Freedom Coin
============
A Quantum-Resistant Sound-Money Cryptocurrency
Sage Kratos

Sound money. Quantum proof. No masters.

Abstract
--------
Freedom Coin is a digital store of value built for the long run. It issues a
fixed supply of 10,000,000 coins on a predictable schedule that no one —
including its creator — can change, records every coin on a transparent public
ledger anyone can audit, and answers to no company, foundation, or
administrator. What sets it apart is its foundation. The cryptography that
protects ownership and the network is post-quantum from the very first block,
built on the standards finalized by the United States National Institute of
Standards and Technology (NIST) in 2024: Dilithium5 signatures (FIPS 204),
Kyber1024 key encapsulation (FIPS 203), and 512-bit hashing throughout. Most
digital assets rest on cryptography that a sufficiently powerful quantum
computer is expected to break, and a store of value meant to last decades
cannot afford that exposure. Freedom Coin is engineered to remain secure
across exactly the period in which that threat is most likely to arrive. There
is no pre-mine, no founder allocation, and no governing entity — only fixed
rules, open code, and a network anyone can join with the computer already on
their desk.

1. The Quantum Threat to Digital Money
--------------------------------------
Every coin on a public ledger is protected by two kinds of mathematics: a hash
function, which links blocks together and makes history expensive to rewrite,
and a digital signature, which proves that the rightful owner authorized each
payment. Break either one badly enough and the money stops being safe.

The signatures used by almost every cryptocurrency in use today rely on the
difficulty of certain problems in elliptic-curve mathematics. In 1994, Peter
Shor showed that a large, error-corrected quantum computer could solve exactly
those problems efficiently. A machine of that capability does not exist today.
But the field is advancing, governments and corporations are investing
heavily, and the honest description of the timeline is uncertain, not safely
distant.

The danger is not only in the future. It is already accumulating, through a
strategy known as Harvest Now, Decrypt Later. Public ledgers are, by design,
permanent and fully visible. An adversary can copy an entire chain today,
store it cheaply, and wait. The moment a capable quantum computer arrives,
every coin whose public key has ever been exposed becomes vulnerable to having
its signature forged and its balance stolen — retroactively, from data
captured years earlier. On a transparent ledger, the clock on this threat
starts the day the chain goes live.

For a store of value meant to last decades, "secure for now" is not the
standard. Sound money must remain secure across the very period in which
quantum computing is most likely to mature. This is the specific, narrow
problem Freedom Coin exists to solve.

2. Post-Quantum by Construction
-------------------------------
The last decade has proven that decentralized, fixed-supply digital money
works. Freedom Coin keeps those hard-won principles — proof-of-work issuance,
a hard supply cap, a transparent ledger, open-source code, and the refusal to
let any single party control the rules — and rebuilds the one layer that the
early designs could not have been expected to anticipate: the cryptography.
Quantum resistance is not bolted on. It is present from the genesis block,
using the algorithms NIST selected after a multi-year, public, international
competition and standardized in 2024.

Signatures — Dilithium5 (ML-DSA, NIST FIPS 204). Ownership and spending of
every coin are authorized by Dilithium5, a lattice-based signature scheme
believed secure against both classical and quantum attackers. Its security
does not depend on elliptic curves and is therefore not threatened by Shor's
algorithm. Dilithium5 is the highest-security parameter set in the standard.
Its keys and signatures are larger than those of legacy schemes — a public key
is 2,592 bytes and a signature 4,627 bytes — and the protocol's block and
transaction limits are sized to accommodate this deliberately.

Network encryption — Kyber1024 (ML-KEM, NIST FIPS 203). Connections between
nodes are authenticated with Dilithium5 and encrypted using Kyber1024, a post-
quantum key-encapsulation mechanism. This protects the peer-to-peer network
from a future adversary recording today's traffic to decrypt later.

Hashing — 512-bit, doubled. Freedom Coin hashes with BLAKE3 and SHA3, both at
512-bit output, composed so that every input passes through both functions.
Grover's quantum search algorithm effectively halves the brute-force security
of a hash function; a 512-bit hash retains a 256-bit margin even under that
pressure, which is why 256-bit hashes are not used here for security-critical
commitments.

Proof-of-work — memory-hard and CPU-oriented. Mining uses an Argon2d-based
proof-of-work tuned to require 64 mebibytes of memory per attempt. Memory
bandwidth is far harder to scale cheaply than raw computation, which
suppresses the specialized-hardware arms race that concentrates mining into
industrial farms. Freedom Coin is designed to be mined on ordinary computers.

