I do not think that you structured this very clearly. And this is causing errors in your own beliefs.
I certainly want to structure things clearer, and the goal of this bounty was to bring out errors in my beliefs so I appreciate your response.
First of all, the best way to characterize this is in fact a true open source distributed "ripple" based on the bitcoin codebase. Another definition would be a "native" colored coin blockchain. Since colored coins is frankly awkward, I have been considering a blockchain that accepts multiple currencies deeply. What is blocking me is frankly that I'd want bitcoins to somehow be a "native" part of the solution, not an external currency that requires a backer.
This is not a trust-based issuer situation. Crypto-USD has a fluctuating market price relative to paper USD that trades in a range similar to the transaction fees paid to move money into or out of Mt. Gox, your ATM, Dwolla, etc. Because the price fluctuates it is backed by supply and demand and nothing less. The supply is provided by individuals who see a price difference where crypto-USD is worth MORE THAN paper-USD. This price difference must be sufficient to motivate them to give up the DIVIDENDS they are receiving on their BitShares (thecoin). BitShares + their dividends have value for the same reasons bitcoins have value. Thus new crypto-USD is created increasing the supply and driving the price back toward parity.
Crypto-USD is redeemed when the price of crypto-USD is LESS THAN paper-USD. In this case anyone who issued Crypto-USD can buy crypto-USD with paper-USD at a price below face value and then use crypto-USD to redeem their BitShares held as collateral and start receiving BitShare DIVIDENDS again. Thus there is profit to be made by redeeming shares and no need to 'trust' anything but the markets profit seeking initiative.
As a result there is never any IOU in this system. As all 'crypto-USD to BitShare' exchanges occur on the block chain and all issuance of crypto-USD occurs via a Bid transaction there will be a definite and changing ratio between crypto-USD and BitShares but a relative stable ratio between crypto-USD and paper-USD.
Point 1: You somehow think collateral makes your USD not need a gateway. Uh, No. There's really no nice way to say it but your thinking here is flawed. Essentially each individual is a mini-gateway, securing the genesis of your "crypto-USD". And BTW, nobody who really needs a loan can put up that kind of collateral... people put up cars and houses because they can simultaneously USE them. A loan is truly underwritten by FUTURE the earnings potential of the person who received the loan. Irrespective of your blue-sky scenarios, when black monday comes around, the people who received the $1 USD and essentially "created" the 1 crypto-USD have to make good on that and convert the crypto-USD back to USD. Or be sued to get it.
First of all, all crypto-USD is backed by dividend payments paid in BitShares. The source of the dividend payments on USDs comes from the BitShares used by the system to issue the crypto-USD in the first place. The source of BitShare dividends comes from half of the mining fees + rewards. Thus if BitShares have value like Bitcoin then what is backing the crypto-USD is the future DIVIDEND earnings on the Bitshares held as collateral. The ratio of dividends between crypto-USD and BitShare balances is proportional to the exchange rate.
Fundamentally, there IS no crypto-USD unless its the US government issuing it. There is only someone's individual promise to pay. And as we learned in the 2008 mortgage crisis it can be REALLY BAD to "bundle" these promises together under the assumption that they are equivalent!
I think that with the explanations above this statement is clearly 'wrong' as crypto-USD is not an IOU *issued* by anyone. It is not a promise any more than a bitcoin is a promise.
Ok, now that we've got that out of the way, lets structure the system.
Base:
cleaned up bitcoin codebase with a single "native" currency, let's call it "thecoin" (THC)
new transactions:
1. Coin-type genesis. A coin type is represented by a public key. URL and hash of a coin contract are included. The private key controls that coin type. Could require a nontrivial txn fee of THC to miners, not to just one miner but distributed across the next 1000 mined blocks or something to reduce coin type spam. However, just like there can be essentially an infinite # of bitcoin accounts, so with coin types. This is good because as I was saying above, you can't combine fiat promises together.
