One coin through every system — the dress rehearsal · content/mint_ceremony.md

The Mint Ceremony — one coin through every system

First full pass: 2026-09-11 · RESULT: 14/14 GREEN · Run: python3 scripts/mint_ceremony.py — this is the dress rehearsal for real issuance.

2026-09-15 note: this page is the historical record of the 2026-09-11 on-chain test — step 1 genuinely minted on-chain against the then-current qal_reserve design. The on-chain twin is being redesigned from mint-gated to genesis-preminted + transfer-gated at the cap-raise checklist (the sellable supply is pre-endowed in the issuer wallet qals:issuer; sales are transfers out). Future ceremonies will exercise the new shape.

 1  ✔ ON-CHAIN MINT        qal_reserve, oracle-gated deposit → 200.00 Qals
 1b ✔ CAP ATTACK REFUSED   50B+1c attempt → chain abort E_OVER_CAP (bytecode)
 2  ✔ LEDGER TOP-UP        PSP-path credit → program ledger tracked to the cent
 3  ✔ CHAT ⚡ TRANSFER     encrypted DM + 2.50 Qals delivered in-conversation
 3b ✔ DM DELIVERED         sealed, hash-chained
 4  ✔ COMPUTE PURCHASE     qmarket hold→job→settle, output anchored
 5  ✔ BAZAAR LIVE          agent marketplace registry reachable (52-test suite)
 6  ✔ PAID-UNLOCK LIVE     content market reachable (58-test suite)
 7  ✔ REDEMPTION           10k LLM tokens: fee split + Church dust, anchored
 8  ✔ CLAIMS LIVE          points system healthy (27-test suite)
 9  ✔ API EXCHANGE LIVE    qalkeys metered gateway healthy (66-test suite)
10  ✔ SWAP ENGINE          qalx AMM healthy (64/64 suite — IOTA-coupons)
11  ✔ ON-CHAIN USED-UP     service consumption retired — the loop CLOSES
12  ✔ CEREMONY ANCHORED     the report itself is a DataAnchor on Qalnet

What this proves: the issue → spend → redeem → used-up (retired) lifecycle works across chain + ten services with exact math and anchors at every hop. What it doesn't (honest): real AUD in the reserve, PSP webhooks in production, licensed transferability — those are the real-ceremony gates (law playbook).

For the real deal, the same script runs unchanged — only the oracle key, reserve account, and PSP creds swap from devnet values to production. That was the design constraint, and the ceremony is its proof.