Transparency by design. Freedom Coin uses a fully transparent unspent-
transaction-output (UTXO) ledger. It deliberately omits stealth addresses and
ring signatures. The goal is auditability and exchange compatibility: anyone
can verify the total supply and the validity of the chain independently, with
no hidden state.

None of this is claimed to be unbreakable. No serious cryptographer claims
that of any system. What can be said precisely is this: Freedom Coin's
security rests on publicly vetted, internationally standardized post-quantum
algorithms, rather than on cryptography already known to fail against quantum
computers. That is the honest claim, and it is the one that matters.

3. A Store of Value Built to Last
---------------------------------
What makes money worth holding for decades? It must be scarce and stay scarce.
It must be impossible to debase or seize. It must be transparent, so that its
supply can be trusted without trusting anyone. And — the requirement that
almost every digital asset overlooks — it must survive the technology of the
decades ahead. Freedom Coin is engineered for all four.

Scarcity no one can change. Freedom Coin will only ever exist as 10,000,000
coins. That limit is fixed at the genesis block and can be altered by no one,
the creator included. Issuance follows a smooth, gentle curve rather than
abrupt halving events, so the supply schedule holds no sudden cliffs or shocks
— what is promised is what is delivered, year after year, until issuance ends.

Nothing to debase, no one to seize it. There was no pre-mine and there is no
founder stash, no investor allocation, and no administrative key. No authority
can print more coins, freeze a balance, reverse a payment, or change the
rules. You are trusting arithmetic, not a person, a company, or a promise.

Transparent and auditable. Because the ledger is fully public, anyone can
verify the entire supply at any moment. There is no hidden inflation, no off-
chain reserve to take on faith, and no privileged party with a private view of
the books.

Built to survive the quantum era. This is the decisive difference. A store of
value is a multi-decade promise, and the cryptography that protects most
digital assets is precisely the cryptography a quantum computer is expected to
break. Freedom Coin secures ownership with NIST's post-quantum standard from
the very first block, so the coins held in it are defended against the threat
already being prepared for against transparent ledgers. Holding value for the
long run requires surviving the long run.

Distributed by design. Because anyone can mine Freedom Coin on an ordinary
computer — explained in Section 5 — coins and influence spread widely instead
of concentrating in whoever can afford the most specialized hardware. Broad
distribution is what keeps a money resistant to capture by any single
interest.

Freedom Coin is not built to be the loudest asset of the moment. It is built
to still be standing, and still trustworthy, when the moment has passed.

4. Freedom, Sound Money, and No Masters
---------------------------------------
The technical case is the entrance. The reason for the project is older than
any algorithm.

Money that can be created at will by an authority is money whose value that
authority can quietly take from you. A fixed, predictable, publicly verifiable
supply removes that power. Every Freedom Coin in existence was or will be
mined on the open network, by whoever showed up to do the work — not
allocated, not gifted, not reserved.

There is no company behind Freedom Coin, no foundation that can be pressured,
and no administrative key that can freeze funds, reverse transactions, or
rewrite the rules. The project is built to run on its fixed rules with no
maintainer at all: it depends on no single person or group, and no one — now
or ever — can change its core monetary and consensus rules. Its long-term
health is therefore in the hands of its community. Anyone who wants to help
keep it alive — maintaining the software, responding to security issues, or
running infrastructure — is invited to step forward. A volunteer group may
grow from those who step up, but none is guaranteed; if none does, the rules
still stand and anyone can contribute in the open. The coin is designed to
outlive its origins and to depend on no one.

Why now. The post-quantum standards exist as of 2024. The Harvest-Now-Decrypt-
Later clock is already running on every transparent chain. Sound money worth
holding for a generation needs to be built on cryptography that can survive
that generation. The moment to build a quantum-resistant store of value is
before the threat arrives, not after.

5. Mining That Costs Almost Nothing to Join
-------------------------------------------
One of the quiet ways digital money becomes centralized is the cost of joining
it. When mining demands warehouses of specialized machines, ordinary people
are reduced to spectators and a handful of industrial operations hold the
power. Freedom Coin is built to keep that door open to everyone.

