The Wrapper Fallacy, Part II: What Do You Actually Own?

01 — The Question Behind the Question

The first part of this series examined a structural fallacy: the belief that placing an illiquid asset inside a sophisticated wrapper — a token, a securitisation vehicle, a listed certificate — changes what the asset is. It does not. The wrapper inherits the liquidity of the underlying, not the other way around.

But the liquidity question, it turns out, is not even the prior question. Before asking whether you can sell your position, you must ask what your position actually is: what legal claim the wrapper confers, what rights it gives you in the underlying asset, and what those rights are worth in the scenarios that matter — stress, default, and insolvency. The economic exposure described in a term sheet and the legal entitlement conferred by the instrument are frequently not the same thing. The gap between them is where structural failures originate.

This divergence takes several forms. The marketed economic position may reference an asset that the instrument does not pledge. The legal rights may be mediated through a counterparty whose failure extinguishes them. The enforcement mechanism may depend on a jurisdiction that has never been tested for this instrument type under stress. In each case, the investor believes they hold one thing and discovers, at the worst possible moment, that they hold something narrower, more conditional, and more dependent on third-party performance than they assumed.

Liquidity drift shows up in a price. Legal drift stays invisible — until an administrator contests the ring-fencing, a counterparty becomes insolvent, or a court is asked to determine what the instrument actually represents. By then, the investor is not negotiating terms. They are litigating position.

02 — A Taxonomy of Claims: Nine Ways to Hold an Asset

Investment structures that reference underlying assets vary enormously in the legal proximity they provide between the investor and what they believe they own. The following taxonomy runs from maximum proximity to maximum distance. Each step down the chain adds a counterparty, introduces a new failure point, and typically reduces control — while the marketed economic exposure often implies equivalence throughout. Understanding where on this spectrum any given instrument sits is the precondition for understanding what you actually hold.

1. Direct ownership

Title vests in the investor. This is the only position in the taxonomy where the investor's rights are not mediated by any intervening counterparty. They can inspect, encumber, lease, develop, and dispose of the asset without the consent of any third party. The friction — registration requirements, transfer taxes, jurisdictional formalities — is the price of this directness. The costs are visible and borne upfront. The rights are clear and durable. In the insolvency of any associated party, the directly owned asset is simply not part of the estate.

2. Tokenised direct ownership

The aspiration: title represented on-chain under a legal framework that recognises the token itself as the legal object carrying the right. If achieved, this is economically equivalent to position one — with the administrative efficiency of blockchain transfer added. The question is whether the jurisdiction in which the asset sits recognises the token as title, and whether the institution responsible for connecting the ledger to the physical asset is adequately identified, capitalised, and liable. Currently achievable in limited jurisdictions only. Examined in sections 05 and 06.

3. Trust or beneficial ownership

Legal title vests in a trustee; the economic interest belongs to the beneficiary. The investor's claim is equitable, not legal. It does not appear on the face of the title register. It depends entirely on the trustee's solvency, conduct, and willingness to act in the beneficiary's interest — enforced through trust law and, where a breach occurs, through equity. In common law jurisdictions the trust is a well-understood and robustly protected structure. In civil law jurisdictions, which do not natively recognise the trust concept, recognition depends on international private law rules that vary by country. The TVTG codifies a tokenised version through the TT Protector, who holds tokens in their own name for the benefit of a third party — but the beneficial owner remains invisible to the register and wholly dependent on the Protector's performance.

4. Equity in an SPV

The SPV holds the asset; the investor holds shares or membership interests in the SPV. The investor's economic exposure to the asset is mediated by the SPV's full corporate structure, its constitution, and its complete liability stack — including any debts, encumbrances, or obligations that rank ahead of equity. In a liquidation, the equity holder recovers only what remains after all creditors of the SPV have been satisfied. The asset may be worth substantially more than the equity recovered if the SPV carries leverage, management fees, or related-party obligations that the investor did not model at entry. Governance rights depend on the shareholder agreement; in minority positions they are often limited in ways that matter precisely when conditions deteriorate.

