Three companies have now filed notices with the SEC to operate tokenized US equity platforms without registering as exchanges. Thirty days after filing, they can switch on. The operative eligibility standard — 'public and permissionless' — has never been published in full. That is the anomaly worth attention: a self-executing regulatory clock bolted to a phrase nobody has defined in writing, inside a legal instrument whose form has not been disclosed at all.
No exemptive order, no no-action letter, no rulemaking. The source material does not say which. That single omission determines everything downstream, because a staff no-action letter is reversible at the whim of the next chair, while a rulemaking survives administrations. When I audited 200-plus ICO whitepapers in late 2017, the tell was always the same: projects that described governance in adjectives rather than addresses were the ones routing presale funds to mixers. Same pattern here. A standard expressed as a principle instead of a definition is not a standard. It is a filing form.
Context first, because the mechanism is more interesting than the headline.
The exemption extends the ATS notice-and-operate logic into tokenized equity settlement: file, wait thirty days, operate. Three applicants — TSV LLC, OKXICE, and Kephas Corp. — plan to run on the Canton Network or an Ethereum Layer 2. SEC staff have stated they are evaluating feedback and may issue further guidance, while explicitly declining to endorse any particular network. That last sentence is the most honest thing in the entire story, and almost nobody priced it.
The dispute itself is a two-sided pincer. The Solana Policy Institute argues the test should examine who actually controls transaction validation, censorship, and rule modification. Hedera counters that permissioned validator nodes should be permitted to participate — an argument with real institutional precedent, since DTCC, Fedwire, and SWIFT are all permissioned systems. SIFMA, for its part, wants further clarification, which in trade-association dialect means: slow down, we have members whose intermediation role you are about to route around.
Core: the standard is not binary, and that is the whole game.
'Public and permissionless' collapses four distinct properties into one phrase. Pull them apart and the argument resolves differently at every layer.
First, access rights — can anyone submit a transaction? Canton requires membership admission. Hedera, Canton, and most L2s gate differently. Second, validation rights — can anyone become a block producer? Hedera says no, by council permission. Solana says yes, with a hardware threshold that quietly functions as a filter. Third, upgrade and rule-change authority — who can rewrite state? Most Ethereum L2s answer with a 3-to-9-key multisig on an upgradeable contract. Fourth, exit rights — can a user unilaterally withdraw assets? L2s and Solana score well; Canton weakly.
Run that matrix and the positioning becomes transparent. Solana's framing lands precisely on dimensions two and three, which happen to be exactly where Hedera fails on validation and where most L2s fail on upgrade authority. This is not a technical debate. It is a regulatory positioning strike dressed in engineering vocabulary.
And it is, to be fair, the more rigorous test. Piercing form to ask who can censor and who can rewrite the ledger is materially better than counting nodes. But rigorous tests cut both ways. If 'permissionless' gets operationalized through client diversity, validator geographic distribution, and hardware thresholds, Solana's own validator concentration enters the frame. The strict definition is a double-edged instrument, and the people wielding it should be aware of which edge is sharper.
Hedera's position is technically weak and institutionally defensible — regulators prefer accountable operators over anonymous ones, and in a securities context 'permissionless' may genuinely be an irrelevant variable rather than a disqualifying one. Canton's inclusion is stranger still: a permissioned, sub-transaction-privacy institutional network claiming public permissionless status is a claim that deserves scrutiny it is not receiving. If Canton clears, the standard is functionally soft and the entire dispute is theater.
Here is the part I keep returning to. Because the thirty-day clock runs whether or not guidance arrives, an absent written standard converts into applicant self-certification. The ambiguity is not a bug in the mechanism. It is the mechanism.
Contrarian: correlation is a map, but causation is the terrain.
The reflexive read is SEC softens, therefore RWA repricing, therefore SOL and HBAR and ETH catch a bid. Do the arithmetic instead of the narrative. A multi-million-dollar tokenized equity settlement burns a few dollars of gas. Even at institutional scale, the flow is block settlement between licensed counterparties, not retail order flow. The revenue transmission to base-layer tokens is negligible; what transmits is narrative.
Follow the value capture and it lands somewhere else entirely: the licensed platform operators, the custodians, and the transfer agents. Chains in this architecture are interchangeable infrastructure commodities with weak bargaining power — which is precisely why every chain is fighting so hard over the definition. Being excluded means permanently losing a high-value flow class, not a marginal fee stream.
Second blind spot: the Ethereum L2 camp is silent. Two of the three applicants sit on L2 rails, yet their eligibility is being defined by a competitor, in public, without rebuttal. Silence in a definitional proceeding is not neutrality. It is an unpriced policy tail risk sitting inside L2 ecosystem assets.
Third: SIFMA's entry is the underrated signal. Incumbent intermediaries do not ask for clarity when they are winning; they ask for clarity when they intend to write the rule themselves.
Takeaway.
Watch the legal vehicle before you watch anything else — a no-action letter and a rulemaking are not the same asset. Watch day thirty-one: whether any of the three actually operates, or stalls inside an uncertainty premium of their own making. And watch L2 sequencer-decentralization announcements over the next sixty days, because if the strict test gains traction, that is where the forced response shows up first. If no written guidance appears and self-certification becomes the de facto regime, then the phrase 'public and permissionless' was never a standard. It was an intake form — and the industry spent a quarter lobbying over a blank line.