Cross-Marketplace Composition

Mechanism

Each commodity-class marketplace M_k publishes its listings, matching surface, and settlement endpoint into a shared governance-chain substrate. The substrate is the canonical artifact described in the parent provisional: a credentialed observation log binding five properties — issuing authority, issuance time, observation payload hash, predecessor reference, and admission scope. Marketplace operators, not the substrate operator, retain custody of their listing inventories; the substrate does not aggregate order books. What the substrate aggregates is trust: signed admission claims from each marketplace declaring which counterparties, which credential classes, and which settlement instruments it accepts from peers.

A composition arises when two or more marketplaces co-sign a cross-marketplace mapping. The mapping enumerates: (i) the participating M_k identifiers, (ii) the commodity-class translation table (e.g., "1 kWh delivered between 18:00–20:00 local on charger class C2" ↔ "1 unit of unified energy basket UEB-7"), (iii) the credential equivalences across marketplaces, (iv) the dispute escalation path, and (v) the substrate-anchored governance authority empowered to amend the mapping. Once admitted to the substrate, the mapping is itself a credentialed observation: any participating marketplace can verify its current form, its predecessor versions, and the signing authority chain in O(log n) lookups against the substrate.

Settlement of a cross-marketplace transaction proceeds bilaterally. A buyer credentialed in M_a tenders against a listing in M_b. M_b's matching engine treats the tender as native after verifying — through the shared substrate — that the buyer's credential is admitted under the active mapping. Payment, capacity transfer, and lineage-bound receipts are recorded in M_b's own settlement log, with a back-pointer observation written into the substrate so that M_a's audit retention can reconstruct the closure. Hybrid baskets are bound into a single observation: the basket descriptor enumerates the constituent commodity legs, each leg references its native marketplace, and settlement either completes atomically (all legs admitted) or unwinds atomically (any leg refused).

Operating Parameters

A reference deployment supporting four to twelve commodity-class marketplaces operates with a substrate observation throughput of approximately 5,000–25,000 credentialed events per second per shard, with mappings refreshed at intervals ranging from minutes (for fast-moving spectrum and compute markets) to days (for freight and infrastructure slots). Cross-marketplace tender verification budgets are bounded at 80–250 ms wall-clock for 95th-percentile traffic, dominated by the substrate predecessor-reference walk and credential-chain validation.

Hybrid basket atomicity is enforced through a two-phase admission pattern. In phase one, each constituent marketplace returns an admission token bound to a substrate observation referencing the basket descriptor; tokens carry a declared validity window typically in the range 500 ms – 5 s. In phase two, the basket coordinator (which may itself be a marketplace or a neutral broker) requests committal against the tokens. Tokens that expire before committal are revoked through a substrate-anchored counter-observation, releasing the underlying capacity. Default basket cardinalities of 2–8 legs are typical; higher cardinalities are admissible but increase the probability of partial-token expiry and consequently the unwind rate.

Trust-substrate parameters include: signing-key rotation cadence (default 90 days, accelerated under compromise reporting), dispute-window length (default 7 days post-settlement during which a counter-observation can challenge admission validity), and authority-set quorum thresholds for mapping amendments (default 2/3 of co-signing authorities, configurable per mapping).

Alternative Embodiments

The substrate may be realized as a permissioned ledger with deterministic ordering, a gossip-based credentialed log with eventual consistency, or a hybrid in which a fast inner core handles tender verification and a slower outer audit log captures full lineage. The disclosed composition mechanism is independent of the substrate realization so long as the five-property observation contract is preserved.

Commodity-class translation tables may be static (published once per mapping version) or dynamic (parameterized by an oracle observation, e.g., a real-time energy price index, itself admitted to the substrate as a credentialed feed). Dynamic mappings enable hybrid baskets whose translation ratios float with reference markets while preserving the credentialed-observation requirement for every value used in admission.

Cross-marketplace participation may be transitive (M_a admits M_b; M_b admits M_c; therefore M_a admits M_c via M_b's vouch) or strictly bilateral (each pair must co-sign its own mapping). Transitive admission reduces mapping cardinality from O(n²) to O(n) in dense federations but introduces vouch-chain auditability requirements satisfied by substrate predecessor walks.

Settlement instruments span fiat-pegged tokens, commodity-redeemable claims, regulated-currency rails, and barter-style direct exchange (e.g., spectrum minutes for compute minutes). The composition mechanism imposes no instrument constraint beyond the requirement that each instrument be representable as a credentialed observation referencing a recognized clearing authority.

Composition With Other Primitives

Cross-marketplace composition is intended to compose with the broader primitive set of the parent provisional. With cross-jurisdictional governance, a mapping may bind marketplaces operating under distinct regulatory regimes; jurisdictional license envelopes are evaluated as additional admission predicates against every cross-marketplace tender. A buyer credentialed under jurisdiction J_a tendering against a listing in jurisdiction J_b is admitted only when both jurisdictions' envelopes admit the operation, and the resulting settlement observation references both jurisdictional envelopes as predecessors.

