might acquire them in future. That does not make France a crypto-majority society, but it clearly means there is now a substantial pool of crypto-aware and crypto-familiar users who can recognise the difference between utility-backed infrastructure and empty token theatre.

The fourth core segment is civic-tech and participation-oriented users. This includes citizens already motivated by transparency, accountability, democratic quality, institutional reform, public-interest technology, and new forms of participation. This audience matters not only because it may adopt early, but because it can validate and amplify the product. OECD’s work on open government and trust supports this logic directly: transparency, access to information, integrity, and the feeling of political voice are linked to stronger trust and better democratic engagement. CitizeAi_ fits this audience because it does not begin with abstract governance rhetoric; it begins with practical transparency tools and can later extend toward more structured, auditable participation.

A sharper ICP page should also reflect two underestimated but strategically important sub-segments. The first is local and regional media readers. This matters because trust in professional news is not flat across the ecosystem. Reuters Institute has previously highlighted that in France, local and regional news brands perform particularly well on trust, and its broader 2025 work continues to note the strategic value of local and regional titles. For CitizeAi_, this means early partnership and adoption should not be imagined only through large national brands. Local and regional ecosystems may offer a higher-trust, higher-legitimacy path into the market.

The second underestimated sub-segment is young, digitally fragmented news users — especially students, early-career adults, and politically socialised younger citizens. They are not necessarily loyal readers of traditional homepages, but they are central to the future of political information consumption. Reuters Institute’s 2026 report on young news audiences argues that the biggest shift is not a retreat from news altogether, but a move away from news websites toward social platforms, video, creators, and newer interfaces. France-specific Reuters data also reports 37% using social media for news weekly. That makes this segment highly relevant for CitizeAi_: the project can meet younger users at the edge of professional media and help reconnect them to more structured, contextualised information environments.

A third underestimated group is journalists, newsroom innovation teams, educators, researchers, and fact-checking-adjacent actors. They are not the primary retail ICP, but they matter early because they can function as validators, critics, distribution multipliers, and design interlocutors. They can help shape how the product is understood: not as anti-media infrastructure, but as a transparency layer that strengthens legibility around politics, ownership, incentives, and information integrity. Their importance is strategic even when their number is smaller than the consumer audience. This is especially relevant in a market where traditional news organisations are struggling with declining engagement, low trust, and stagnating digital subscriptions.

Taken together, these segments create a stronger thesis than a one-audience model. CitizeAi_ is not only trying to convert existing news readers into transparency-tool users. It is also trying to re-engage citizens who no longer fully trust the information environment, attract crypto-mature users toward a serious public-interest use case, and offer civic-tech communities a product that begins with immediate utility rather than abstract governance promises. That bridge logic is the real ICP. The early market is where those groups overlap: citizens who want more context, more reliability, and more agency in how they interpret what they read.

The acquisition logic follows the same structure. Media collaborations and a France-first PR strategy are best suited to reach news-engaged users, local/regional audiences, and legitimacy-sensitive citizens. Crypto-native and wallet-aware channels are best suited to attract utility-seeking digital users who can recognise the project’s fundamentals. Civic-tech, research, and transparency networks are best suited to bring in amplifiers, validators, and participation-oriented communities. This means the first customer base is not random: it is a deliberately assembled coalition of adjacent user groups that can reinforce one another.

In practical terms, CitizeAi_’s early ICP can therefore be read as a structured sequence:

  1. readers already following the news and seeking better transparency;
  2. mistrustful but re-engageable citizens who still want credible signals;
  3. crypto-mature users attracted by serious utility and bounded token design;
  4. civic-tech and participation-oriented communities;
  5. local/regional news audiences as a high-trust partnership segment;
  6. younger, digitally fragmented news users who need a bridge back to contextualised professional information;
  7. newsroom, education, research, and fact-checking-adjacent actors as ecosystem validators and multipliers.

That segmentation is strategically coherent because it matches both sides of the project. The browser-extension layer serves immediate public usefulness in the reading flow. The dApp layer serves optional, reviewable, wallet-native participation for the subset of users ready to go further. The strongest first users are therefore not just “people interested in politics” or “people interested in crypto.” They are people for whom transparency, context, and credible digital participation are beginning to converge into the same product need.

With that first-user logic in view, the principles below define how CitizeAi_ intends to execute without overclaiming what is already deployed.

Core principles

These principles anchor every section of this paper. Later passages refer back here instead of repeating the same warnings in full.

  • 1.Product first — ship transparency utility in the reading flow before token narrative.
  • 2.Mission first — civic outcomes and auditability beat engagement vanity metrics.
  • 3.Proof before payout — backend-attested, contract-verified claims; replay protection and caps.
  • 4.Caps before scale — bounded emissions while behaviour is measured.
  • 5.Treasury discipline before expansion — named buckets, KPI gates, honest runway math.
  • 6.Roadmap governance before DAO theatre — product-scoped proposals lead; Policy DAO stays secondary / expandable.
  • 7.Deployment truth over marketing copy — verified contracts, storage, and dApp config override informal summaries.

Principles **do not** remove legal, tax, or regulatory obligations; they keep communications aligned with how the system is actually built and deployed.

CitizeAi_ by the numbers

Defensible, deployment-level facts (verify live addresses and parameters on-chain before relying on them in production):

  • 2 **live** browser extension product lines: **Political Transparency** and **Media Transparency**.
  • 2 **prototype-stage** product lines in the broader civic-tech suite: **Content Moderation** and **News Debunking**.
  • 1 **wallet-native** **Solidity / EVM** dApp supporting claims, staking, presale, vesting, and governance surfaces under **testnet-stage maturity**.
  • **Fixed-supply CTZAI architecture** designed to support **multiple programme lanes** without new token issuance per product or geography.
  • **Governance posture** remains **roadmap-first** at ecosystem level, with **DAO-style surfaces used only where product scope justifies them**.
  • **Documented Solidity suite (deployed path varies by network):** ERC-20 token, presale, vesting, staking vault, political extension reward, media extension reward, optional Policy DAO lane, roadmap governance (**primary** present-day governance story). **Future modular lanes** (programme budgets, moderation appeals, client vaults) are **roadmap-described**, not claimed as live here.
  • 2,000,000,000 CTZAI fixed supply; mint-once at deployment (ERC-20; initial holder or minter configuration depends on deployed constructor and operational wiring).
  • 2 reward settlement paths on extensions (political vs media), each with its own contract so product semantics stay faithful.
  • Major browser targets for the extension suite are **Chromium-class browsers** and **Firefox** today; **Safari** remains a **planned** distribution target rather than a currently live browser-store deployment in this document.
  • France-first launch scope for datasets and UX; additional geographies follow allocation rounds from existing supply—not new genesis mints.
  • Illustrative France Allocation Round 1 modelling (internal): ~5M CTZAI gross programme need over 12 months at base-case funnel outputs—still a small fraction of total supply; exact authorizations require governance and live deployment. **Presale Round 1** (recommended **illustrative** internal specification): 100,000,000 CTZAI (5% of supply), soft/hard caps and per-wallet limits, priced contribution economics, 20% immediate / 80% linear vesting over 18 months, whitelist-enabled access with membership frozen before/at sale start and a separate compliance blocklist—30-day window—**contribution asset, decimals, and literals are defined by live deployment**; verify parameters and access status on-chain before participation.

The strategic scaling unit is therefore not ‘market size in the abstract’ but the governed allocation round: a bounded CTZAI authorization attached to a specific lane, market, and time window.

Status, assurance, and participation readiness

Live, planned, and experimental status

CitizeAi_ is documented as a broader civic-tech suite, but not every component sits at the same deployment maturity. Best practice is to distinguish clearly between what is already live for end users, what is under testnet validation, and what remains roadmap or IP-level design. The matrix below is meant to reduce overclaim, improve reader trust, and make the current project stage legible at a glance. Verified deployments, live dApp configuration, and published notices remain authoritative if any summary table lags behind implementation.

Component / laneCurrent statusUser-facing availabilityOn-chain / contract maturityNotes
Political Transparency browser extensionLiveAvailable to end users on Chrome and FirefoxReward contract path under testnet / Sepolia validation; local testing successfulCore live civic-tech entry product; Safari planned later
Media Transparency browser extensionLiveAvailable to end users on Chrome and FirefoxReward contract path under testnet / Sepolia validation; local testing successfulCore live civic-tech entry product; Safari planned later
Safari extension distributionPlannedNot yet liveNo separate production deployment claimIntended later after current rollout and testing stages
CitizeAi_ wallet-native dAppTestnet-activeUsable in current project environmentSolidity / EVM stack under Sepolia testnet phaseCurrent dApp is the review, signing, and execution layer for optional on-chain actions
CTZAIToken / ERC-20 layerTestnet-activeNot yet represented as finalized mainnet production in this documentLocal testing successful; Sepolia phase in progressFixed-supply design documented; deployment truth remains chain-specific
Presale contract flowPrepared / pre-productionNot yet described here as a live public saleContract and narrative preparation stage; live parameters must prevail on-chainPresale is a readiness and funding milestone, not a claim of current public availability
Political reward contractTestnet-activeOptional through dApp flow where enabledLocal tests successful; Sepolia validation in progressSeparate from media reward contract
Media reward contractTestnet-activeOptional through dApp flow where enabledLocal tests successful; Sepolia validation in progressSeparate from political reward contract
Staking vaultTestnet-activeWallet-native / dApp-facingLocal tests successful; Sepolia validation in progressEligibility / anti-abuse layer, not APR product
Roadmap governanceTestnet-activedApp participation surface under testnet stageContract exists in current Solidity suite and is under testnet phaseThis is the primary governance narrative in the current phase
Policy DAOTestnet-active / secondaryNot the primary public governance surfaceUnder testnet phase; secondary / expandable governance laneRelevant especially to future participation products
Participation — Parties & citizensConceptual / IP-documented or roadmap-describedNot live as a public productNo production deployment claim in this white paperFuture civic-tech lane
Participation — UnionsConceptual / IP-documented or roadmap-describedNot live as a public productNo production deployment claim in this white paperFuture civic-tech lane
Moderation governance (broader lane)Later-stage / broader lane (roadmap)Not live as a public productNo production deployment claim in this white paperDistinct from the Content Moderation browser extension, which is Prototype in this matrix
Governance infrastructure / client vaults / modular lanesConceptual / roadmap-describedNot live as public end-user productsFuture modular contract lanes onlyDirectional only until shipped and documented
Content Moderation browser extensionPrototypePrototype-stage product under active design and iteration; not described as a finalized public productNo production deployment claim in this white paper; prototype maturity onlyInformation-integrity lane; treasury activation only after explicit allocation-round approval
News Debunking browser extensionPrototypePrototype-stage product expanding the suite into information-integrity and debunking workflowsNo production deployment claim in this white paper; prototype maturity onlyComplements live transparency products; not a substitute for journalism, editorial judgment, or legal fact-finding
News Debunking DAO / review layerPrototype / scoped governance layerPrototype governance surface intended to involve journalists, experts, and citizens in bounded review, signaling, prioritization, and credibility workflowsProduct-scoped governance layer only; not the primary governance model of the overall CitizeAi_ ecosystemPrototype-stage; roadmap governance remains the headline ecosystem governance story

Prototype in this document means a product or governance surface that is materially beyond a purely abstract concept but is not being represented as production-ready, broadly deployed, or economically finalized. This label is important for Content Moderation and News Debunking: both are part of the civic-tech suite’s real strategic direction, but neither should be over-described as already live.

Interpretation rule: live browser product does not automatically mean production on-chain settlement. In CitizeAi_, the extensions can already exist as real user-facing civic-tech products while the wallet-native settlement, reward, and governance rails continue through internal validation and Sepolia testnet hardening before any production-grade mainnet claim.

Environment status and deployment maturity

CitizeAi_ is currently in a deployment-maturity transition stage, not a "finished protocol" stage. The browser extensions already operate as live civic-tech products on supported browser stores, while the Solidity / EVM contract stack is still moving through the sequence of internal testing → local validation → Sepolia testnet validation → later production readiness. This distinction matters because it keeps user-facing civic utility honest while avoiding premature claims about production-grade on-chain maturity.

At the time reflected by this document:

  • the two browser extensions are already live on Chrome and Firefox;
  • Safari distribution is planned later;
  • the smart-contract suite is not represented here as already finalized for production mainnet use;
  • local tests are reported as successful;
  • the current priority is Sepolia testnet validation, end-to-end dApp integration, and operational hardening.

This is the correct stage to emphasize:

  • deployment truth over aspirational copy,
  • testnet visibility before mainnet claims,
  • operational hardening before aggressive scaling,
  • and independent assurance before public overconfidence.
Reader note: "live" in this document may refer to a product being available to end users, while "testnet-active" may describe the current maturity of on-chain settlement and governance surfaces.

Internal review, external assurance, and audit readiness

CitizeAi_ is currently in an internal assurance stage rather than a completed external audit stage. Internal testing, local validation, contract review, dApp integration checks, and development-tooling-based verification are being used to harden the system ahead of broader production claims. The current stack and workflow rely on the available testing and validation surfaces in the Solidity / EVM development environment, including the toolchain used around Scaffold-ETH 2 and associated testing flows.

At this stage, the project should be described honestly as:

  • internally reviewed and tested,
  • actively moving through Sepolia testnet validation,
  • not yet externally audited,
  • and not yet claiming independent third-party assurance as a completed fact.

A future external smart-contract audit is coherent and strategically justified. It serves at least four purposes:

  1. stronger launch readiness and exploit-risk reduction,
  2. clearer assurance for contributors, users, and partners,
  3. better governance and treasury credibility,
  4. stronger regulatory and documentation preparedness as the project approaches broader public and market-facing stages.

The presale is therefore not only a capital event. It is also part of the project's readiness path: one intended use of proceeds is to help fund external review, audit, legal refinement, and broader compliance-grade publication discipline. That should be framed as best-practice assurance and readiness work, not as a claim that all such steps are already complete today.

Assurance areaCurrent statusCurrent source of assuranceTarget next step
Smart contractsInternal testing / reviewLocal tests, development validation, contract review flowsExternal audit before stronger production claims
Extension ↔ dApp ↔ chain flowsInternal validationEnd-to-end integration testing and Sepolia phaseBroader testnet hardening and user-flow verification
Governance contractsTestnet stageInternal testing and reviewExternal review where relevant before production reliance
Presale contract and contributor logicPrepared / pre-productionInternal specification + contract alignmentExternal review, legal refinement, contributor-facing finalization
Operational documentationIn progressWhite paper + runbooks + internal consistency checksFreeze canonical docs before public sale / production launch

Nothing in this subsection should be read as a completed external audit claim.

Assurance roadmap and external review triggers

CitizeAi_ should present assurance as a staged operational discipline rather than as a binary audited / unaudited label. At the current stage, the suite is internally reviewed, locally tested, and moving through Sepolia testnet hardening. The next step is not to imply completed third-party assurance before it exists; it is to explain when external review becomes appropriate and what it should cover first.

The external audit path should be framed as a best-practice readiness milestone tied to broader public and market-facing maturity. In practical terms, a successful presale can help fund that next stage: external smart-contract review, contributor-facing assurance, stronger documentation discipline, and legal / regulatory preparation for broader distribution. This is coherent because the presale is not only a financing event; it is also part of the project’s transition from internally hardened testnet posture toward more production-grade accountability.

A prudent assurance roadmap is:

  1. Current stage — Internal assurance

    • local tests,
    • contract review,
    • extension ↔ dApp ↔ chain rehearsal,
    • ABI / address / configuration discipline,
    • Sepolia testnet validation.
  2. Post-presale readiness stage — External technical assurance

    • third-party review of treasury-facing and contributor-facing contracts,
    • priority focus on reward contracts, presale, treasury-sensitive flows, staking, and governance-critical controls,
    • resolution of critical findings before stronger public production claims.
  3. Pre-broader public / market-facing stage — Publication and compliance hardening

    • synchronized white paper, FAQs, legal texts, website copy, and deployment truth,
    • clearer investor / contributor risk surfaces,
    • stronger operational documentation and incident readiness.
  4. Ongoing assurance stage

    • periodic review after major parameter or architecture changes,
    • renewed review for major governance, treasury, or contributor-path modifications,
    • transparency reporting and notice discipline.
StageAssurance postureWhat should be coveredTrigger
CurrentInternal testing and validationSmart-contract tests, extension ↔ dApp ↔ chain integration, config discipline, Sepolia flowsPresent stage
Post-presaleExternal technical reviewReward contracts, presale, staking, treasury-sensitive paths, governance-critical controlsSuccessful presale and readiness budget
Pre-broader public rolloutDocumentation and operational hardeningWhite paper / FAQ / T&C alignment, contributor-facing clarity, incident-readiness postureBefore stronger public production claims
OngoingPeriodic assurance refreshMaterial upgrades, parameter changes, new governance or treasury surfacesAfter meaningful protocol or product changes

This roadmap describes prudent assurance sequencing. It should not be read as a claim that external audit is already complete, nor as a blanket statement that one specific audit step alone determines regulatory compliance in every jurisdiction.

What this shows: a staged assurance path aligned with current maturity. What it is not: a claim that any later stage is already complete.

Data provenance and coverage discipline

CitizeAi_ is a transparency product, which means data provenance and coverage discipline are part of the product's credibility, not an afterthought. Political Transparency and Media Transparency should therefore be described not only by what they show, but also by where their information comes from, how coverage is determined, and what limits apply at the current stage of rollout.

The two live browser extensions do not rely on the same source model.

Political Transparency is primarily grounded in a bundled, HATVP-oriented local data universe. Its README describes a cross-browser extension that detects named public-office holders and declarants in scope on supported media sites, highlights them in-article, and opens structured transparency context grounded in public declarative data shipped inside the extension, without requiring a mandatory server call to resolve who is who on the page. Detection is tied to curated matching logic, local indexes, and supported-domain allowlists rather than to an unrestricted claim of full web coverage.

Media Transparency follows a different source strategy. Its README describes an extension that surfaces media ownership, public subsidies, corporate structure, and financial transparency signals while users browse supported media domains. The primary source model is the CitizeAi_ API, with optional local JSON caches available for fast matching or reviewer-friendly / offline-capable bundles when local-data mode is enabled. In other words, the media product is richer on API-backed structural context, while still remaining bounded by strict domain gating and the current populated knowledge base.

This distinction matters. CitizeAi_ should not imply that all transparency data is sourced, refreshed, or delivered in the same way across the suite. The political product is stronger where public declarative / profile-oriented records can be matched reliably in the reading flow. The media product is stronger where outlet-level structural intelligence—ownership, subsidies, corporate relationships, funding, and related transparency signals—can be served coherently for a supported domain.

At the current stage, the correct discipline is:

  • coverage is phase-dependent, not universal;
  • supported domains and source mappings should expand only when data quality, product legibility, and attestation / operational reliability justify that expansion;
  • the white paper should summarize provenance strategy at a strategic level, while the extension READMEs remain the more operationally detailed companion documents;
  • new data sources may be explored and added over time where they make the existing transparency products more useful, more intelligible, and more civically relevant.

Future enrichment can include additional public-interest legal and judicial sources where they strengthen the transparency mission of the live products. Examples of source families worth exploring include Judilibre and Légifrance, alongside other structured public-interest datasets that can enrich entity context, legal background, or interpretive civic value. These examples should be understood as future enrichment directions, not as a claim that every such source is already integrated in the current production experience.

CitizeAi_ therefore follows a simple provenance principle: do not imply complete coverage; do make source logic, rollout boundaries, and future enrichment intent explicit.

ProductCurrent provenance / coverage modelPresent limitationsFuture enrichment direction
Political TransparencyPrimarily grounded in a bundled HATVP-oriented local dataset, local detection indexes, and supported-domain allowlists on selected French news / media pages. Matching and structured context are designed to work without a mandatory server call for in-page person resolution.Coverage is limited to the current in-scope political / declarative data universe and to supported domains where matching quality and reading-flow relevance justify activation. It should not be read as universal political-person coverage across the web.Expand cautiously with additional civic / public-interest source layers where they improve contextual understanding without degrading interpretability. Potential future enrichment may include carefully selected legal or judicial public-data families such as Légifrance or Judilibre, where they strengthen the transparency value of the existing product.
Media TransparencyPrimarily grounded in the CitizeAi_ API for outlet-level ownership, subsidy, corporate-structure, and financial-transparency signals, with optional local JSON caches for fast matching or offline-capable bundles when local-data mode is enabled. Domain activation remains allowlist-based.Coverage is strongest where the media knowledge graph, API mappings, and supported-domain configuration are already mature. It should not be read as universal media-ownership coverage for all publishers or jurisdictions at the current stage.Expand with additional structured outlet, legal, financial, and public-interest data sources where they improve source literacy and civic understanding. Future enrichment may include broader legal-reference or judicial-reference layers—such as Légifrance or Judilibre—when those sources add meaningful context to media transparency use cases.

In practical terms, the white paper should present provenance as a discipline of bounded transparency, not as an illusion of omniscience. The live products become stronger not by claiming to know everything, but by making their current source logic visible, expanding carefully, and enriching the reading flow only when new data genuinely improves civic understanding.

Participant rights, non-rights, and expectations

CitizeAi_ is still in an evolving deployment stage, so participant rights should be described carefully and proportionately. The project should avoid both extremes: it should not imply stronger rights than the current contracts and deployment actually provide, but it should also explain the intended direction clearly enough that users, contributors, and token holders understand what the system is building toward.

The current strategic direction is that roadmap participation should gradually become a meaningful civic-tech bridge into dApp usage. In particular, the roadmap governance layer is intended to let CTZAI holders participate in decisions about the development of the live civic-tech products—starting with the two browser extensions and, over time, potentially including questions such as:

  • new data-source additions,
  • new user-facing features,
  • product-priority choices,
  • and other roadmap-scoped improvements.

This should be framed as a bounded governance surface around what to build next, not as an unlimited legal right over every company or protocol decision.

Participant typeWhat they can currently expectWhat they should not assumeIntended directional evolution
Reader / extension userAccess to live browser-native transparency products where distributed; civic value without wallet requiredNo automatic reward, no mandatory on-chain path, no guarantee that every interaction is claimableClearer optional bridge into wallet-native civic participation
Wallet-connected claimantAbility to review and sign eligible on-chain actions where the live programme and deployment permitNo guarantee of eligibility, payout, or economic upside; gas remains user-paid in phase 1 unless explicitly changedMore legible claim, settlement, and reporting flows over time
Presale contributorAccess to the contributor mechanics defined by the live presale deployment and legal terms when activeNo implied governance rights beyond what contracts and documents explicitly provide; no promise of market outcomeStronger audited / documented launch-readiness and contributor clarity
CTZAI holderExposure to the token's live deployed utility surfaces as documented and availableMere holding does not automatically grant unlimited governance power or rights over all project decisionsRoadmap-governed participation on product evolution, where explicitly implemented and documented
Roadmap participant / voterParticipation in roadmap-scoped voting where the live governance deployment allows itNot a blanket right to override treasury custody, legal obligations, or undeployed product decisionsProgressive citizen involvement in civic-tech roadmap choices
Institutional / partner participantAbility to engage through documented product, service, or pilot frameworksNo assumption that roadmap concepts are already production-deployedFuture structured participation under dedicated programme / client governance rails

Participants should not assume: guaranteed rewards, guaranteed liquidity or listing, guaranteed governance influence by default, guaranteed feature delivery on a fixed timeline, or a right to rely on outdated documentation when deployed contracts and the live dApp say otherwise.

The correct expectation is graduated participation: useful products first, optional wallet-native action second, roadmap-scoped governance later where the live deployment explicitly supports it.

Key project risks and current mitigations

CitizeAi_ combines live browser products, testnet-stage on-chain systems, treasury-governed programme logic, and future civic-tech lanes. That mix creates a richer strategic model, but it also creates multiple categories of risk that should be disclosed clearly rather than hidden inside generic optimism.

RiskCategoryWhy it matters for CitizeAi_Current mitigation / postureResidual risk
Extension installs do not convert into active useProduct adoptionLive availability alone does not create civic habitProduct-first UX, in-flow utility, domain focus, readability-first onboardingMedium
Active users do not connect walletsFunnel / adoptionThe dApp bridge can fail even if the extension is usefulWallet remains optional; white paper frames layered journey honestlyMedium
Reward layer becomes more visible than civic utilityNarrative / marketCould make the product look like click-farming or crypto extractionMission-first framing, proof-only claims, no passive browsing rewardsMedium
On-chain fees reduce willingness to claimEconomic / UXModel A user-paid gas can reduce claim participationGas model explicitly documented; fixed rewards remain bounded; chain choice remains strategicMedium
Dataset gaps or low-quality mappings reduce trustData / product credibilityTransparency products depend on source credibility and coverage disciplineAllowlisted domains; provenance strategy as summarized in Data provenance and coverage discipline; extension READMEs for operational detail; gradual expansionHigh
Proof / attestation gaps create failed or disputed claimsTechnical / operationalBroken proof flows damage trust in the reward pathLocal testing, Sepolia phase, replay protection, bounded claimsMedium
Internal-only review is insufficient before broader public scaleSecurity / assuranceLack of external audit increases perceived and real launch riskPresale intended in part to fund external assurance and audit readinessHigh
Governance surfaces are misunderstood as broader token democracy than actually deployedGovernance / communicationsOverclaim can create legal, reputational, and user-trust issuesRoadmap governance kept primary; DAO framed as secondary / expandableMedium
A small number of wallets capture disproportionate reward flowEconomic / concentrationWeakens fairness and civic legitimacyCaps, cooldowns, proof-bounded actions, monitoringMedium
Public communication outruns actual deployment maturityReputation / complianceTrust erodes if copy is ahead of realityDeployment-truth posture; testnet-active framing; status matrixHigh
Overexpansion into new markets or features before operational readinessExecutionProduct breadth can outrun monitoring, source quality, and supportFrance-first focus, allocation rounds, KPI gatesMedium
Regulatory or legal interpretation changes require documentation or process updatesLegal / complianceCrypto + civic-tech + public-facing participation may evolve under regulatory scrutinyLegal/compliance budget line; conservative wording; staged rolloutMedium
External expectations around listings or secondary market behaviour distort the missionMarket narrativeCould misframe CTZAI as speculation-firstExchangeability framed as optional adoption amplifier, not purposeMedium
Communication dependencies with media ecosystem actors do not translate into user adoptionDistribution / partnershipsAwareness does not guarantee conversion or retentionFrance-first credibility, partner outreach, transparent reportingMedium

Information-integrity products require especially careful narrative discipline. Content Moderation and News Debunking both operate near areas where users may over-assume finality, neutrality, or institutional authority. The white paper should therefore describe them as prototype civic-tech tools for bounded transparency, review, and information-integrity workflows—not as universal truth engines, censorship engines, or substitutes for journalism, courts, regulators, or democratic institutions.