5. Participation rights (Genussrechte)

A contractual entitlement to a share of profits, revenues, or liquidation proceeds, without equity or voting rights. Common in German-speaking jurisdictions — particularly in real estate, infrastructure, and Mittelstand financing — participation rights occupy an unusual position in the capital structure whose ranking is determined entirely by the specific instrument's terms. Some participation rights rank senior to equity in liquidation; others are explicitly subordinated. Some carry fixed distributions; others are purely profit-contingent. The investor holds a contractual claim, not a property right. In insolvency, the ranking of that claim depends on language that varies significantly between issuers and is frequently not read carefully at the point of investment.

6. Collateralised debt

The investor holds a creditor claim secured against the asset. The rights are creditor rights, not ownership rights: the investor does not own the asset, they have a priority claim on its proceeds in the event of enforcement. That claim is only as good as the legal perfection of the security interest, the segregation of the collateral from the issuer's general estate, and the enforceability of the security in the jurisdiction where the asset is located. Imperfect collateral — pledged but not registered, registered but subject to prior ranking claims, or pledged in a jurisdiction whose enforcement process is slow and uncertain — can be worth a fraction of its face value when tested. The haircut is not only a liquidity phenomenon. It is a legal one.

7. Depository receipts

A depositary institution holds the underlying asset and issues certificates representing it. The investor owns the receipt, not the asset. The receipt entitles the holder to certain rights — economic exposure, sometimes voting rights by proxy, sometimes physical delivery — but those entitlements are defined entirely by the depositary agreement. If the depositary fails, the investor is a creditor of the depositary for the value of the underlying, not a direct owner of it. Xetra Gold illustrates the nuance precisely: the certificate entitles the holder to physical gold delivery on demand, but that entitlement is contractual against Deutsche Börse Commodities GmbH, not proprietary in the gold itself. Whether the gold has been segregated from the depositary's own assets is a structural and legal question — one that only matters when the question is being asked under the worst possible conditions.

8. Unsecured debt or referenced certificate

The investor holds a contractual promise. The underlying asset may be referenced — used as the basis for calculating returns or described as backing — but is not legally pledged against the instrument. In the issuer's insolvency, the investor joins the general creditor queue and recovers whatever the estate can provide, in whatever priority the insolvency regime assigns to unsecured claims. The Lehman Brothers structured note case remains the definitive illustration. Investors in Lehman-issued certificates linked to baskets of assets assumed they held, in some sense, an interest in those assets. They did not. The notes were obligations of Lehman Brothers Holdings Inc. When Lehman filed for Chapter 11, the noteholders were unsecured creditors of the issuer. The referenced assets were held elsewhere and played no role in the recovery. The wrapper had eliminated not just liquidity but any meaningful connection to the underlying.

9. IOU

A bare bilateral obligation: an acknowledgement of debt or obligation with minimal or no standardised documentation, no prospectus, no regulatory framework, and enforcement entirely dependent on counterparty solvency and willingness to perform. In insolvency the IOU holder is a general unsecured creditor, often with weaker evidentiary standing than a formally documented instrument. This is not merely a theoretical category at the edge of the spectrum. Strip away the structuring from many instruments marketed as sophisticated financial products — certain crypto lending arrangements, informal private credit facilities, undocumented co-investment agreements — and what remains, economically if not legally, is an undocumented promise by a counterparty of uncertain creditworthiness to deliver value tied to an asset the investor cannot inspect, verify, or reach. The sophistication of the surrounding infrastructure does not change the legal nature of the underlying claim.

The marketed economic exposure and the legal entitlement are not the same thing. Most structural failures begin in the gap between them — and that gap is larger, and reveals itself later, than most investors assume.

