# PROOF OF MERCH MINING™ (POMM)
## Originator Whitepaper v2.0

**Author of record:** Terrence L. Thomas
**Publishing entity:** 21 Million Publishing House
**Contact / attribution:** `satoshinegromoto@21millionpublishing.com` (Nostr Lightning address)
**Nostr identity:** `npub1nk7ycp3nz6ky892qptuq70tjh55w27342qmqu7szgr26qjgueguqpj6yjs`
**First public dating:** 2026-09-04 (v1.0) · this document (v2.0)
**Bitcoin anchor:** merkle-timestamped via OpenTimestamps — see §11
**Status:** Original coined mechanic, term, and reference implementation. Public record of first use.

> **Not financial advice.** This document establishes creative first-use provenance of a branded retail mechanic and its accompanying open reference implementation; it is not a securities instrument and confers no investment rights. The satoshis (sats) gifted with each mined block are consumer-goods promotional value denominated in USD, fully reserved, and delivered as spendable Bitcoin — not an investment offer, custody arrangement, or yield product.

---

## 1. Abstract

**Proof of Merch Mining™ (POMM)** is a retail mechanic that reframes the purchase of a physical good as *mining a block*. Each product design is issued as a **capped chain of numbered "blocks."** When a buyer claims one, they mine the next block in that chain: supply decrements publicly, the block is hash-linked to the previous one in an append-only ledger, that ledger's fingerprint is committed to the Bitcoin blockchain via OpenTimestamps, and the buyer receives (a) the physical made-to-order item, (b) a reserved allocation of satoshis (sats), and (c) a cryptographic receipt that ties their purchase to the timechain.

POMM is not a token. It is not a smart contract. It is not a security. It is a **culturally-native scarcity + provenance protocol for physical goods** that borrows Bitcoin's language, math, and time-anchoring, and grounds each unit in a shippable object plus real charity dollars (10% of net to St. Jude, forever).

## 2. The coined terms (claimed)

| Term | Meaning |
|---|---|
| **Proof of Merch Mining™ (POMM)** | The overall mechanic — a play on Bitcoin's "Proof of Work." |
| **Merch Mining™** | The act: claiming a capped-run piece = mining a block. |
| **Mine your block** | The buyer-facing call-to-action for a purchase. |
| **The Merch Chain** | The full set of sequential capped design "blocks" issued by one publisher. |
| **Block** (a design run) | One design = one hash-linked chain with a fixed maximum supply. |
| **Halving batch** | A pricing tier inside a chain that raises the unit price as the chain approaches its cap, echoing Bitcoin's block-reward halvings. |
| **The tip** | The most recently mined block of a chain (its current head). |
| **The Genesis Block** | Block #1 of each chain, always priced at the lowest batch. |

All above terms are used as branded, coined, and reserved marks of 21 Million Publishing House. First use in commerce: the storefront at `twentyone-book-store.pages.dev` and this document.

## 3. Design intent

Bitcoin taught a generation the emotional power of *provably scarce*. Streetwear taught the same generation the emotional power of *drops*. POMM is the intersection: **every t-shirt is a numbered block, mined once, forever recorded, tied to the Bitcoin timechain by math not by marketing.** A buyer isn't merely buying a shirt — they are minting the next block in a chain of exactly 2,100 that will never be reprinted. When it's mined out, it's closed forever. That is what a real drop *should* mean.

POMM specifically rejects three things:
1. **Restocks.** A capped chain restocked is a lie about scarcity.
2. **Fake blockchain claims.** POMM is a hash-chained audit log timestamped to Bitcoin. It is not a blockchain, not a token, not a distributed network. Saying so is dishonest and we don't.
3. **Purely digital "mint" hype.** Every mined block ships a real physical item. No skeuomorphism.

## 4. Architecture (reference implementation)

The 21 Million reference implementation ships with the following components. All are open, inspectable, and independently reproducible.