The purpose of this table is not to imply weakness. It is to make operational honesty visible. Best practice in civic-tech and crypto is not "claim certainty"; it is to show where uncertainty still lives and how the project intends to manage it.

Live product access and citizen pricing

CitizeAi_ is not only documenting future infrastructure. It already operates with live retail civic-tech products. That matters strategically because the first relationship an end user can have with the ecosystem is not “buy a token”; it is use a transparency product that already has practical value.

At the current stage, the retail access model is:

  • Political Transparency: 9.99 EUR per year or 39.99 EUR lifetime
  • Media Transparency: 9.99 EUR per year or 29.99 EUR lifetime

This pricing should be framed as a public-access strategy, not as exclusivity. The objective is to keep civic-tech entry affordable enough to widen adoption while confirming that the extensions are real, standalone products with immediate value in the reading flow.

ProductAnnual accessLifetime accessStrategic role
Political Transparency9.99 EUR39.99 EURLive civic-tech transparency product and entry point into optional dApp participation
Media Transparency9.99 EUR29.99 EURLive civic-tech transparency product and entry point into optional dApp participation

This pricing model reinforces the broader CitizeAi_ thesis: citizens can enter the ecosystem through useful paid civic-tech products first, and only later—if they choose—through wallet-native on-chain participation.

Governance and custody operations map

CitizeAi_ uses different control surfaces for different responsibilities. Best practice is not to pretend that one token or one vote controls everything. It is to show clearly which layer governs product roadmap direction, which layer controls treasury custody, which layer manages reward-parameter operations, and which lanes remain future or conceptual.

Control surfacePrimary responsibilityCurrent maturityTypical control style
Roadmap governanceDecide what product features or priorities should be advanced nextTestnet-activeOn-chain roadmap voting / product-direction signalling
Policy DAOSecondary prioritization / ranked governance laneTestnet-active / secondaryScoped voting, not default governance for everything
Treasury custodyHold and release programme resources, presale proceeds, and operational budgetsOperational / project-controlledMultisig or threshold-equivalent custody + internal approvals
Reward operationsAdjust reward parameters, signer rotation, caps, splits, and pauses where allowedTestnet-activeTimelocked operational governance
Company / legal operationsContracting, compliance, product distribution, support, and legal accountabilityActive off-chainCorporate / legal control surfaces
Future participation productsParties & citizens, unions, moderation, modular governance lanesConceptual / IP-documentedFuture deployment-specific governance
What this shows: CitizeAi_ separates product usage, optional dApp participation, governance signalling, and custody / operational control rather than pretending they are the same thing. What it is not: a claim that all lanes are equally live or equally decentralized today.

Custody, multisig, and operational control posture

CitizeAi_ should distinguish clearly between governance signalling and custody authority. Roadmap governance can influence what the project should build next, but custody over treasury assets, presale proceeds, contract inventories, and operational gas remains a separate control problem that should be handled conservatively.

The correct posture at this stage is operational rather than theatrical:

  • treasury-facing assets should be controlled through multisig or threshold-equivalent operational custody;
  • signer sets should be segregated from ordinary product usage;
  • large treasury or contributor-affecting movements should require deliberate approvals;
  • sensitive configuration changes should be observable, timelocked where the live contracts support it, and documented consistently across white paper, dApp, and notices.
Control domainPreferred postureWhy it matters
Presale proceeds custodyMultisig / threshold-equivalent custody with controlled withdrawal authorityProtects contributor-facing funds and reduces single-operator risk
CTZAI treasury inventorySegregated treasury custody with documented purpose bucketsKeeps programme inventory, reserve logic, and reporting aligned
Reward-contract operationsTimelocked parameter changes where implemented; controlled treasury refill pathsPrevents silent drift in user-facing economics
Operations gas treasurySeparate operational wallet or multisig posture for deployment, maintenance, and contract refill tasksKeeps user-paid gas logic distinct from programme operations
Emergency controlsRestricted operational authority with clear notice disciplineAllows containment without pretending full decentralization already exists

In short: roadmap governance answers what should evolve; custody answers who can move or configure critical assets and under what controls. Confusing those layers weakens trust. Separating them strengthens it.

Why CitizeAi?

Many products optimize attention or undifferentiated engagement. CitizeAi_ does not. It targets civic transparency in the reading flow—structured context, verifiable participation where incentives apply, and treasury-disciplined settlement—without framing the project as click rewards or passive browsing pay-outs.

Transparency in flow

Structured signals appear while reading—political and media provenance—rather than only in a separate research tab. The product question is whether citizens encounter accountability where they already consume news.

Verifiable participation

Rewards attach to reviewable actions (e.g. highlight-driven popup, toolbar open) with backend-signed proofs, replay protection, and on-chain caps—so incentives align with intentional transparency seeking, not passive surveillance.

Roadmap-first governance & treasury discipline

**Roadmap governance** anchors “what we build next” in dedicated contracts; treasury allocation rounds tie budgets to KPI gates and reporting. Policy-style DAO modules exist as secondary or expandable lanes—not a substitute for shipped product credibility.

Product mission: transparency in the reading flow

Democratic health depends on what millions of people read in practice—not only on what experts publish elsewhere. The decisive moment for transparency is often **the moment of reading**: a citizen is already in motion, trying to understand who is speaking, who is implicated, and who benefits from a narrative. If that moment requires leaving the page for every name check, ownership lookup, or subsidy search, transparency becomes a privilege for the few with time and skill—not a habit for the many.

Political Transparency is a France-first browser extension. On supported French news pages it detects named public figures, public-office holders, and declarants in scope, highlights them in the article text, and opens structured transparency context grounded in public declarative data—accountability context while you read, with less manual search friction than tab-hopping for every name.

Media Transparency is a sibling browser extension—not a skin of the political product. On participating outlets (by domain) it surfaces ownership, public subsidies, funding, and other outlet-level structural signalssource literacy in the reading flow, so readers can see more of the structure and money behind the brand, not only the headline.

Keeping **people** and **outlets** in **separate products** avoids a noisy overlay that mixes accountability questions with ownership questions. **Product first, optional incentives second, governance as infrastructure:** **CTZAI** and the **Solidity** stack support **auditable, bounded** programme mechanics—they do **not** redefine the civic mission.

Both extensions are useful without a wallet and without CTZAI. In-flow transparency is designed to work without connecting a wallet. Optional on-chain steps exist only when a user opens the CitizeAi_ dApp and chooses wallet flows.

This utility-first design does more than protect the mission from crypto-first distortion. It also creates a realistic public pathway into dApp usage. Most citizens will never start from staking screens, token dashboards, or governance interfaces. They may, however, start from a useful browser product that helps them interpret politics and media more intelligently while reading. CitizeAi_ uses that asymmetry deliberately: transparency first, optional wallet-native participation later. The result is a civic-tech entry ramp into dApp behaviour that begins with comprehension, not speculation.

The **wallet-connected dApp** is a **supporting layer** for proof review, claims, staking, and roadmap governance—surfaces that need **explicit consent and cryptographic signing**. It does **not** replace the extensions as the main user value, and it is **not** the project headline.

How a user experiences CitizeAi_

The figures below are **conceptual**: they show how **two reading-flow products** can diverge in logic yet **share the same optional** path into the dApp. They are **not** eligibility guarantees, timing diagrams, or contract specifications.

Dual extension paths from ordinary reading. **What this is:** a schematic split between **political** and **media** in-flow context, then an **optional** convergence for wallet-native review and settlement—also the project’s **public entry ramp** into optional dApp usage (**civic utility first**, **wallet-native steps second**). **What this is not:** a promise that any session leads to a claim, a depiction of passive browsing rewards, or a substitute for live programme rules.
Layered experience: **primary** value is in-browser context while reading; **optional** steps require the dApp and a wallet. **Not shown:** treasury mechanics, presale, or governance detail—only the user-mental-model split.
End-to-end **storyline** from page to chain—not every step runs on every visit, and only **proof-eligible** patterns may continue past “Optional proof.” **Not** a timeline with fixed duration or success rates.

Why this journey matters beyond claims

This journey is not only a reward or claim flow. It is also the mechanism by which CitizeAi_ can introduce ordinary citizens to dApp interaction through a civic context they already understand. The user does not begin with “connect wallet to farm rewards.” The user begins with a simpler question: who is this politician, who owns this outlet, what public money or structural influence is relevant here, and can I understand what I am reading more clearly?

Only after that value is established does the optional dApp layer become meaningful. Wallet connection, proof review, claim submission, staking, and roadmap participation are therefore not presented as mandatory technical hurdles; they are downstream civic actions that become legible once the product has already proved useful. This is why the extensions remain central. They are not marketing wrappers around the protocol. They are the public-facing civic layer through which some citizens may gradually become confident dApp participants.

CitizeAi_ should therefore be read as a bridge model:

  • familiar browsing context,
  • useful civic transparency,
  • optional wallet connection,
  • optional auditable on-chain action,
  • broader participation infrastructure over time.

That bridge model is strategically important because it expands the addressable civic user base beyond people who are already comfortable with wallets, tokens, or Web3-native interfaces.

Mini journey — Political Transparency

**Problem this addresses:** articles name public actors constantly; readers often lack **immediate** context on roles, declarations, or why a name matters. Stopping to search for every name breaks the flow—and is easy to skip.

**Value without a wallet (or CTZAI):** highlights where in-scope figures appear, plus **structured transparency context** framed for accountability—**who is at stake on this page**—while you stay in the article.

**Typical in-flow path:**

  1. Install **Political Transparency** and open a **supported** French news article.
  2. The extension **detects** relevant named figures and **highlights** them in the page where applicable.
  3. You **choose** to open structured context (for example via a highlight or the extension UI—exact affordances depend on build and site rules).
  4. You read with **public-life transparency signals** in view instead of treating the text as a black box of names.
  5. That utility remains **even if you never open the dApp** and never hold or claim CTZAI.

Optional reward path (secondary): only narrow, proof-eligible interaction patterns—when the live programme and contracts allow—may lead toward a claim. Claims are not settled inside the extension. If you pursue one, you open the CitizeAi_ dApp, connect a wallet, review the claim, sign if you choose, and pay native-token gas in phase 1. Settlement follows live contract parameters, caps, and cooldowns—verified deployment overrides static copy.

Mini journey — Media Transparency

**Problem this addresses:** readers often lack immediate context on **who owns** a brand, what **public support** exists, and how **funding** may shape incentives—information that is easy to ignore when it lives only in external databases.

**Value without a wallet (or CTZAI):** on a **participating outlet**, the extension ties the page to **structured source signals**—ownership, subsidies, funding—so you can interpret the **outlet** while you read, not only afterward.

**Typical in-flow path:**

  1. Install **Media Transparency** and visit a **participating** media domain the programme covers.
  2. The extension **identifies** the outlet and associates **structured** ownership / subsidy / funding presentation (exact UI depends on build and rules).
  3. You **choose** to open or engage with that source context—**intentionally**, not by scrolling alone.
  4. You interpret coverage with **source literacy** in view: structure and money behind the masthead, not guesswork.
  5. That utility remains **even if you never open the dApp** and never hold or claim CTZAI.

Optional reward path (secondary): same discipline as political—only explicit, programme-defined, proof-eligible patterns may feed a claim; passive browsing is not rewarded. Claims complete in the dApp with wallet review and signing; gas is user-paid in the chain’s native token in phase 1 by default; `ctzai_media_extension_reward` settles separately from the political contract.

Shared path when you opt into on-chain actions

Political and Media products **share** this optional pattern whenever a user chooses claims or other wallet-native flows:

  1. You **choose** to connect a wallet in the **CitizeAi_ dApp** (standard EVM / wallet-native flows).
  2. You use the **same wallet** you intend for claims and other supported actions.
  3. You **review** reward or claim details **in the dApp**—the extension does **not** replace that review surface.
  4. You **sign** routine transactions from your wallet provider when you approve them.
  5. In **phase 1**, you typically **pay network gas in the chain’s native token** for claims and comparable actions unless a **verified** deployment documents otherwise.
  6. **Settlement** follows **live** contract state: eligibility, caps, cooldowns, splits, and inventory—not marketing summaries.
  7. If **documentation and deployment disagree**, treat **verified bytecode, storage, and the live dApp** as authoritative.

What may be proof-eligible vs what is not

**When** the live programme and contracts allow, only **explicit** interaction patterns can be proof-eligible. This table is a **reader aid**—not an exhaustive legal or technical specification.

Potentially proof-eligible (if rules & deployment allow)Not reward-eligible
Explicit **highlight-driven** interaction defined as proof-eligible**Passive browsing**
Explicit **popup** or panel interaction where defined as proof-eligible**Scrolling** alone
Explicit **toolbar** or extension UI open where defined as proof-eligible**Idle time** on a page
A **proof-eligible** action **confirmed** through the **dApp** claim flow**Generic page views** without a qualifying interaction
**Background** tab usage without a qualifying interaction
Speculative “**engagement**” or attention farming

Do not misread this journey

CitizeAi_ is **mission-first** and **proof-based**. It is **not** “earn while browsing,” passive attention mining, or a token-promo dressed as civic tech.

  • **No passive browsing rewards**—scrolling, idle time, background tabs, and undifferentiated page views do **not** qualify.
  • **The extension is not a wallet**—signing and gas payment happen through your wallet in the **dApp** flow you start.
  • **Gas is not “paid in CTZAI”** by default—phase 1 expects **native-token** network fees unless a **verified** deployment states otherwise.
  • **Not every intentional click** is rewardable—only **narrow, attested** patterns the **live** programme allows.
  • **Deployed truth wins**—if copy lags contracts, trust **on-chain state** and the **live dApp**, not this PDF-era sentence.

Journey — short answers

Do I need a wallet to use the extensions?
**No** for core reading and transparency context. A wallet is only required if you **choose** on-chain actions in the dApp.
Why are claims in the dApp instead of inside the extension?
To keep **wallet review**, **signing**, and **settlement** in a **wallet-native** surface users already trust—and to separate lightweight reading UX from **protocol execution**.
Are rewards automatic when I use the product?
**No.** Rewards require **eligible** patterns where applicable, valid **proof**, and a **user-initiated** claim and **signature** in the dApp.
What if this document disagrees with the deployed contracts?
**Verified deployment and the live dApp** override static marketing or white-paper summaries.

How to read the rest of this paper

The rest of this document becomes much easier to read if you keep one distinction in mind:

  • The extensions are the product entry point. They create the immediate civic value: political accountability context and media-source literacy in the reading flow.
  • The dApp is the execution layer. It exists for optional proof review, claim flows, staking, and roadmap-governed on-chain actions that require wallet consent.
  • The token is the settlement and coordination layer. It helps budget, measure, and sustain bounded programmes, but it is not the reason the product exists.

That distinction prevents two common misreadings: first, that CitizeAi_ is “a token project with browser extensions attached”; second, that every useful interaction must end on-chain. Neither is true. The design is intentionally layered: product utility first, optional wallet execution second, treasury and coordination discipline beneath both.

Reader takeaway

A citizen can use CitizeAi_ meaningfully without a wallet. A citizen enters the dApp only when they choose an on-chain step. That is the core mental model for everything that follows.

What the user sees / what the system verifies / what the contract settles

Bridge from **reading UX** to **protocol execution**: the extension surfaces context and (only for defined actions) prepares attestations; the **dApp** is where users **review** proofs and **sign**; contracts **settle** CTZAI movement under caps and splits. Field names, proof schemas, and literals are **deployment-specific**—verify live ABIs and config.

What the user seesWhat the system verifiesWhat the contract settles
In-page highlights and structured public-life context for named figures on supported political news pages—before any wallet step.Domain allowlists; signed attestation binding action type, recipient, site, politician identifiers, extension_event_id, reward contract address, chain id; TTL / replay and cadence rules as configured.`ctzai_extension_reward`: `claim_reward` (or equivalent) with caps, cooldowns, 80/20 split, optional `market_id` accounting—ERC-20 CTZAI transfer to participant / treasury paths per deployment.
Ownership / subsidy / funding context for the outlet while reading participating media sites—before any wallet step.Campaign eligibility; freshness-bound proofs (`issued_at_ms` / `expires_at_ms`); action type; domain; recipient; extension_event_id; contract address; chain id.`ctzai_media_extension_reward`: fixed phase-1 gross per valid claim, stricter caps/cooldowns than political, 80/20 split—ERC-20 CTZAI settlement separate from the political contract.

The problem

Transparency tooling often fails on adoption: manual steps, unclear incentives, and weak linkage between user effort and an immutable ledger. Without measurable interaction semantics, operators cannot distinguish genuine engagement from spam, sybil-style farming, or scripted abuse.

Centralized loyalty points are opaque and revocable; they rarely interoperate with wallets or community governance. Users and regulators increasingly expect provenance for political and media content, yet few systems combine in-flow context, wallet-native settlement, and transparent emission rules.

CitizeAi_ addresses this by defining narrow, reviewable reward events (for example highlight clicks and toolbar opens), binding them to unique on-chain identifiers, and enforcing caps and splits directly in contract code.

Solution overview

With the extensions installed, citizens read on **supported French domains** as usual. **Political Transparency** detects and **highlights** in-scope public figures and opens **structured accountability context** in-flow. **Media Transparency** maps **participating outlets** to **ownership, subsidies, and funding** signals for **source literacy**—again **without** treating every article as a reason to open another tab. That **reading-layer** value is **independent** of wallets and CTZAI. When—and only when—a user takes a **narrow, programme-defined** interaction that can be attested, the stack may offer an **optional** path: structured handoff to the **wallet-native dApp**, where the user **reviews** the proof and **signs** the **EVM** transaction. Short-lived **signed attestations** bridge intentional off-chain gestures to on-chain `claim_reward` entrypoints; **Solidity** enforces replay protection, caps, cooldowns, and treasury splits.

From gesture to settlement (optional path): intentional extension affordance → attested proof (bound to chain id, contract, recipient, freshness/TTL rules) → dApp review → wallet signature → contract execution → optional withdraw or further flows per deployment. Phase 1 default: the user pays native-token gas for routine on-chain actions unless verified configuration states otherwise.

The CitizeAi_ **EVM-compatible** dApp connects standard wallets (e.g. via EIP-1193 providers), surfaces token, presale, vesting, staking, governance, and reward flows, and keeps **deployed contract addresses, chain configuration, and ABIs** aligned with verified Solidity builds—so integrators always know which **interface** they call. CI and release processes should treat **ABI JSON**, **address registries**, and generated client types as authoritative alongside on-chain verification. That artefact authority model matches the Token and Tokenomics pages: **live bytecode, storage, and published config** override informal copy.

Political extension flows focus on public-life transparency signals (for example declarative disclosures aligned with reference datasets such as HATVP on supported sites). The media extension focuses on ownership and funding transparency via the CitizeAi_ API—without mixing political features into that product line.

A separate beta web platform (`beta_frontend`) explores broader knowledge-graph and governance UX; it complements the extensions and contracts but does not replace on-chain accounting for CTZAI rewards described here.

Use case validation

Is the use case pertinent?

Position

Yes—but only if the token remains secondary to product utility.

The use case is strategically strong because CitizeAi_ is not trying to bribe people to exist. The system rewards:

  • interaction with transparency primitives,
  • on supported domains,
  • through defined actions,
  • with proof-based claims,
  • under caps and cooldowns,
  • and with a wallet-linked audit trail.

That is much stronger than generic “social engagement mining.”

Why it is pertinent

The extensions solve a real information problem: source transparency and political or public-figure context in the reading flow.

The dApp is not bolted on randomly; it is the settlement and governance layer for claims, staking, vesting, and **roadmap-first** on-chain coordination. Where CTZAI is exchangeable in practice, that property can make the reward layer more legible to citizens—**without** turning CitizeAi_ into a speculation-first product, and **without** promising financial returns or market outcomes.

The case is also stronger because CitizeAi_ combines crypto-native properties with non-crypto commercial reality. Transferability, wallet interoperability, auditable treasury logic, and optional conversion into other assets matter more when they are attached to paid civic-tech products and bounded programme mechanics rather than to a purely speculative loop. That combination makes the use case more intelligible to the crypto industry without making speculation the headline.

France is a rational first market because the country is large, highly digitized, and heavily engaged with online public services and digital news habits. France’s population is estimated at 69.1 million on 1 January 2026 by INSEE.

France also shows strong digital readiness: Eurostat reports that 91% of people in France aged 16–74 used a public-authority website or app in the previous 12 months in 2025. That is not the same as “they want crypto,” but it does indicate a digitally mature civic environment.

Where the use case can fail

  • If users install the extension but never connect a wallet, the reward system becomes an elegant cathedral with no congregation.
  • If the token is too visible too early, users may interpret the product as “crypto farming for clicks” rather than “trust infrastructure for democratic literacy.”
  • If you budget by market size rather than by validated action demand, you risk either grotesque over-allocation or a treasury that looks unserious.
  • If supported domains and datasets are still narrow, “France market” is too broad a framing. The true phase-1 market is closer to French users on supported domains with enough motivation to install, connect, and claim.

Conclusion

Pertinent? Yes. Automatically mass-market? No.

Civic mission and incentive discipline

CitizeAi_ is civic transparency infrastructure: it is meant to **improve transparency in France’s political and media arenas** by bringing structured context into the reading flow—where people already consume news and public information—so that accountability and media literacy are practical, not theoretical. **The user benefit is immediate without any token claim:** highlights, context, and outlet signals work as long as the extensions are installed.

The product line is intentionally split into two browser extensions. Political Transparency surfaces contextual public-life transparency signals while you read—who is named, what official disclosures exist, how narratives recur—so users can interpret public discourse with evidence in view. Media Transparency surfaces ownership, funding, and source-structure signals so users can evaluate outlets and framing with structural insight, not guesswork. Both are designed to be valuable even when no token is involved: they address a public-interest information problem first.

**CTZAI is not here to define the project**—it exists to reinforce deliberate transparency-seeking behaviour and to help adoption and retention around the products. Optional incentives are not why these products exist—**product first, reward second**. They reinforce *intentional* transparency-seeking behaviour: narrow, named actions that can be attested, proof-bound, capped, and treasury-disciplined. They are not a generic reward for scrolling, passive browsing, undifferentiated clicks, or undefined “engagement.”

This is also why CitizeAi_ can matter beyond its immediate reward mechanics. If designed correctly, the project can help normalize a different public understanding of dApps: not as abstract speculative interfaces, but as optional civic execution surfaces connected to real public-interest use cases. In that sense, the suite can widen access to dApp participation by anchoring it in transparency, comprehension, and explicit consent. The citizen does not need to start as a Web3-native participant. CitizeAi_ is built so that civic usefulness can come first.

The same discipline applies to sustainability. CitizeAi_ is not built on the assumption that token mechanics alone should fund delivery. The live browser products can generate ordinary fiat revenue through paid access; service lines can generate additional operational revenue; and the phase-1 20% programme treasury share helps sustain the incentive infrastructure itself. This separation is strategically healthy: it reduces pressure to over-financialise the token, while preserving a bounded on-chain mechanism for programme continuity.

This distinction matters for partners, users, and oversight. CitizeAi_ is not a click-farming product, not an attention-mining scheme, not “earn for browsing,” and not a passive reward system. Incentives do not monetize attention in the abstract; they settle bounded, audited claims when users take specific transparency-oriented steps that contracts and operators can verify.

CTZAI and on-chain rails support the mission. The token is primarily a settlement, ecosystem coordination, and reward asset inside a documented Solidity suite—presale and vesting allocations, extension-reward settlement after claims, and staking locks that express long-term alignment. Exchangeability (where markets and law allow) can strengthen motivation for civic-tech participation; it is an adoption amplifier, not the project’s purpose, and implies no promise of liquidity, listing, or profit. Staking is not APR or yield: it is a commitment, eligibility, and anti-abuse layer that modulates suggested caps and multipliers under the fixed-reward model. The civic mission does not exist to justify the token; the token exists to keep the programme measurable, bounded, and wallet-interoperable.

Governance in the current phase emphasizes **roadmap governance** and operational controls described in this paper—not default token-weighted voting over routine product parameters. Policy DAO and similar contracts are **secondary / expandable** infrastructure. CTZAI is not described here as a default “governance token”; that separation is intentional.

What CitizeAi_ explicitly is not

  • A programme that pays for passive browsing, background loads, or undifferentiated page views.
  • A consumer crypto product whose primary pitch is “maximize earnings” from attention.
  • A yield or APR product—staking does not pay passive interest from the vault.
  • A substitute for editorial judgment, fact-checking, or legal compliance; it is tooling and incentive design layered on top of ordinary reading.

Operating principles

The incentive layer follows the **Core principles** box (product and mission first; proof before payout; caps before scale; treasury discipline; roadmap governance; deployment truth).

Core principles — full numbered list for reviewers and comms alignment.

Project evolution

Phases are evolutionary, not cosmetic versioning. Each phase has a reason to exist and a gate before the next.

Phase I — Transparency products and fixed rewards

Why: Ship political and media flows end-to-end, prove extension ↔ dApp ↔ chain handoff, measure abuse and wallet-linked participation under simple economics.

Gate: Before scaling emissions: stable claim success, bounded fraud/rejection rates, understandable support load, and treasury monitoring that matches real daily burn.

Phase II — Guardrails and treasury discipline

Why: Introduce stronger sybil resistance, clearer categories, market budgets and allocation rounds as default operating procedure—not one-off admin moves.

Gate: Before dynamic formulas: evidence that fixed parameters are exhausted—i.e. measured demand and abuse patterns justify more complex rules.

Phase III — Mature governance and deterministic reward logic

Why: Move toward deterministic dynamic rewards only after published criteria and community-tested governance—preserving predictability for users and partners.

Gate: Requires sustained product metrics, independent review of incentive surfaces, and explicit communication ahead of any parameter change that affects user expectations.

System architecture

End users interact through the browser chrome: **Political Transparency** and **Media Transparency** are the **primary** surfaces for civic context. Extensions scope permissions to relevant hosts and emit reward events only for defined affordances. Services issue campaign maps and cryptographically bound proofs; the dApp assembles **contract calls**, requests **signatures** through the user’s wallet, and broadcasts **transactions** to an **EVM** JSON-RPC endpoint for inclusion in blocks.

On-chain, CTZAI balances and per-contract ledgers reconcile claims and withdrawals; the staking vault exposes eligibility (tier ≥ 1, maturity met, no pending unstake, not paused) and suggested caps/multipliers—extension reward contracts still enforce proofs and their own limits. The diagram below summarizes the left-to-right flow from citizen to chain.