Each structure responds differently to the same stress event. A direct owner can sell, encumber, or restructure without third-party consent. A beneficiary under a trust can enforce in equity if the trustee breaches. An equity holder in an SPV recovers only after creditors. An unsecured noteholder queues behind everyone and hopes the estate is adequate. The marketed economic exposure to the underlying asset may be identical across all these positions. The legal exposure in distress is not — and in a stress scenario, only the legal exposure determines what the investor actually receives.

03 — The SPV Layer: Efficiency vs. Opacity

Special purpose vehicles are legitimate and widely used tools. They perform genuine functions: isolating asset risk from the sponsor's balance sheet, enabling tax-efficient structuring, pooling assets across investors, and creating bankruptcy remoteness between the originator and the investment. When used honestly, an SPV makes the investor's position clearer, not more obscure.

The problem arises when the SPV layer is used — intentionally or not — to create distance between the investor's apparent economic position and their actual legal entitlement. Several mechanisms produce this outcome. Fee leakage through inter-company service agreements reduces the asset's effective return without appearing in the headline economics. Cross-collateralisation between related SPVs means that a distress event in one vehicle can affect another that the investor believed was unconnected. Inter-entity loans — where the SPV has borrowed from an affiliate of the sponsor — mean that a receiver may find an unsecured creditor of the SPV ranking ahead of the investor in the waterfall.

The Lehman Brothers structured note case is the starkest illustration. Investors in Lehman-issued certificates linked to baskets of assets assumed they held, in some sense, an interest in those assets. They did not. The notes were liabilities of Lehman Brothers Holdings Inc. The referenced assets were irrelevant. When Lehman filed for Chapter 11, the noteholders became unsecured creditors of the issuer and recovered cents on the dollar over years of bankruptcy proceedings. The wrapper had not merely failed to add liquidity. It had, by putting the investor's claim one legal step away from the asset, eliminated any meaningful recovery.

Bankruptcy remoteness is a legal opinion, not a guarantee. The SPV is only as remote from its sponsor as the courts in the relevant jurisdiction are willing to enforce it.

The critical distinction is not between SPVs and direct ownership. It is between an SPV whose terms are transparent, whose liabilities are disclosed, and whose separation from the sponsor is genuinely enforceable — and one where any of those conditions is missing. Investors who cannot answer basic questions about the SPV's full liability stack, its related-party agreements, and the jurisdictional enforceability of its bankruptcy remoteness provisions should treat the gap as a risk, not an administrative detail.

04 — Collateralised vs. Uncollateralised: The Critical Distinction

The word "secured" does significant marketing work in the structured finance universe. An instrument described as asset-backed, collateralised, or secured implies that the investor's claim is anchored to something real — that in the event of default, there is something to reach. Whether that is true depends on four conditions, all of which must be satisfied simultaneously, and each of which can fail independently.

The first is legal perfection: the security interest must have been created validly under the law of the jurisdiction governing the asset and registered or filed where required. An unperfected security interest is, in most jurisdictions, worthless against third parties. The second is segregation: the collateral must be identifiable and legally separated from the issuer's general estate. Collateral that has been commingled, rehypothecated, or pledged to multiple parties simultaneously does not provide the protection it appears to. The third is cross-border enforceability: where the asset, the issuer, and the investor are in different jurisdictions, enforcement requires legal process in each — and the outcome of that process cannot be assumed from the terms of the instrument. The fourth is collateral maintenance: the collateral must remain adequate throughout the holding period, which requires either a static asset or a dynamic mechanism for monitoring and topping up.

Imperfect collateral — pledged but not segregated, segregated but not perfected, perfected but not enforceable across the relevant borders — may be worth substantially less than it appears. The haircut in a stressed sale is not merely a market phenomenon reflecting illiquidity. It is frequently a legal phenomenon reflecting uncertainty about whether the collateral can actually be reached, and in what priority, by the claimant asserting it.

