papers/morpheus/adoption/adopt-01-l2-on-lux.tex

\documentclass[11pt,a4paper]{article}
\usepackage{../shared/luxcover}   % black cover (self-contained, TikZ logo, no assets)
\usepackage{../shared/proposal}   % \proposalhead helpers and the stake environment
\usepackage[utf8]{inputenc}\usepackage[T1]{fontenc}
\usepackage{amsmath,amssymb}
\usepackage{listings}\usepackage{xcolor}
\input{../shared/lstlang}

\newcommand{\code}[1]{\texttt{\small #1}}

\title{L2 on Lux, or Sovereign L1}
\author{Zach Kelling\\\textit{Lux Industries, Inc.}\\\texttt{[email protected]}}
\date{2026}

\begin{document}
\luxcoverpage

\thispagestyle{empty}
\noindent{\color{muted}\footnotesize\sffamily ADOPT-01 \quad\textbullet\quad Hanzo AI \& Lux Industries \quad\textbullet\quad 2026}\par
\vspace{0.7ex}
\noindent{\LARGE\bfseries A five-person team cannot build post-quantum consensus.}\par
\vspace{0.5ex}
\noindent{\color{rule}\rule{\linewidth}{1.1pt}}\par
\vspace{1.0ex}
\noindent{\itshape Sovereign costs years of cryptography and a validator budget funded from scratch. An L2 inherits both. The init is the same script.}\par
\vspace{1.4ex}

\noindent\textbf{The problem, in Morpheus numbers.}
Morpheus runs no consensus. The rule that pays a provider executes on a Base diamond Morpheus neither
wrote nor secures [verified]. To own that layer, Morpheus goes sovereign, and a sovereign L1
finalizes under a consensus its operator supplies. That consensus must be post-quantum. Lux's is
Quasar, a per-round certificate composing a BLS fast-path with lattice (ML-DSA) and hash-based
(SLH-DSA) threshold signatures [verified: \code{luxfi/quasar}]. It took Lux years. Five people ship
all native Morpheus code [verified], real revenue is \$476K/yr and falling from \$3.24M/qtr at the
2024 launch [verified], and there is no cryptography team. A sovereign validator set also sits outside
the Lux staking economy, so its security is funded from scratch and the return on MOR bonded for it is
forgone.

\vspace{0.4ex}
\noindent\textbf{The fix, named to a repo.}
\code{l2-template}. Its \code{init.sh} stands Morpheus up as an L2 on the Lux primary network in
minutes; Hanzo and Zoo were made this way [verified]. Horizon, the finality Quasar produces, applies
to Morpheus blocks. Validators are Lux-managed. MOR bonded into the chain joins the shared security
economy and earns the Lux staking return. The sovereign path is the same \code{init.sh} plus one
transaction, \code{ConvertNetworkToL1Tx}; its arithmetic is LP-314. Nothing migrates to begin: the
Base diamond stays canonical while the L2 runs beside it.

\vspace{0.4ex}
\noindent\textbf{The outcome, quantified.}
Post-quantum finality and staking yield are inherited, not rebuilt.
\[
\text{Sovereign} \;=\; \underbrace{T_{\mathrm{crypto}}}_{\text{multi-year, \emph{Lux already paid it}}}
\;+\; \underbrace{S\cdot r}_{\text{forgone staking / yr}}
\qquad\qquad
\text{L2} \;=\; \text{one \code{init.sh} run } + \text{ MOR bridged for gas.}
\]
$T_{\mathrm{crypto}}$ is the Quasar-equivalent, the effort Lux spent over years to reach Horizon
[verified: it exists]. $S$ is the MOR bonded for security and $r$ the Lux staking rate: on an L2 the
bond earns $S\cdot r$, on a sovereign set it earns nothing [illustrative: $S$ and $r$ are not yet set
for Morpheus, so the term is parametric, not a figure]. The L2 side is an afternoon against a floor of
one bridge transfer [verified]. The delta the L2 avoids is a multi-year cryptography program plus a
forgone yield stream, exchanged for one thing: sovereign control of the validator set.

\begin{stake}{Sovereign L1}
\item Own validator set, MOR as native gas, fee policy under its own governance.
\item Pays $T_{\mathrm{crypto}}$ to build a post-quantum consensus and funds security outside the Lux economy, forgoing $S\cdot r$.
\end{stake}
\begin{stake}{L2 on Lux}
\item Inherits Horizon finality and Lux-managed validators, no cryptography to build, and earns $S\cdot r$.
\item Gives up sovereign control of the validator set to Lux.
\end{stake}

\noindent\textbf{The assumption, and why Lux.}
The sovereign trade pays only if controlling the validator set outweighs $T_{\mathrm{crypto}} + S\cdot
r$. For a five-person team whose scarce resource is cryptographic engineering, it does not. Lux is the
counterparty because it already produces Horizon and runs the staking economy the bond earns from: the
same \code{init.sh} that made Hanzo and Zoo makes Morpheus, no new cryptography and no foreign bridge.
The choice is Morpheus governance's, and nothing else in the series waits on it.

\vspace{0.5ex}
\noindent{\color{muted}\footnotesize\sffamily
ADOPT-01, the anchor decision for the series. Sovereign-L1 arithmetic in LP-314.
\quad\textbullet\quad \texttt{[email protected]}}

\end{document}