Phase 1 transaction-cost and adoption model (France-first rollout)

Phase 1 operational economics on an EVM stack are not captured by a single “typical transaction” snapshot. CitizeAi_ models user-borne chain cost in two linked layers: per-user transaction scenarios (what an individual may sign when claiming, withdrawing, staking, or voting) and aggregate adoption scenarios (how many French users on supported domains move through the funnel from reader to installer to wallet-connected claimant). Treasury stress-testing elsewhere in this paper already depends on funnel outputs; transaction costs scale with the same volumes—multiplied by gas bands and effective fee markets on the not-yet-frozen production network.

The civic mission remains first: Political Transparency and Media Transparency browser extensions deliver in-flow accountability signals whether or not anyone claims CTZAI. Settlement rails are second: they must stay honest about gas and fees so participation remains realistic for ordinary users—not optimised as a speculative convenience narrative.

Gas discipline is therefore an implementation requirement for France-first rollout: small, fixed phase-1 rewards only remain credible if the chain’s fee environment preserves a sensible reward-to-fee relationship for the actions users repeat most often.

Behind the modelling sits a simple behavioural funnel. A person must first encounter value in the extension, then return often enough for the product to matter, then decide whether the optional wallet step is worth taking, and only then become a claimant or repeat participant. That is why the paper treats installs, active use, wallet connection, successful claims, and repeat participation as different stages of one journey, not as interchangeable growth numbers. The core product challenge is not “get everyone on-chain”; it is make in-flow transparency useful enough that some users rationally choose to continue.

What this shows: CitizeAi_ is designed so that civic usefulness comes before wallet usage. The product layer is the public entry point; the dApp layer is optional and becomes relevant only once the citizen sees enough value to continue. What it is not: a guarantee that every user progresses through all stages, or a promise of conversion rates. Tapered box widths are a visual aid only.

Part A — User transaction scenarios

The bands below are planning estimates for Solidity paths on a production chain that is not yet frozen; measured gas depends on bytecode versions, compiler settings, storage layout, calldata shape, and the live fee market. They are sufficient to compare scenarios and size aggregate exposure—not to promise exact wallet quotes.

Indicative phase-1 user transaction scenarios

ScenarioProduct / flowTypical on-chain actionsExpected transaction countPlanning gas bandNotes
Wallet onboarding / sign enablementCross-product (dApp / attestation)Off-chain signature (EIP-191 / EIP-712 style) binding proofs or session setup—no contract state change by itself0 on-chain0 gasNo EVM fee for the signature itself; production hardening still binds proofs to contract address and chain id.
Political reward claimPolitical Transparency → dApp → `ctzai_extension_reward``claim_reward` (or equivalent) consuming a signed proof payloadTypically 1120k–260k gasDepends on calldata size, storage updates, and split accounting for the deployed build.
Political reward claim + optional withdrawPolitical Transparency lineClaim plus user withdraw when the deployment separates internal credit from wallet transferTypically 2170k–370k gas (combined)Second step is optional per deployment; counts as an additional user transaction when exposed.
Media reward claimMedia Transparency → dApp → `ctzai_media_extension_reward`Same claim pattern; media-specific caps, cooldowns, and freshness rules applyTypically 1120k–260k gasSeparate contract keeps product semantics distinct from the political path.
Media reward claim + optional withdrawMedia Transparency lineClaim plus withdraw when a second step is enabledTypically 2170k–370k gas (combined)Mirrors the two-step discipline described for political flows when withdraw is user-visible.
First-time staking (approve + stake)Cross-product (dApp → `ctzai_stakingvault`)ERC-20 `approve` (if needed) followed by `stake`1–2135k–235k gas (combined)First interaction may require an allowance transaction; later stakes may collapse to a single tx.
Request unstakeStaking vault`request_unstake` moving principal to a pending state170k–130k gasPending unstake disables reward eligibility until completion per vault rules.
Complete unstakeStaking vault`complete_unstake` after the configured cooldown160k–120k gasSeparate completion transaction after the waiting period.
Roadmap governance votedApp → `ctzai_roadmap_governance`Cast or record a vote per the deployed interface170k–140k gasPrimary on-chain lane for “what we build next” in current documentation.
Policy / reward claim (where relevant)Policy DAO lane → `ctzai_dao_policy`Ballot or incentive claim paths where configured1 (when used)50k–110k gasSecondary / expandable lane; many phase-1 users will never touch it.

The figures below restate the tables visually: bar lengths use midpoints of planning gas bands (thousands of gas units); the funnel uses relative widths only—not headcount forecasts.

Indicative phase-1 gas bands by user scenario

Bars show the **midpoint** of each planning band in **thousands of gas units**. **Wallet onboarding (0 gas)** is omitted because it is signature-only. Hover or focus the chart for the full band text.

Part B — Adoption and rollout scenarios

Cells use structured ranges and qualitative bands—not false precision. Replace illustrative bands with measured analytics from French supported domains, store funnels, and dApp cohorts as they become available. The intent is to show how aggregate gas exposure compounds through the same funnel logic already used for treasury and allocation modelling.

France-first phase-1 adoption scenarios

ScenarioReachable readers on supported French domainsExtension installsActive extension usersWallet-connected usersSuccessful claimantsRepeat claimantsGovernance / staking participationOperational interpretation
Conservative launchFirst wave of allowlisted domains; order-of-magnitude reachable monthly readers often in the tens of thousands to low hundreds of thousands until coverage widens—measure; do not treat as a forecast.Low single-digit % of reachable readers; organic discovery and early civic-tech channels.A minority share of installs uses the extension weekly—install ≠ habitual use.A smaller fraction of actives completes wallet connection in the dApp—often the sharpest funnel step.Subset of wallet-connected users who complete at least one valid on-chain claim.Narrow core returning within daily caps and cooldowns.Limited; mostly power users exercising governance or staking surfaces.Low aggregate transaction volume; infrastructure, attestation quality, and support dominate operations. Gas is secondary to proving the extension ↔ dApp ↔ chain handoff.
Base-case rolloutExpanded French domain set; illustrative internal discussions often use mid–hundreds of thousands to low millions of reachable monthly readers—replace with dashboard truth.Higher conversion with partnerships, press, and clearer onboarding.Meaningful weekly cohort relative to installs.Improved connect UX lifts absolute wallet users; wallet remains a bottleneck.Material cohort proves end-to-end claim UX and contract fit.Retention under caps becomes a primary operating metric.Visible participation as products mature.Aggregate gas scales with claims and optional withdraws; treasury KPIs should track user-borne fee burden alongside CTZAI programme outflows.
High-engagement / scale caseBroad reader surfaces on supported French domains—still bounded by allowlist discipline and dataset quality, not “the entire country” by default.High absolute installs if messaging lands; watch abuse surfaces and support load.Large habitual user base becomes plausible.Absolute wallet users may lag viral install curves—do not equate installs with on-chain monthly active users.High claim counts stress RPC providers, indexing, and operator support.Large repeat set; fee sensitivity for small fixed rewards becomes salient.Broader participation; secondary gas load from votes and full staking lifecycle.Network selection and participation economics (including possible sponsored-transaction strategies later) move from theory to operations; reward-to-fee ratio is a gating design concern.

France-first phase-1 adoption and transaction-cost exposure

Planning assumptions for **supported French domains** in phase 1 (not a national TAM). Within each **column**, bar length uses a **sqrt scale versus the largest scenario** so later funnel stages stay legible; **labels** show compact counts—**hover or focus** a cell for full figures and step conversion rates.

France-first phase-1 planning funnel based on supported-domain reach, extension adoption, active usage, wallet connection, and successful on-chain claims.

How transaction-cost exposure is calculated

For each scenario, native execution cost is approximated as gas used × effective gas price at inclusion time on the target chain. On rollups and hybrid stacks, an L1 data-availability / posting fee may add to the user’s or relayer’s cost even when L2 execution gas looks low—operators should model both.

Total phase-1 user-borne gas exposure (before any sponsorship) is estimated by summing, over transaction classes, (transaction count) × (planning gas per transaction)—then applying the fee market if you need native-token terms. Because the production chain is not frozen, this document does not assert euro-denominated fee totals.

The operational question is linear but easy to underestimate: transaction cost per scenario × expected adoption volume in France, multiplied by repeat frequency where caps allow. The same funnel that drives treasury outflows also drives on-chain transaction count.

Worked structure (publication-style)

A compact planning estimate therefore combines counts such as: political claims, political withdraw transactions (when users move credited CTZAI to their wallets), media claims, media withdraws, staking actions (including `approve`, `stake`, `request_unstake`, and `complete_unstake`), roadmap governance votes, and policy-ballot or incentive transactions where that lane is enabled. Multiply each class by an appropriate gas band, sum, and apply the effective fee model—adding any rollup-specific L1 posting surcharge where relevant.

Who pays transaction fees

By default, users pay their own transaction fees when submitting claims, staking flows, and on-chain votes—consistent with transparent wallet-native participation and strong anti-abuse boundaries. CitizeAi_ may later evaluate sponsored transactions, paymasters, or relayers where they materially improve participation economics without weakening proof binding, rate limits, or auditability. Phase 1 does not promise a pervasive gasless experience; any sponsorship path would ship with explicit risk analysis and documentation.

The most recurrent gas-bearing actions in phase 1 are extension reward claims and, where deployments expose it, separate withdraw steps. Production network selection should therefore consider the reward-to-fee ratio for small, frequent, transparency-oriented settlements under fixed CTZAI amounts. Optional two-step settlement (credit internally, withdraw later) can improve operational control and accounting clarity, but it increases the number of user-signed transactions when people use the second step—product copy and support playbooks should state that burden plainly.

Gas Model — phase 1 gas payment defaults

For phase 1 CitizeAi_ follows Model A: users pay their own network gas for routine on-chain actions. On the chosen Solidity / EVM path, any user-signed transaction that changes contract state is funded from the user’s wallet. This is the operating default for the France-first rollout—it is not a general-purpose gasless or fully sponsored user experience.

That default applies to reward claim submission on both extension lines, to optional withdraw transactions when a deployment exposes a separate transfer step, to staking interactions with the staking vault, and to on-chain governance participation (for example roadmap or policy ballots as deployed). Off-chain signatures used to bind proofs or enable wallet flows do not consume EVM gas by themselves; any follow-on contract call remains user-paid unless a future, explicitly documented programme provides otherwise.

Treasury and operations budgets focus on CTZAI reward inventory, allocation-round funding, security and infrastructure, and monitoring / treasury operations. They are not, in phase 1, intended to subsidise every end-user transaction fee as a standing policy. That separation keeps reward economics legible and aligns aggregate fee exposure with the adoption scenarios modelled earlier in this section.

Rationale: A user-pays baseline keeps operations and audits simpler, avoids premature open-ended gas sponsorship before adoption and abuse patterns are understood, and reinforces treasury disciplinecredibility before complexity. It is consistent with bounded, proof-based, fixed-reward phase-1 design.

Future phases may evaluate selective sponsored transactions or relayer-assisted flows if measured onboarding friction shows they are justified for civic participation; any such shift would require an explicit budget, product decision, and risk review. That is not the phase-1 default.

The same posture applies to the France-first rollout of the Political Transparency and Media Transparency browser extensions: participants who use on-chain settlement should expect to cover network fees for those interactions under the current model.

Making gas responsibility explicit helps keep the incentive system sustainable and economically honest for civic transparency: on-chain anchoring has a visible cost alongside bounded CTZAI rewards.

Who pays gas in phase 1?

ActionDefault gas payerNotes
Wallet sign / enablement (off-chain)User (no EVM gas for the signature itself)Signature-only steps do not broadcast a fee-bearing transaction; binding to contract address and chain id still applies in production.
Political Transparency reward claimUserStandard claim path on the political reward contract; gas band depends on deployment and calldata.
Political reward withdraw (if enabled)UserSecond step when the deployment separates internal credit from wallet transfer.
Media Transparency reward claimUserMedia reward contract; caps, cooldowns, and proof rules as deployed.
Media reward withdraw (if enabled)UserOptional additional transaction when a separate withdraw is exposed.
Staking actions (stake / unstake / related)UserStaking vault interactions are user-initiated unless a future programme states otherwise.
Governance votes (roadmap / policy as deployed)UserOn-chain ballot or lifecycle transactions are paid by the voting wallet.
Treasury refills / operational on-chain transactionsCitizeAi_ operations treasuryProgramme funding, contract inventory top-ups, and operator-controlled flows—not routine per-user claim gas.

Gas Model — dApp and product alignment

The Gas Model is the phase-1 rule that routine user actions (claims, optional withdraws, staking moves, on-chain votes) are signed and paid for by the user’s wallet in the chain’s native token. The dApp ships with an explicit `GAS_MODEL` configuration (`user_pays`; relayer, sponsorship, and paymaster paths off by default) so UX, treasury framing, and contract usage stay aligned.

This is the same Model A posture documented in the Phase 1 gas payment model subsection and Who pays gas in phase 1? table above. The following card links the live dApp surfaces where participants actually confirm transactions.

Where to read it in the product

Gas Model pagewallet-native copy, fee hints, and the same Model A bullets used across Tokenomics and treasury pages.

Tokenomics — Transactions & gas · Phase 1 gas payment model (above)

Category positioning and competitive map

CitizeAi_'s strategic position becomes clearer when it is mapped not only against direct products, but across the adjacent categories it is designed to connect.

CitizeAi_ should be understood not as a single-category product, but as a multi-layered civic-tech system positioned across five adjacent fields: news and media transparency, browser-linked token utility, structured civic participation, trust-rebuilding media initiatives, and information-integrity networks. That is its core strategic difference. Most adjacent projects are strong in one field. CitizeAi_ is designed to connect several of them in sequence: transparency in the reading flow first, optional token utility second, and bounded participation and governance later.

In the first field, CitizeAi_ sits near products such as NewsGuard, Ground News, and AllSides. These tools improve information literacy by helping users assess source reliability, compare media framing, or identify bias patterns. NewsGuard, for example, explains that it rates websites and apps using journalistic criteria and provides "Nutrition Labels" for users. These are important comparators because they prove there is real demand for tools that make the information environment more legible. But they remain primarily analysis, rating, or comparison layers. They do not combine political and media transparency in the reading flow with an optional tokenized participation architecture. CitizeAi_ is therefore more layered: it does not stop at source assessment; it links transparency to utility and, over time, to civic participation.

In the second field, CitizeAi_ sits near browser- or search-adjacent crypto products such as Brave / BAT and Presearch. These projects demonstrate that token-linked digital habits can create attraction, retention, and ecosystem effects. But their primary logic is not civic transparency. Their center of gravity is browser/search behavior and token utility, whereas CitizeAi_ ties optional incentives to bounded public-interest use: understanding political actors, media ownership, public subsidies, and later information-integrity workflows. In that sense, CitizeAi_ is more mission-grounded and less attention-extractive than typical browser-token models.

In the third field, CitizeAi_ sits near civic-participation and digital-democracy infrastructures such as Decidim, vTaiwan, and Polis. These systems are strong references for consultation, deliberation, and participatory process design. But they do not generally begin inside the citizen’s everyday reading flow. CitizeAi_ differs by using browser-native transparency as the entry point and only then extending toward optional participation, governance, and coordination layers. It is, in effect, a civic-tech on-ramp rather than a participation portal first.

A fourth adjacent reference is Kleros, which represents governance- and dispute-resolution-oriented crypto infrastructure. Kleros is relevant because it shows how rule-bound, cryptoeconomic coordination can be operationalised. But it is not a public-information product and does not begin from citizen-facing media or political transparency. CitizeAi_ therefore differs both in audience and in order of operations: transparency first, optional participation second, bounded governance later. That sequence is strategically important because it keeps the project legible to ordinary citizens before asking them to care about governance.

A fifth and increasingly relevant reference field is local and regional trust-oriented media initiatives. This matters because CitizeAi_ is not aligned with replacing professional media. It is aligned with rebuilding trust inside professional media ecosystems and helping readers return to them with better context. Reuters Institute’s 2025 work notes that local and regional news brands enjoy the highest rates of trust of any media in France, and Reuters has separately highlighted how newsrooms are experimenting with transparency as a way to rebuild trust. This is highly relevant to CitizeAi_. It means the project is not only adjacent to media-literacy tools; it is also aligned with efforts inside journalism itself to make reporting more legible, accountable, and trusted. CitizeAi_ can therefore be positioned as a trust-rebuilding civic-tech layer for professional media ecosystems, not as an anti-media substitute.

A sixth field is fact-checking networks and newsroom innovation labs. These are especially relevant for the future News Debunking prototype. The European Fact-Checking Standards Network (EFCSN) describes itself as the voice of European fact-checkers that uphold and promote high standards, build professional links, and strengthen transparent and effective responses to misinformation. The International Fact-Checking Network (IFCN) at Poynter describes itself as supporting fact-checkers worldwide through networking, capacity building, and collaboration. JournalismAI, meanwhile, frames itself around using AI to make journalism better through shared experimentation and case studies. These are not direct competitors to CitizeAi_; they are ecosystem reference points. Their existence shows that there is already a professional layer of information-integrity actors, standards, and collaborative practice. CitizeAi_'s News Debunking prototype can later integrate these kinds of stakeholders through a scoped DAO-like review layer composed of journalists, experts, academics, and citizens. Nicely put: the DAO would not be a replacement for professional fact-checking; it would be a structured coordination surface that helps decide which reviewed signals, contested claims, or debunking contexts are sufficiently relevant, robust, and useful to surface in the extension for end users.

That point is strategically important. The News Debunking prototype should not be narrated as "CitizeAi_ will become the fact-checker of everything." It should be narrated as a civic-tech interface and governance layer that can connect professional verification ecosystems, structured public-interest review, and end-user legibility. Existing fact-checking networks bring standards, methods, and editorial discipline. CitizeAi_ can bring reading-flow distribution, structured product design, and optional governance-enabled prioritisation. In that sense, the future DAO is best understood as a collaborative filtering and escalation layer that sits downstream of professional verification practice and upstream of user-facing extension logic.

The result is a distinctive position. CitizeAi_ is more civic and participatory than source-rating tools, more useful and democratically grounded than generic browser-token incentive models, more embedded in everyday information consumption than many participation platforms, and more product-distributed than most fact-checking or newsroom-innovation ecosystems. It does not ask users to choose between reading better, participating digitally, and understanding token utility. It aims to connect these functions within one coherent France-first civic-tech suite.

With that category position in view, the product ecosystem below can be read not as a random feature set, but as a layered civic-tech architecture.

Illustrative strategic positioning map only. Scores are conceptual and reader-facing, not empirical measurements. CitizeAi_ is shown in its intended layered position: strong reading-flow transparency today, with optional token utility and bounded participation deepening through staged product maturity rather than claimed all at once.

Current product ecosystem

Live today: Political Transparency and Media Transparency deliver in-flow civic context and do not require a wallet or CTZAI. Prototype stage: Content Moderation and News Debunking extend the suite toward information integrity—not described here as finalized public products. Strategic horizon: later layers for roadmap-governed participation, democratic coordination, and modular governance infrastructure, on the same mission-first architecture. Transparency products remain the first public entry point; optional wallet-native actions in the CitizeAi_ dApp remain the second layer for citizens who choose to go further. The same CTZAI (ERC-20) and treasury discipline extend across lanes without issuing new tokens per product. The dApp remains the wallet-native signing and execution surface; Solidity contracts enforce balances, limits, and programme rules on-chain.

The ecosystem also begins commercially through the products themselves. Political Transparency and Media Transparency are not “free wrappers around a token layer”; they are paid civic-tech products with their own access model, and that matters for how CitizeAi_ should be understood economically and strategically. For current retail price points, see Live product access and citizen pricing.

Political transparency extension

**Problem:** readers encounter many named public figures in French news; manual lookup is slow and uneven, so accountability context is often lost in the scroll.

**On-page:** on supported domains, validated spans are **highlighted** in the article; the extension popup lists tab-scoped matches and opens a structured transparency view—so you see **who is being discussed** without leaving the page.

**Context:** the popup is grounded in **public declarative data** (e.g. HATVP-aligned flows where applicable)—identity, mandates, activities, and aggregated declarations where fields exist—so interpretation is grounded in **traceable public-life signals**, not editorial opinion.

**Practical benefit:** less research friction, stronger interpretive reading of recurring actors and narratives, and clearer accountability context in the reading flow.

This value exists before any wallet connection, claim flow, or CTZAI balance: the extension is already doing its civic job when it reduces lookup friction and makes public-life context visible in the article itself.

**Optional rewards:** CTZAI is **not** for passive browsing; rewards attach to **explicit, bounded actions** (e.g. highlight-driven popup, toolbar open) with proof-based settlement—**secondary** to the product’s transparency utility.

Media transparency extension

**Problem:** readers rarely see **ownership, subsidies, and funding** context at the moment they consume a story—yet those signals shape how information environments behave.

On-page: on participating outlets, the extension surfaces ownership, public subsidies, and financial transparency views for the outlet via the CitizeAi_ API—without requiring you to open a separate research tab for every brand.

**Context:** the popup can include **visualizations** (e.g. ownership-style graphs, trends) where data exists—so structural signals are **legible**, not buried in a spreadsheet.

**Practical benefit:** stronger **source evaluation** and disciplined **media literacy** while browsing; readers can better assess possible structural influences behind content.

This value also exists before any wallet connection, claim flow, or CTZAI balance: the extension is already useful when it makes ownership, subsidy, and funding context legible at the moment of reading.

**Optional rewards:** CTZAI settlement mirrors **proof-based, bounded** affordances (e.g. **PopupNotificationClick** / **ToolbarPopupOpen**)—not page loads or passive engagement; phase 1 uses one fixed gross (**0.5 CTZAI**) and stricter caps/cooldowns than political; proofs are short-lived and behaviour-bound.

Content Moderation extension (prototype)

Problem: readers, communities, and institutions increasingly face harmful, abusive, or context-sensitive language environments online, yet blunt moderation systems often collapse nuance into simplistic blocking logic.

Prototype status: Content Moderation is now a prototype-stage extension in the CitizeAi_ civic-tech suite. It should not be described here as a fully live public product. The prototype direction is to let users interact with moderation settings, contextual rules, exception logic, and governance-linked domain or wording policies in a more transparent and civic-legible way than ordinary black-box filtering tools.

Strategic role: this product extends CitizeAi_ beyond transparency into democratic information-integrity tooling. It is relevant to the suite because it treats moderation not as hidden platform power, but as an auditable and governable civic surface.

Governance posture: where governance is introduced, it should remain bounded, explicit, and product-scoped. The prototype should be framed as an experiment in accountable moderation workflows—not as a claim that moderation governance is already finalized or broadly deployed.

News Debunking extension (prototype)

Problem: readers are frequently exposed to fast-moving claims, misleading narratives, recycled falsehoods, and low-trust information flows without accessible in-context tools to flag, organize, and review contested claims while reading.

Prototype status: News Debunking is a prototype-stage browser extension in the CitizeAi_ civic-tech suite. It is not described here as a finished production product. Its purpose is to bring debunking and information-integrity signals closer to the reading flow, just as Political Transparency and Media Transparency bring political and media-structure signals into that same environment.

Product direction: the extension is intended to help users identify contested or potentially misleading claims, surface debunking context, and connect reading behaviour to a more structured civic review process. The aim is not to replace journalism, editorial judgment, or legal fact-finding. The aim is to create a more legible civic-tech layer for information integrity in context.

Governance layer: the News Debunking prototype may be paired with a scoped DAO-like review and prioritization surface composed of journalists, experts, and citizens. In this paper, that DAO should be framed narrowly: a product-specific governance and credibility layer for review, prioritization, signaling, and bounded participation around debunking workflows. It is not the primary governance model of CitizeAi_ as a whole.

Mission fit: this extension fits the broader CitizeAi_ strategy because it extends the suite from transparency toward information integrity while preserving the same principles: product-first usefulness, bounded incentives, reviewable participation, and operational honesty about maturity.

The News Debunking prototype also requires a more explicit description of how its review and publication layer should be governed.

News Debunking governance model (prototype)

The News Debunking prototype should not be understood as a machine for declaring universal truth, nor as a replacement for journalism, courts, regulators, or editorial responsibility. It should be understood as a product-scoped governance and review layer for transforming verified or reviewable debunking work into durable, user-facing context in the reading flow. The goal is not to let a crowd "decide reality." The goal is to create a bounded civic-tech process through which journalists, experts, civic-tech actors, and citizens can help identify, review, package, prioritize, and publish debunking context that is sufficiently robust, relevant, and legible to be surfaced in the extension.

This distinction matters because misinformation and contested claims are not best handled through a simplistic AI-first or vote-first logic. CitizeAi_'s strategic direction for this prototype is human-first: structured cooperation before automation, reviewed evidence before algorithmic certainty, and bounded publication standards before any claim of generalized truth-detection. In that sense, the News Debunking lane extends the same logic already used elsewhere in the suite. Political Transparency and Media Transparency make public-interest context durable in the reading flow. News Debunking would do the same for reviewed debunking context: not ephemeral alerts, but persistent, structured "debunk packages" that can be surfaced when relevant topics, narratives, or claims appear on a page.

For that reason, the DAO should be framed narrowly. It is not the primary governance model of CitizeAi_ as a whole; roadmap governance remains the headline governance story at ecosystem level. The News Debunking DAO is instead a product-specific review and prioritization mechanism attached to one prototype lane. Its purpose is to help determine which contested claims are worth structured treatment, which evidence bundles are sufficiently credible for publication, what user-facing summary should appear in the extension, and when a package should be revised, challenged, deprecated, or archived. It governs publication readiness and extension visibility thresholds; it does not become an unrestricted authority over truth, law, or journalism.

A useful way to describe this model is through the idea of a debunk package. A debunk package is the core object of the News Debunking prototype: a structured, reviewable unit that gathers the claim under examination, the relevant source material, the supporting and rebuttal evidence, the review status, the publication summary shown to readers, and the version history over time. In this architecture, the extension does not simply "label news as false." It detects a topic or claim context and, where an approved package exists, surfaces bounded reviewed context to help the reader interpret what they are seeing. That package-based approach is strategically stronger than one-off alerts because it creates permanence, versioning, auditability, and a clearer separation between raw detection, evidence review, and end-user display.

The governance process for these packages should be layered. First comes intake: a claim, topic, article, narrative, or recurring misinformation pattern is submitted by an eligible participant or identified through structured monitoring. Second comes triage: the claim is checked for scope, duplication, legal sensitivity, evidentiary viability, and user relevance. Third comes evidence assembly: a package is built around documented sources, rebuttal material, explanatory context, timestamps, and versioning. Fourth comes review: journalists, experts, civic-tech operators, and other qualified participants examine whether the package is sufficiently robust to be surfaced to readers. Fifth comes publication decision: the DAO-like review layer determines whether the package should be visible in the extension, held for more evidence, escalated, challenged, or archived. Sixth comes revision and appeal: if new information appears or a package is contested, the system allows updates, structured challenges, or deprecation rather than pretending that one review event settles the matter forever.