Rehypothecation and the disappearing collateral

Rehypothecation — the reuse of pledged collateral by the party holding it — can create a chain in which the same asset simultaneously secures multiple obligations. Under English law, prime brokers routinely rehypothecate client assets under standard terms. In MF Global's 2011 collapse, client assets that had been rehypothecated and mixed with house assets took years to segregate and return, with some clients receiving significantly less than the face value of their claims. The collateral existed. It was simply not where the investors expected to find it.

The practical implication is straightforward: the label "secured" or "collateralised" is the beginning of the due diligence question, not the end of it. What matters is whether the security interest is perfected, the collateral is segregated, and enforcement has been tested — or at minimum, credibly opined upon by qualified counsel in each relevant jurisdiction.

05 — Tokenisation and the Direct Ownership Promise

The most ambitious claim in the tokenisation literature is not that tokens improve the administrative efficiency of existing holding structures — though they may. It is that tokens can eliminate the holding structure altogether: that the token can be the title, not merely reference a claim to it. If realised, this would move tokenised assets from position eight or nine in the taxonomy above — referenced certificate, IOU — to position one: direct ownership, with the full legal rights that entails. The engineering proposition is coherent. The legal question is whether any jurisdiction has actually built the bridge between the ledger and enforceable property rights.

In most of the world, that bridge does not exist. American property law requires conveyances of real estate to be in writing, with deeds containing specific formal elements; bearer instruments for real property are prohibited; and blockchain records are not integrated with official land registries, meaning a court faced with a dispute would defer to the traditional deed, not the token. The position is similar across most of continental Europe, where property transfer requires notarial deed and land register entry for immovables, and physical possession for movables — neither of which is satisfied by a blockchain transfer alone.

Two jurisdictions have made serious attempts to close the gap.

Liechtenstein — TVTG (2020)

The Token and TT Service Providers Act introduced the Token Container Model: a legal framework in which a token is a container that can hold any right the law recognises, including rights in rem — real property rights, not merely contractual claims. Transferring the token transfers the right it contains. This is a civil law provision, not a contractual arrangement between parties; on-chain transfer is legally equivalent to transfer of the represented right. The classification of the right represented, not the token itself, determines the applicable legal regime — making the framework asset-class agnostic in principle.

Switzerland — DLT Act (2021)

Switzerland's Federal Act on the Adaptation of Federal Law to Developments in Distributed Ledger Technology, fully in force from August 2021, took a different approach: rather than creating an entirely new legal object, it amended ten existing federal statutes to accommodate ledger-based assets. Its central innovation is the Registerwertrecht — the ledger-based security — a new category of uncertificated security in the Swiss Code of Obligations. A right vested in a ledger-based security transfers via transfer of the token: the issuer and acquirer agree that the right can only be transferred and exercised via the electronic register, and the ledger entry has the same legal effects as a traditional certificated security.

The Swiss framework is powerful for financial securities — shares, bonds, receivables, memberships — where the underlying right is contractual. It does not solve the physical asset problem. The transfer of rights in rem over physical assets still requires transfer of physical possession for movables, or a notarial deed and land register entry for immovables. A token cannot substitute for these requirements under Swiss law; it can only represent the contractual rights that have been separately created by complying with them.

Other jurisdictions

Dubai has moved furthest in integrating tokenisation with official property infrastructure. The Dubai Land Department and the Virtual Assets Regulatory Authority have built a framework that connects token issuance directly to land registry records — meaning that a token transfer updates the official title record, not merely a parallel ledger. This is structurally different from most tokenisation initiatives, which operate alongside existing registries rather than within them. Transactions have completed under this framework, and the regulatory architecture — VARA's oversight of the token layer, DLD's authority over the title record — provides a dual-supervised structure that gives the framework meaningful institutional credibility. The open question, as with any new legal instrument, is how it performs in contested proceedings; that test has not yet arisen. Singapore's MAS has through Project Guardian built infrastructure for cross-border tokenised financial asset settlement, but the framework addresses financial instruments under the Securities and Futures Act, not direct property title. The UK has recognised cryptoassets as a third category of personal property alongside choses in possession and choses in action, providing important common law clarity, but has not legislated on the transfer of real property rights by token.