### 4.1 Per-chain block record

Each mined block is stored as a row in an append-only ledger with the following canonical fields:

```
{
  "chain_id":   "merch:bitcoinaire:tee",   // one chain per design
  "block_no":   47,                         // sequential within chain
  "ts":         1788556870.611,             // Unix timestamp, 3-dec precision
  "price_cents": 2900,                      // USD price at time of mine
  "batch":      "Genesis",                  // batch label at mine time
  "buyer":      "buyer@example.com",        // hashed or plain identifier
  "prev_hash":  "72a4437...",               // hash of the previous block
  "hash":       "ac9e0c7...",               // SHA-256 of canonical payload
  "state":      "paid-confirmed",           // fulfillment state machine
  "pod_order":  "175055863"                 // print-on-demand order id
}
```

### 4.2 Hash function

Each block's `hash` is computed as:

```
sha256( json.dumps({
    "chain": chain_id,
    "n":     block_no,
    "ts":    round(ts, 3),
    "price": price_cents,
    "buyer": buyer,
    "prev":  prev_hash
}, sort_keys=True) )
```

This is deterministic and canonical. Any change to any past record (timestamp, price, buyer, previous hash) causes the recomputed hash to diverge, breaking the chain from that point forward. The verifier walks from genesis to the buyer's block and re-derives every hash to prove the chain is intact.

### 4.3 Genesis and tip

The first block in every chain uses `prev_hash = "0" * 64` (64 zero characters, matching Bitcoin's genesis convention). The most recently mined block's hash becomes the chain's **tip**.

### 4.4 Ledger publication

Nightly (or on-demand), the reference publisher:

1. Snapshots every chain's full block list to `/ledger/chains/merch_<slug>_tee.json` — public, immutable, cacheable.
2. Composes a **manifest** with metadata for all chains and their current tip hashes.
3. Computes the **merkle root** of all chain tips (Bitcoin-style: pairwise SHA-256, duplicate last if odd), producing one 32-byte fingerprint of the entire POMM ledger state at that snapshot moment.
4. Writes `/ledger/manifest.json` containing the merkle root and metadata.

### 4.5 Bitcoin anchor via OpenTimestamps

The manifest file is stamped by `ots stamp manifest.json`, which submits its SHA-256 to public OpenTimestamps calendars (Eternity Wall, Catallaxy, alice/bob at opentimestamps.org). Within a few hours, those calendars fold your merkle root into a Bitcoin transaction. The `.ots` file self-upgrades to include the Bitcoin block header proof. From that point forward, anyone can run `ots verify manifest.json` and independently confirm that your ledger's merkle root was committed to a specific Bitcoin block at a specific height — no trust in the publisher required.

### 4.6 Independent verifier

The reference implementation ships `verify_block.py`: a ~90-line Python script a buyer can download and run to (a) fetch the public per-chain JSON, (b) recompute every hash from genesis to their block, (c) confirm the chain is unbroken, and (d) verify the ledger's Bitcoin anchor.

## 5. Economic construction

### 5.1 Halving batches (per chain)

A chain of cap `N` is split into 4 batches whose ends step by roughly halving proportions:

| Batch | Block range | Reference price (US$) | Note |
|---|---|---|---|
| Genesis | 1 – 21 | $29 | Lowest, honors Bitcoin's 21M cap in the range |
| Batch 2 | 22 – 630 | $34 | +$5 |
| Batch 3 | 631 – 1,260 | $39 | +$5 |
| Final | 1,261 – 2,100 | $44 | Last blocks |

The 21-block Genesis is intentional. The step sequence 21 → 630 → 1,260 → 2,100 is roughly 1%, 30%, 60%, 100% of the cap — a "reverse halving" where scarcity compounds late and rewards the earliest buyers.