This structure also clarifies stakeholder roles. Journalists and fact-checking actors should contribute evidence discipline, editorial standards, and publication judgment. Domain experts and academics should contribute subject-matter validation where topics require specialist knowledge. Civic-tech and governance operators should contribute workflow discipline, scope enforcement, and product-legibility standards. Citizens should contribute reporting, prioritization signals, contextual knowledge, and structured participation around what is useful and relevant to surface. Where necessary, an operator or legal/compliance layer should retain the ability to intervene in edge cases involving defamation, high-risk allegations, procedural abuse, or jurisdiction-specific obligations. This is not a flattening of professional roles into pure crowd voting. It is a bounded cooperation model in which different forms of legitimacy and expertise contribute to one product pipeline.

The reward layer, if activated for this lane, should follow the same mission-first discipline as the rest of CitizeAi_. Participants may be rewarded in CTZAI for validated contribution work, not for generic activity volume. Gas for routine on-chain participation should remain user-paid under the phase-1/Model-A posture unless a future explicitly documented sponsorship programme says otherwise. Rewardable actions in a future News Debunking lane should therefore be tied to bounded work classes such as accepted submissions, accepted evidence contributions, eligible review participation, approved package work, or valid appeal review—never to raw outrage, undifferentiated voting, or spammy reporting volume. In other words, the system should reward accepted contribution quality, not noise generation.

A sensible future contract architecture for this lane is modular rather than monolithic. At minimum, the prototype likely justifies a Debunk Package Registry to anchor package identity, status, and metadata pointers; a Debunk Governance Contract to manage proposal lifecycle, review states, approvals, challenges, and publication thresholds; and a Debunk Contributor Reward Contract to settle bounded CTZAI rewards for eligible work. An appeals or challenge module may later be justified if the lane matures enough to require explicit on-chain dispute handling. This modular design is more aligned with CitizeAi_'s existing architecture than a single all-purpose "truth DAO" contract. It keeps publication logic, governance logic, and reward logic legible as separate control surfaces.

This governance model should also remain explicit about what it does not do. It does not promise universal misinformation detection. It does not claim to replace professional fact-checking networks. It does not turn token holders into instant editorial authorities. It does not transform contested civic information into a simplistic true/false scoreboard. And it does not justify live economic activation merely because the prototype exists. Prototype maturity remains distinct from treasury activation: the News Debunking lane should only move into funded CTZAI programme logic after product maturity, methodology clarity, monitoring capacity, governance safeguards, and compliance posture are sufficiently strong.

Properly framed, the News Debunking DAO is therefore not a tribunal of truth. It is a bounded civic-governance layer for reviewing, packaging, prioritizing, and publishing durable debunking context into the reading flow. Existing fact-checking and newsroom-innovation ecosystems can contribute standards, methods, and professional discipline; CitizeAi_ can contribute structured packaging, reading-flow distribution, optional on-chain coordination, and a product-scoped participation model. That is the right level of ambition for this prototype: serious enough to matter, narrow enough to remain credible, and useful enough to help citizens read contested information with more context rather than more confusion.

Read this governance model as a bounded prototype architecture within the broader suite, not as a claim that the full debunking lane is already live or economically activated.

Expanded civic-tech suite (strategic horizon)

Beyond the two **live** transparency products, CitizeAi_ is building a broader civic-tech suite across **live**, **prototype**, and **later-stage** product families. The point is **not** to imply that every lane is equally mature. The point is to show how the suite evolves from **transparency**, to **information integrity**, to **participation** and **modular governance infrastructure**—without changing the **mission-first architecture**.

A · Transparency — Political

Live entry point: named public figures and structured public-life context on supported French news pages; proof-based, capped optional CTZAI settlement where enabled.

A · Transparency — Media

Live entry point: outlet ownership, subsidy, funding, and structural signals in the reading flow; separate contract logic and product behaviour from the political line.

B · Information Integrity — Content Moderation

Prototype: a moderation-oriented extension exploring contextual filtering, domain-sensitive exceptions, and more accountable moderation logic. Prototype-stage only; not described here as a finalized public deployment.

B · Information Integrity — News Debunking

Prototype: a debunking-oriented extension designed to surface contested-claim context and organize bounded review workflows in the reading flow. This lane may include a scoped DAO-like layer composed of journalists, experts, and citizens for product-specific review, prioritization, and credibility signaling. Prototype-stage only.

C · Participation — Parties & citizens

Roadmap: collaborative political programme development, verified participation, structured policy contribution, and programme accountability as a civic-tech service line—funded via treasury rounds and/or client budgets, not new CTZAI minting.

C · Participation — Unions & workers

Roadmap: worker and union participation surfaces, social-dialogue tooling, and collective-input infrastructure aligned with the same bounded treasury discipline as the transparency products.

D · Governance infrastructure / modular lanes

Future lane: modular dApp and governance tooling for aligned organisations—scoped, explicit, and not a substitute for present-day product credibility.

This revised suite should be read as a maturity ladder rather than a flat product list. Political Transparency and Media Transparency are the live layer. Content Moderation and News Debunking are the prototype information-integrity layer. Participation and broader governance infrastructure remain later-stage lanes. That ordering keeps the white paper strategically ambitious without becoming fiction in formal wear.

Strategic horizon does not mean immediate treasury activation: future lanes remain separate budget questions until product maturity, governance approval, and operational readiness justify allocation rounds.

Narrative order: **product proof before treasury scale**; **roadmap governance before DAO theatre**; **one ERC-20** for all lanes that need on-chain settlement.

Market scope (phase 1)

The extensions and datasets initially emphasise the French market: domain allowlists, disclosure references (e.g. HATVP-aligned flows where applicable), and UX are tuned for that geography. Fixed per-action rewards reflect that focused scope.

Beta web platform

The `beta_frontend` application (Next.js, PostgreSQL/Prisma, JWT auth) prototypes governance and knowledge experiences that may converge with on-chain DAO contracts over time; treat it as experimental UX unless a specific deployment is announced as canonical.

CitizeAi_ EVM dApp

Production wallet flows for CTZAI (ERC-20), presale, vesting, staking vault, extension reward claims, and governance documentation pages live here. Extensions should deep-link users into these routes so **connection, transaction review, and signing** stay in an audited web surface, not inside privileged extension contexts.

Extension rewards — participant / treasury split (phase 1)

Political and Media transparency programmes use separate vault contracts (`CTZAIPoliticalTransparencyReward` and `CTZAIMediaTransparencyReward`), each with its own action types, phase-1 gross defaults, daily caps, and replay protection—but the same economic idea: a gross accrual is computed from proofs and parameters, then an 80% / 20% basis-points split sends the majority to the participant and the remainder to the CitizeAi programme treasury for audits, infrastructure, and ecosystem sustainability. `market_id` tags allocation rounds or budget buckets, not geography as a gate. Extensions hand off to the wallet-native dApp; they do not broadcast transactions or hold signing authority for claims.

Why route a treasury share on every gross accrual?

A 100% participant payout looks generous on a slide but is fragile operationally: security reviews, RPC and indexer uptime, abuse monitoring, legal triage, dataset maintenance, and honest communication all have real cost. The 20% programme-treasury lane is the disciplined way to keep the same contract rules funding both user settlements and long-horizon programme health—without hiding subsidy inside inflation or vague “foundation” budgets. Parameters—including basis points—are deployment truth: verify on-chain getters and ABI before treating any number as a promise.

Gross vs what the participant accrues

Documentation and UX often show gross CTZAI per eligible action (e.g. political 1.00 vs 0.10 CTZAI by path; media 0.5 CTZAI before split). The participant share is not the gross: it is gross × participant_bps / 10_000 (e.g. 80% of gross when bps are 8000). The treasury share is the remainder. Some flows expose a `previewClaimSettlement` (or equivalent read) so wallets can show expected net to the signer before broadcast—still subject to final on-chain checks, caps, and daily limits.

Political vs media—same split, different rails

Do not merge the two programmes mentally. Political rewards distinguish highlight-driven disclosure (interaction type 1) from toolbar popup open (interaction type 2) with different phase-1 gross defaults. Media rewards centre on notification / toolbar paths with one phase-1 gross, tighter caps and cooldowns, and freshness-bound proofs. Each vault maintains its own merkle / attestation semantics and nonces; a proof valid for one product is not portable to the other.

Gas (Model A)

In phase 1, users pay their own gas for wallet-initiated transactions—including `claimReward` / `claimRewardWithMarket` and any withdraw step the deployment exposes. The treasury share of the accrual is not a blanket gas subsidy; sponsorship, relayers, or paymasters remain off by default and roadmap-governed if introduced later.

Phase 1 gas payment model (who pays)

Governance, timelocks, and deployment truth

Material parameter moves (treasury address, reward amounts, basis points, caps, pause) should follow the project’s published governance and timelock posture where applicable—readers should assume multisig / timelock complexity for production deployments. Marketing PDFs and screenshots decay; verified contract addresses, deployment manifests, and read-only calls are the source of truth for what users actually sign against.

At-a-glance comparison (phase-1 design intent—confirm per deployment).

Product / programmeSolidity vaultAction / interaction lensPhase-1 default gross (before split)Participant / programme treasuryCadence & abuse postureExtension → dApp path
Political Transparency`CTZAIPoliticalTransparencyReward`Type 1 = highlight → disclosure; type 2 = toolbar popup open1.00 CTZAI (highlight path) / 0.10 CTZAI (toolbar)—before split; verify on-chain80% participant / 20% programme (CitizeAi) treasury via bps—same philosophy as mediaDaily caps; one highlight claim per politician per UTC day; replay keys; optional `market_id` roundsExtension registers intent; user connects wallet in CitizeAi_ dApp and signs `claimReward` / `claimRewardWithMarket`extension never broadcasts txs
Media Transparency`CTZAIMediaTransparencyReward``PopupNotificationClick` vs `ToolbarPopupOpen` (bounded, proof-based)0.5 CTZAI default gross per valid claimbefore split; verify on-chain80% / 20% via bps—mirror of political philosophyStricter daily caps / cooldowns than political; freshness-bound proofs; optional `market_id`Same deep-link handoff: signing only in the wallet-native dApp

Do not misread this section

  • `market_id` is budget / round tagging, not a claim that the chain checked your postal address.
  • Gross defaults in docs are not identical to wallet net receivable until you apply bps and confirm no cap / replay rejection.
  • Political and media vaults are separate; balances, limits, and proofs do not automatically carry across.
  • The extension UX may preview rewards; only transactions your wallet approves on the dApp change on-chain state.

Full **token supply**, **eight-bucket reserve**, **presale**, and **company revenue** economics live under **Token & economics** and linked pages—this block is the **extension-claim** lens only.

Why this suite fits together

The lanes share one civic-technical logic:

  • Reduce civic information asymmetry or improve democratic participation with auditable rules.
  • Bounded, programmable coordination beats fragmented loyalty points when programmes must be reported and budgeted.
  • One fixed ERC-20 and treasury allocation rounds replace “new product ⇒ new token” thinking—discipline over hype.
  • France-first execution keeps datasets honest; geographic expansion draws from existing supply with explicit governance.

The suite also fits together because it solves **two adoption problems** at once. First, it reduces civic information asymmetry directly through transparency and participation products. Second, it lowers the **behavioural distance** between ordinary web usage and dApp participation. Instead of expecting citizens to begin from wallet management or protocol interfaces, CitizeAi_ begins from reading, interpretation, and public-interest context. That sequence matters: it makes the move into **wallet-native civic action** feel earned, legible, and optional. In strategic terms, the suite is both **civic infrastructure** and a **public bridge into dApp participation**.

The suite also fits together economically because it does not depend on only one form of value capture. Retail users may pay directly for useful transparency products in fiat. Some of those users may later choose optional dApp participation. Reward programmes route a bounded 20% programme treasury share to sustain infrastructure and long-horizon programme credibility. Institutional actors may purchase implementation, reporting, managed operations, or white-label deployments. CTZAI then sits across these layers as a settlement and coordination rail rather than as a substitute for product revenue. This makes the model more credible both for civic-tech stakeholders and for the crypto industry.

The suite is **coherent strategy**, not a random product list: each lane reinforces **informed citizenship** and **accountable institutions** with **operational honesty** about what is live versus planned.

How CitizeAi_ the company earns revenue

Company revenue is not token issuance. CitizeAi_ is built to fund real engineering, deployments, product operations, support, legal work, and long-term civic-tech execution through a combination of direct product revenue, service revenue, and mission-aligned programme economics. CTZAI handles on-chain settlement, budgeting, and coordination where appropriate; it is not a substitute for a real business model.

In the near term, CitizeAi_ has a direct retail product layer as well as broader institutional and programme revenue potential. The two live browser products already use a citizen-facing access model: Political Transparency is offered at 9.99 EUR per year or 39.99 EUR lifetime, while Media Transparency is offered at 9.99 EUR per year or 29.99 EUR lifetime. That pricing matters strategically because it confirms that the extensions are standalone civic-tech products with immediate value in the reading flow, not merely token-adjacent interfaces waiting for speculative demand.

This distinction is important for how the ecosystem should be understood. A citizen does not need to begin by buying CTZAI, connecting a wallet, or entering a crypto-native interface. The first entry point is the product itself: pay for access to a useful transparency tool, use it in ordinary browsing, and only later decide whether optional dApp participation is worthwhile.

This direct product revenue is complemented by broader service-layer revenue. Future lines for parties, unions, institutions, associations, and aligned organisations may include implementation fees, subscription / SaaS, managed programme operations, analytics / reporting / governance support, moderation administration, white-label deployments, institutional onboarding, and optional client-funded CTZAI programme lines where treasury policy allows.

At the same time, CitizeAi_ also operates with a programme-sustainability mechanism inside its reward architecture. In the phase-1 extension reward design, gross reward accruals are split on an 80% participant / 20% programme treasury basis. That 20% treasury share is not the same thing as ordinary fiat company revenue, and it should not be described as passive profit extraction. It is better understood as a mission-aligned sustainability rail: a bounded mechanism that helps fund the infrastructure, monitoring, legal triage, dataset maintenance, treasury discipline, and ecosystem continuity required to keep the programme credible over time.

Taken together, this creates a more robust model than either extreme. CitizeAi_ does not rely only on token optics, and it does not rely only on fiat product subscriptions. It combines paid civic-tech products, optional service lines, and bounded programme treasury logic within one coherent operating model. That structure is stronger both for mission credibility and for crypto-industry relevance.

Keep three ledgers mentally separate: company revenue (fiat from extension subscriptions, lifetime purchases, and service contracts), programme treasury funding (the 20% programme treasury share and other CTZAI programme allocations used to sustain reward infrastructure and ecosystem continuity), and token reserve / treasury architecture (fixed-supply CTZAI buckets, allocation rounds, and on-chain programme budgets). These layers are related, but they are not interchangeable.

This separation matters strategically. The company can grow through paid product access, service lines, implementation work, managed operations, analytics, governance support, and client-funded programme budgets without needing to expand token supply whenever the product roadmap expands. That reduces pressure to financialise CTZAI beyond its bounded coordination role and makes the fixed-supply model more defensible over time.

To make the revenue model easier to read, the figures below illustrate how direct retail product revenue and treasury-side CTZAI accumulation may vary under different adoption scenarios. These are planning illustrations, not promises. They are intended to help readers understand how paid civic-tech products, bounded programme economics, and treasury discipline can interact across conservative, base-case, and optimistic rollout paths.

Retail revenue and treasury-position scenarios (illustrative)

ScenarioPolitical annual usersPolitical lifetime usersMedia annual usersMedia lifetime usersIllustrative annual fiat revenueIllustrative company CTZAI accumulation posture
Conservative2,0003002,50040052,953 EURLower accumulation pace; treasury discipline matters most
Base-case live rollout8,0001,20010,0001,500211,908 EURMeaningful programme treasury growth and stronger optional on-chain activity
Optimistic20,0003,50025,0004,000561,785 EURStronger product-led treasury position if conversion, retention, and bounded reward health remain credible

These figures are deliberately simple reader-facing planning illustrations. They do not model every variable in the suite: refunds, taxes, churn, support costs, conversion timing, institutional revenue, or client-funded CTZAI programmes are excluded here for clarity. The goal is to show that CitizeAi_ can build an economic base from real paid civic-tech products while the treasury and token layers remain mission-supporting rather than mission-substituting.

ScenarioNarrative interpretationIllustrative CTZAI company-position logic
ConservativeProduct proves there is real willingness to pay for civic-transparency tools, but treasury growth remains cautious and execution discipline dominatesCTZAI held by the company should be managed conservatively: preserve runway, limit premature treasury release, and prioritize audit / integration hardening
Base-case live rolloutProduct subscriptions, clearer dApp onboarding, and bounded reward usage begin to reinforce each otherCTZAI holdings become more strategically useful as programme inventory, treasury planning capital, and governance / roadmap coordination support
OptimisticProduct adoption creates stronger direct revenue, broader public visibility, and more meaningful treasury optionalityCTZAI holdings may become a more visible ecosystem resource, but still should not be narrated as speculative treasury upside

Buyer / client archetypes

ArchetypeWhat they typically need from CitizeAi_
Consumer / citizen userDirect access to browser-native transparency products that improve political and media understanding while reading; may pay annual subscription or lifetime access pricing, with no requirement to use the dApp or hold CTZAI.
Civic / institutional clientTrusted rollout of transparency or participation surfaces: data alignment, France-first domain discipline, reporting, and governance-ready documentation—not a token pitch.
Media or information-integrity partnerOutlet-level transparency signals, integration support, and abuse-aware incentive design that preserves editorial and legal boundaries.
Aligned organisation (governance / participation tooling)Scoped participation or programme infrastructure: roadmap-aligned delivery, optional on-chain coordination, and treasury-gated budgets—not generic “DAO for everything.”

Example commercial package types

Package categoryWhat it typically includes
Retail extension accessPolitical Transparency: 9.99 EUR annual / 39.99 EUR lifetime. Media Transparency: 9.99 EUR annual / 29.99 EUR lifetime. Standalone civic-tech products and entry points into optional dApp participation.
Implementation + integrationExtensions ↔ dApp ↔ chain wiring, allowlists, attestation hardening, ABI / address alignment, operator handover.
Recurring SaaS / managed operationsHosted workflows, monitoring, support SLAs, periodic reporting on claims, abuse signals, and programme burn.
Analytics / reporting / governance supportTransparency reports, KPI packs for oversight, materials for roadmap governance and treasury reviewers—scoped to what is actually deployed.
  • Implementation and integration fees for civic-tech rollouts.
  • Recurring SaaS for hosted participation, reporting, or moderation workflows.
  • Managed governance and programme-operations retainers.
  • Analytics, audit trails, and compliance-oriented reporting packages.
  • Moderation and dispute-administration services where law and policy allow.
  • White-label or branded deployments for institutions.
  • Institutional onboarding, training, and support.
  • Optional **client-funded CTZAI** programme lines approved under **treasury policy**.

Revenue recognition, tax, and regulatory treatment depend on jurisdiction and contract facts—this section is **strategic framing**, not accounting or legal advice.

Revenue, programme treasury, and ecosystem sustainability

CitizeAi_ should not be read through a single-lens revenue model. The project combines at least three economic layers that serve different purposes.

First, there is direct company revenue: users may pay for the live browser products through annual subscriptions or lifetime access, and aligned organisations may pay for implementation, reporting, managed operations, moderation support, or white-label deployments.

Second, there is programme treasury sustainability inside the reward system itself. The phase-1 extension reward architecture routes gross accruals on an 80% participant / 20% programme treasury basis. That treasury share is not a claim that the company “earns yield” from user behaviour in a simplistic sense. It is a bounded programme mechanism designed to keep the reward system economically honest by funding the infrastructure and operational burden that a proof-based civic incentive system actually creates.

Third, there is the broader CTZAI treasury and reserve architecture: fixed-supply allocation buckets, allocation rounds, and governed programme budgets that support expansion across transparency, participation, moderation, and future infrastructure lanes.

This layered structure matters because it prevents a common category error. CitizeAi_ is not a token-first project pretending to have products, but it is also not a pure SaaS product with incidental crypto branding. It is a civic-tech suite whose product revenue, treasury logic, and on-chain coordination layer are designed to reinforce one another without collapsing into the same accounting category.

LayerEconomic functionExamples
Direct company revenueFiat revenue from live products and servicesExtension subscriptions, lifetime purchases, implementation, managed operations
Programme treasury sustainabilityMission-aligned reward-system funding20% programme treasury share from extension reward split
Treasury / reserve architectureLong-horizon allocation and programme budgetingFixed-supply CTZAI buckets, allocation rounds, ecosystem funding

CTZAI token & economics

Token accounting and circulation

The full fixed supply is minted once at token deployment (distribution per constructor and operational wiring—treasury/multisig preferred for production). Circulation thereafter is transfers, presale allocations, standalone vesting vault claims, treasury programmes, staking locks, and extension-reward withdrawals—not inflation inside the ERC-20 contract. **`CTZAIPresale`** applies contributor fund-release profiles for the sale; **`CTZAIVesting`** accounts separately for beneficiary schedules and outstanding liability (not a single global “locked” pool). Extension contracts maintain participant and treasury balances subject to proofs and limits.

The next tokenomics question is not only how much CTZAI exists, but how its circulation remains disciplined as the suite expands.

Circulation discipline and utility sinks

CTZAI should not be read as a token whose credibility depends on constant circulation velocity or on artificial scarcity theatre. Its role in CitizeAi_ is narrower and more disciplined: to support settlement, treasury budgeting, bounded incentives, optional participation, and programme coordination across a civic-tech suite that remains product-first. For that reason, the strongest circulation-control narrative for CitizeAi_ is not “how do we make the token move as much as possible?” It is “how do we keep token circulation useful, legible, and bounded as more product lanes mature?”

The first principle is that fixed supply is not the same thing as active supply. CitizeAi_ already distinguishes total supply from active reward inventory, treasury reserve buckets, and allocation-round authorization. That distinction should remain central. The existence of 2,000,000,000 CTZAI does not mean that all tokens are economically active, publicly circulating, or available for immediate programme use. Circulation becomes meaningful only when a portion of the fixed supply is explicitly authorized, funded, and deployed into a live product or governance lane under bounded rules. This keeps supply discipline operational rather than theatrical.

The second principle is that treasury activation is the primary circulation valve. CitizeAi_ expands by authorizing bounded programme inventory through allocation rounds, not by activating the whole reserve at once and not by introducing new supply whenever the roadmap grows. This makes circulation a governance and budgeting question rather than a marketing slogan. Political Transparency, Media Transparency, future country rounds, and any later moderation or debunking programmes should all be funded through explicit lane authorization, tranche release, expiry, reversion, and KPI discipline. In practical terms, circulation is controlled less by abstract token scarcity than by whether the project has approved a real programme with real operating conditions.

The third principle is that staking is the first native utility sink. In CitizeAi_, staking should not be narrated as passive yield or financial extraction. It is better understood as a commitment, eligibility, and anti-abuse layer. Users who stake CTZAI voluntarily reduce immediately available circulating inventory while signalling longer-horizon participation. That makes staking a soft lock on supply and a quality filter on ecosystem behaviour at the same time. This is strategically stronger than a pure “lock to earn more” narrative because it aligns token utility with civic-system integrity rather than with speculative farming.

The fourth principle is that future sinks should emerge from product use, governance seriousness, and institutional deployment rather than from artificial token tolls. As the suite matures, CTZAI may become more useful across bounded participation and governance surfaces: roadmap participation, product-scoped governance in later lanes, client-funded programme budgets, institutional deployments, or eligibility requirements for higher-trust contribution flows. These should be introduced carefully and only where they improve product discipline, contribution quality, or treasury coherence. The goal is not to force every user into token expenditure. The goal is to ensure that CTZAI becomes more useful as the ecosystem becomes more real.

This is especially important for prototype lanes. Content Moderation and News Debunking should not be treated as automatic new circulation sinks merely because they exist in the roadmap. Prototype maturity does not justify instant economic activation. Before any such lane becomes a meaningful CTZAI sink, the project should first demonstrate product clarity, governance safeguards, methodological discipline, monitoring capacity, and bounded programme design. In other words: prototype first, sink later.

A fifth circulation layer may emerge through institutional and client-funded lines. One of the strongest long-term advantages of the CitizeAi_ architecture is that new civic-tech deployments do not require new token issuance. Instead, aligned organisations may fund bounded CTZAI programme lines from existing treasury architecture, subject to policy and governance. This creates a more credible form of token demand than speculative retail velocity alone: institutions, partners, or public-interest deployments can create reasoned, programme-specific need for CTZAI within one fixed-supply system. That is a stronger narrative than “more roadmap means more supply.”

Exchangeability and exchange-listing optionality remain relevant in this architecture, but they should be framed carefully. They matter because they make CTZAI more tangible and motivating than closed platform points: a user can understand that a reward is transferable, interoperable, and potentially exchangeable rather than trapped inside one isolated product environment. That can strengthen user motivation and improve the attractiveness of the incentive layer for both regular citizens and crypto-mature users. But secondary-market availability is not the primary circulation-control mechanism. It is an adoption amplifier, not the core discipline of the system. The real discipline still comes from fixed supply, staking, allocation rounds, bounded programme activation, and mission-linked utility surfaces rather than from trading activity alone.

The correct way to describe CTZAI, then, is not as a token that must constantly circulate to prove relevance. It is better understood as a disciplined civic-tech coordination asset whose circulation is intentionally shaped by treasury authorization, staking, bounded reward activation, exchangeability as a supporting incentive property, and later product-linked or institution-linked utility surfaces. This is more aligned with CitizeAi_'s mission-first architecture than a classic token-sink narrative built around hype, forced spending, or artificial burn mechanisms.

In practical terms, CitizeAi_ should prefer five rules over one noisy sink story:

  1. total supply remains fixed, but active inventory remains bounded;
  2. staking acts as a soft lock and eligibility sink;
  3. allocation rounds control when treasury inventory actually enters live circulation;
  4. exchangeability strengthens incentive legibility but does not replace treasury discipline;
  5. future sinks must emerge from real product, governance, or institutional use rather than from speculative theatre.

That approach is not the loudest tokenomics narrative. It is the most defensible one.

With that circulation logic in view, exchangeability can be read as a supporting incentive property rather than as the token’s primary economic discipline.