Yes I was thinking of something similar for defining a new coin-type. The problem is the network requires an exchange rate to be established before THC can be used to back the coin-type. So I figured that a new coin-type would be allowed once a certain THC value in open bids for that coin were published on the network. These bids would be backed by THC (until they were canceled). With a high enough value threshold there should be enough 'volume' to get a market started and thus the network would allow the creation of the new coin-type in response to the highest available bid and work its way down. Publishing all of these 'bids' and keeping them open would require transaction fees, time, and locking up of real value and therefore could not be spammed.
As a result there is no need for a new coin-type to be associated with any particular private key. To accumulate sufficient bids those placing the bids would have to know what it was they were bidding on and what it represented. For version 1.0 I would probably pre-define the set of national currencies + popular crypto-currencies + gold and silver. Only after the concept was well understood would I enable the feature to create arbitrary coin types (such as company stocks, oil, etc).
2. Coin genesis. Signed by the private key, this allows new currency to be minted. (THC txn fee)
3. Coin destruction. A transfer to the coin type's public key is essentially coin destruction because it gives control of the coin back to the issuer.
Coins are not issued nor are they IOUs. They are their own free-floating currencies which are issued in response to a bid on the market and thus are issued in proportion to the value relative to THC. Of couse this relative value is constantly changing. The block chain knows the sum total of all THC to OtherCoin issuance and thus knows how much of the THC dividends should be paid to OtherCoin balances and in what proportion. Thus the DIVIDEND rate as a PERCENT OF VALUE is the same across all currencies.
Therefore if THC were BTC and there was a bid to buy 125 Crypto-USD for 1 BTC then that bid could be satisfied by issuing 125 Crypto-USD backed by the DIVIDENDS paid on 1 BTC. Later BTC goes up in value and
there is another bid to buy 150 Crypto-USD for 1 BTC. In this case 150 Crypto-USD would be issued backed by just 1 BTC. Over time the all Crypto-USD currently issued will yield DIVIDENDS of value at about the average recent exchange rate. Any differences in the value of the DIVIDENDS in various crypto-currencies would be taken out via arbitrage as people trade between Crypto-USD and THC.
Now the purpose of issuing a Crypto-USD is because the buyer who is paying with paper-USD wants to avoid exchange rate risk. So he is issued a currency that pays DIVIDENDS of value proportional to the exchange rate. Market forces will work to keep this as close as possible. He knows he can then redeem the crypto-USD from the 'THC believers' at the same value regardless of exchange rate fluctuations because what he is really redeeming is a THC dividend bearing bond.
For some reason you feel that bids/asks should be encoded in the blockchain. There are huge issues with that, including blockchain bloat and matching speed. But there is no need. Bids and asks (actually they are ALL bids, just offering different currencies if you see what I mean) do not need to be remembered forever.
First of all a bid can be broadcast and matched before even getting into the blockchain. The only bids that would be in the block chain are 'outstanding bids'. Second, transactions can be pruned. Third, eventually they do get in the block chain as part of a transaction. Fourth, a bid with no transaction fee (or low fee) will be broadcast but not included in the chain until a matching transaction was made. Fifth, the block chain needs to know about bids / asks to establish the exchange rate for issuing currencies. That said, nothing stops out-of-chain exchanges from being setup like Mt. Gox for those who want to do HFT. Mt. Gox would be able to operate using this system without having to take deposits and therefore could even operate behind a TOR hidden service. Thus, let 3rd party dedicated services handle the high-frequency stuff and let the block-chain handle 'trustless' exchanges that might be slightly slower but still not that bad for most peoples purposes.
All of that said, another way to create a bid is as an INPUT to any standard output that allows it to be spent as part of a valid exchange provided the bid is signed by someone allowed to spend the output. Therefore the bid could be broadcast without actually creating a new output type. Spam on the bids could be controlled by proof-of-work applied to the bid. Bids can now be broadcast/cached and only people accepting the bids would include them as part of a transaction.
Once again, thank you for your response, you clearly took time to think about things and respond thoughtfully.