No special hardware. The proof-of-work is memory-hard — it requires 64
mebibytes of memory per attempt — and is deliberately tuned so that ordinary
processors stay competitive while purpose-built mining machines gain little
advantage. You mine on the computer you already own, a normal laptop or
desktop. There is no rig to buy, no farm to build, and no upfront capital to
raise.

Free software, minutes to start. The full node and miner are free and open
source. A single setup command walks you through a first-run wizard; another
command starts mining. You decide how many processor threads and how much
intensity to devote, so it can run quietly in the background while you use
your machine for everything else.

Modest, ordinary power. Mining draws on your processor rather than an
industrial machine. On commodity hardware it costs a small fraction of a watt-
hour of energy per unit of work, which makes running it closer to leaving an
application open than to operating a data center.

A fair start for everyone. There was no pre-mine and no head start for anyone.
From the very first block, every participant mines on identical terms, and the
coins go to whoever shows up and does the work.

An honest word: mining is not free money. It uses some electricity, and your
share of the rewards depends on how much total mining power is on the network
at the time. What costs almost nothing is the entry — no permission, no
special equipment, and no investment beyond the computer already on your desk
and the power it draws.

6. How Freedom Coin Works
-------------------------
This section describes the system in plain terms. Precise parameters and
formulas are collected in the appendices.

The ledger. Freedom Coin records ownership as a set of unspent transaction
outputs (UTXOs) — discrete "coins" of specific value, each locked to an
address. A payment consumes one or more existing outputs and creates new ones;
the difference between inputs and outputs, if any, is the transaction fee paid
to the miner. Every node independently verifies that no coin is spent twice
and that every output is authorized by a valid Dilithium5 signature.

Addresses and wallets. A wallet is generated from a 24-word recovery phrase,
optionally protected by a passphrase that acts as a 25th word. From that
phrase the wallet derives Dilithium5 keys and addresses, encoded in
Base58Check. The wallet file itself is encrypted. Both a command-line wallet
and a desktop graphical wallet are provided at launch, along with a watch-only
mode and standard payment-request links.

Proof-of-work and blocks. New blocks are produced roughly every 150 seconds by
miners searching for a proof-of-work solution under the current difficulty
target. Difficulty adjusts over a short, dampened window so the network holds
its block interval steady as participation rises and falls, without violent
oscillation. Blocks are capped at 8 mebibytes and 10,000 transactions, sized
to hold the larger post-quantum signatures while keeping a full node practical
to run on a normal machine.

Finding the network. A new node reaches the network through several
independent paths rather than a single point of failure: a saved list of known
peers, a public distributed hash table that participating nodes register with
automatically, and a small set of bootstrap entries. Nodes may run on the open
internet, over Tor for privacy, or both at once. No permanent central server
is required for the network to keep finding itself, and every connection is
authenticated by the post-quantum handshake before any data is trusted.

The chain is the authority. The genesis block is hardcoded; any node
presenting a different genesis is rejected outright. The valid chain is the
one with the greatest accumulated proof-of-work. History becomes progressively
immovable: any block buried deeper than 100 confirmations is treated as final,
and no node will reorganize below it. This gives users and exchanges a clear,
master-free definition of settlement — finality comes from confirmation depth,
never from any human authority.

7. Supply and Mining Economics
------------------------------
Freedom Coin issues its entire 10,000,000-coin supply over 100 years, then
stops. There are no halving events. Instead, the block reward decays smoothly
and predictably year over year, which removes the disruptive supply shocks
that periodic halvings can cause.

The first year carries an elevated reward to bootstrap the network and to
reward the early miners who take the most risk. From the second year onward
the reward declines gently and continuously until issuance ends. Each coin (1
FRQC) divides into 100,000,000 base units called sovereigns.

Year  Block reward (FRQC)  Approx. annual issuance (FRQC)
----  -------------------  ------------------------------
1     3.50000000           735,840
5     0.94278862           ~198,212
10    0.85461706           ~179,675
50    0.38960932           ~81,914
100   0.14594915           ~30,684

(Roughly 210,240 blocks are mined per year at the 150-second interval. The
block reward is never zero before year 100, and the 10,000,000-coin cap is
reached exactly at the end of year 100, after which issuance permanently
stops.)

A key accounting guarantee underlies these numbers: transaction fees are
recycled existing coins, never newly minted. The protocol counts only the
mining subsidy toward total supply, clamps that subsidy so the cap can never
be exceeded even by rounding, and validates every block's coinbase against the
real fees it collects. The 10,000,000 limit is therefore enforced by
arithmetic, not by trust.