Exchangeability and the civic incentive layer

CTZAI rewards are not only a bounded coordination mechanism inside the product. Because CTZAI is an ERC-20 on public EVM networks, it can be **transferable** and, where markets exist, **exchangeable** like other digital assets—subject to law, liquidity, and counterparty behaviour the project does not control.

That exchangeability is **not** the purpose of CitizeAi_, and this document does **not** promise price performance, liquidity, or any secondary-market outcome. It can nonetheless **increase the practical attractiveness** of a proof-based reward: a settlement asset that citizens can hold, transfer, or potentially exchange may feel more tangible than closed loyalty points—helping onboard and retain participants in **political and media transparency** tools.

In that sense, exchangeability can **support** civic-tech adoption and motivation while the mission remains transparency, accountability, and democratic literacy—not speculation. The project stays **mission-first and product-first**; the token is a **means** (settlement, coordination, disciplined incentives), not an end in itself.

That practical attractiveness has another consequence: it can help move some users from civic product usage into deeper dApp participation. The important point is sequence. Exchangeability may make the reward layer feel more tangible, but the user relationship should still begin with transparency value, not with market expectation. CitizeAi_ is strongest when the token supports a broader citizen journey from useful civic-tech interaction to optional wallet-native participation—not when the market layer becomes the headline.

Exchangeability and exchange-listing optionality also become more credible in this model because CTZAI is not being asked to carry the entire business by itself. The token sits inside a broader system with real products, real user value, direct paid access, and programme-level treasury logic. That makes the crypto-industry case stronger: CTZAI is not just a closed internal point, but a transferable ERC-20 attached to a functioning civic-tech suite with actual operating surfaces.

The strongest framing is therefore not that “the token must do everything,” but that an exchangeable ERC-20 can make a mission-first civic-tech reward layer more interoperable, tangible, and meaningful within a broader product and treasury system.

Token utility (current and near-term)

CTZAI supports the mission operationally: it settles extension rewards after proof-based claims (and optional withdraw steps), locks in the staking vault as a commitment/eligibility signal—maturity, no eligibility while pending unstake, tier-based suggested caps and modest bps multipliers—not yield, APR, or vault-paid interest—and connects to governance UIs that call separate governance contracts. It does not confer on-chain vote weight by default from balances alone. Treasury-funded rounds allocate existing supply to programmes with transparent caps and, where enabled, market_id-style accounting for allocation buckets.

Value drivers (credible lane)

The credible story is not price promises—it is utility and discipline: more users of transparency products, richer domain coverage, stronger governance legitimacy, credible treasury and reporting, and distribution through browsers and partnerships. Those drivers improve ecosystem throughput and trust; they do not guarantee token appreciation. Progress should be read through **supported domains**, **wallet-connected users**, **successful claimants**, **repeat claimants**, and **governance-approved allocation rounds**—not through abstract population totals as a proxy for token demand.

Why fixed rewards first

Fixed per-action economics make emissions legible to users, auditors, and partners while behaviour is still being measured. They pair naturally with allocation rounds and KPI-gated tranches: the limiting factor is sustainable participation, not abstract scarcity of supply.

Treasury reserve strategy

Three accounting layers (do not conflate them): (1) CTZAI reserve buckets — slices of the fixed 2B supply (e.g. 800M / 40% in eight named lines) for programme, ecosystem, and contingency planning on-chain. (2) Presale native proceedsETH (or chain-native) balances raised via `CTZAIPresale` and administrable as operational cash subject to policy—not the same thing as “moving a treasury bucket.” (3) Operational treasuriesCTZAI inventory for reward funding vs native float for operations gas and deployments (Model A: users still pay routine claim/governance gas by default).

CitizeAi_ earmarks 800,000,000 CTZAI40% of the fixed 2,000,000,000 CTZAI supply—for treasury-controlled custody and allocation discipline. This is not a second mint or hidden inflation: the reserve is budgeted from existing supply under named buckets, custody governance, and progressive deployment aligned with the Solidity / EVM implementation direction.

A substantial treasury reserve is justified for a multi-lane civic-tech suite: France-first transparency rollout; participation and moderation pilots; institutional co-deployments; exchange / liquidity optionality (not speculative promise); operations and compliance; and contingency—all from genesis allocation, not new minting.

This structure is not an excuse for vague centralisation: reserves should be custody-controlled (ideally multisig treasury wallets, not a generic hot deployer), bucketed so reporting and audits can trace purpose, operationally disciplined with roadmap governance and governance-facing notices for large moves, and progressively deployed against KPIs—not released as a lump-sum “war chest” narrative.

Phase 1 Model A (users pay routine gas) keeps reward CTZAI legible beside native fees. Operational native treasuries fund project-originated transactions—not standing per-user gas subsidy. Selective sponsorship, if ever enabled, ships as an explicit programme, not a hidden default.

Roadmap governance remains the primary public governance story in the current phase (what to build and ship; how the product evolves). DAO-style modules stay secondary unless explicitly documented. Exchange-listing optionality remains strategically important for legibility of rewards, but not as the project’s purpose—the token remains a tool to attract citizens to civic-tech and transparency, not the end in itself.

Taken together, the reserve is mission-first: it backs credible civic-transparency participation in a France-first rollout, with measurable rounds and honest communication about what treasury is for—and what it is not (speculation, guaranteed liquidity, or gasless-by-default UX).

Planning allocation (amounts are strategic labels; **on-chain wallets and governance** must match deployment and published notices):

Treasury bucketCTZAI amount% of total supplyStrategic purposePhase-1 status
Core Transparency Rewards Reserve200,000,00010.0%Political and media extension reward programmes; phase-1/2 reward vault top-ups; France-first transparency rounds.Active planning; tranche-gated releases under governance.
Civic Participation Products Reserve150,000,0007.5%Party/citizen programme pilots; union / social dialogue pilots; consultation and co-creation deployments.Roadmap-funded; scoped authorizations with KPIs.
Moderation Governance Reserve100,000,0005.0%Moderation proposal / appeal / arbitration budgets; democratic filtering and context exception programme economics.Reserved for governance-approved moderation lanes.
Client Bootstrap / Enterprise / Institutional Onboarding Reserve100,000,0005.0%Co-funded pilots, organisation onboarding, first institutional incentives, mission-aligned activations.Selective; not a blanket subsidy.
Exchange / Liquidity / Market-Access Reserve100,000,0005.0%Listing optionality, liquidity preparation, market accessnot a speculative promise.Reserved; lawful and strategically justified activation only.
Operations / Audits / Legal / Infrastructure Reserve70,000,0003.5%Security reviews, audits, infra, legal/compliance, EVM operational resilience.Runbook-driven draws; segregated custody.
Ecosystem Growth / Partnerships Reserve50,000,0002.5%Civic-tech and institutional partnerships; integrations; distribution; research/data ecosystem support.Scoped programmes with reporting duties.
Strategic Contingency / Governance Reserve30,000,0001.5%Shocks, governance-approved reallocations, strategic flexibility—gated release.Not casual discretionary spend.

Treasury reserve — 800M CTZAI (8 buckets, millions)

Sum **800M** = **40%** of **2B** fixed supply. Verify multisig addresses and live balances on-chain.

**Total treasury reserve:** **800,000,000 CTZAI** (**40%** of **2,000,000,000 CTZAI** fixed supply), from **genesis allocation**—**not** new minting. Buckets should be **multisig-controlled** and **operationally segregated**. **Unused** programme authorizations should **expire or be re-approved** rather than becoming silent leakage. **Remaining supply** sits outside this table (presale, vesting, public distribution, etc.) per **deployment**—verify on-chain.

Why eight buckets: clearer product-line mapping (transparency vs participation vs moderation vs enterprise), better reporting and audit trails, tighter budget discipline, and explicit room for moderation and institutional lanes—without inventing new supply.

The same bucket labels and registry view are maintained for operators in the dApp: France-first Treasury Architecture — use it alongside this white paper for **treasury architecture**, **who pays gas**, and **monitoring** discipline.

Supply discipline across product lanes and geographies

CitizeAi_ should not treat every future product lane or geography as a reason to revisit total supply. The stronger design principle is the reverse: one fixed ERC-20, multiple bounded programme lanes, and explicit treasury allocation rounds. In practical terms, the question is not “How many tokens might the full global vision require if everything succeeds at once?” The correct question is “How much of the fixed supply should become active reward inventory, under which controls, for which lane, for which market, and for which period?”

This distinction matters because raw surface expansion is not the same thing as reward obligation. A broader detection surface, a new civic-tech module, or a second national market may increase potential demand, but it does not automatically justify immediate emissions. CitizeAi_ is designed so that reward activation remains intentional, budgeted, and reversible. The treasury should therefore release inventory in bounded tranches tied to product maturity, measured usage, abuse monitoring, support capacity, and governance-approved programme scope.

That logic is especially important as the suite expands beyond the two live transparency products. Political Transparency, Media Transparency, prototype-stage Content Moderation, prototype-stage News Debunking, roadmap-governed participation, and later geographic extensions such as the UK should be understood as separate operational lanes sharing one fixed CTZAI supply rather than as separate reasons to inflate it. Each lane can be funded through its own allocation rounds, claim windows, caps, and reporting discipline, while the fixed-supply headline remains stable.

A fixed-supply model therefore remains compatible with growth if treasury architecture is strict enough. The real scaling variable is not total supply alone; it is the governance of active reward inventory. CitizeAi_ should prefer controlled release over numerical inflation, because disciplined release makes the project more auditable, more legible to users, and more credible to partners than a larger headline supply with weak operational boundaries.

  • no automatic new issuance,
  • no automatic permanent budget for a new lane,
  • no assumption that reach equals rewardable demand,
  • and no release of treasury inventory without a bounded programme design.

In that sense, supply discipline is not scarcity theatre. It is operational honesty: growth should scale through programme design, not through supply drift.

Active reward inventory vs total supply

A key tokenomics distinction for CitizeAi_ is the difference between total supply and active reward inventory.

Total supply is the fixed 2,000,000,000 CTZAI minted under the project’s ERC-20 discipline. That number should remain stable unless a future governance and strategic process explicitly determines that the project’s economics can no longer be defended within that cap.

Active reward inventory is smaller and operational: it is the subset of CTZAI that is actually authorized, funded, and made available to live or time-bounded reward programmes. This inventory should be released in stages, not presumed to be fully active merely because the total supply exists.

  • it prevents over-reading the full supply as immediate programme spend,
  • it keeps emissions aligned with measured demand rather than hypothetical reach,
  • it separates long-term treasury planning from short-term vault funding,
  • and it allows CitizeAi_ to expand by authorizing new rounds instead of weakening supply discipline.

In practice, programme activation should rely on:

  • lane-specific authorization,
  • geography-specific authorization where relevant,
  • tranche-based treasury release,
  • explicit expiry, reversion, or renewal logic,
  • measurable KPIs,
  • and reporting that distinguishes authorized budgets from merely theoretical reserve capacity.

This model is better suited to a civic-tech suite than a simplistic “bigger roadmap = bigger supply” mindset. It allows CitizeAi_ to support multiple product families while preserving treasury clarity and avoiding unnecessary dilution of the project’s economic narrative.

Programme lanes and allocation-round logic

CitizeAi_ should structure reward activation by programme lane rather than by broad, undifferentiated market narratives. A programme lane is a bounded reward and treasury surface with its own budget logic, eligibility assumptions, reporting, and operational controls.

At the current strategic horizon, the relevant programme lanes are:

  • Political Transparency — live transparency product; its own proof semantics, user journey, and reward logic.
  • Media Transparency — live transparency product; separate contract logic and operational behaviour from the political line.
  • Content Moderationprototype product lane; should be activated only through bounded testing, explicit governance, and honest readiness criteria.
  • News Debunkingprototype product lane; may later justify its own bounded programme logic and product-scoped governance workflows, including a DAO-like review surface composed of journalists, experts, and citizens.
  • Roadmap governance participation — a governance-linked lane that should remain bounded and non-extractive.
  • Future country rounds — for example, UK-focused rollout of one or more existing products using existing supply, not new minting.

Prototype status does not mean economic activation by default. For both Content Moderation and News Debunking, treasury activation should remain contingent on product maturity, operational readiness, monitoring capacity, and explicit allocation-round approval. In other words: prototype first, budget later—never the reverse.

The treasury implication is straightforward: each lane should be activated through allocation rounds, not through permanent open-ended authorization. An allocation round is a bounded period and budget within which a given lane may operate under approved caps, windows, and KPI expectations.

An allocation round should specify at minimum:

  • product lane,
  • geography,
  • authorized CTZAI budget,
  • time window,
  • success metrics,
  • monitoring expectations,
  • refill or renewal criteria,
  • and expiry / reversion behaviour for unused or underperforming authorization.

This allows CitizeAi_ to stay flexible without becoming economically vague. France-first rollout can remain the current operational anchor while later rounds fund UK or other expansions from the same fixed supply. The economic question then becomes one of programme quality and treasury discipline, not one of reflexively increasing supply because the roadmap became broader.

Fixed supply scaling logic

CitizeAi_ scales reward activity through bounded treasury activation, not through automatic supply expansion. The diagram shows the operational path from fixed supply to live programme use and back into renewal or reversion logic.

Summary: growth is expressed as authorized programme inventory and time-bounded rounds—not as changes to the 2B fixed-supply headline.

Illustrative programme-lane budgeting logic

Ordinal illustration only. Higher “budget intensity” means a potentially larger or more complex treasury commitment; higher “operational caution requirement” means stronger need for data quality, abuse control, support readiness, and reporting discipline before activation.

Conceptual illustration only—not on-chain balances, not deployment truth, not a promise of live programme parameters.

**One fixed ERC-20 for the full civic-tech suite:** CTZAI is implemented in **Solidity** with **2,000,000,000** units (18 decimals), **minted once** at deployment. It supports **multiple programme rails** (transparency rewards today; participation, moderation, and institutional pilots tomorrow) as **settlement, budgeting, coordination, and scoped-governance** surfaces—**not** a default “vote on everything because you hold tokens” design, **not** passive yield, **not** an inflation printer. Circulation follows transfers, presale, vesting, treasury allocations, staking, and withdrawals—**no** hidden mint in `CTZAIToken`. **Treasury reserve strategy** (below) plans **800,000,000 CTZAI (40%)** in **eight named buckets**—complementary to presale, vesting, and other published programmes.

**`CTZAIPresale`** raises **native currency** only (`contribute` with `msg.value`); caps, timers, whitelist, and **`FundReleaseConfig`** govern how contributor CTZAI unlocks (`withdrawImmediateFunds`, `claimVestedTokens`). **`CTZAIVesting`** is a separate vault for other beneficiary programmes with per-schedule cliffs and durations—presale contributors are **not** required to use it.

The staking vault locks CTZAI for alignment and on-chain eligibility signals: tier from effective stake, maturity after each stake epoch, no eligibility while unstake is pending, and suggested daily caps / modest bps multipliers for fixed rewards—not APR, passive yield, or emissions from the vault.

Extension rewards credit predominantly the participant (see split below) while routing a treasury share to sustain operations, audits, and ecosystem growth. Claims are proof-based and intentionally narrow—not passive yield, not attention mining, not APR. Depending on deployment, a separate withdraw step may move CTZAI to the user wallet after an internal credit. Exact numeric caps (daily claims, cooldown seconds) are deployment-specific—verify on-chain parameters and verified ABI before relying on them.

Future upgrades may unify accounting so more flows settle directly in CTZAI; any change to contribution assets, presale wiring, or settlement paths should be published in advance with matching documentation and, where relevant, governance notices.

Geographic rollout & allocation rounds

When products are ready for additional countries, CitizeAi_ does not introduce a second genesis mint of CTZAI for each geography: **`CTZAIToken`** remains a single fixed 2B supply, minted once at deployment. That matches common practice for capped utility tokens: clear allocations, treasury discipline, and transparent circulating supply.

Each new market is instead served by allocation rounds: treasury (or other pre-announced pools) assigns a budget of CTZAI to reward programmes. The size of that budget is the output of market analysis, legal review, and growth planning—decided and communicated off-chain, then executed on-chain via funding reward contracts, eligibility configuration, and caps. Those programme budgets should remain consistent with the **Treasury reserve strategy** (above) and **roadmap governance** authorizations—not improvised one-off allocations.

Any net-new supply beyond the fixed cap would require an explicit product and governance decision (for example a new token or upgrade), not implicit behaviour of the current **`CTZAIToken`** deployment.

When reward contracts record a non-zero market_id, that value tags which allocation round or budget bucket applies on-chain—it is not a residency check. Users are not excluded from a programme solely because of where they live; eligibility follows the extension and attestation rules for that campaign.

France-first should be read as a treasury and operations discipline, not only as a market slogan. It means budgets, monitoring, data enrichment, abuse handling, and support assumptions are anchored first in the French rollout before broader expansion is authorized. Future UK or other country deployment should therefore be framed as later rounds from the same fixed supply rather than as automatic consequences of roadmap ambition.

France-first rollout, UK-next expansion, and treasury gating

France-first remains the correct operational starting point because it keeps dataset quality, product design, support load, and treasury monitoring coherent while the civic-tech suite proves its extension-to-dApp-to-chain flows.

That same logic should govern expansion. A future UK rollout, or any later non-French deployment, should be framed as a new allocation round from existing supply, not as evidence that the fixed supply model failed. Country expansion increases operational complexity; it does not automatically require more tokens.

The correct scaling sequence is therefore:

  1. prove product-market fit and treasury discipline in the current France-first lane,
  2. authorize a bounded country expansion round where data quality, support readiness, and reporting are strong enough,
  3. measure claim behaviour, reward burn, abuse patterns, and user economics in that new market,
  4. only then consider whether further treasury rounds are justified.

This keeps market expansion tied to evidence rather than ambition. It also prevents the project from converting theoretical international reach into premature treasury release. A new geography should therefore be treated as a governance-approved programme budget decision, not as a standing entitlement on total supply.

Extension rewards — split & phase-1 flowsParticipant vs programme treasury share, gross vs net, political vs media vaults, and Model A gas.

When total supply should actually be revisited

CitizeAi_ should not revisit total supply merely because the roadmap becomes broader on paper. Supply review should be an exceptional strategic event, triggered by evidence that treasury architecture and disciplined release are no longer sufficient.

A future supply-review process would only become coherent if most or all of the following conditions were met:

  • multiple product lanes are live and operationally mature,
  • more than one geography is active under measured allocation rounds,
  • wallet-connected participation and valid claim volume materially exceed earlier treasury planning bands,
  • active reward inventory management has already been optimized through tranche release, expiry, reversion, and KPI gating,
  • governance and treasury reporting show sustained pressure that cannot be addressed through better lane design,
  • and the project can explain clearly why a larger supply would solve a real operational constraint rather than simply creating looser economics.

Until those thresholds are met, the stronger posture is to improve treasury architecture, not to increase supply. In other words, the first answer to growth pressure should be better budgeting, better tranche logic, better monitoring, and clearer lane separation—not immediate token expansion.

This framework protects both credibility and flexibility. It allows CitizeAi_ to stay open to future reassessment without weakening the present economic discipline that makes the project intelligible today.

Practical tokenomics rule

When CitizeAi_ grows, the default response should be new allocation rounds from existing supply, not new issuance. Product breadth, country breadth, and governance breadth should first be handled through lane separation, tranche release, KPI gates, and expiry / reversion logic. The project should revisit total supply only after disciplined treasury architecture has clearly proved insufficient.

The project should review treasury architecture before it reviews supply. This framework explains which signals would make a future supply discussion more credible.

Supply-review trigger framework

SignalWhy it mattersWhy treasury architecture comes first
Multiple mature product lanes liveShows actual rather than theoretical demandMore lanes should first be handled through lane budgets and tranche logic
More than one active geographyTests whether expansion pressure is realCountry growth should first use allocation rounds from existing supply
Wallet-connected participation materially above prior planningReveals real rather than imagined programme pressureTreasury release discipline should be optimized before supply review
Active reward inventory already managed with expiry/reversionShows discipline is already being usedSupply review is stronger only after release controls are exhausted
Governance and treasury reporting show persistent constraintIndicates a genuine structural issueOnly then does total-supply review become strategically coherent

Token sale — recommended specification

Public presale economics (first round)

This section mirrors an **internal presale economics specification** retained as a **functional and narrative reference**. It is intended to freeze a coherent set of parameters—allocation, pricing logic, caps, per-wallet limits, vesting, sale window, and whitelist mode—before final website copy, FAQs, legal disclosures, and contributor materials diverge. Round 1 also follows explicit access rules: ordinary whitelist membership is editable only during pre-sale registration and becomes immutable for that round after the membership freeze (manual or at sale start); post-freeze compliance uses a separate blocklist path, not routine whitelist edits. **`Final live deployment parameters prevail`**: the deployed **`CTZAIPresale`** contract (`CTZAIPresale.sol`), verified source, and on-chain storage are authoritative; this text is the narrative counterpart—if literals or the host chain differ in production, follow the deployment.

The recommended posture is a single conservative first round: credibility and post-sale execution capacity over maximizing headline raise—consistent with a stack still hardening toward production and mainnet readiness.

Presale proceeds — use of funds & deployment priorities

This subsection explains how **native assets** raised in **`CTZAIPresale`** are **planned** to support **execution**—separately from **CTZAI supply buckets** (e.g. the **800M** treasury reserve) and separately from **user-paid gas** defaults in phase 1. Percentages are **planning bands**, not smart-contract enforced splits.

1. Why disclose use of proceeds

Tokenomics, treasury buckets, and presale **mechanics** describe **what** is sold and how CTZAI unlocks. Contributors and partners also need a clear view of how **raised native currency** is expected to fund **delivery**—engineering, security, legal, launch, and contingency. Publishing **use-of-proceeds intent** improves **transparency**, **internal discipline**, and **alignment** across the white paper, website, FAQ, legal text, and operator runbooks.

2. Distinguish two accounting layers

**CTZAI treasury reserve** = **allocation of fixed supply** across strategic buckets (eight-bucket **800M / 40%** model in this paper). **Presale proceeds** = **native currency** (e.g. ETH on an Ethereum L1/L2 deployment) contributed through the presale and usable for **operational deployment** (salaries, audits, infra, legal, liquidity preparation). They are **complementary** but **not interchangeable**: readers should not treat **token bucket labels** as if they were **banking or native-cash** line items, or vice versa.

3. Recommended use-of-proceeds allocation (native presale)

Baseline **planning** split for **presale native proceeds** after a successful round—subject to governance, legal, and operational reality. **Not** encoded on-chain.

ShareLineWhat it covers (CitizeAi_ terms)
30%Product engineering & integrationsExtension hardening, extension ↔ dApp ↔ chain integration, supported-domain expansion where datasets allow, and attestation / proof reliability work.
20%Security, audits & infrastructureSmart-contract review and hardening, test and release pipelines, monitoring, RPC / indexer resilience, and treasury-operation tooling.
15%Legal, compliance & documentationRisk disclosures, T&C alignment with `CTZAIPresale` reality, presale comms consistency, regulatory triage, and publication-grade docs.
15%France-first launch, distribution & supportGo-to-market for the two live extensions, onboarding and support playbooks, partner coordination, and operator coverage during early claim traffic.
10%Liquidity / exchange-readiness reserveOptional market-access preparation (e.g. vendor, legal, and operational costs)—not a promise of listing, depth, or returns.
10%Working capital / contingencyExecution buffer and runway for shocks (infra incidents, audit findings, slower adoption)—bounded reallocation only with disclosure where material.

Recommended presale proceeds allocation (planning-only)

**What this is:** percentage **planning bands** for **native** presale proceeds. **What it is not:** on-chain auto-split, live treasury balances, or a guarantee of future spending in exact proportions.

4. Use-of-proceeds milestone logic

Illustrative **sequence** tying spend to **risk reduction**—not a dated project plan:

  • Milestone 1 — Hardening & truth: contract review, security passes, documentation freeze on critical parameters (`tokenPrice`, caps, vesting).
  • Milestone 2 — Production integration: extension ↔ dApp ↔ chain rehearsal, monitoring, and deployment checklists for mainnet-class traffic.
  • Milestone 3 — France-first rollout: supported-domain expansion under quality gates, civic outreach, and claim-path stability.
  • Milestone 4 — Contributor ops & market access readiness: support capacity, transparency reporting, optional liquidity / listing preparation where lawful.
  • Milestone 5 — Post-launch: ongoing monitoring, governance notices, KPI reviews, and bounded replanning if audits or regulation require it.

5. Discipline and governance over proceeds

Presale proceeds are for **documented execution**, not vague discretionary spend. **Material** reallocations across planning bands should be **internally approved** and, where appropriate, **published** (website / FAQ / notices) so contributor-facing materials stay consistent. **Trust** depends on alignment between **words**, **deployed contracts**, and **actual** custody practice—see **Core principles**.

6. Risk-aware disclaimer

Allocation percentages are **targets**, not **immutable guarantees**. Audits, regulatory demands, deployment surprises, or **France-first** operational needs may justify **bounded** shifts. **Major** changes should be **clearly disclosed**. Nothing here is **investment advice**, **profit guidance**, or a promise of **liquidity** or **secondary-market** performance.

Reference: token allocation vs proceeds vs operational layers

Semantic HTML summary for reviewers exporting the paper. **Not** a live ledger.

TopicCTZAI supply & bucketsPresale native proceedsOperational treasuries
What is being counted?Fixed 2B units and named allocations (e.g. 800M reserve buckets, presale 100M slice).Native currency raised via `CTZAIPresale` (`msg.value`), before operational spend.CTZAI inventory for rewards vs native float for operations gas and deployments.
Where is authority?On-chain balances + multisig custody; governance authorizations for large moves.Operational treasury policy post-raise (subject to law and disclosure discipline).Multisig / runbooks; separate from contributor wallets.
Phase-1 gas defaultRewards are CTZAI; they do not remove user native gas duty for routine claims unless a separate programme says so.Fund execution, not standing reimbursement of every user transaction.Operations Gas Treasury pays project-originated txs—see France-first treasury architecture.

This table is **explanatory** only. **Deployed contracts**, **multisig** configuration, and **published notices** prevail.

Launch pricing rationale

ETH-native launch pricing was recalibrated for the canonical EVM deployment (`CTZAIPresale`) and France-first rollout. The 0.002 native per 1 CTZAI placeholder is deprecated; the default implementation profile uses 0.00001 native per 1 CTZAI (`tokenPrice` = 1e13 wei per `1e18` CTZAI base units), with optional `low` / `standard` / `high` deploy scenarios (5e12 / 1e13 / 2e13 wei). Deployed `PresaleConfig` and verified storage are authoritative.