### 5.2 Reserved sats (USD-denominated)

Each mined block reserves a fixed USD amount (default 10% of retail) that is converted to sats at time of sale using the live BTC spot price (Coinbase primary, CoinGecko fallback, Kraken backup — all in the reference `btc_price.py`, 15-min cache, staleness guard). This gives the mechanic a **BTC-volatility-insensitive margin**: the publisher's per-block margin is stable across BTC $40k → $290k because the sats gift is a USD budget, not a fixed sat count. Early buyers still receive more sats per dollar because they buy when BTC is cheaper.

### 5.3 Charitable block

**10% of net proceeds route to St. Jude Children's Research Hospital.** This is a permanent term of every chain we operate and is deducted before publisher margin. Full reserve is booked at time of sale.

### 5.4 Cost floor: make-to-order

Every mined block is fulfilled via print-on-demand (Printful) with no warehouse. This guarantees the cap is honored (nothing is ever "restocked" from a backroom) and keeps working capital at zero. The unit economics of the reference implementation:

| Batch | Retail | Print + ship (typical US) | Sats gift | St. Jude | **Net margin** |
|---|---:|---:|---:|---:|---:|
| Genesis $29 | $29.00 | ~$17.31 | $2.90 | $2.90 | ~$5.89 |
| Batch 2 $34 | $34.00 | ~$17.31 | $3.40 | $3.40 | ~$9.89 |
| Batch 3 $39 | $39.00 | ~$17.31 | $3.90 | $3.90 | ~$13.89 |
| Final $44 | $44.00 | ~$17.31 | $4.40 | $4.40 | ~$17.89 |

Genesis is intentionally thin to reward early buyers and prove the mechanic without predatory pricing.

## 6. Full-cycle flow (buyer's perspective)

1. Buyer visits a product page (`/merch/bitcoinaire.html`).
2. Sees the current batch, next block number, live count of blocks mined vs. cap.
3. Selects a size, clicks **Mine Block #N**.
4. Redirects to a hosted Stripe checkout (test mode: no charge; live mode: real card).
5. On payment success, the checkout returns to `/order-confirmed.html`.
6. The confirmation function:
   - Verifies the Stripe payment status.
   - Determines the next block number from the ledger tip.
   - Places a Printful order (draft in test mode, confirmed in live mode).
   - Computes the block's hash chained to the previous tip.
   - Persists the new block to the ledger.
   - Returns block number, hash, Printful order id, and shipping details.
7. Buyer sees a receipt with their block number, hash, Printful order (clickable to the publisher's dashboard), and a link to `/pomm.html` where they can inspect the whole ledger.
8. On the next nightly publication cycle, the ledger snapshot including their block is written to `/ledger/`, its merkle root is stamped via OTS, and within hours the Bitcoin block header proof is attached.
9. At any time thereafter, the buyer or any third party can independently verify: (a) their block is in the chain, (b) the chain is unbroken from genesis to their block, (c) the ledger's fingerprint that includes their block is anchored to a specific Bitcoin block.

## 7. Trust model

POMM is honest about what it is:

**What it is**
- An append-only, tamper-evident audit log.
- SHA-256 hash chain — every block links to the previous.
- Merkle-rooted daily and Bitcoin-anchored via OpenTimestamps.
- Fully public JSON — anyone can download, audit, verify.
- A physical goods commitment: every block ships a real numbered item.
- A charitable commitment: 10% of net to St. Jude, permanently.

**What it isn't**
- Not a blockchain (single centralized ledger, not a distributed network).
- Not proof-of-work (the mint is centralized; Bitcoin timestamping is the accountability layer).
- Not a token — you own a numbered physical shirt, not a transferable coin.
- Not a security — no expectation of profits, no common enterprise, no essential managerial efforts to derive gains.

The honest metaphor: **POMM is Git commits countersigned by the Bitcoin timechain.**

## 8. What can and cannot be spoofed

- **Cannot be spoofed:** the fact that a specific block hash existed at or before the time the Bitcoin block containing our merkle root was mined. This is math.
- **Cannot be spoofed silently:** any retroactive edit to a past block. It would break every subsequent hash and be detectable by any verifier in <100 ms.
- **Can be spoofed:** the identity of the buyer, if the publisher lies at time of mine (buyer identifiers are trust-me at issue time). Mitigated by (a) email verification, (b) optional Nostr `npub` binding, (c) optional Bitcoin address signature at buy time (future work).
- **Can be spoofed:** the physical shipping. Mitigated by the Printful `pod_order` id, publicly linked from the buyer's confirmation.