The honest summary is this: no jurisdiction has fully solved the problem for all asset classes. Liechtenstein comes closest for rights in rem over physical assets, through the Token Container Model and the physical validator function that supports it. Switzerland comes closest for financial securities. For immovable property in most of the world, the land registry problem — the requirement that title transfer be recorded in a state-maintained register — remains essentially unsolved. Until that problem is solved jurisdiction by jurisdiction, tokenised real estate is, in legal terms, one of positions three through eight in the taxonomy: a claim on a claim, mediated by an SPV, a trust, or a contractual arrangement, with the token as a convenient transfer mechanism rather than as the title itself.

06 — Connecting the Record to the Asset: Who Is Liable, and Under Which Law

Every legal system for the transfer of ownership has a mechanism for ensuring that the record of title corresponds to reality — that what is registered or documented as owned is actually possessed, identifiable, and unencumbered. This function predates tokenisation by centuries. What changes across asset classes is which institution performs it, under which legal framework that institution operates, and what liability attaches when the correspondence breaks down.

For immovable assets — land, buildings — the mechanism is the land register, supported in most civil law jurisdictions by mandatory notarial involvement in the transfer deed. In Germany, Austria, and Switzerland, a Notar attests to the identity and capacity of the parties and certifies the deed before it can be registered; the registration itself is constitutive of title transfer, not merely declaratory. In England and Wales, the Land Registry performs a similar function without the notary intermediary, but with equivalent liability for registration errors. Title insurance backstops residual historical defects. The governing law is the law of the jurisdiction where the property is located — lex situs — regardless of where the parties or the transaction documents are based. The liability chain is statutory and explicit.

For movable assets — art, diamonds, machinery, commodities in store — possession is the primary transfer mechanism in most civil law systems, but it is supported by specialist attestation chains that serve an equivalent function. A gemological certificate attests to the identity and condition of a stone. A warehouse receipt, governed by the law applicable to the warehouse agreement, attests to the existence and current condition of the stored commodity and makes the warehouseman liable for loss, damage, or misdelivery. A bill of lading — governed under maritime law or the applicable carriage convention — attests to the shipment of goods and constitutes a document of title whose holder can claim delivery. In each case, the attesting institution is liable for the accuracy of its attestation within the scope defined by the governing legal framework. Authenticity risk for unique assets — art, antiques, collectibles — sits with the specialist appraiser, not with any statutory register.

For intangible assets — patents, trademarks, copyrights, receivables, contractual rights — the attestation function is performed differently again. Registered intellectual property rights are constituted by the registration itself (patents, trademarks) or exist independently of it (copyright) but are evidenced through registration. Transfer is by assignment agreement, and the assignor warrants title to the right being assigned. Legal opinions on the existence, scope, and unencumbered state of the right serve as the primary due diligence instrument in significant transactions. The legal opinion provider is liable within the scope of the opinion — a carefully limited but explicitly stated liability. For receivables and contractual rights, the debtor acknowledgement or notice of assignment determines enforceability against the obligor; the law governing the underlying contract determines the validity of the assignment itself.

Across all three categories, the pattern is the same: a human institution is identified, operates under a defined legal framework, and bears defined liability for the accuracy of the connection between the legal record and the physical or legal reality it attests to. The liability is not unlimited — it is shaped by the governing legal framework — but it is explicit, and it is exercised by an institution with a track record that can be assessed.

Tokenisation does not eliminate this function. It asks a different institution to perform it, under a legal framework that most jurisdictions have not yet built. The TVTG physical validator is Liechtenstein's answer to the question: who performs this role for tokenised physical assets, and under what law are they liable?

