Firma FIRMA LABS · THE RAIN LEDGER
FE-H2O-ARCH-001 · REV B · CONFIDENTIAL MATURITY · CONCEPT FAMILY · WATER

THE RAIN
LEDGER.

A metered, verifiable rainwater network across the Hill Country. The hardware on the tank, the proof layer above it, the credit it issues, and a permanent trust that returns the value to the people who catch the water.

The blockchain is not the product. The meter is the product.
The ledger just makes the meter's word worth money.
Prepared by
FIRMA LABS · BUDA, TX
Field partner
BEE CAVE BUILDERS
First testnet
DRIPPING SPRINGS · BUDA
SOUTH AUSTIN
Elemint
e(H2O)
Status
ARCHITECTURE · UNBUILT
01/12THE STACKL1–L8

The stack, one sentence a layer.

Eight layers between a roof and a check. Each one is a separate failure mode, so each one is specified separately.

How to read the numbers on this page

Every quantity carries a confidence marker. A number without one is incomplete copy, not a claim.

Documented in public record — statute, ordinance, published dataset, court docketVERIFIED
Our estimate from a stated formula or comparable — not yet measured in the fieldPROPOSED
A design goal the system is being built to hitTARGET
IMAGE SLOT · 16:9assets/img/hero-catchment.jpg
Metal standing-seam roof + cistern
museum-lit, no CGI drama
FIG ACATCHMENT · HILL COUNTRY
02/12THE NODEL1

What sits on the tank.

One enclosure, mounted at the cistern. The tank and the install are the real cost, not the electronics. Each node is minted to the registry as a deed to a catchment; roof area is verified once at install and caps issuance forever.

SENSE

Level, dual flow, rain

Pressure level sensor. Inline flow meters on both the roof inlet and the outlet. Tipping-bucket gauge for on-site rainfall. Dual flow is what lets the conservation check close.

SIGN

A key that cannot leave

ATECC608-class secure element. Every reading signed on-device with a monotonic counter and a device-unique key burned at manufacture. This is the entire trust root.

LINK

Coverage already solved

LoRaWAN over Helium's existing IoT network, already covering Central Texas, for pennies in Data Credits. Do not build a radio network. That lesson cost someone else hundreds of millions.

GUARD

Assume attack

Enclosure switch, accelerometer, sealed sensor run. Any tamper event marks readings unattested until re-inspection. The meter will be attacked, because it will be worth attacking.

IMAGE SLOT · 16:9assets/img/node-enclosure.jpg
Node enclosure at the cistern
orthographic or three-quarter, hardware-real
FIG BNODE · UNIT RL-DRS-001

Unit specification

Bill of materials, per node< $400 TARGET
Installed system, 10,000 gal residential$8K–$25K VERIFIED
Yield constant, per sq ft per inch0.623 gal VERIFIED
Runoff coefficient, smooth metal roof0.90–0.95 VERIFIED
First-flush diverted, per 1,000 sq ft / 1 in10 gal VERIFIED
Backhaul cost per node per yearCents PROPOSED
Service interval, sensor calibration12 mo TARGET
Deployment stateNOT YET FIELDED

The catchment train the meter sits on is standard practice, not invention: screened gutters sized for local peak intensity, a first-flush diverter, a calming inlet that does not stir the sediment layer, a floating extraction filter on the outlet, and an overflow sized at least as large as the combined inlet.

03/12PROOF OF RAINL2

The only part that is genuinely hard.

The attack that matters is a hose in a tank. If a node can claim gallons that never fell, the credit is worthless. Four independent checks, all of which must pass — and credits issue only on beneficial use at the outlet, which kills tank-farming by construction.

CHECK 01
CONSERVATION
Δlevel == in − out − evap ± ε
CHECK 02
CEILING
inflow ≤ roof × rain × 0.62
CHECK 03
WEATHER
gauge ≈ NOAA MRMS radar
CHECK 04
NEIGHBORS
correlates with rain-cell peers
EPOCH ATTESTATION · STORM CELL 2.0 IN · RADAR CONFIRMED

Live model, mirrored from sim/rainsim.py. Honest nodes issue; the hose fails WEATHER and NEIGHBORS at once; the tank-farmer passes the physics and still earns nothing, because credits require beneficial use at the outlet.

STAKE

The installer posts the bond

Not the homeowner. The installer pulls the permits, signs the workmanship, and carries repeat-business risk in a small market. Verified fraud burns the bond.

AUDIT

Randomized physical inspection

2–3% of nodes per quarter, drawn at random, inspected in person against the signed record.