## 9. Product-line policies

The following are protocol-level commitments of the 21 Million reference implementation:

- **No restocks, ever.** A capped chain, once mined out, is closed forever.
- **No hidden batches.** The full batch schedule is fixed at chain creation and shown on every product page.
- **10% charitable block, permanent.** St. Jude Children's Research Hospital, fully reserved at time of sale.
- **USD-denominated sats.** No fixed sat gift — the reserve is USD, converted at spot at mine time.
- **Public ledger, always.** All 16 chains are fully public in JSON with a Bitcoin-anchored fingerprint.
- **Independent verifier.** The `verify_block.py` script ships with the store; buyers do not need to trust the publisher.

## 10. Prior art and coinage

The author is unaware of a prior public use of **"Proof of Merch Mining"** or **"Merch Mining"** to describe a retail scarcity mechanic that binds physical goods to Bitcoin-anchored hash-chained ledgers of numbered units. Related but distinct precedents:

- **NFTs** — tokenize a URL/JSON on a blockchain; typically no physical good, no charitable protocol, no ledger anchored to a *different* chain (Bitcoin). POMM inverts this: physical-primary, ledger-anchored-to-Bitcoin-only.
- **Ordinals/Inscriptions** — inscribe data directly onto Bitcoin. Adjacent, more expensive per unit, and not oriented toward apparel drop mechanics. POMM can complement Ordinals (a POMM chain's ledger could later be also inscribed) but does not require them.
- **Streetwear "drops"** — cap and time supply, but no ledger, no verifier, no charitable protocol, no cryptographic provenance for individual units.
- **Ticketing hash-chains** — several event-ticket vendors use hash-chained receipts, but not marketed as "mining" and not tied to Bitcoin timestamping.
- **Kingdom drops (Basel, Pokemon)** — cap-and-number physical goods, but no cryptographic ledger.

POMM is the specific fusion of: **capped physical drops + hash-chained ledger + Bitcoin timestamp anchor + USD-denominated sats gift + charitable block**. The author claims the coinage of the terms in §2 and the specific full-stack mechanic composed of the above elements.

## 11. This document's Bitcoin anchor

This whitepaper file (`PROOF-OF-MERCH-MINING-whitepaper.md`) is timestamped with OpenTimestamps immediately upon publication. The corresponding `.ots` file is published alongside it at:

```
https://twentyone-book-store.pages.dev/PROOF-OF-MERCH-MINING-whitepaper.md
https://twentyone-book-store.pages.dev/PROOF-OF-MERCH-MINING-whitepaper.md.ots
```

Anyone can run `ots verify PROOF-OF-MERCH-MINING-whitepaper.md` (with the accompanying `.ots` file) and independently confirm the SHA-256 of this exact file existed at or before the Bitcoin block that contains the OTS calendar's aggregation transaction. That is the author's public, cryptographic proof of coinage date.

## 12. License

The whitepaper text is released under **Creative Commons Attribution 4.0 (CC BY 4.0)** — you may reproduce, remix, and reference it with attribution to Terrence L. Thomas / 21 Million Publishing House.

The **coined terms in §2** are asserted as trademarks of 21 Million Publishing House and are not licensed for use by competing merchandise programs.

The **reference implementation code** (mining engine, ledger publisher, verifier, POD adapter) is released under the **MIT License** at the same domain.

---

**Terrence L. Thomas**
Founder, 21 Million Publishing House
Author, *The Boy Who Cried Bitcoin*
`satoshinegromoto@21millionpublishing.com`

*Published: 2026-09-05. Bitcoin-anchored: see companion `.ots` file.*