The TVTG physical validator — definition and liability

Article 2(1)(p) of the TVTG defines the physical validator as a person who guarantees the contractual enforcement of rights in rem represented in tokens — specifically the synchronisation between what the ledger records and what the physical world contains. The role carries three layers of obligation: identification of the asset (serial number, certificates, provenance), the token generator, and all token holders; attestation of existence and state, ensuring the asset is deposited in a contractually regulated storage facility in the condition represented; and continuity, maintaining the connection throughout the holding period so that token transfers trigger corresponding real-world obligations.

Liability under Article 33(1)(f) is direct under Liechtenstein civil law: the validator is liable where the token holder cannot successfully assert their claim to the underlying asset due to the validator's conduct. Gross negligence liability cannot be contracted away under Article 35. The validator must be registered with the FMA, meet minimum capital requirements, and be domiciled or headquartered in Liechtenstein.

The physical validator is therefore the functional equivalent — under Liechtenstein private law — of the warehouseman under a warehouse receipt, or the registered custodian under a depository receipt framework. It performs an attestation function that the ledger cannot perform: verifying that the asset exists, is in the state described, and remains so throughout the holding period. The legal framework governing its liability is the TVTG — which means it applies with certainty only where the TVTG applies, namely to token transactions expressly subject to it and conducted within Liechtenstein's regulatory perimeter.

The residual gap is structurally important. The physical validator's liability attaches to its conduct, not to the mere absence of the asset. If the validator was itself deceived by a fraudulent warehousing counterparty — if the diamond it certified was replaced, or the painting it attested to was a forgery — the investor's recourse becomes a contractual dispute against the validator rather than a clean guarantee of recovery. The ledger records what it was told. The validator attests to what it verified. Neither guarantees the asset is actually there. The liability chain is clear; its adequacy depends on the financial standing of the validator and the depth of its own due diligence on the asset it is certifying.

The question is not whether the ledger is accurate. The ledger is always internally consistent. The question is whether what was entered into it corresponds to anything in the physical world — and that question is answered by a human institution operating under a defined legal framework, not by the technology.

07 — The Legal Mismatch Problem

Across the spectrum of holding structures, there is a persistent tendency for the economic position described in marketing to diverge from the legal rights conferred by the instrument. This divergence is not always deliberate. It arises from documentation that is written by legal counsel for one purpose and read by investors for another, from structuring that optimises for tax and accounting treatment rather than investor clarity, and from the consistent human tendency to assume that what has been agreed commercially has been delivered legally. It takes three forms.

Documentation mismatch is the most common. The term sheet, the pitch deck, and the investor presentation describe an economic position — exposure to the returns of an underlying asset, protection in the event of underperformance, priority in the recovery waterfall. The legal documents — the note indenture, the subscription agreement, the depositary terms — confer something narrower, more conditional, and more dependent on counterparty performance. Investors who read only the marketing and trust the documentation to match it are routinely surprised by the terms that govern their actual position.

Jurisdictional mismatch is structurally more dangerous. Where the asset, the issuer, the SPV, and the investor are in different legal systems, enforcement of any claim requires success in each jurisdiction separately. A security interest that is perfectly perfected under English law may not be recognised under German law if the asset is located in Germany. A token issued under the TVTG provides legal certainty within Liechtenstein's regulatory perimeter; outside it, the enforceability of the rights it represents depends on whether the courts of the relevant jurisdiction recognise the framework at all. The instrument's legal strength is determined by its weakest jurisdictional link, which is typically not the jurisdiction chosen for the governing law.

Insolvency mismatch is the most consequential. Structures that appear ring-fenced — assets held by an SPV, collateral segregated from the issuer's estate, tokens held by a custodian — may not survive the scrutiny of an insolvency administrator arguing substantive consolidation, challenging the validity of the security interest, or contesting the bankruptcy remoteness of the SPV. Bankruptcy remoteness is a legal opinion. Its value is the value of the opinion and the track record of the jurisdiction in which it is tested. It is not a guarantee.