8. Energy
---------
Proof-of-work secures the ledger by making its history expensive to rewrite;
that expense is paid in energy, and it is what the security is made of. The
relevant question is not whether a chain uses energy, but how much, and
whether that amount grows without bound.

Freedom Coin keeps its footprint small by design. Its memory-hard, CPU-
oriented proof-of-work suppresses the specialized-hardware arms race that
drives large-scale mining into industrial farms. Ordinary processors stay
competitive, there is no profitable hardware monopoly to chase, per-machine
power draw stays modest, and as a result even a very large Freedom Coin
network is projected to consume a small fraction of the energy used by the
largest existing proof-of-work systems.

The table below projects total annual network energy against a reference
figure of roughly 150 terawatt-hours per year for Bitcoin, the largest proof-
of-work network, using per-hash energy measured on commodity hardware.

Network size     Projected energy (TWh/yr)  Share of reference figure
---------------  -------------------------  -------------------------
1,000 nodes      ~0.0009                    ~0.0006%
10,000 nodes     ~0.009                     ~0.006%
100,000 nodes    ~0.09                      ~0.061%
1,000,000 nodes  ~0.92                      ~0.61%

Two honest notes belong with any such comparison. First, like all proof-of-
work systems, Freedom Coin's energy per coin rises as more miners join,
because issuance is fixed while total work grows — more participation buys
more security for the same fixed issuance. Second, total network energy scales
with participation but stays bounded, because the absence of a specialized-
hardware arms race caps realistic per-node and network-wide power. The
defensible claim is about the total footprint and its cause, not a promise
that energy is free.

9. The Long Game: Security After Year 100
-----------------------------------------
After year 100 the mining subsidy is zero, and from then on, forever, the
network's security is paid for entirely by transaction fees. This is the
"security budget" problem, and it is unsolved by every fixed-supply
cryptocurrency. Freedom Coin does not claim to have solved it. It claims to
have made honest, conservative choices and to have stated the open question
plainly.

The hard cap rules out the most direct fix. A perpetual "tail emission" —
minting a small reward forever — would secure the chain indefinitely, but only
by abandoning the 10,000,000 limit. Freedom Coin will not break its cap, so
tail emission is off the table.

What remains are two levers, both built in. The first is block-space scarcity:
a finite block size forces transactions to compete for inclusion, which
sustains a genuine fee market whenever demand exists. The second is a fee
floor that mirrors the coin's own scarcity. Freedom Coin enforces two layers,
and the distinction between them is deliberate and important:

- A permanent consensus minimum, fixed at the genesis block and changeable by
  no one, exists only to stop spam. It is set deliberately low so that it can
  never become punitive, regardless of how valuable the coin becomes. This is
  the only fee rule the consensus layer enforces, which means a mistake in the
  higher layer can never split the chain.

- A scarcity-linked policy floor, applied by nodes when they relay
  transactions and estimate fees, rises automatically as the supply is mined
  out. It begins very low at launch and climbs in proportion to the share of
  the total supply already issued, so that as the block subsidy fades, the
  floor beneath miner revenue rises to meet it. After year 100 it continues to
  step up gently to a fixed, permanent ceiling. On top of this floor, real-
  time demand sets the actual fee whenever the network is busy; the floor only
  matters when it is not.

Because every fee is a recycled coin and never new issuance, no fee rule of
either layer can ever mint supply or threaten the cap. Honoring the post-
year-100 commitment therefore never conflicts with the 10,000,000 limit. The
precise schedule is given in Appendix D. The project states plainly that the
long-run sufficiency of a pure fee market is, for every capped chain, an open
question; the design's role is to keep fees meaningful and the floor honest,
not to claim certainty.

10. Immutability, Governance, and Survival
------------------------------------------
Immutability. The protocol's core rules — the supply cap, the emission
schedule, the proof-of-work, and the cryptographic standards — are fixed at
the genesis block and cannot be changed by anyone, including the creator. A
plain-text Protocol Constitution stating these rules is written before launch,
and its hash is embedded permanently in the genesis block, so anyone can
verify the rules independently for as long as the chain exists.

No masters. There are no master servers, no administrative keys, and no
creator-controlled update mechanism. Node operators choose which software to
run; no one can push a change to the network.