With the byzantine-robust observation primitive, mappings remain valid under bounded adversarial co-signers, with the substrate's quorum logic replacing bilateral trust assumptions. A marketplace whose signing key has been compromised cannot unilaterally alter the active mapping; any amendment requires the mapping's declared quorum, and counter-observations from honest co-signers can suspend an in-flight amendment within the dispute window.

Composition with the dispute mechanism allows any settlement to be challenged within its declared window; challenges enter the substrate as credentialed counter-observations and trigger the mapping-specified escalation path. Composition with lineage-bound merge enables hybrid basket settlements to be reconstructed across audits even when constituent marketplaces have independently rotated their internal state representations. Composition with the no-consensus federation primitive allows participating marketplaces to disagree about non-mapping facts (e.g., differing internal pricing models) without disabling cross-marketplace settlement, since admission depends only on the mapping and the substrate, not on agreement over each marketplace's private state.

Distinction From Prior Art

Siloed commodity exchanges treat each commodity class as an independent venue with no shared trust substrate; cross-venue trades require external clearing and reconciled bookkeeping. The disclosed mechanism eliminates external clearing for in-substrate counterparties because the substrate itself constitutes the trust evidence.

Cross-listing arrangements among traditional bourses share instrument identifiers but not credentialing infrastructure; an instrument cross-listed on two exchanges relies on external custody and settlement networks, and admission of a counterparty in one venue confers no rights in another. The disclosed mechanism, by contrast, propagates credentialed admission through a shared substrate so that one credentialed identity is honored across all participating marketplaces under the active mapping.

Federated commodity markets — including prior proposals for federated energy or federated spectrum trading — typically federate matching while leaving trust substrates partitioned per federation member. Such systems cannot bind a hybrid basket across commodity classes because no single substrate can credential the basket as a whole. The disclosed mechanism is distinguished by the unified governance-chain substrate, the credentialed cross-marketplace mapping as a first-class observation, and the atomic admission of hybrid commodity baskets.

Worked Example

Consider a logistics operator that requires, for a single delivery window, 12 kWh of fast-charging capacity at a corridor station, 40 MHz·s of licensed spectrum tenancy for autonomous-vehicle telemetry over the route, and 30 GPU-minutes of edge inference for routing optimization. In a siloed-exchange world the operator transacts three times against three counterparty pools, accepts three independent settlement risks, and bears the operational burden of unwinding any partial fill. Under the disclosed mechanism, the operator submits a single basket tender to a basket coordinator; the coordinator obtains admission tokens from the charging marketplace, the spectrum marketplace, and the compute marketplace within a 2-second token-validity window; on receipt of all three tokens, the coordinator commits the basket as a single credentialed observation referencing the three constituent settlements. If the spectrum marketplace's token expires before commitment — perhaps because the spectrum auction was contested in the same window — the entire basket unwinds atomically and counter-observations release the held charging and compute capacity for re-listing.

Operationally, the disclosed mechanism reduces three distinct counterparty-risk exposures to one substrate-anchored exposure, eliminates the bookkeeping of three independent settlement reconciliations, and produces a single auditable artifact (the basket commit observation) that downstream regulators, insurers, and tax authorities can verify without the cooperation of any individual marketplace operator. The credentialed nature of the basket commit also enables downstream secondary markets — for example, a market in unfulfilled-basket insurance claims — to operate against verifiable primary-settlement evidence that is structurally independent of any single marketplace's internal records.

Disclosure Scope

This disclosure supports claims directed to: a method for composing a plurality of commodity-class marketplaces under a shared credentialed-observation substrate; a system in which cross-marketplace mappings are admitted as credentialed observations enumerating commodity-class translations and credential equivalences; a method for binding a hybrid commodity basket as a single credentialed obligation with two-phase admission tokens and atomic unwind on partial-token expiry; and corresponding non-transitory computer-readable media bearing instructions implementing the foregoing. The disclosure further supports dependent claims directed to dynamic translation tables driven by oracle observations, transitive admission via vouch chains, and dispute mechanisms anchoring counter-observations into the substrate. The disclosed mechanism does not depend on any specific consensus protocol, settlement instrument, or commodity class, and is intended to read on any embodiment in which multiple commodity-class marketplaces compose through a shared credentialed-observation substrate as described. Variations in implementation language, deployment topology, signing primitive, or commodity translation schema are within the scope of the disclosure and do not depart from its spirit. The named commodity classes (charging, spectrum, freight, compute) are illustrative rather than limiting; any commodity admitting a credentialed listing representation is contemplated.