Why launch pricing matters: CTZAI is not priced by a secondary market inside the protocol. The native-asset `tokenPrice` in `CTZAIPresale` sets how much CTZAI is allocated per wei contributed, how much native must be raised to sell the round’s allocation, and how that interacts with fixed gross rewards and treasury budgets. It is a system parameter, not a speculative headline.

If the native price is too high for the mission and market stage, the round can distort: presale size (fewer contributors or premature hard-cap stress), surface optics around implied valuation, reward legibility (fixed CTZAI claims may look misaligned relative to entry), treasury discipline (more pressure to fund programmes from a narrow base), and abuse incentives (higher stakes per interaction can attract more gaming unless caps and anti-abuse layers keep pace).

If the native price is too low, contributors may receive large CTZAI balances per unit of native, which can make fixed rewards feel trivial relative to position size, complicate communication about civic intent versus nominal balances, and work against seriousness of the transparency mission—without any guarantee of secondary liquidity.

A disciplined launch price should sit between mission seriousness (credible transparency infrastructure), accessibility (participation without a speculative barrier), reward legibility (fixed CTZAI amounts remain interpretable next to user-paid gas in phase 1), treasury sustainability (programme budgets and reserves stay coherent), and anti-abuse discipline (economics do not reward automation over authentic use).

ETH-native pricing must be evaluated on its own terms. The same numeric story does not transfer across unrelated chains or decimals: `tokenPrice` is stored in wei per 1e18 CTZAI; the host chain’s native decimals, France-first deployment choices, and rollup fee context change the practical economics of a contribution.

Phase 1 (Model A) uses user-paid gas for routine claims, staking, and governance actions. That makes reward economics and token pricing inseparable in product design: users see network fees next to fixed gross rewards; the presale must not be tuned as if gas were invisible or subsidised by default.

Reference ecosystems (not targets): mature browser and search-adjacent token models have different histories and purposes. The table below is a sober comparison frame only—not a valuation benchmark or a recommendation to imitate token economics.

ReferenceModel (high level)Relevance to CitizeAi_
Brave / BATLong-established browser + token ecosystem with its own distribution and compliance history.Shows how **attention-adjacent** products can sustain a **separate** token **without** making that token the project’s sole purpose; CitizeAi_ does **not** adopt the same mechanics.
Presearch / PRESearch-reward context with a **low nominal** price history in many periods.Illustrates **dust-like** optics when rewards and token prices are misaligned; **not** a template for civic transparency.
CitizeAi_ / CTZAI**Mission-first civic transparency** utility; **ERC-20** settlement; **fixed** phase-1 rewards; **exchangeability** as an **adoption amplifier**, not the project purpose.Requires **its own** pricing logic—**France-first**, **treasury**, **EVM**, and **Model A**—not a copy of BAT or PRE.

Deploy-reference price scenarios (100M CTZAI presale allocation)

These three `tokenPrice` levels match the `low` / standard / `high` implementation profile (5e12 / 1e13 / 2e13 wei per `1e18` CTZAI). Figures assume 18-decimal native and integer division in the contract; deployed getters (`getCtzaiBaseUnitsPerOneNativeEther`, `getMaxNativeWeiForFullAllocation`) are authoritative. Reward column is illustrative: compare fixed gross CTZAI per claim to user gas and position size—not a promise of future market prices.

Scenario`tokenPrice` (wei / 1e18 CTZAI)CTZAI per 1 native unit (floor)Native to sell full 100M CTZAI (indicative)Fixed reward legibility (illustrative)
low5 × 10¹²200,000~500 nativeHigher CTZAI per native unit → smaller nominal share of a position for a ~1 CTZAI gross highlight vs standard; still read next to gas.
standard (default)1 × 10¹³100,000~1,000 nativeBalanced default for mission-first docs: not dust optics at 0.002-era 500 CTZAI per native, not 200k native hard-cap raise.
high2 × 10¹³50,000~2,000 nativeLower CTZAI per native unit → larger nominal share of a position for the same fixed gross reward; tighter implied raise.

France-first internal modelling (e.g. ~5M CTZAI gross programme need over 12 months) remains illustrative and governance-gated; it must not be read as a presale price or market forecast. Exchangeability can make reward outcomes easier to compare—it is not the project purpose.

Long-term ecosystem value depends on user adoption, supported-domain coverage, claim quality, treasury discipline, roadmap execution, and transparent reporting—not on any single launch price. Verify `tokenPrice`, caps, and allocation on deployed `CTZAIPresale` before participating.

Design principles

The presale should align with the CitizeAi_ model already described in this paper:

  • Fixed CTZAI supply with no geography-based reminting.
  • France-first product strategy (extensions and datasets), with later markets funded by allocation rounds—not new genesis supply.
  • Phase-1 fixed extension rewards and modular contracts (political vs media reward paths).
  • Treasury discipline and transparent circulating-supply accounting.
  • Simple, hard-to-misread parameters that match current project maturity.
  • No dependence on unrealistic adoption assumptions to justify the raise.
  • Sizing oriented toward integration, security review, audit, launch, and runway—not maximal extraction.

From these constraints, the first presale should be modest, explainable, and legally defensible; complexity belongs in the product roadmap, not in opaque sale mechanics.

Recommended first presale round — structure

Use one conservative round rather than stacking multiple simultaneous sale configurations. Optimize for coherence with the token model, contributor clarity, and operator ability to execute—rather than the highest theoretical raise.

The fixed-parameter summary below is the recommended freeze target; all public documents should eventually show the same numbers.

ItemIllustrative recommended value (verify deployment)
Total supply2,000,000,000 CTZAI
Presale allocation100,000,000 CTZAI
Presale allocation share5%
Soft cap250 native (stored as wei in `PresaleConfig.softCap`) — **25%** of the reference hard cap
Hard cap1,000 native (stored as wei in `PresaleConfig.hardCap`) — at the **standard** price below, a full raise allocates the **100,000,000** CTZAI round
Minimum contribution1.25 native per tx (wei in `minContribution`) — proportional to the legacy 250 / 200,000 cap ratio at the new 1,000 native hard cap
Maximum contribution25 native per wallet (wei in `maxContribution`) — proportional to the legacy 5,000 / 200,000 cap ratio
Token price (default)0.00001 native per 1 CTZAI (`tokenPrice` = **1e13** wei per 1e18 CTZAI base units); scenarios: **5e12 / 1e13 / 2e13** wei via `CTZAI_PRESALE_PRICE_SCENARIO` (local) or explicit env
1 native unit buys**At the standard `tokenPrice`:** **100,000** CTZAI per **1** native unit (18-decimal native, floor division)—verify on deployment (`getCtzaiBaseUnitsPerOneNativeEther`).
Immediate unlock20%
Vesting unlock80% linear
Vesting duration18 months
WhitelistEnabled
Sale duration30 days

Why these economics are recommended

Why a smaller practical raise target?

Contracts, chain integration, and extension-to-dApp flows are still maturing. A smaller, cleaner first round reduces perception risk, limits treasury pressure if execution slips, lowers the cost of mistakes, is easier to explain, and better matches real product maturity than an oversized raise with unfinished integration.

Why 100,000,000 CTZAI?

That allocation equals 5% of the fixed 2,000,000,000 CTZAI supply—enough to make the round meaningful without over-committing the project at an early stage. The fixed supply anchor is already part of CitizeAi_ documentation.

Why 0.00001 native per CTZAI (default `standard` profile)?

The **0.00001** native per **1** CTZAI default (**1e13** wei per `1e18` CTZAI) is **mission-first** and **treasury-disciplined**: it replaces the old **0.002** example, which implied **500** CTZAI per native unit and a **200,000** native hard cap for the full **100M** allocation—credible for documentation but **misaligned** with a phased **France-first** rollout. The new pairing implies **~1,000** native units to sell the full **100M** CTZAI at the standard price (**100,000** CTZAI per **1** native unit). **Optional** `low` / `high` scenarios shift implied full-raise native (**500** / **2,000** at the same allocation). **Constructor** `tokenPrice` + caps must satisfy **`HardCapImpliesOverAllocation`** checks; read **`getMaxNativeWeiForFullAllocation()`** and **`getHardCapImpliedCtzaiBaseUnits()`** on deployed code.

Why a 250 native soft cap?

The soft cap is **25%** of the **1,000** native reference hard cap: a reasonable threshold to demonstrate market support and fund meaningful progress without pretending that a minimal raise is sufficient for long-term success.

Why 1.25 native minimum and 25 native maximum per wallet?

The band keeps the same **order-of-magnitude** intent as the legacy **250 / 5,000** per-**200,000** cap pairing, **rescaled** to the **1,000** native reference hard cap: it reduces dust participation, limits extreme concentration, and still allows meaningful support from aligned contributors.

Why 20% immediate and 80% linear over 18 months?

The project is still early. Compared with releasing most tokens immediately, this structure reduces short-term sell pressure, aligns contributors with execution risk, and matches a general presale and vesting rhythm already used in CitizeAi_ documentation. Vesting duration is 18 months of linear unlock for the vested portion.

Contribution asset and units

**`CTZAIPresale`** accepts **only the chain native asset** via `contribute` with `msg.value`. **`PresaleConfig`** stores soft cap, hard cap, min/max per wallet, and **`tokenPrice`** as **wei** (smallest units of that native token). CTZAI uses **18 decimals**; contributor allocations use `(msg.value * 1e18) / tokenPrice` per the contract. **Always verify** chain id, native decimals if non-standard, constructor config, and funded CTZAI reserve (`InsufficientCtzaiReserve`) in verified **`CTZAIPresale.sol`** and deployed storage before publishing contributor instructions.

Illustrative constructor literals (wei, 18-decimal native)

Examples map the recommended human figures to **`PresaleConfig`** fields as passed into **`CTZAIPresale`’s** constructor. They use Solidity’s **`ether`** suffix (1 ether = 1e18 wei) for readability—adjust if your deployment chain uses a different native decimal convention. Deployed bytecode and storage are authoritative; update README and operator runbooks when literals change.

  • Soft cap — 250 native

    uint256 softCap = 250 ether; // PresaleConfig: wei raised for soft cap
  • Hard cap — 1,000 native

    uint256 hardCap = 1_000 ether; // PresaleConfig: wei raised for hard cap (full raise at standard price)
  • Minimum contribution — 1.25 native

    uint256 minContribution = 1.25 ether; // PresaleConfig: wei per contribution tx
  • Maximum contribution — 25 native per wallet

    uint256 maxContribution = 25 ether; // PresaleConfig: wei cumulative per address
  • Default token price — 0.00001 native per 1 CTZAI (`standard`)

    uint256 tokenPrice = 0.00001 ether; // 1e13 wei per 1e18 CTZAI; scenarios: low/high = 5e12 / 2e13 wei

    In **`CTZAIPresale`**, `tokenPrice` is **wei per 1e18 CTZAI**. **`0.00001 ether`** = **1e13** wei. **Deployed** values and **`getCtzaiBaseUnitsPerOneNativeEther()`** prevail.

  • Presale allocation — 100,000,000 CTZAI

    uint256 presaleAllocation = 100_000_000 * 1e18; // CTZAIPresale constructor: max CTZAI base units sellable

    Immutable **`presaleAllocation`** caps CTZAI sold; combined with `hardCap` and `tokenPrice`, it must cover the economics you communicate.

Consistency check (sale versus allocation)

At a given **on-chain** `tokenPrice`, purchased CTZAI follow:

tokens_allocated = amount × 10^18 / token_price

With the **reference** wei literals above (18-decimal native), a full **1,000** native hard-cap raise at **`tokenPrice` = 1e13** wei per `1e18` CTZAI fully allocates **100,000,000** CTZAI—an intentional **internal** consistency check. The contract also **reverts** on deploy if `hardCap` implies more CTZAI than `presaleAllocation` at `tokenPrice`. If you change caps, price, or native decimals, **recompute** and re-verify against `maxTokensSellable()`, `getMaxNativeWeiForFullAllocation()`, and `presaleAllocation`. **Deployment-verified** values always prevail over documentation examples.

Contract alignment (`CTZAIPresale` & `CTZAIVesting`)

**`CTZAIPresale.sol`** is the primary on-chain surface for these economics. When freezing Round 1, mirror the following in constructor wiring and deployment checklists:

  • Pass **`PresaleConfig`** and **`FundReleaseConfig`** matching the table (caps and per-wallet limits in **wei**; `tokenPrice` = wei per **1e18** CTZAI; sale window; whitelist flag) plus immutable **`presaleAllocation`** (CTZAI base units cap for the round).
  • Fund the presale contract with enough **`CTZAIToken`** so `contribute` cannot revert on **`InsufficientCtzaiReserve`** for the intended sale trajectory (see `maxTokensSellable()`).
  • Set **`FundReleaseConfig`** to **20**% immediate and **18** vesting months; the linear slice runs for **18 × 30 days** after **`endTime`** (`claimVestedTokens`).
  • Enable whitelist mode for the first round if that matches operator policy.
  • Set sale duration to 30 days unless governance chooses otherwise and documents the change everywhere.

Recommended operational improvements

  • Freeze sale configuration once the sale is active to prevent parameter drift.
  • Emit explicit events when admin-visible presale parameters change (where upgrades are allowed pre-launch).
  • Keep README and inline comments synchronized with **`PresaleConfig`** / **`FundReleaseConfig`** wei literals and **`presaleAllocation`** for each deployment.
  • Expose a read-only summary of human-critical presale parameters for wallets and indexers.

Additional hardening items from the specification backlog:

  • Defensive checks on pause or emergency paths where consistent with other contracts in the suite.
  • Structured errors instead of opaque failures on contributor-facing paths.
  • Clear refund or failure semantics if the soft cap is not met—as implemented and disclosed off-chain.
  • Independent review of treasury- and contributor-facing logic before public mainnet use.

`CTZAIToken`

No economic change is required in the ERC-20 token contract for this presale: fixed total supply already supports sending **100,000,000** CTZAI into **`CTZAIPresale`** from initial mint or treasury flows as wired at deployment.

`CTZAIVesting`

**`CTZAIVesting`** is the standalone beneficiary vault for schedules **outside** the public sale. **`CTZAIPresale`** pays contributor CTZAI itself via **`withdrawImmediateFunds`** and **`claimVestedTokens`** using **`FundReleaseConfig`**—it does **not** need to call the vesting vault for standard presale unlocks. Both contracts may coexist on the same network for different programmes.

Non-code artefacts to freeze before a public sale

Before marketing a live round, align and version these artefacts so every surface shows identical numbers:

  1. Presale parameter sheet (single-page numeric source).
  2. Presale economics memo (rationale, comparable to this section).
  3. Token pricing memo.
  4. Risk disclosure.
  5. Presale FAQ.
  6. Updated white paper / offer document — include **Presale proceeds — use of funds** and **accounting-layer** distinctions.
  7. Website presale page.
  8. Terms & conditions.

Critical rule: every document must use the same figures; discrepancies between legal copy, UI, and chain configuration are unacceptable for contributor trust.

Website and communications checklist (after freeze)

Once parameters are fixed in contract and runbooks, update user-facing surfaces consistently:

Presale page

  • Round name and narrative.
  • Start and end dates (30-day window unless changed).
  • Soft cap and hard cap in **native** units (link to on-chain wei or block explorer).
  • Minimum and maximum contribution per wallet.
  • Token price and CTZAI received per unit of native contributed.
  • Total allocation size (100,000,000 CTZAI) and share of supply (5%).
  • Unlock schedule: 20% immediate; 80% linear over 18 months.
  • Whitelist status and how to participate.
  • Refund or failure behaviour, wallet and network instructions, and prominent risk warnings.

Other surfaces

  • Tokenomics page: show presale allocation and pricing logic consistent with this table.
  • FAQ: include questions on CTZAI per native unit, unlock timing, soft-cap failure, early hard-cap fill, and mainnet readiness.
  • Internal dashboards: monitor contributions against caps and vesting liability.

Recommended parameters to freeze (Round 1)

The specification recommends committing to:

  • 100,000,000 CTZAI presale allocation.
  • 250 native soft cap (wei in `PresaleConfig`).
  • 1,000 native hard cap (wei) — at **standard** `tokenPrice`, consistent with full **100M** CTZAI allocation.
  • 1.25 native minimum and 25 native maximum per wallet (wei).
  • **Default profile:** `tokenPrice` = **1e13** wei per 1e18 CTZAI (**0.00001** native per 1 CTZAI); optional **`low` / `high`** = **5e12 / 2e13** wei—verify **`CTZAIPresale`** storage before contributing.
  • 20% immediate unlock; 80% linear vesting over 18 months.
  • Whitelist-enabled access for the first round, with membership frozen before/at sale start and a separate compliance blocklist after freeze.
  • 30-day sale window.
  • All literals synchronized across contract, white paper, site, FAQ, and legal text.

This configuration is intended to be simpler and more credible than an oversized raise with misaligned constants while the product is still converging on production-grade integration.

Bottom line

Freeze one canonical economics specification first. Wire **`CTZAIPresale`** constructor parameters and deployment checklists to match; then propagate identical numbers to every public and legal surface. That order reduces rework and protects contributors from ambiguous messaging.

Nothing in this section is an offer to sell securities or an invitation to subscribe in any jurisdiction. Participation rules, eligibility, and tax treatment depend on regional law and on the final deployed contracts—verify all parameters on-chain and seek professional advice before contributing.

France Allocation Round 1 & treasury discipline

Internal allocation modelling derives annual CTZAI needs from a bottom-up funnel: reachable readers on supported domains, install and active-user rates, wallet connection, rewarded actions per connected user, claim success after caps and anti-abuse checks, plus a fraud reserve. The planning unit is funded, verifiable actions—not a percentage of the national population. France-round programme needs are intended to sit primarily under the **Reward & market-allocation** line of the **Treasury reserve strategy** (Token section), not a discretionary pool without a documented home.

Governance-facing documentation describes a 12-month France round on the order of five million CTZAI gross programme need (base-case funnel outputs plus reserve), released in tranches—for example four—only after KPI gates (launch validation, product–market signal, scale confirmation) rather than as a single upfront lump sum. Exact authorizations, dates, and on-chain execution remain subject to approved proposals and live deployments.

At that illustrative scale, the round is still a small fraction of fixed supply (about 25 basis points of two billion CTZAI): the binding constraints are execution quality, emission credibility, and treasury control—not abstract token scarcity.

Principal programme risks

  • Onboarding friction: extension installs do not automatically become wallet-connected, rewarded behaviour.
  • Engagement quality: incentives may attract reward-seeking rather than transparency-seeking usage.
  • Concentration: a small set of wallets could capture a disproportionate share of reward volume.
  • Proof and instrumentation gaps on some domains or event types.
  • Narrative: poor framing can read as “click mining” instead of civic transparency infrastructure.

Design mitigations

Companion documentation pairs those risks with tranche-based release, claim-success and fraud ceilings, concentration monitoring, retention criteria, monthly treasury reporting, and reversion of unused authorizations at round expiry unless renewed—consistent with formal governance proposals for the France round.

France-first treasury architecture

Beyond allocation maths and tranche gates, CitizeAi_ maintains a deliberate treasury architecture for phase 1: separate concerns for CTZAI reward inventory, native gas for project-controlled operations, and future sponsorship / relayer readiness. The split exists for security (blast radius), transparency (what budget paid for what), and sustainability (reward economics stay legible next to explicit network fees).

The France-first rollout applies to the Political Transparency and Media Transparency browser extensions on the Solidity / EVM path. Reward Treasury flows fund proof-based programmes and vault top-ups; Operations Gas Treasury funds deployments, administration, refills, and incident transactions—not, by default, every end-user gas bill. A future sponsorship / relayer layer is architectural reserve only: not the phase-1 default (see Phase 1 gas payment model in this document).

Custody should favour multisig (or threshold-equivalent) wallets for both reward and operations gas paths; large refills and sensitive admin actions warrant controlled approvals, monitoring of vault and native balances, and runbook-defined alert bands—aligned with the treasury monitoring specification that follows.

Three treasury layers (phase 1 posture)

  • Reward TreasuryCTZAI inventory and programme funding for Political and Media reward surfaces; allocation rounds and tranches bounded to supported-domain reality.
  • Operations Gas Treasury — native token float for CitizeAi_-initiated on-chain work (deploy, maintain, refill contracts, parameter paths); separate from standing user claim gas subsidy.
  • Future Sponsorship / Relayer Layerinactive by default in phase 1; possible selective programmes only after evidence, budget, and explicit on-chain + comms—not gasless-by-default UX.

See the Phase 1 gas payment model section in this white paper for the canonical **Model A** wording: routine **claims**, optional **withdraws**, **staking**, and **governance** transactions are **user-paid** unless a **future, separately documented** programme states otherwise.

Canonical dApp documentation

France-first Treasury Architecture — full operational page in this dApp: three-layer overview, **Who pays what in phase 1?** table (with treasury column), operations gas **policy placeholders** (alert / minimum / target bands configured in runbooks—not hardcoded balances), relayer **readiness-only** framing, multisig, monitoring checklist, and phase-1 policy callout.

Treasury monitoring & KPI readiness (specification)

Internal wireframes and treasury-dashboard specifications describe a single operational and governance view for an allocation round: funding released, reward activity, burn versus plan, claimant quality, concentration, KPI gate readiness, and remaining capacity.

Planned blocks include: round identity, dates, and status; approved versus released versus spendable budget; gross distribution with the participant–treasury split; burn versus model and runway; funnel performance (readers through successful claimants); reward activity and political-versus-media mix; anti-abuse signals (rejections, replay, cooldown, caps); retention; KPI gate status for the next tranche; domain and campaign coverage; and decision notes for reviewers.

Smart contract catalogue

The following **Solidity** contracts form the CitizeAi_ on-chain suite; names map to the repository layout and the dApp’s **published ABIs and addresses**. Shared libraries or interfaces for ERC-20 interactions may exist alongside these contracts—treat them as implementation details unless they hold standalone user funds. CI should guard against **silent ABI drift** between verified builds and front-end type generation.

  • `CTZAIToken` — CTZAI **ERC-20** with fixed total supply (standard interface + deployment-specific metadata as implemented).
  • `CTZAIPresale` — **native** presale: `PresaleConfig` (wei caps, `tokenPrice` wei per 1e18 CTZAI), whitelist / blocklist, pause & finalize, contributor CTZAI claims & native refunds (verify live configuration).
  • `CTZAIVesting` — standalone **ERC-20** vesting vault: per-schedule cliffs/durations, revocation of unvested remainder only, accounting and liability views, categories for reporting; distinct from presale release, staking, and rewards.
  • `ctzai_stakingvault` — stake CTZAI for tiers, caps, and multipliers aligned with the fixed reward phase (**not** APR / yield).
  • `ctzai_extension_reward` — political extension: two fixed gross tiers (1.00 / 0.10 CTZAI before 80/20), daily caps 15/5/20, signed proofs, **ERC-20** CTZAI settlement, optional `market_id` for allocation-round accounting.
  • `ctzai_media_extension_reward` — media extension: fixed 0.5 CTZAI gross per valid claim (phase 1), 80/20 split, proofs, caps/cooldowns, domain campaigns (eligibility), optional market_id rounds.
  • `ctzai_dao_policy` — allowlisted Policy DAO: ranked votes on roadmap strings with fixed per-ballot incentives where configured; off-chain aggregation of ordering (**secondary / expandable** narrative).
  • `ctzai_roadmap_governance` — product-scoped proposals with on-chain option tallies and owner-controlled lifecycle (**primary governance narrative in the current phase**).

The following is an analyst-style view: for each contract, what boundary it enforces, how it composes with the rest of the suite, and what must remain off-chain for gas-bounded designs.

CTZAIToken (CTZAI, ERC-20 core)

Boundary: standard ERC-20 balances, allowances, and optional metadata for a **fixed total supply**; no ongoing mint after the initial mint pattern encoded at deployment unless a future upgrade explicitly changes that (which would require new documentation). Composition: funded by treasury and operational distributions; consumed by transfers into presale, vesting, staking vault, and extension contracts as configured.

Trust assumption: verified Solidity source and deployed bytecode are authoritative—integrators should consume the published **ABI**, **bytecode hashes**, and **contract addresses** for the target chain. Front-end config and TypeScript bindings must stay aligned with those artefacts. Any future token migration must be explicit and communicated—never implied.

CTZAIPresale

Boundary: **native** raise via payable `contribute`, with **`PresaleConfig`** (windows, soft/hard caps and per-wallet min/max in **wei**, `tokenPrice` = wei per **1e18 CTZAI**, whitelist flag), optional account blocklist, pause/finalize, and **`FundReleaseConfig`** (immediate % + vesting months; linear slice after `endTime`). Composition: holds raised native balance for admin `withdrawFunds` after success; pays CTZAI from its ERC-20 balance on contributor claims; pairs with **`CTZAIToken`**. Refunds native on failure when finalized.

Off-chain: KYC/compliance and investor communications are operator responsibilities; on-chain code enforces only what is encoded.

CTZAIVesting

Boundary: standalone **ERC-20** vesting vault for beneficiary allocations (team, advisors, partners, grants, optional public-aligned schedules). Each schedule stores initial allocation, entitlement cap, claimed amount, start time, optional cliff and linear vesting duration, revocable/revoked flags, and a category label for reporting—not a separate tokenomics tier by itself.

Vesting math: after any cliff, tokens vest linearly over the configured duration up to the entitlement cap. Revocation, when allowed, claws back only the unvested remainder and freezes the cap to the vested slice; vested-but-unclaimed CTZAI remains claimable. Claims transfer ERC-20 CTZAI and can be blocked by an emergency claims pause; admin schedule creation/revocation can be paused separately.

Operational transparency: totals for allocated, claimed, and revoked-unvested amounts; outstanding liability; contract token balance; funding surplus/deficit helper when configured. Sensitive configuration uses two-step propose/apply for the token contract and optional linked presale contract—there is no on-chain timelock delay in those flows unless a future deployment adds one. Ownership transfer uses propose/accept. This contract is not staking, not extension rewards, and not governance voting.

ctzai_stakingvault

Boundary: ERC-20 CTZAI custody for commitment / eligibility / anti-abusenot APR, passive vault yield, compounding, or emissions. Default tier floors 250 / 1,000 / 5,000 CTZAI; default maturity and unstake cooldown 7 days each (owner-configurable, both non-zero). Any `stake` resets maturity. `request_unstake` moves funds to pending; pending unstake disables reward eligibility until `complete_unstake` after cooldown (v1: one pending chunk). When eligible, suggested daily-claim caps (defaults 5 / 8 / 10 by tier) and modest bps multipliers (defaults 10,000 / 10,500 / 11,000 = 1.0× / 1.05× / 1.1×; admin max 12,000 bps). Owner setters are validated (strictly increasing thresholds; non-decreasing caps/multipliers) and emit events; `transfer_ownership` rejects the zero address.