Survival without anyone in charge. The system is designed so that it continues
unaffected even when no one is steering it. The peer-to-peer network finds
itself without depending on any permanent central server, and the code is
fully open source. A volunteer technical group is invited to form from the
community to coordinate non-core maintenance and emergency response, but its
formation is hoped for, not guaranteed, and the network is built to function
without it; those willing to help are encouraged to come forward (see Section
4). Whether or not such a group ever exists, no one can alter the immutable
core rules, and any node operator may propose and adopt fixes in the open.

Emergency response. A documented process describes how serious vulnerabilities
can be handled — confidential disclosure through the project's published
contact, coordination among node operators (and any volunteer group that has
formed) over encrypted channels, and a strong preference for backward-
compatible fixes that do not split the network. A documented cryptographic
upgrade path exists so that, should the post-quantum landscape shift, the
community has a defined, non-unilateral route to respond. No fix is ever
imposed on anyone; it takes effect only as node operators choose to run it.

11. For Exchanges and Integrators
---------------------------------
Freedom Coin is built to be listed and integrated without special cooperation
from any central party — there is no operator whose blessing a listing
requires. Its transparent UTXO ledger allows full, independent verification of
supply and balances. Settlement is clear: six confirmations are recommended
for exchange deposits, and any block buried beyond 100 confirmations is
protocol-final and will never be reorganized, giving custodians a hard floor
on settlement risk. A read-only status interface exposes node and network
health, addresses use a standard Base58Check format, and any transaction can
be looked up by its identifier. Reference wallets, pre-compiled binaries, a
block explorer, and a network dashboard are available at launch.

12. The Network and the Road Ahead
----------------------------------
Freedom Coin's peer-to-peer network is open by default and private by choice.
Nodes can run on the clearnet, where they help one another stay discoverable
automatically, or over Tor, where their location is hidden, or both at once —
every link secured by the post-quantum handshake. The discovery design has no
single point that, if removed, stops the network from finding itself.

A public, multi-year roadmap is published at launch as a suggested direction,
not a promise — because no one controls Freedom Coin, its future is decided by
whoever chooses to build on it. Sketched priorities include broad node
distribution, light-client verification for low-power devices, and documented
readiness for second-layer payment channels and cross-chain atomic swaps.
Longer-term cryptographic add-ons — such as an additional hash-based signature
anchoring the genesis block and an activatable commitment to the full UTXO set
— are reserved in the design: the seams for them exist and are deliberately
left unused at launch, so they could be introduced later through an open,
voluntary upgrade process without disturbing the immutable core. They are
described honestly here as future options, not as shipped features.

13. Conclusion
--------------
A store of value is a promise that has to survive time. Freedom Coin makes
that promise on terms anyone can verify: a supply of 10,000,000 coins that no
one can inflate, a ledger anyone can audit, rules no one can change, and a
cryptographic foundation built for the quantum era from the very first block.
It launches with no pre-mine, no controlling party, and no barrier to joining
beyond the computer already on your desk. It is offered not as the asset of a
moment, but as money designed to still be standing — and still trustworthy —
when the moment has passed.

Sound money. Quantum proof. No masters.

Appendix A — Protocol Parameters
--------------------------------
Parameter                              Value
-------------------------------------  -------------------------------------------
Ticker                                 FRQC
Maximum supply                         10,000,000 FRQC
Smallest unit                          1 sovereign = 0.00000001 FRQC
Block interval                         150 seconds
Blocks per year                        210,240
Emission period                        100 years, smooth annual decay, no halvings
Year-1 block reward                    3.5 FRQC
Maximum block size                     8 MiB
Maximum transactions per block         10,000
Signature scheme                       Dilithium5 (ML-DSA, FIPS 204)
Key encapsulation                      Kyber1024 (ML-KEM, FIPS 203)
Hash functions                         BLAKE3-512 composed with SHA3-512
Proof-of-work                          Argon2d, 64 MiB memory-hard, 1 pass
Difficulty adjustment                  Per block, 15-block dampened window
Recommended confirmations (exchanges)  6
Final settlement depth                 100 confirmations
Address format                         Base58Check

Appendix B — The Quantum Threat in Detail
-----------------------------------------
(Optional technical reading.) Shor's algorithm solves the integer-
factorization and discrete-logarithm problems in polynomial time on a quantum
computer, which directly breaks the elliptic-curve signatures used by most
cryptocurrencies. Grover's algorithm provides a quadratic speedup for
unstructured search, effectively halving the bit-security of a hash function
or symmetric primitive against brute force. Freedom Coin's choices follow
directly: lattice-based signatures (Dilithium5) and key encapsulation
(Kyber1024) resist Shor; 512-bit hashing preserves a 256-bit margin against
Grover.