FIRMWARE

Signed, remotely attested

Unsigned or unattested firmware marks every downstream reading unattested until re-inspection.

04/12VERIFICATION MOATL2+

Stop selling gallons the meter saw.

Four checks are a floor, not a moat. Two upgrades change what the company is, not just what the device does: re-found the credit on a standard corporations already audit against, and fuse signals from physics domains a fraudster would have to fool all at once.

Registry-grade, not proprietary

Re-found the credit on WRI Volumetric Water Benefit Accounting 2.0 — the standard corporate water-stewardship teams already trust. It quantifies beneficial hydrology change in cubic meters with a documented six-step baseline-and-additionality method, and it explicitly prices a cubic meter higher in a stressed basin. The Trinity–Edwards region is exactly such a basin, so a Dripping Springs credit is worth more under VWBA than a generic one.

The effect: buyers become corporations with published water-positive targets instead of individuals, and the meter becomes the automated, tamper-evident data layer under a recognized accounting standard. That is a far bigger moat than a proprietary credit.

  • A written, versioned methodology with baseline and additionality.
  • Tiered evidence with confidence weighting.
  • Independent third-party audit of a sample each period.
  • A serialized, non-double-counted registry.
  • Buffer and reversal accounting.

Six independent signals

NOAA MRMS radar QPE — 1 km grid, 2 min. Build first. Free, national, independent of the device.VERIFIED
Commercial microwave link — cell backhaul attenuates with rain along the path. Physically independent of radar. Almost no water-credit scheme uses it.PROPOSED
Soil moisture — a $20–40 capacitive probe. Real rain moves it; a hose does not.PROPOSED
Acoustic rain sensing — no moving parts to clog or spoof, anchored by a few reference disdrometers.PROPOSED
LoRa mesh consensus — a node claiming capture inside a dry MRMS pixel is flagged by its peers.TARGET
Satellite provenance audit — 3 m imagery confirms the tank physically exists. Existence check, not a capture meter.PROPOSED

A fraudster now has to simultaneously fool four different physics domains, a bonded installer, a permit record, and a registry reconciliation.

SECOND REVENUE LINE

Pre-storm drawdown earns a detention credit

Ingest the forecast, compute expected inflow, release exactly enough now to capture it, and log the released volume as flood-peak reduction. The same water and the same meter earn under two distinct benefit types — supply and detention. Proven in existing stormwater practice, so it is the fastest of the three upgrades to ship. Guard: a hard firmware floor reserve, so a drought cannot drain a supply tank.

DISCIPLINE

What we do not claim

The firmware, the registry integration, and the trust instrument are specified and not yet fielded. There are no signed credit buyers at volume, no adopted ordinance, and no third-party validation of the measurement method. This phase exists to convert those from thesis into evidence.

05/12LEDGER · CREDITL3–L4

A REC, not a coin.

One credit equals 1,000 verified gallons, beneficially used. The mental model is a Renewable Energy Certificate: issued on measured production, sold once, permanently retired on claim. Retirement is the difference between an instrument and a casino.

ObjectOn chainWhy
Node registryYES · NFT PER NODEA deed to a catchment. Holds the roof-area cap that limits issuance forever.
Epoch Merkle rootYESOne hash anchors every signed reading in the epoch.
Issuance + retirementYESDouble-counting prohibited by construction. Vintage year stamped at mint.
Raw telemetryNOObject storage, hash-anchored. Sensor data on a blockchain is the classic expensive mistake.
SettlementDOLLARSNothing here requires a volatile token, so nothing gets one.

e(H2O)

In the Firma Elemint architecture this is e(H2O): an on-chain fingerprint of verified water reality, sibling to e(photon), which mints per verified kWh. Same doctrine — audited physical production, minted as proof, never marketed as an investment.

Chain: firmamint or Solana. Do not build a chain. Helium itself migrated rather than keep maintaining one.

Two credit types

Capture credit — verified gallons, beneficially used1,000 gal PROPOSED
Detention credit — forecast-triggered release, flood-peak reductionPer event PROPOSED
RetirementPERMANENT
Resale after claimPROHIBITED
06/12DEMANDL5

Who actually writes the check.

A credit paid for by its own issuance is a subsidy with extra steps. Real buyers, ranked by how close the money already is. The first row is the anchor tenant: a legal obligation with a price attached, 25 miles from the catchment.