Composition: ERC-20 `transferFrom` / `transfer` only; does not pay extension rewards or substitute proof-based claims. Reward contracts may enforce their own limits—apply the minimum effective cap when both stacks apply. Paused vault ⇒ no reward eligibility.

ctzai_extension_reward (political)

Authoritative phase-1 economics: interaction_type 1 = highlighted public-figure name click (1.00 CTZAI gross); interaction_type 2 = toolbar popup open (0.10 CTZAI gross). Each gross is split 80% participant / 20% CitizeAi treasury (basis points). Daily caps: 15 highlight claims, 5 toolbar claims, 20 total political actions per user per UTC day—plus per-politician-per-day uniqueness for highlight claims. Backend **cryptographically signed** proofs (preimage binds recipient, site, interaction_type, politician_id, extension_event_id, optional market suffix, contract address, chain id—**exact scheme per deployment**). Replay protection via extension_event_id. Optional market_id ≠ 0 tags allocation-round gross budgets and spend tracking—not user geography.

Settlement: CTZAI **ERC-20**—treasury funds the contract via **approve + deposit** patterns as implemented; user and company shares withdraw via transfer. Conservative by design for a news-reading context: rewards reinforce intentional transparency-seeking, not passive browsing.

Composition: internal liability accounting vs on-chain CTZAI balance; no CTZAI mint in this contract. Sensitive parameter updates (amounts, caps, treasury address + BPS split, token binding, chain id, signer) use a 24-hour on-chain timelock (propose → wait → execute or cancel) and optional irreversible freezes—operational owner governance, not CTZAI-holder voting.

Trust model: pending changes—including queued split/treasury updates—are observable before execution (`get_governance_status`); freeze switches can permanently lock config families from new proposals once operators choose immutability. This improves transparency of parameter movement without claiming full decentralised governance of the reward contract.

ctzai_media_extension_reward (media)

Boundary: exactly two action types—PopupNotificationClick (1) and ToolbarPopupOpen (2). Phase-1 single fixed gross (0.5 CTZAI per valid claim before 80/20). Stricter cadence than political (defaults 20 total / 12 popup / 8 toolbar per UTC day; 90s / 300s cooldowns). Campaigns are domain eligibility / activation / tracking—not variable payout prices. Signed proofs bind deployment context and are freshness-limited (`issued_at_ms`, `expires_at_ms`); stale proofs are rejected. Optional market_id tags a funded allocation round for treasury accounting—not geography.

Composition: separate `ctzai_media_extension_reward` deployment (sibling to political): same proof-based discipline and 80/20 philosophy, different behaviour surface and economics. Sensitive config (fixed gross, reward economics, signer, proof binding) uses 24h timelock, cancel, optional one-way freezes, governance visibility getters, and two-step ownership—operational governance, not CTZAI-holder governance.

Settlement & observability: ERC-20 CTZAI via deposit, user/company liabilities, and withdraw; contracts emit events for claims, signer rotation, proof-domain/chain-context updates, campaign toggles, market rounds, scheduled governance actions, freezes, and ownership handoff—see verified ABI and indexers.

ctzai_dao_policy

Boundary: allowlisted members; ranked votes; fixed per-ballot incentives in the configured asset where deployed; emits events for off-chain aggregation. Composition: coordinates priorities, not CTZAI emission policy—**secondary / expandable** in the current narrative relative to roadmap governance.

ctzai_roadmap_governance

Boundary: product-scoped proposals with on-chain options and owner-governed lifecycle. Composition: informs roadmap execution; does not substitute for treasury votes unless explicitly wired in a future upgrade.

Future modular contract lanes (roadmap — not deployment claims)

The following high-level modules are consistent with the suite roadmap. They are not described as deployed facts—each requires explicit engineering, audit, and communications before mainnet use:

  • Programme / treasury allocation managers — scoped budgets, tranche releases, expiry of unused authorizations.
  • Programme factories / client budget vaults — segregated CTZAI lines for institutional or co-funded pilots.
  • Proposal, voting, moderation, and appeal modules — stake-bound surfaces where governance intensity is intrinsic to the product.
  • Eligibility, staking, and anti-abuse layers — shared across lanes where policy requires consistent signals.
  • Moderation registry, exceptions, and dispute contracts — binding contextual rules to auditable on-chain state where appropriate.

Names and interfaces will differ in production; **this list is directional**. Prefer **roadmap governance** and **treasury policy** before promising specific bytecode.

Contract hardening backlog

These items mirror the engineering backlog tracked in `contracts/documentation/WHITE_PAPER_IMPROVEMENTS.md`: they strengthen auditability and operations without changing phase-1 fixed-reward economics.

  • Emit events when the backend attestation public key rotates on `ctzai_extension_reward` and `ctzai_media_extension_reward` so signers changes are visible to indexers and monitoring.
  • Add owner-controlled pause on reward entrypoints where appropriate, consistent with the staking vault pause pattern, for incident response.
  • Apply checks-effects-interactions ordering on reward withdrawals; keep signed attestation preimages bound to contract address and chain id; monitor ERC-20 `transfer` / `transferFrom` failures and revert reasons.
  • Use custom errors and explicit reverts in Policy DAO admin paths; emit events when members claim configured vote incentives.
  • Schedule independent review of treasury- and reward-facing contracts; keep CI gates on builds, tests, and **ABI / address sync** between verified Solidity artefacts and the wallet dApp.

Governance model (current phase)

**Roadmap governance is the headline story in the current phase.** `ctzai_roadmap_governance` targets product-scoped decisions—what to build next—with explicit on-chain options and tallies suitable for transparent reporting. **Product-scoped governance** is the default: **participation, moderation, and institutional** lanes may use **different** on-chain or off-chain procedures—always **bounded**, never “governance theatre.” Tallies are **not** weighted by CTZAI balance unless a future upgrade documents that model end-to-end.

CTZAI is **not** a token-weighted governance instrument by default: holding or transferring CTZAI does not entitle accounts to votes through the ERC-20 contract alone. Day-to-day legitimacy grows from shipped product, clear notices, and honouring published parameters—not from premature claims of full decentralization.

**Policy DAO (`ctzai_dao_policy`)** and similar modules are **secondary / expandable**: allowlisted ranked ballots on roadmap strings, with incentives and aggregation patterns defined per deployment. They can help prioritize ecosystem work as membership and process mature; they do not replace roadmap governance as the primary narrative for product direction in this document.

Treasury-funded allocation rounds (including France phase 1) are intended to be approved through explicit proposals: budget from **existing fixed supply**, no covert inflation, scope of funded extension actions, tranche release conditioned on KPI gates, reporting obligations, and treatment of unused funds at expiry.

Governance contracts are separate from extension reward economics: they coordinate priorities; they do not mint CTZAI unless a future upgrade explicitly links them. Any future utility that ties CTZAI balance or staking to voting power must ship as a deliberate protocol upgrade with matching public documentation.

The addition of a prototype News Debunking extension does not change the governance hierarchy of the project. Roadmap governance remains the primary present-day governance story for CitizeAi_ at ecosystem level: what product priorities evolve next, which lanes mature, and how bounded programme scope is advanced. Any DAO-like mechanism attached to News Debunking should be understood as product-scoped governance, not as a general claim of full ecosystem decentralization.

In practical terms, the News Debunking DAO is best framed as a bounded review and prioritization layer composed of journalists, experts, and citizens. Its role is to support credibility workflows, prioritization, signaling, and structured civic participation around a debunking product surface. It should not be framed as final editorial authority, legal adjudication, or a blanket replacement for institutional accountability. It is a prototype governance mechanism attached to a prototype product.

Product-scoped DAO language should remain narrow and explicit, especially for the News Debunking prototype, so governance ambition does not outrun deployment maturity.

Governance participation is not a blank cheque for emissions

Roadmap governance is strategically important to CitizeAi_ because it helps align token-based participation with decisions about what the civic-tech products should build next. But governance access should not be confused with broad emissions entitlement.

Holding CTZAI may gate access to roadmap participation, proposal signalling, or vote-linked workflows where deployed. That does not mean governance should become a large extraction lane. Governance incentives, where used at all, should remain symbolic, bounded, and operationally justified. Their purpose is to reinforce commitment and meaningful participation, not to create a second passive reward culture around voting.

For that reason, governance-linked treasury budgets should remain visibly separate from product-reward budgets, should operate under their own caps and windows, and should be justified by participation quality rather than raw turnout alone. This preserves the credibility of roadmap governance as a product-direction mechanism rather than turning it into a generic emissions sink.

Governance surfaces at a glance

Summarizes **who decides what** in the current phase. **Deployed interfaces and parameters** remain authoritative.

Governance surfaceWhat is governedPrimary mechanismCurrent phase relevanceOn-chain / off-chainTimelock / review expectations
Roadmap governance (`ctzai_roadmap_governance`)Product direction — what to build or prioritize next; transparent option storage for reporting.On-chain proposals / votes per deployed lifecycle; dApp surfaces aligned to live ABIs.Headline governance story now.On-chain ballot / lifecycle with off-chain comms and notices.Follow deployed owner controls; expect public notices before breaking changes.
Policy DAO (`ctzai_dao_policy`)Ecosystem prioritization (ranked ballots on roadmap strings) where deployed—not general CTZAI monetary policy.Allowlisted votes; incentives per deployment; heavy aggregation off-chain for gas bounds.Secondary / expandable; not the primary product-direction narrative.On-chain events + off-chain tallying / reporting.Admin paths per contract; documented freezes / membership rules where enabled.
Treasury executionFunding rounds, multisig refills, programme budgets, native withdrawals from `CTZAIPresale` when successful—operational governance of custody.Multisig (or threshold-equivalent) + internal approvals; roadmap / policy contracts do not replace custody discipline.Always relevant; defines whether announced plans are executable.Mixed — signatures on-chain; policies and runbooks off-chain.Operational review for large moves; no implied public timelock on every admin action unless deployed.
Extension reward operations (`ctzai_extension_reward`, `ctzai_media_extension_reward`)Reward parameters, signer rotation, splits, caps—operational owner governance, not CTZAI-holder votes by default.Timelocked propose → wait → execute (or cancel) for sensitive params; optional one-way freezes.Core to phase-1 honesty of incentives.On-chain governance getters + pending visibility.~24h delay pattern where implemented—verify ABI.
Future modules (programme budgets, moderation appeals, client vaults)As described in Future modular contract lanes — only after explicit ship + audit + comms.Roadmap items; not present-tense guarantees.Forward-looking; avoid overclaim in marketing.TBD per design.Expected for sensitive modules—not promised until specified in deployment docs.

dApp pages under `/dao` and governance documentation should reflect **live addresses and ABIs** for the selected chain; always confirm `ContractAddressesStatus` (or equivalent) before interacting.

On-chain parameters, deployed contract addresses, and approved actions supersede any narrative summary in this document.

Separately from governance contracts, the political extension reward contract (`ctzai_extension_reward`) implements **operational owner governance**: sensitive configuration changes use a timelock, can be canceled while pending, and can be permanently frozen per config family (reward economics, ERC-20 token binding, chain id, signer). This is not CTZAI-holder governance; it is a control surface for a funded reward deployment.

Future ecosystem-wide DAO governance over CTZAI allocations (if any) remains conceptually separate: it would require explicit contracts, vote mechanics, and documentation—not an implicit reading of reward-contract admin controls.

For default political reward economics, timelock behaviour, and freeze semantics, see operator documentation in the contracts repository and on-chain getters (`get_reward_policy`, `get_governance_status`, or equivalents per ABI).

`CTZAIVesting` admin controls include ownership transfer (accept flow), emergency claims pause, admin-actions pause, and two-step propose/apply for the ERC-20 token address and optional presale contract pointer—no built-in timelock on those pointer updates unless the deployment adds one later. This is operational contract administration, not CTZAI-holder DAO governance.

Product roadmap governance

`ctzai_roadmap_governance` supports product-scoped proposals with on-chain option storage suitable for transparent tallies; it addresses “what we build next” separately from token politics.

Policy / ranking governance

`ctzai_dao_policy` records allowlisted ranked ballots on roadmap strings with fixed per-vote incentives in the configured asset where deployed; final ordering is aggregated off-chain from events to respect gas limits—ballot integrity on-chain, heavier computation off-chain. Treated as a **secondary** lane in the current narrative: valuable for ecosystem expansion, not the headline of phase-1 governance.

Treasury allocation governance

France and future rounds are intended to be authorized explicitly: budget from existing fixed supply, scope of funded actions, tranche release against KPI gates, reporting duties, and handling of unspent budgets at expiry. **Treasury reserve buckets** (see **Treasury reserve strategy** in the Token section) provide the **planning scaffold** for how France and expansion draws map to **named lines**—not ad hoc discretion. Narrative summaries never override votes and on-chain state.

Future governance possibilities

Token-weighted quorum, CTZAI-denominated vote rewards, and cross-chain programmes are optional futures only after explicit contract upgrades and refreshed public documentation (white paper, notices, dApp copy)—never implied by holding CTZAI in phase 1.

Governance in the current phase is intentionally scoped: **roadmap governance** leads the public story; Policy DAO and similar modules are secondary. Credibility increases with shipped product and honoured notices, not with premature claims of full decentralization.

Security, privacy, and compliance

On-chain: replay protection via unique `extension_event_id`, action-type validation, daily and per-action caps, cooldowns, and safe withdrawal flows. Off-chain: rate limiting, abuse scoring, and short-lived signed attestations with chain/contract binding should be treated as mandatory for production deployments.

Privacy: prefer hashing opaque identifiers before anchoring metadata; disclose what the extensions and APIs retain. Political and media incentives may implicate regional rules—operators should obtain counsel before public campaigns.

Operational security: keep **ABI sync**, **address registries**, and generated client code in CI so wallet UIs cannot drift from verified deployments; monitor events for anomalous claim spikes.

Vesting: understand revocation as claw-back of unvested remainder only—vested rights already accrued remain claimable subject to pause and funding. Rely on schedule storage, totals, and events rather than marketing summaries.

Why users can trust the system design

Trust is architectural, not rhetorical: rewardable actions are intentionally narrow; there is no passive surveillance reward model; wallet connection, message review, and transaction submission happen in the audited dApp rather than in privileged extension contexts; proofs should be short-lived and bound to chain id and contract address in production hardening; treasury flows for allocation rounds aim to be visible to operators and governance.

As the stack matures, publish incident playbooks, parameter change notices, and periodic transparency reports so off-chain operations stay aligned with on-chain rules.

Incident response and emergency controls

Best practice for a project like CitizeAi_ is not to assume that technical correctness eliminates operational risk. Browser products, API-backed source layers, wallet-native dApp flows, treasury-controlled reward contracts, and contributor-facing presale mechanics each create different failure modes. The correct response is therefore to define an emergency posture before claiming mature public readiness.

CitizeAi_ should treat incident response as a layered process:

  • Detection: monitor anomalies in claims, proof issuance, treasury balances, configuration drift, RPC failures, replay spikes, or unusual campaign / domain behaviour.
  • Containment: where the live contracts support it, pause or restrict the affected path rather than leaving a compromised or unclear flow open.
  • Assessment: determine whether the issue is confined to UI, proofs, campaign eligibility, treasury inventory, contract logic, or external infrastructure.
  • Communication: publish a clear notice when a material issue affects user expectations, claims, treasury logic, or contributor-facing flows.
  • Recovery: restore service only after configuration, code, or operational conditions are understood and documented.
  • Post-incident learning: publish or log the corrective actions required to reduce repeat risk.
Incident typeExampleImmediate control postureCommunication expectation
Reward-path anomalyInvalid proofs, replay spikes, abnormal claim concentrationPause or restrict affected reward path where supported; review proofs, signer state, campaign settingsNotify affected users if claim expectations are impacted
Treasury / custody anomalyUnexpected balance movement, configuration mismatch, refill issueFreeze discretionary movements, verify multisig / operator actions, reconcile on-chain statePublish a factual notice if treasury-facing expectations are affected
dApp / wallet-flow issueBroken claim route, wrong chain prompt, ABI driftDisable or warn on affected route, restore configuration truth, test end-to-end before reopeningPublish route/status guidance if users may sign against incorrect expectations
Data / provenance issueIncorrect source mapping, bad outlet/entity associationDisable affected mapping or supported-domain path until correctedClarify scope, affected surface, and fix status
Presale / contributor issueParameter mismatch, whitelist logic error, payment-path confusionFreeze contributor-facing flow if required; align legal, UI, and chain truth before resumingHigh-priority contributor notice

A mature civic-tech project does not hide incidents behind vague optimism. It communicates proportionately, contains risk quickly, and restores trust by making operational truth more visible after the event than before it.

Roadmap — three lanes

Product & extensions

Harden deep links and error surfaces; expand supported domains where datasets and attestation quality allow; improve onboarding from install to wallet connection; **Chrome** and **Firefox** store distribution today; **Safari** as a **planned** future distribution target when readiness and store requirements align—not claimed as live in this document.

Contracts & protocol

Industrialize proofs (TTL, chain id, contract binding), keep **ABI JSON, deployed addresses, and front-end contract config** aligned with verified Solidity builds, add operational events (e.g. signer rotation visibility), optional pause paths for incidents, and staged on-chain CTZAI settlement where operators choose full token-denominated accounting. Pursue **operational readiness** for regulated distribution channels where applicable—without promising listings, liquidity, or returns.

Market & distribution

France-first credibility; partner and civic outreach; transparent reporting; prepare additional geographies via allocation rounds from existing supply with governance-approved budgets—never implicit minting for geography.

Technical roadmap (contract & product layers)

Phase A — Prototype hardening: finalize payload mapping for both extensions, align daily caps with monitoring, stage deploy reward contracts to test networks.

Phase B — Proof productionization: replace placeholder proofs with backend-issued signed attestations including TTL, chain id, contract address, action type, domain, user, and `extension_event_id`.

Phase C — Full CTZAI settlement everywhere: political `ctzai_extension_reward` already targets **ERC-20** CTZAI; extend the same discipline to any remaining surfaces and keep **ABI / deployment artefact** pipelines as the canonical integration path.

Across phases, maintain strict alignment between verified Solidity builds, published ABIs, deployed addresses, and the EVM dApp so integrators always consume matching interfaces and configuration—including **operational readiness** steps relevant to regulated venues, without overstating listing or liquidity outcomes.

Reward economics roadmap

CitizeAi_ deliberately launches with fixed rewards: transparent, easy to audit, and measurable—never passive browsing pay-outs, generic engagement mining, APR, or yield farming. Rewards reinforce transparency-seeking actions. Where ERC-20 transferability exists, it can make participation more tangible for citizens and help grow the user base for civic-tech tools—without changing the fact that the mission is transparency impact, not speculation.

The ladder below summarizes the same phased model. For the full publication-ready narrative (strategy, phase detail, visuals, and alignment checklist), open About → Reward roadmap. Timelines are advisory—governance and operator communications supersede any graphic.

Go-to-market & distribution

Distribution starts with credibility: browser extensions in official stores where possible, clear release notes, and support channels that can explain reward rules without hype. France concentrates datasets and operator attention so funnel metrics and treasury gates are meaningful before broad rollouts.

Supported-domain expansion is a function of data quality and attestation reliability—not maximal surface area. Partnerships with media literacy, civic tech, and policy audiences should reinforce transparency outcomes, not speculative trading narratives.

Public communications should precede parameter changes that affect user expectations; the same discipline applies when moving from testnet rehearsal to mainnet production.

Metrics for success

Track claim success rate, median confirmation time, rejection reasons (replay, caps, invalid proofs), 7d/30d retention of claimants, supported domain coverage, and staking participation by tier.

Publish periodic transparency reports—similar in spirit to Presearch’s open operational narrative—summarizing parameter changes, incident response, and treasury flows attributable to the protocol.

At programme level, align product analytics with treasury views: funnel conversion, claim success and rejection breakdown, daily burn versus plan, runway on spendable budget, and gate readiness—so incentives and budget release stay tied to validated demand rather than headline population statistics.

Operator KPI system (readiness-focused)

Indicative **bands** and cadences for internal discipline—**not** public promises of performance. Replace bands with measured baselines as data arrives.

These metrics should be read as journey-health signals, not vanity counters. A strong CitizeAi_ rollout is one where users first find the extensions genuinely useful in the reading flow, then understand the optional dApp path clearly enough that wallet connection and claims reflect intentional continuation rather than confusion or hype.

MetricWhy it mattersIndicative target / decision bandReporting cadenceRelated phase gate
Extension install → active rateValidates that the product is used, not only downloaded.Rising weekly active / install on supported domains; investigate if flat or inverted.Weekly internal; monthly summary for reviewers.Phase I — prove reading-flow utility.
Wallet connect conversionOn-chain programme only exists for connected users—largest funnel leak to watch.Stepwise lift from UX fixes; compare political vs media cohorts.Weekly funnel review during launches.Phase I — credible dApp handoff.
Claim success rateDirect read on proof health, RPC reliability, and user comprehension.High success for valid users; bounded revert spikes.Daily ops during incidents; otherwise weekly.Phase I — stable claims before scaling emissions.
Repeat claimant qualitySeparates transparency-seeking habit from one-off farming.Healthy 7d/30d repeat within caps; flag concentrated patterns.Bi-weekly analytics; monthly narrative for partners.Phase II readiness — behaviour understood.
Abuse / rejection signalsEarly warning for sybil, scripted, or replay attempts.Stable rejection mix; spikes trigger attestation / cap review.Real-time alerts; weekly rollup.Phase I — anti-abuse credibility.
Burn vs plan (CTZAI programmes)Treasury discipline—are we spending as modeled?Spend within tranche authorizations; explain variance.Monthly treasury pack.France round tranche releases.
Treasury runway (spendable vs obligation)Prevents silent over-commit against fixed supply.Months of runway under conservative burn; governance if below threshold.Monthly; ad-hoc before large refills.Phase II — discipline before dynamic rules.
Support burden per 1k active usersOperational reality check for France-first rollout.Stable or falling tickets per cohort as UX matures.Weekly support review.Phase I — launch readiness.
Supported-domain expansion qualityBreadth without dataset integrity is harmful.Add domains only with attestation confidence and monitoring.Per-domain checklist; quarterly coverage report.Geographic / coverage expansion decisions.

Figures are **internal planning tools**. They do **not** imply financial return, user growth guarantees, or token performance.

The reporting posture of CitizeAi_ should be as disciplined as its product and treasury posture.

Public KPI dashboard framework by product lane

CitizeAi_ should report product health and programme discipline through a lane-based public KPI framework, not through one undifferentiated growth dashboard. Different product lines solve different civic problems, operate at different maturity levels, and justify different decisions about rollout, governance, and treasury activation. The role of the KPI framework is therefore not to maximize visible numbers. It is to make operational truth legible: where users are finding value, where optional dApp continuation is working, where abuse or low-quality participation is appearing, and where programme budgets should hold, continue, or scale. This is consistent with the white paper's current posture, which already ties success to claim health, rejection quality, retention, burn discipline, runway, and KPI-gated release rather than to abstract market-size storytelling.

The framework should be organized around six layers shared across the suite: reach and activation, product usefulness, optional dApp continuation, integrity and safety, treasury and programme discipline, and governance or readiness status. This allows the same reporting logic to operate across live and prototype lanes while preserving maturity truth. Live transparency lanes can report operational and treasury-linked KPIs now. Prototype lanes such as Content Moderation and News Debunking should report readiness, quality, and review-process KPIs first, with economic activation remaining explicitly secondary until product maturity and governance safeguards justify it.

For Political Transparency and Media Transparency, public KPI reporting should focus on whether users install the product, return to it, use the contextual surfaces while reading, and choose to continue into wallet-native actions where relevant. The most important indicators are install-to-active conversion, supported-domain usage, wallet-connect conversion, claim success rate, rejection mix, repeat claimant quality, burn versus plan, runway on spendable budget, and concentration signals. These already align with the current operator KPI posture documented elsewhere in the white paper.

For Content Moderation, the KPI model should be readiness-first. At prototype stage, the important public signals are stability, contextual-rule interaction, false-positive complaint rate, exception-usefulness, governance workflow responsiveness, and clear economic activation status. The purpose is to show that the lane is becoming operationally and civically legible before any stronger treasury or reward narrative is attached to it.

For News Debunking, the framework should be richer and more governance-sensitive. The important public signals are valid submission rate, duplicate or rejected intake rate, evidence sufficiency, time-to-package-readiness, reviewer participation by class, approval-versus-hold-versus-challenge ratios, extension surfacing rate for approved debunk packages, package open/read rate, appeal or revision frequency, and explicit activation status. This makes the lane understandable as a structured review and publication system rather than as a simplistic truth-voting mechanism.

For roadmap governance and other participation surfaces, the framework should focus on proposal throughput, participation rate, time-to-finalization, implementation follow-through, and evidence-linked tranche readiness. Governance should not be reported as raw turnout theatre; it should be reported as a product-direction mechanism tied to real delivery and bounded treasury discipline.

The public KPI framework should also distinguish clearly between public transparency reporting and internal operator diagnostics. Public reporting should explain product use, usefulness, integrity posture, and treasury discipline in ways that are intelligible to readers, partners, and contributors. Internal dashboards may go deeper into claim-level telemetry, proof failures, suspicious concentration, reviewer bottlenecks, or domain-level mapping errors. This distinction keeps public reporting honest without exposing every low-level operational signal as if it were a public-facing product metric.

Finally, KPI reporting should remain tied to gate logic. A healthy CitizeAi_ programme is not one that simply grows numerically. It is one that clears the next justified decision threshold. The KPI system should therefore support at least three public gate interpretations: launch validity, product-market signal, and scale readiness. These gates should help determine whether a lane continues as-is, expands in a bounded way, or pauses for correction before further treasury authorization or product rollout.