Appendix C — Emission Schedule
------------------------------
The per-block reward is defined by a fixed 100-entry annual schedule,
beginning at 3.5 FRQC in year 1 and 1.0 FRQC in year 2, then decaying smoothly
and monotonically to approximately 0.146 FRQC in year 100. The schedule is
constructed so that cumulative issuance reaches 10,000,000 FRQC exactly at the
end of year 100; the final year's subsidy is clamped to whatever remains under
the cap. The full table is published with the code and as a separate
cryptographic test artifact. Reference figures (FRQC per block): year 1, 3.5;
year 5, 0.94278862; year 10, 0.85461706; year 50, 0.38960932; year 100,
0.14594915.

Appendix D — The Fee Model in Detail
------------------------------------
Fees are measured as a feerate: sovereigns per 1,000 bytes of transaction
data, which is fair across transaction sizes and matches how the network
prioritizes transactions. Two layers apply.

Consensus minimum (immutable). The consensus layer enforces a single,
permanent floor of 10 sovereigns per 1,000 bytes. It is fixed at the genesis
block, can be changed by no one, and exists only as anti-spam protection.
Deliberately low, it can never become punitive no matter how valuable the coin
grows. Because it is the only fee rule consensus enforces, an error in the
policy layer below can never cause a chain split.

Scarcity-linked policy floor. When nodes relay transactions and estimate fees,
they apply a higher floor that mirrors how much of the supply has been mined.
It begins at 100 sovereigns per 1,000 bytes at launch and rises in proportion
to cumulative issuance, reaching 5,000 sovereigns per 1,000 bytes at the end
of year 100, when the last coin is minted. After year 100 it continues to step
up by 500 sovereigns per 1,000 bytes each year, to a permanent ceiling of
12,000 sovereigns per 1,000 bytes reached in year 114, and is flat thereafter.
As the block subsidy fades, this floor rises to meet it, so miner revenue does
not collapse the instant issuance ends.

Demand on top. Whenever the network is busy, real-time demand — estimated from
the backlog of pending transactions — sets the actual fee, and the floor
simply prevents it from falling below the scarcity-linked level when the
network is quiet. Wallets query the live rate automatically and show the
estimated fee before a payment is sent.

Because every fee is a recycled coin and never new issuance, no layer of this
model can mint supply or affect the 10,000,000 cap. The project states openly
that, like every fixed-supply chain, the long-run sufficiency of a pure fee
market for security is an open question; the design's role is to keep fees
meaningful and the floor honest, not to claim certainty.

Appendix E — Verification and Independence
------------------------------------------
No coins exist before launch, and this is verifiable. The genesis block is
hardcoded and announced before any mining begins, and its coinbase output is
permanently unspendable — the genesis block creates no spendable coins for
anyone. The exact launch time is published in advance, so the community can
watch every block being mined in public from the very first. Every coin in
existence is therefore minted as a mining reward at block one or later, on the
open network; any node running a different genesis or different rules is
rejected, so there is no hidden chain and no pre-allocated balance. The
Protocol Constitution's hash is embedded in the genesis block for independent
verification. The build is reproducible: independent parties can compile the
source and confirm that the resulting binaries match the published ones.
Cryptographic test vectors are published so that alternative implementations
can be checked for correctness.

Appendix F — Official Channels
-------------------------------
Websites, hosting platforms, and any single link can go down or be pulled
without warning, and this project intentionally depends on no single one of
them. If that ever happens to any other Freedom Coin channel, the following
Nostr identity is the place to check for the real, current status and where
to find everything else:

    npub1hssvsclv03gchp746wydtkcgp87mapuwfvd2uu4pdfuptec9du0qj0n8pr

It has no single point of failure: it is a cryptographic identity broadcast
across many independent relays, not an account hosted by any one company or
server. For ongoing community discussion, the project maintains a Matrix
room at #freedomcoin:matrix.org.

Every published release binary is signed with the project's GPG key,
fingerprint A39B 29B5 4FCA 3F06 2CB2  D462 ED80 8A56 4D55 C55D. The full
public key and verification instructions are published in the README
alongside every release.