BuyerWhy they buyWhat has to change
Large Austin developments250,000+ sq ft projects must install onsite reuse since April 2024 VERIFIED. Austin Water pays up to $1.5M per project in incentives VERIFIED.An offsite-offset pathway in Code Ch. 15-13. Cheaper per gallon than a basement cistern plant.
Groundwater districtsHays Trinity GCD has held roughly 40% curtailment since 2022–23 with only blunt tools, and is in litigation over pumping above allocation VERIFIED.A district rule recognizing credits as offsets. A board vote, not legislation.
Utilities and WSCs"Negagallons" at $2/kgal beat new supply at any price PROPOSED.A demand-reduction procurement line.
Corporate water-positiveData centers hold public replenishment commitments VERIFIED. Metered beats modeled.Nothing. This demand already buys lower-quality attributes elsewhere.
07/12ECONOMICSL8

The number that decides whether this is real.

Annual value per 10,000 sq ft catchment — roughly 174,000 gal/yr PROPOSED — and the payback on a $25K install as each layer stacks. The honest conclusion: residential retrofits do not pencil today. Large roofs do.

Avoided water only
$1,400/yr18 yr payback
+ §11.32 tax exemption
$2,200/yr11 yr payback
+ credits @ $3/kgal
$2,700/yr9 yr payback
+ credits @ $8/kgal
$3,600/yr7 yr payback

All four rows are PROPOSED — modelled from the standard yield formula and current water rates, not measured on a fielded node.

SCALE

One warehouse, 2.7 acre-feet

A single 50,000 sq ft roof yields about 2.7 acre-feet a year from one install PROPOSED. Bee Cave Builders' roughly 20 active projects are the pilot fleet, already standing.

YIELD FORMULA

gal = area × inches × 0.623 × C

0.623 gallons per square foot per inch of rain is the volumetric constant VERIFIED. C is the runoff coefficient: 0.75–0.95, and 0.90–0.95 for smooth metal.

THE HONEST PART

Houses don't pencil. Yet.

A $25K residential retrofit does not clear its own payback at today's credit prices. The trust's tanks-not-checks dividend is the mechanism that fixes that, not a better spreadsheet.

08/12DISTRIBUTIONL7

The large roofs are churches and warehouses.

Do 2,000 homes catch more rain than 20 warehouses? Yes — about 87M gallons against 17M PROPOSED. Gross rainfall favors the homes. What the warehouses win is cost per verified gallon.

Axis2,000 homes20 warehouses
Sales conversations2,00020
Installs and inspections2,00020
Audit surface2,000 NODES20 NODES
Install cost per sq ft of catchmentHigh — retrofitA fraction — tank before slab
Time to a provable numberYearsOne quarter

The strategy is not "warehouses instead of homes." It is warehouses first, so the trust gets funded, so the Commons dividend can buy homes their tanks later. The fund before the fleet.

Why churches are the unlock

  • Already tax-exempt. The §11.32 fight does not exist for them. No exposed tax roll — the opposite of a school district.
  • Big roofs, low use. A campus runs 15,000–40,000 sq ft of catchment; 15,000 sq ft yields about 260,000 gal/yr PROPOSED.
  • Beneficial use on site. Grounds, gardens, youth-camp acreage. The outlet meter has real draw.
  • The mission writes itself. The trust's tanks-not-checks dividend is a ministry, not a marketing line.
  • The congregation is the distribution. Every campus is a room of landowners hearing it from a voice they already trust.
IMAGE SLOT · 16:9assets/img/church-campus.jpg
Church campus or warehouse roof
aerial or elevation, catchment legible
FIG CLARGE-ROOF CATCHMENT
OFFER · 01

Free roof survey

Satellite plus permit records. The number is knowable before anyone commits to anything.

OFFER · 02

Zero capex

Node and tank under a lease model — the trust or a lessor owns the hardware, the church hosts it.

OFFER · 03

The campus earns the dividend

Paid on verified beneficial use. Real money into the general fund, from a roof that was already there.

09/12THE TRUSTL6

The Hill Country Water Commons.

An Alaska Permanent Fund for rain. 25% of every credit sale goes into a corpus that can never be spent, only invested — written into the trust instrument, not left to an annual vote. Alaska's fund holds $80B+ and has paid a dividend every year since 1982 VERIFIED. Copy the structure, not the vibe.

OUT · A

The node dividend

Paid to node holders proportional to verified gallons beneficially used. This is what makes people want a tank.

OUT · B

Paid in tanks, not checks

Early years: the residents' share funds fully subsidized installs for households that could never afford a $25,000 system. A check spends once. A tank yields for thirty years.

GOVERNANCE

One node, one vote, capped

A board seating the county, the groundwater district, landowners, and node holders — with per-holder caps so no large-roof operator captures the commons.