Common KPI layers across the suite

KPI layerWhat it answersExample public indicators
Reach & activationAre people discovering and actually using the lane?installs, active users, install→active rate, supported-domain coverage
Product usefulnessIs the lane helping users in the reading flow or governance flow?popup open rate, return usage, package views, review completion rate
Optional dApp continuationAre users choosing to continue into wallet-native actions where relevant?wallet connect rate, eligible claim initiation, governance participation rate
Integrity & safetyIs the lane resisting abuse and maintaining quality?rejection reasons, fraud rate, replay rate, evidence sufficiency rate, moderation override rate
Treasury & programme disciplineIs spend aligned with authorization and runway?burn vs plan, treasury runway, approved vs released vs spent budget
Governance / readinessIs the lane mature enough to scale or activate?KPI gate status, readiness score, publication-quality score, challenge resolution rate

Dashboard reporting philosophy

Reporting principleRecommended CitizeAi_ posture
Public dashboards should show truth, not theatrePublish metrics that help users, partners, and reviewers understand product health and budget discipline
Do not publish metrics without interpretationEvery KPI block should include a short explanation of why it matters
Separate public KPIs from operator diagnosticsPublic dashboard = intelligible outcomes; operator dashboard = deeper telemetry
Use ranges / readiness logic, not fake precisionEspecially for prototype lanes and governance readiness
Tie expansion to gatesNew tranches, new domains, or new lane activation should be linked to KPI readiness, not optimism

Recommended KPI matrix by product lane

Political Transparency — live lane

KPI categoryKPIWhy it mattersPublic / InternalSuggested cadence
Reach & activationInstall → active rateConfirms the product is used, not merely installedPublicWeekly / monthly
Reach & activationSupported-domain active usageShows where the product is actually alive in the reading flowPublicMonthly
Product usefulnessHighlight interaction rateIndicates whether users engage with politician contextPublicMonthly
Product usefulnessStructured context open rateMeasures real interpretive use, not passive presencePublicMonthly
Optional dApp continuationWallet connect conversionLargest behavioural funnel leak to monitorPublicWeekly / monthly
Optional dApp continuationClaim initiation rateShows whether transparency utility is leading to optional on-chain continuationPublicMonthly
Integrity & safetyClaim success rateCore proof-health and UX metricPublicWeekly / monthly
Integrity & safetyRejection mixDetects abuse or UX confusionPublic summary; internal detailWeekly
Treasury & programme disciplineBurn vs planKeeps reward emissions aligned with authorizationPublicMonthly
Treasury & programme disciplineRunway on spendable budgetPrevents over-commitmentPublicMonthly
Integrity & fairnessTop-wallet concentrationDetects reward capture by a small minorityPublic summaryMonthly

Media Transparency — live lane

KPI categoryKPIWhy it mattersPublic / InternalSuggested cadence
Reach & activationInstall → active rateConfirms product use on participating outletsPublicWeekly / monthly
Reach & activationOutlet coverage activationMeasures where media mappings are actually live and usedPublicMonthly
Product usefulnessOwnership/subsidy panel open rateShows whether readers use media-structure contextPublicMonthly
Product usefulnessReturn usage on media domainsIndicates continuing value in source-literacy flowsPublicMonthly
Optional dApp continuationWallet connect conversionMeasures continuation from reading utility to optional dApp usePublicMonthly
Optional dApp continuationClaimable-action completion rateShows whether CTZAI-linked flows are understandable and worth usingPublicMonthly
Integrity & safetyFreshness-proof validity / stale-proof rejection rateRelevant to media reward proof disciplinePublic summaryWeekly / monthly
Integrity & safetyCampaign/domain eligibility accuracyShows whether supported mappings remain trustworthyMostly internal, summary publicMonthly
Treasury & programme disciplineBurn vs planControls programme disciplinePublicMonthly
Treasury & programme disciplineParticipant/treasury split reportingKeeps the 80/20 model legiblePublicMonthly
Integrity & fairnessTop-wallet concentrationPrevents capture / farming opticsPublic summaryMonthly

Content Moderation — prototype lane

KPI categoryKPIWhy it mattersPublic / InternalSuggested cadence
ReadinessPrototype stabilityConfirms that the extension works reliably before broader claimsPublic summaryMonthly
Product usefulnessRule interaction rateMeasures whether users actually engage with contextual moderation controlsPublicMonthly
Product usefulnessOverride / exception usage rateIndicates whether nuance is genuinely needed in practicePublic summaryMonthly
Integrity & safetyFalse-positive complaint rateCritical trust signal for a moderation toolPublicMonthly
Integrity & safetyDomain exception accuracyShows whether approved-domain logic is behaving coherentlyMostly internal, summary publicMonthly
Governance readinessPolicy proposal throughputMeasures whether governance workflows are active and usablePublic summaryMonthly
Governance readinessTime to decision on policy proposalsShows whether governance becomes usable or sluggish theatrePublicMonthly
Prototype disciplineEconomic activation statusMust clearly show whether this lane is unfunded, testing-only, or later activatedPublicContinuous

News Debunking — prototype lane

KPI categoryKPIWhy it mattersPublic / InternalSuggested cadence
Intake & triageValid submission rateMeasures whether users and stakeholders submit in-scope debunk candidatesPublic summaryMonthly
Intake & triageDuplicate / rejected submission rateDetects noise and triage burdenPublic summaryMonthly
Package qualityEvidence sufficiency rateCore signal: are packages robust enough for review?PublicMonthly
Package qualityAverage time from submission to package readinessMeasures workflow healthPublicMonthly
Review processReviewer participation by classShows whether the multi-stakeholder model is realPublicMonthly
Review processApproval vs hold vs challenge ratioIndicates review quality and threshold disciplinePublicMonthly
Publication usefulnessExtension surfacing rateShows how many approved packages actually become useful reader contextPublicMonthly
Publication usefulnessDebunk package open/read rateMeasures whether readers use the surfaced contextPublicMonthly
Integrity & safetyChallenge / appeal rateImportant signal of contested quality or healthy correctionPublicMonthly
Integrity & safetyPackage revision rateShows whether the lane behaves as a living review system, not a static truth boardPublicMonthly
Prototype disciplineEconomic activation statusMust explicitly show whether the lane is still non-funded, pilot-funded, or reward-enabledPublicContinuous
Governance readinessPublication-threshold complianceConfirms the DAO is not publishing weak packagesPublic summaryMonthly

Roadmap governance / participation layer

KPI categoryKPIWhy it mattersPublic / InternalSuggested cadence
ParticipationEligible voter participation rateMeasures whether governance is actually usedPublicPer vote / monthly
ParticipationProposal completion rateTracks whether proposals reach closure cleanlyPublicMonthly
Governance qualityTime from proposal opening to finalizationShows governance usabilityPublicMonthly
Governance qualityProposal implementation follow-throughPrevents governance theatre by linking votes to deliveryPublicQuarterly
IntegrityVote concentration / participation concentrationDetects capture riskPublic summaryMonthly / quarterly
Treasury disciplineKPI-gated tranche release decisionsShows governance linked to evidence, not vibesPublicPer tranche decision

Public vs internal KPI split

KPI typePublic dashboardInternal dashboard
Adoption funnelYesYes, with more detail
Claim success / rejection mixYes, summarizedYes, detailed by reason, domain, or version
Fraud / sybil / replay telemetrySummary onlyFull detail
Wallet concentrationSummary onlyFull detail
Support burdenSummaryFull ticketing breakdown
Package review workflowYes, at status levelFull workflow / reviewer diagnostics
Domain-level data qualitySummaryFull mapping accuracy and failure logs
Governance proposal throughputYesFull operational detail

KPI gate system for treasury and rollout decisions

Gate levelPurposeExample metrics
Gate 1 — Launch validityIs the lane functional enough to continue?wallet connection, claim success, fraud rejection
Gate 2 — Product-market signalIs there evidence of repeat value and healthy use?return usage, repeat claimant quality, concentration, burn vs plan
Gate 3 — Scale readinessIs the lane healthy enough for wider rollout or a new tranche?sustained usability, claim quality, fraud posture, support burden, domain-expansion quality, governance-readiness indicators where relevant

Suggested public gate wording

GatePublic interpretation
GreenHealthy enough to continue current plan
AmberContinue with caution / improve before scaling
RedHold expansion or tranche release pending correction

Reporting discipline note

At the current stage, this framework should be read as a reporting architecture rather than as a claim that a live public dashboard already exists. The purpose of publishing it in the white paper is to make the future reporting posture legible in advance: what CitizeAi_ intends to measure publicly, how different product lanes should be judged, and how maturity and treasury activation should remain tied to evidence rather than narrative ambition.

Conceptual KPI reporting framework only. This figure shows how CitizeAi_ intends to structure public reporting across live and prototype product lanes. It is not a live dashboard, not a statement of current threshold values, and not a claim that every lane is economically activated.

This framework is intended to make future reporting legible before a public dashboard exists.

Organization & contact

Official repositories, deployed addresses, and network selection belong in the dApp and operator runbooks. Use footer links and published channels for community and security disclosures.

This document does not replace legal entity disclosures where required for regulated activities; seek counsel for public campaigns and regional compliance.

Appendix — methodology notes for modelling, maturity, and planning

This appendix explains how to read the white paper’s planning figures, maturity statements, and rollout scenarios. CitizeAi_ deliberately distinguishes between live facts, testnet-stage realities, illustrative planning, and future directional intent. That distinction is essential to honest communication.

A. Deployment and maturity methodology

Live product status refers to user-facing availability of the browser extensions through current store distribution. Testnet-active status refers to on-chain components that are being validated in the current Sepolia-stage environment rather than claimed as finalized production-mainnet infrastructure. Conceptual or roadmap-described status refers to product or contract lanes documented as strategic direction without being presented as live deployment facts.

B. Adoption and funnel methodology

Adoption scenarios in this paper are structured planning bands, not forecasts. They are intended to model a behavioural funnel:

  • reachable readers on supported domains,
  • extension installs,
  • active extension users,
  • wallet-connected users,
  • successful claimants,
  • repeat or governance-participating users where relevant.

The purpose is not to claim future growth, but to keep treasury planning, product decisions, and gas realism tied to the same user journey logic.

C. Gas and transaction-cost methodology

Gas tables and charts in this document use planning bands rather than claiming exact production costs. Actual cost will depend on the target chain, final deployment shape, contract bytecode, calldata, fee market conditions, and any later relayer or sponsorship design. Wallet-signature-only steps do not consume EVM gas by themselves; state-changing actions do.

D. Revenue-scenario methodology

Retail revenue illustrations are simplified scenario tools built from product pricing and illustrative annual / lifetime uptake bands. Live extension retail pricing is product-specific (**Political Transparency:** 9.99 EUR annual / 39.99 EUR lifetime; **Media Transparency:** 9.99 EUR annual / 29.99 EUR lifetime)—see **Live product access and citizen pricing**. They exclude many real-world variables—tax, churn, institutional revenue, refunds, support cost, conversion timing, and accounting treatment—so they should be read as readability aids rather than financial forecasts.

E. Treasury and CTZAI-position methodology

Any scenario language about the company’s CTZAI position should be interpreted as programme-planning posture, not as a market-value claim. CTZAI inventory can matter for treasury readiness, reward operations, governance-linked planning, and programme continuity without implying any guaranteed secondary-market outcome.

F. Source-of-truth hierarchy

When different project surfaces disagree, readers should apply this order of authority:

  1. verified deployed contracts and on-chain state,
  2. published ABI / address manifests and live dApp configuration,
  3. contributor-facing legal terms where applicable,
  4. the current white paper,
  5. extension README and support documentation,
  6. marketing copy.

The purpose of this appendix is not to bury caveats. It is to keep the difference between **fact**, **live deployment**, **planning illustration**, and **future direction** explicit enough that the project remains credible as it matures.

Status note for readers

This white paper describes a suite whose components do not all sit at the same maturity level. Readers should distinguish between:

  • live browser products,
  • Sepolia / testnet-active on-chain components,
  • and roadmap or IP-documented future lanes.

For the operative status summary, see Status, assurance, and participation readiness above.

Document changelog

The white paper is versioned like any strategic artifact:

  • 5.1 — 2026-04-15 — **Suite maturity and product-expansion update:** changed **Content Moderation** from conceptual / future-only framing to **prototype-stage** status; added **News Debunking** as a new **prototype** browser extension in the civic-tech suite; integrated a **scoped DAO-like review layer** for News Debunking composed of **journalists, experts, and citizens**; clarified that this DAO remains **product-specific and secondary** to the project’s roadmap-governance-first posture; updated status matrix, suite taxonomy, programme-lane framing, and governance wording for stronger deployment-truth discipline.
  • 5.0.0 — 2026-04-13 — **Tokenomics architecture (supply discipline):** new subsections under **Token & economics**—**Supply discipline across product lanes and geographies**, **Active reward inventory vs total supply**, **Programme lanes and allocation-round logic**; **D3** horizontal **Fixed supply scaling logic** diagram and **Chart.js** ordinal **programme-lane budgeting** illustration (explicitly non-chain); **France-first / UK-next treasury gating** tied to allocation rounds; **When total supply should actually be revisited** decision framework with **Practical tokenomics rule** callout and **supply-review trigger** table; **Governance participation is not a blank cheque for emissions**; **CitizeAi_ by the numbers**, **company revenue**, **expanded suite**, **value drivers**, and **geographic rollout** copy tightened for operational scaling signals; document version **5.0.0**.
  • 4.9.1 — 2026-04-10 — **Pricing coherence and product-entry clarification:** normalized live product pricing across the white paper to reflect **Political Transparency (9.99 EUR annual / 39.99 EUR lifetime)** and **Media Transparency (9.99 EUR annual / 29.99 EUR lifetime)**; clarified that ecosystem entry begins through **paid civic-tech products**, not token purchase; corrected pricing tables, revenue wording, package descriptions, chart labels and captions, and methodology cross-reference.
  • 4.9 — 2026-04-10 — **Coherence, assurance, and operations hardening:** fixed remaining Safari-status and retail-pricing inconsistencies; strengthened company revenue narrative with scenario tables and Chart.js visuals; added **Assurance roadmap and external review triggers**; added **Incident response and emergency controls**; added **Custody, multisig, and operational control posture**; added **Methodology appendix** clarifying deployment status, adoption modelling, gas assumptions, revenue-scenario framing, CTZAI-position interpretation, and source-of-truth hierarchy.
  • 4.8 — 2026-04-10 — **Data provenance and coverage discipline:** replaced placeholder README references with a publication-ready provenance section distinguishing **Political Transparency** (bundled HATVP-oriented local dataset + allowlisted domains) from **Media Transparency** (CitizeAi_ API + optional local JSON caches), clarified current coverage limits, and added future enrichment direction including examples such as **Légifrance** and **Judilibre**.
  • 4.7 — 2026-04-10 — **Status, assurance, and participation readiness:** added **live / planned / experimental** matrix; new **environment status and deployment maturity** section; new **internal review / external assurance** section aligned with current Sepolia-stage posture; new **data provenance and coverage discipline** framing (README-grounded); new **participant rights / non-rights / expectations** section; new **risk matrix**; new **live product access and citizen pricing** section updated with **Political 39.99 EUR lifetime / Media 29.99 EUR lifetime**; new **governance and custody operations map** table + **D3** figure; added bottom-of-document **status note** cross-reference.
  • 4.6 — 2026-04-10 — **Economic sustainability layers:** **Company revenue** opening enriched with **extension retail pricing (9.99 EUR / year annual tier; differentiated lifetime: Political 39.99 EUR / Media 29.99 EUR)**, **80/20 programme treasury sustainability rail**, and clarified **three-ledger** framing; new subsection **Revenue, programme treasury, and ecosystem sustainability** with compact **three-layer table**; **Buyer archetypes** + **commercial packages** gain **consumer / retail extension** rows; **Executive summary** adds **direct revenue + programme treasury + token coordination** line; **Why this suite fits** adds **economic** paragraph; **Civic mission** adds **sustainability** paragraph; **Exchangeability** + **Use case validation** strengthened for **crypto-industry relevance** without speculation promises.
  • 4.5 — 2026-04-10 — **Citizen bridge narrative:** foreword reframed around **civic-tech first** and **dApp participation as an optional, earned continuation**; executive summary adds **adoption-thesis** paragraph, **Citizen bridge to dApp** differentiation bullet, and **Civic-tech as a bridge** micro-block; **Product mission** adds **utility-first → dApp ramp** paragraph; **How a user experiences** gains **Why this journey matters beyond claims** subsection; **Current product ecosystem** lead and **expanded suite** progressive-onboarding paragraph updated; **Why this suite fits** adds **adoption distance** paragraph; **Civic mission** adds **dApps as optional civic execution surfaces** paragraph; **Exchangeability** adds **sequence** paragraph; phase-1 **reading → on-chain** D3 figure extended to **six tapered stages** with revised title and caption.
  • 4.4 — 2026-04-10 — **Narrative distribution:** executive summary **two-layer** mental model + plain-terms closing line; **Current product ecosystem** lead stresses wallet-free core value and adds **pre-wallet** sentences on both extension cards; new **How to read the rest of this paper** bridge (extensions / dApp / token layers + **Reader takeaway** callout) after the journey FAQ and before **see / verify / settle**; **Phase 1** section adds behavioural **funnel** paragraph plus a compact **D3** five-stage **reading→optional on-chain** diagram (thin connectors, no Sankey); **Metrics** KPI block adds **journey-health** framing before the operator table.
  • 4.3 — 2026-04-10 — **User journey narrative:** expanded **Product mission** (extensions useful **without** a wallet or CTZAI; dApp as **supporting** layer); new **How a user experiences CitizeAi_** subsection with three **D3** figures (dual product paths, primary vs optional on-chain layer, reading→settlement step bridge); publication-style **mini journeys** for Political and Media; **shared wallet / dApp** checklist; compact **reward-eligible vs not** table; **Do not misread** callout + **FAQ**; refined **see / verify / settle** mapping and **Solution overview** opening + **gesture→settlement bridge**; **fixed missing English `sSolutionBridge`** string.
  • 4.2 — 2026-04-10 — **Extension reward economics (canonical narrative):** new **Extension rewards — split & phase-1 flows** section—why the **80/20** exists, **gross vs participant** accrual, **political vs media** differences (separate contracts, default grosses, cadence), **Model A gas** cross-link, **timelock / observability** and **deployment truth**, comparison **table**, **do-not-misread** box; **D3 split figure** moved here from Token; Token section **cross-link** to this anchor; **viz** footnote references on-chain **BPS** + **`previewClaimSettlement`** read helpers.
  • 4.1 — 2026-04-10 — **Investor / operator readability:** **Core principles** box + reduced repetition in civic mission; sharper **executive summary** (live vs roadmap, presale proceeds vs CTZAI buckets); **mini user journeys** + **see / verify / settle** table; **solution bridge** (gesture → settlement); **treasury accounting layers** paragraph; **company revenue** archetypes + package table + three-ledger distinction; **governance** summary table; **KPI operator table**; new **Presale proceeds — use of funds** (six subsections, allocation table, discipline + risk disclaimer, comparison table) with **Chart.js** doughnut + **D3** accounting-layer and milestone figures.
  • 4.0 — 2026-04-09 — **Canonical civic-tech suite + economics pass:** reframed narrative (France-first suite: transparency, participation, moderation, modular infrastructure); **expanded suite** subsection; **why the suite fits**; **company revenue** section; **eight-bucket / 800M CTZAI** treasury model + Chart.js reserve figure; **future modular contract lanes**; governance boundaries tightened; Tokenomics aligned as companion doc.
  • 3.1.1 — 2026-04-07 — Dedicated **About** (`/about`) and **Extensions transparency** (`/extensions-transparency`) pages: mission-first copy, **EVM / Solidity / Scaffold-ETH 2** framing, and nav entries under **About**.
  • 3.1 — 2026-04-07 — **Product-first narrative:** foreword and executive summary reframed around **France-first** political and media transparency extensions; new **Product mission: transparency in the reading flow** section; solution overview **starts with reading flow** then dApp; expanded **Current product ecosystem** cards; strengthened civic mission opening; **Tokenomics** product-mission callout; **Home** and **Download** copy aligned to two-product story.
  • 3.0 — 2026-04-07 — **Launch pricing rationale:** new subsection after **Public presale** intro (before design principles) explaining **ETH-native** recalibration, why **0.002 native per CTZAI** is **illustrative** not final, trade-offs (too high / too low), **Model A** coupling, compact **Brave/BAT vs Presearch/PRE vs CitizeAi_** comparison table (reference only); presale table, literals, consistency copy, and **freeze checklist** aligned to **deployment-verified** `tokenPrice`; Tokenomics presale note + link to `#launch-pricing-rationale`.
  • 2.9 — 2026-04-07 — **Gas Model (dApp & product):** new white-paper section after **Phase 1 costs** / **Phase 1 gas payment model**, before **Product surfaces**—ties **`GAS_MODEL`** (`user_pays`; relayer / sponsorship / paymaster **off** by default) to the live **`/gas-model`** page, Tokenomics **Transactions & gas**, and the existing payer table; **Gas Model** page gains a **White Paper** cross-link (`#gas-model`).
  • 2.8 — 2026-04-06 — **Treasury reserve strategy:** new subsection under **Token & economics** (after exchangeability; before geographic rollout) documenting **800,000,000 CTZAI (40% of fixed supply)** in **six named buckets** with table (amount, %, purpose, phase-1 status); **Model A** interaction (no blanket gas subsidy); **multisig custody** posture; **roadmap governance** and **exchange optionality** framing; **mission-first** France-first **Political** / **Media** alignment; cross-links to `France-first Treasury Architecture` dApp page; aligned **Governance** treasury lane and executive lead.
  • 2.7 — 2026-04-06 — **France-first treasury architecture:** new white-paper section after France allocation & discipline, before treasury monitoring—three-layer model (Reward Treasury, Operations Gas Treasury, future sponsorship / relayer readiness), **Model A** cross-reference to the **Phase 1 gas payment model**, **Political** / **Media** extension surfaces, multisig and monitoring summary; prominent link to the dApp page **France-first Treasury Architecture** (`/treasury/france-first`).
  • 2.6 — 2026-04-06 — **Phase 1 gas payment model (Model A):** new subsection after the transaction-cost / adoption material stating the **user-pays** default for routine on-chain actions (claims, optional withdraws, staking, governance); treasury role for CTZAI programmes and operations—not blanket user gas subsidy; rationale, future-phase caveat, France-first extension context, mission link to economic honesty; compact **Who pays gas in phase 1?** table.
  • 2.5 — 2026-04-06 — **Presale narrative ↔ `CTZAIPresale.sol`:** white paper presale section and contract catalogue copy aligned with the Solidity presale (native `msg.value` / wei caps, `tokenPrice` wei per 1e18 CTZAI, `FundReleaseConfig`, immutable `presaleAllocation`); retired auxiliary-chain denomination labels in favour of **native wei** semantics; clarified separation from **`CTZAIVesting`**; added reusable `ctzaipresale-whitepaper-spec.ts` reference constants.
  • 2.4 — 2026-04-06 — **Phase-1 transaction-cost & adoption model (France-first):** new section after System architecture linking per-user gas scenarios to funnel-based adoption; distinct Political vs Media flows; planning gas bands table; France-first adoption scenario table; fee exposure formulae (incl. rollup L1 posting); payer defaults and non-promise on gasless phase 1; strategic note on reward-to-fee ratio and two-step settlement; optional Chart.js + D3 figures; document version 2.4.
  • 2.3 — 2026-04-06 — **ERC-20 / Solidity / EVM narrative migration:** white paper rewritten for an EVM-first stack (wallet-connected dApp, contract calls, ABI alignment); Substrate / Typink / ink! / PSP-22 framing retired from the primary narrative; **exchangeability** described as a civic-tech adoption amplifier (not project purpose, no listing or return promises); **roadmap governance elevated** as the primary current governance story with Policy DAO positioned as secondary / expandable; presale and literals framed as verify-on-deployment; new token subsection on exchangeability and discipline.
  • 2.2 — 2026-04-05 — Staking vault (`ctzai_stakingvault`) documentation sync: explicit non-APR / non-yield / non-emissions framing; maturity, pending-unstake eligibility cut-off, tier thresholds and defaults (250 / 1k / 5k CTZAI; 7-day maturity & cooldown defaults); suggested caps (5/8/10) and bps multipliers (1.0×/1.05×/1.1×, admin cap 1.2×); owner validation and events; new repo white paper §5.4; dApp Staking, Tokenomics, Smart contracts, rewards flows, and contract-catalogue copy updated.
  • 2.1 — 2026-04-05 — Civic narrative pass: new white paper section “Civic mission and incentive discipline” (product-first framing, explicit non-click-farming / non-attention-mining boundaries, staking as commitment not yield); aligned About, Token, Tokenomics, Staking, Roadmap, rewards, Extensions transparency, Smart contracts, onboarding, and executive/foreword/why/token utility copy with mission-first language.
  • 2.0 — 2026-04-05 — Final phase-1 `ctzai_media_extension_reward` alignment: two action types (PopupNotificationClick / ToolbarPopupOpen), fixed 0.5 CTZAI gross and 80/20 split, default caps/cooldowns, freshness-bound proofs (`issued_at_ms` / `expires_at_ms`), campaigns as eligibility-only, `market_id` as treasury allocation accounting; extension reward operational governance covers political + media (timelock, freezes, two-step ownership); dApp copy, repo white paper, and operator notes synchronized.
  • 1.9 — 2026-04-05 — Standalone vesting vault: refreshed catalogue and economics copy (per-schedule cliffs/durations, categories, revocation semantics, accounting surfaces, propose/apply for token / optional presale pointers without on-chain timelock by default); clarified separation from **`CTZAIPresale`** contributor release; governance and security notes for admin controls.
  • 1.8 — 2026-04-05 — Political extension reward (`ctzai_extension_reward`): documented split/treasury (company withdrawal address + BPS) as governance-sensitive and timelocked like other reward parameters; operational owner governance vs DAO; pending visibility and freeze semantics aligned with on-chain getters.
  • 1.7 — 2026-04-06 — Clarified phase-1 governance: CTZAI is not token-weighted governance by default; governance runs through dedicated ink! contracts; future token-linked governance requires explicit upgrade and documentation. Aligned Dao overview and disclaimer.
  • 1.6 — 2026-04-06 — Full presale economics section (PRESALE_ECONOMICS_SPEC): design principles, recommended Round 1 parameters, rationale, fixed economics table, Planck literals, consistency check, contract alignment, non-code artefacts, web alignment checklist.
  • 1.5 — 2026-04-06 — Strengthened Vision & Execution framing: foreword, by-the-numbers, UVPs, project evolution, tokenomics lanes, analyst-grade contract narrative, governance lanes, trust subsection, GTM, three-lane roadmap, changelog.
  • 1.4 — 2026-04-04 — France treasury modelling, funnel-based budgeting, KPI gate scope, contract suite catalogue.

Disclaimer

This white paper is informational and may evolve. It is not investment, tax, or legal advice. CTZAI and on-chain parameters can change with governance, upgrades, or new deployments; always verify live state. Holding CTZAI does not by itself grant protocol governance rights in phase 1; such rights arise only from the dedicated governance contracts and parameters published for each deployment.

Testnet assets and staging deployments are for testing and education; they may carry no monetary value. Nothing herein constitutes an offer to sell securities in any jurisdiction.

Why publish this?

Open ecosystems—from decentralized search to civic media—earn trust by publishing architecture and token logic. CitizeAi_ follows that tradition: code, parameters, and this document should reinforce each other; where they diverge, prefer the contracts and official notices.