08 — What Honest Structuring Requires

None of this is an argument against structured products, SPVs, tokenisation, or financial innovation. These tools perform genuine functions when used honestly. The problem is not the tools. It is the gap between what they can deliver and what they are marketed as delivering — and the consistent failure to close that gap through adequate disclosure.

An honest structure is one whose documentation allows an investor, reading it carefully, to understand exactly what they hold, what they would face if they needed to exit under adverse conditions, and what their recovery position would be if the counterparty or the asset itself fails. That is a high bar. Most structures do not clear it.

A practical minimum standard for any investment in a structured claim on an underlying asset might require clear answers to five questions:

• What legal right does this instrument confer, precisely? — Ownership, beneficial interest, secured creditor claim, unsecured creditor claim, or bare contractual promise. If the documentation does not answer this clearly, that is the answer.
• Is the underlying asset legally segregated, identifiable, and unencumbered? — Not as described in the marketing materials, but as verified by independent legal counsel in the jurisdiction where the asset is located.
• Who is liable if the asset is absent, encumbered, or misrepresented? — Name the entity, verify its financial standing, and confirm that the liability is not contractually limited to a level that makes recovery economically irrelevant.
• In which jurisdiction is enforcement sought, and has that jurisdiction been tested? — Not the governing law of the instrument, but the jurisdiction where the asset physically sits and where any enforcement action would be brought.
• What happens to my claim in the sequential insolvency of the issuer, the SPV, the custodian, and the TT service provider? — Model each failure scenario separately. The structure is only as strong as its weakest link in stress conditions.

If the documentation does not answer these questions clearly and specifically, the wrapper is doing concealment work. The question is whether that concealment is deliberate, negligent, or simply the result of structurers who have never been asked to model their own failure. The investor's position is the same in all three cases.

— The Claim Is the Claim

The legal wrapper is subject to the same fallacy as the financial one. Structure cannot manufacture legal proximity to an asset any more than it can manufacture liquidity. An SPV that holds a property in one jurisdiction, issues notes governed by another, and is owned by investors in a third does not provide the investor with the rights of a property owner. It provides the rights of a note creditor — which may be very valuable, or may be nearly worthless, depending on the SPV's solvency, the perfection of the security interest, and the enforceability of the structure in the jurisdiction where the asset actually sits.

Liechtenstein and Switzerland represent the most serious attempts yet to build legal infrastructure for on-chain ownership rather than merely on-chain reference. The TVTG's Token Container Model makes the token a legal object capable of carrying rights in rem under Liechtenstein private law. The Swiss DLT Act makes the ledger-based security legally equivalent to a certificated instrument for financial rights under the Swiss Code of Obligations. Both are genuine advances. Neither eliminates the requirement for a human institution to stand between the legal record and physical reality, verify the connection, and operate under a defined liability framework when it fails.

What the physical validator requirement in the TVTG acknowledges — and what most tokenisation projects ignore — is that the ledger is a record of what was entered into it. Keeping that record accurate over time, as assets change hands, change condition, and change their relationship to the rights represented in the token, requires continuous human attestation by an institution that is identified, supervised, capitalised, and liable under a defined legal framework. Every traditional asset class has developed such institutions over centuries. Tokenised markets are still building them — and until they are built, jurisdiction by jurisdiction and asset class by asset class, the token occupies one of the lower positions in the taxonomy: a claim on a claim, however efficiently transferred.

The question worth asking of any structured claim on an underlying asset remains the same as the question worth asking of any wrapper: not what the instrument says you hold, not what the technology records, but what you can actually recover, from whom, under what conditions, and in how long. That question is answered by the asset, the liability chain that connects you to it, and the jurisdictions in which that chain must hold. The wrapper, however sophisticated, is not part of the answer.