CORPUS
25% of every sale, permanently
SPENDABLE
Investment earnings only
PRINCIPAL
Never, by instrument
CAPTURE RISK
Per-holder vote caps
10/12DEPLOYMENTTESTNETS

Texas first. Colorado to prove it travels.

TESTNET 1 · CENTRAL TEXAS

Dripping Springs · Buda · South Austin

  • Dripping Springs — the supply side. Hill Country roofs, the GCD moratorium as regulatory pressure, Matt working city and county officials.
  • Buda — home base. Firma Labs, the EDC relationships, the downtown owner-investor, HIVE's technologist cohort.
  • South Austin — the demand anchor. The 250,000+ sq ft reuse mandate, 25 miles from the catchment.
TESTNET 2 · COLORADO

Front Range · the portability proof

  • The adversarial jurisdiction: prior appropriation, where rain barrels were effectively illegal until 2009 and residential capture is still capped VERIFIED.
  • Commercial and agricultural roofs with a municipal or special-district partner. Same node, same checks, different legal wrapper.
  • Every divergence from the Texas rules documented as the portability playbook.
  • A credit that survives Colorado is legible everywhere.
0–90 D
LOI + 3 instrumented roofs
3–9 MO
Attestation before issuance
6–12 MO
The ordinances
9–18 MO
Registry + trust
18 MO+
Fleet, then residential
THE GATE

One signed LOI from a non-crypto buyer, priced in dollars per thousand gallons, plus three instrumented roofs, inside 90 days. No LOI, no network.

11/12PARTNERSFIELD

The installer is the integrity anchor.

A rainwater credit is only worth what its measurement is worth, and the weakest point in any environmental credit is the party who benefits from overstating the number. The installer is the one actor in the chain who cannot afford to lie.

Matt Spannaus / Bee Cave Builders posts the bond, pulls the permits, and signs the workmanship. If a tank underperforms or a meter reads high, the callback lands on his crew and his warranty — in a small market where reputation is the whole business. We are not asking him to be honest as a favor. His economics already punish an inflated number harder than any auditor could.

He is not a vendor recruited to a pitch. He reached the water problem on his own and called metered rainwater capture one of the top solutions to the Texas water crisis before we wrote a spec.

Active projects, Dripping Springs / Bee Cave corridor~20 VERIFIED
Pilot fleet — warehouse roofs available for instrumentationFLEET STANDING
Dripping Springs 10,000-gal capture mandateIN ADVOCACY TARGET
Bonded, licensed, locally-trusted install crewIN PLACE
IMAGE SLOT · 16:9assets/img/field-partner.jpg
Bee Cave Builders site or crew
working photograph, not a headshot
FIG DFIELD PARTNER · BEE CAVE BUILDERS
WHY NOW · 01

The Hill Country is building homes faster than the Trinity Aquifer can legally supply them.

WHY NOW · 02

Austin's onsite reuse ordinance is enacted and being permitted 25 miles away.

WHY NOW · 03

Data-center water demand is landing in Texas with public replenishment commitments attached.

WHY NOW · 04

RECs proved the instrument. Voluntary carbon proved what bad measurement costs.

Why it is inevitable. Texas will keep building where the water is already curtailed, because the growth is not optional and the aquifer will not stretch. Somebody is going to require capture, and Austin has already shown the region how to write that rule. Once capture is required it will be metered, because unmetered mandates are unenforceable. Once it is metered, the captured volume is a countable, tradeable asset, and someone will build the ledger that counts it. The only open questions are who builds it, whether it is honest, and whether the value returns to the watershed or leaks out to middlemen.

12/12RISKL9

What could kill it.

01 · CIRCULARITY

If credits are bought mainly by token holders, this is a Ponzi with a rain gauge. Test: one non-crypto buyer signs an LOI in dollars per thousand gallons before a single node ships.

02 · METER FRAUD

One viral hose video ends the program politically. Over-invest in the attestation stack and the audit program from day one. It is cheaper than the recovery.

03 · SECURITIES

SEC v. Nova Labs (April 2025) dismissed with prejudice the claim that Helium's hardware and token distribution were unregistered securities VERIFIED. Favorable, fact-specific, not a license. Market the device as equipment, never as an investment.

04 · WATER LAW

Diffused surface water belongs to the landowner while it stays on the land. The moment it reaches a watercourse it becomes state water. Sell the credit, not the water.

05 · POTABLE CREEP

Non-potable only for the first two years: irrigation, livestock, cooling, flushing, construction.

THE ROOM RULE

Pitched as a crypto project in Hays County, this dies. Pitched as private property rights, local control, metered accountability, and no new taxes, it is one of the more conservative ideas in Texas water. Say the meter line in every room.