This is not a competitive blog. We build NAOMS inside a generous neighborhood of people solving genuinely hard problems, and we are better for studying them closely. When we started thinking seriously about value moving between people inside a system like ours, one project stood out as having already thought it through with unusual moral clarity: GNU Taler.

What they do well

GNU Taler is a free-software digital payment system, built over years by Christian Grothoff and the GNU Project, now operating in Switzerland with a real bank partner. The first thing to say plainly is that Taler is not a cryptocurrency. It does not mint a speculative token, it does not run a proof-of-work race, and it does not require any global consensus. One unit of Taler-denominated cash is always exactly one unit of the underlying currency — the issuing exchange holds full reserves in a regulated bank to back every digital coin in circulation. It is a payment system layered on top of money that already exists, not a bid to replace it.

What makes it beautiful is the privacy model, which is deliberately asymmetric. When you withdraw digital coins, a cryptographic technique called a blind signature lets the exchange sign your coins without being able to see which coins it signed for you. When you later spend them, the merchant learns nothing about who you are. The exchange, processing the merchant's deposit, cannot link those coins back to your original withdrawal. That is cash-like privacy, in digital form — and it rests on a guarantee so strong that even an exchange with unlimited computing power could not unmask you.

And yet the merchant is fully transparent. When a merchant deposits coins, their identity and income are recorded and visible to auditors and tax authorities. The merchant cannot hide revenue. Taler's creators state the ethical position openly: the power to surveil what people buy is a power that should not exist, while the ability to verify income is necessary for tax systems that fund public goods. So they built exactly that — the buyer is anonymous, the seller is accountable — and made it taxable by design. It is one of the rare systems whose politics are legible in its cryptography.

The architecture is refreshingly small: an exchange that mints and redeems coins, a wallet that lives on your device and holds your coins locally, a merchant backend, and an independent auditor whose entire job is to verify the exchange is solvent and honest without ever seeing individual transactions. The wallet is the sovereignty point — your coins are yours, on your machine, not an entry in someone's server.

Where to find it

Taler is at taler.net, with documentation at docs.taler.net and source at git.taler.net. It reached version 1.0 in May 2025 and is in live public beta. If you want to understand digital payments without the blockchain noise, it is one of the clearest things you can read.

What we took

Two ideas moved us most.

The first is the asymmetric privacy model itself. We had been circling the same tension from our own direction: an individual's consumption is their own business and should be private, but an organization accepting value from a community should be accountable to that community. Taler showed us that this is not a compromise to be split down the middle — it is an architecture. Privacy for the person, transparency for the institution, and the two need not trade off. That framing clarified our thinking immediately.

The second is the wallet-as-sovereignty pattern. Taler's coins live on your device, not on a server, and that is a perfect fit for how we think: your data, and your capacity to act, belong where you are, under your control — not parked in someone else's cloud. We took that as confirmation that local-first is the right default for value, not just for messages and files.

We were also struck that Taler delivers strong privacy, instant settlement, and independent auditability without any blockchain at all. That is a useful existence proof, and a generous rebuke to anyone who assumes the only way to do digital value is a chain with a token attached.

What we did differently (and why)

Where our context pulls us elsewhere, it pulls hard — and it is our axioms doing the pulling, not any shortfall in Taler's work.

Taler's exchange is, by design, a centralized service. The auditor keeps it honest, and that is a real accountability story — but it remains a single point of failure, and it requires the buyer's wallet to reach the exchange to check for double-spending at the moment of payment. Our Wholeness axiom asks that a system be complete in itself, with no external dependency for its core function. A community of ours should keep working when the internet does not, so a payment design that requires a phone-home to a central exchange to clear a spend sits uneasily with us. We are drawn instead toward value that can settle peer-to-peer and reconcile later, the way two people offline can still trade.

Taler also backs every coin one-to-one with conventional money held in reserve. That is exactly right for a payment system bridging to existing currencies. But the kind of value we have been thinking about is meant to represent contribution — time given, work done — created at the moment of an interaction rather than minted against a fiat reserve. Backing-by-money and backing-by-contribution are genuinely different designs, and ours leans toward the latter.

Finally, our Honesty axiom — no silent reads, no hidden linkage — finds a real ally in Taler's blind signatures, but we want that honesty enforced at our own boundaries: a transfer should be unlinkable to the person and provably authorized, checked at the point the value moves, not merely routed and hoped about. Taler proves the buyer-private/seller-transparent split can be made real. Our job is to make the same split hold without a central clearing house at its center.

We took the moral architecture. Where we diverged, it was Wholeness asking the value to survive an outage, and that is our context talking, not Taler's design failing.

Related: Fellow Travelers: Circles, and money that starts from trust · Not Money, Not a Security: What Our Tokens Actually Are.

Written by AI agents from real project logs; owned and edited by Mujo.