Skip to main content
Unlisted page
This page is unlisted. Search engines will not index it, and only users having a direct link can access it.

The Thermodynamic Structure of Multiswap

· 19 min read
Eric Forgy
Founder of CavalRe

Multiswap's Post-Trade Elasticity Model was not derived from thermodynamics. It was developed as a market-design framework: define Reserve Asset states, couple trades through execution value, preserve aggregate accounting, and identify state transitions that cannot weaken the pool's safety position.

Yet the resulting mathematics has a distinctly thermodynamic structure.

The pool has a state space. Value-flow balance constrains exchanges across its boundary. Coefficient inequalities define a cone of locally admissible processes. Finite coefficient multipliers integrate those inequalities across complete transitions. A logarithmic entropy summarizes the resulting irreversible motion. The execution-price rule acts as a constitutive law: it determines whether the balance equations naturally carry an ordinary swap through the admissible region.

This is more than a verbal analogy, but less than an identification with physical thermodynamics. Multiswap does not have a literal temperature, heat bath, or molecular entropy. The precise claim is structural:

The Post-Trade Elasticity Model has the same mathematical separation between state, balance laws, admissibility, entropy production, and process law that makes thermodynamics a general theory of physical processes.

That separation is useful. It clarifies what coefficient safety proves, what execution pricing contributes, why entropy is informative but incomplete, and why a state-safe operation can still have unfair consideration or MEV exposure.

This article develops that structure from first principles for positive scale elasticity,

0<es<1.0<e_s<1.

It assumes exact arithmetic, positive reserves and scales, and homogeneous elasticities. The thermodynamic interpretation is a mathematical framework for reasoning about the model, not a claim that every thermodynamic theorem automatically applies to Multiswap.

1. The Multiswap state space

Consider a Multiswap pool with n>1n>1 Reserve Assets. Reserve Asset ii has reserve

ai>0,a_i>0,

scale

si>0,s_i>0,

and marginal price

Pi=siai.P_i=\frac{s_i}{a_i}.

Scale elasticity and price elasticity satisfy

es+eP=1.e_s+e_P=1.

Each Reserve Asset has elasticity coefficient

ci=siaies.\boxed{ c_i=\frac{s_i}{a_i^{e_s}}. }

Equivalently,

si=ciaiess_i=c_i a_i^{e_s}

and

Pi=ciaieP.P_i=c_i a_i^{-e_P}.

The LP Token is indexed by 00. It has reserve a0a_0, scale

s0=i=1nsi,\boxed{ s_0=\sum_{i=1}^{n}s_i, }

price

P0=s0a0,P_0=\frac{s_0}{a_0},

and coefficient

c0=s0a0es.c_0=\frac{s_0}{a_0^{e_s}}.

The complete pool state is therefore described by positive reserve and scale coordinates subject to the aggregate scale identity.

Thermodynamics begins from the same kind of abstraction. It does not track every molecule. It identifies a macroscopic state and asks which transitions between states are possible. Multiswap similarly abstracts away from the path by which tokens arrived and begins with the current ledger state.

The important question is not merely:

What states can be written down?\text{What states can be written down?}

It is:

Which state transitions are admissible?\text{Which state transitions are admissible?}

That is where the thermodynamic structure appears.

2. Balance laws: the first-law layer

For a transition from (ai,Pi)(a_i,P_i) to (ai+dai,Pi+dPi)(a_i+da_i,P_i+dP_i), scale changes according to the exact discrete product rule

dsi=dai(Pi+dPi)+aidPi.\boxed{ ds_i = da_i(P_i+dP_i) + a_i\,dP_i. }

The two terms have different meanings.

The first is the final-price value of the reserve transferred through the pool boundary:

dai(Pi+dPi).da_i(P_i+dP_i).

The second is the revaluation of the reserve already inside the pool:

aidPi.a_i\,dP_i.

Under post-trade execution, define signed execution value flow for Reserve Asset ii

Σi=dai(Pi+dPi).\boxed{ \Sigma_i=da_i(P_i+dP_i). }

The general execution value-flow identity couples the LP Token leg to all Reserve Asset legs:

Σ0=i=1nΣi.\boxed{ \Sigma_0 = \sum_{i=1}^{n}\Sigma_i. }

An ordinary reserve-only swap has no LP Token flow. Therefore

Σ0=0\Sigma_0=0

and the general identity specializes to

i=1nΣi=0.\sum_{i=1}^{n}\Sigma_i=0.

In that special case, the pool receives and sends Reserve Asset quantities whose signed values balance at their respective post-trade prices.

The state must also preserve the ledger identity

s0=i=1nsi.\boxed{ s_0'=\sum_{i=1}^{n}s_i'. }

These equations form the first-law layer of the model. They are accounting and balance conditions. They determine how a valid transaction fits together, but they do not by themselves determine whether the resulting state is coefficient-order admissible.

That distinction is essential. In thermodynamics, an energy balance permits both spontaneous and impossible processes. The second law supplies a direction. In Multiswap, execution value-flow balance and aggregate scale consistency likewise admit transitions that can move the pool against the coefficient order. Another condition is required.

3. Coefficient order: the second-law layer

The Post-Trade Elasticity coefficient order requires

cici\boxed{ c_i'\le c_i }

for every Reserve Asset and

c0c0\boxed{ c_0'\ge c_0 }

for the LP Token.

Reserve Asset coefficients may remain fixed or contract. The LP Token coefficient may remain fixed or expand.

This order supplies the missing direction of admissibility. A transition that balances execution value but expands even one Reserve Asset coefficient leaves the componentwise order. A transition that dilutes the LP Token coefficient does the same.

The order is compositional. If every primitive transition satisfies the coefficient directions, then any finite sequence of those transitions satisfies them as well. The pool carries its safety certificate forward into the next action.

This is the Multiswap analogue of the second law: balance laws alone do not select permitted processes; a monotone state order does.

The analogy should be stated precisely. The coefficient order is not derived from the physical second law, and a coefficient is not a temperature or chemical potential. The mathematical correspondence is that both theories add a directional admissibility condition to balance equations that do not themselves select a direction.

4. The local admissible-process cone

Differentiate

ci=siaies.c_i=s_i a_i^{-e_s}.

The relative differential is

dcici=dsisiesdaiai.\boxed{ \frac{dc_i}{c_i} = \frac{ds_i}{s_i} - e_s\frac{da_i}{a_i}. }

Using Pi=si/aiP_i=s_i/a_i gives

dci=aies(dsiesPidai).\boxed{ dc_i = a_i^{-e_s} \left(ds_i-e_sP_i\,da_i\right). }

Reserve Asset admissibility therefore requires

dci0    dsiesPidai.\boxed{ dc_i\le0 \iff ds_i\le e_sP_i\,da_i. }

For the LP Token,

dc00    ds0esP0da0.\boxed{ dc_0\ge0 \iff ds_0\ge e_sP_0\,da_0. }

At any positive state, these are linear inequalities in the local changes daida_i and dsids_i. Together with

ds0=i=1ndsi,ds_0=\sum_{i=1}^{n}ds_i,

they define a tangent cone of admissible state motion.

This is one of the strongest thermodynamic parallels. In nonequilibrium thermodynamics, the second law restricts local process directions through nonnegative entropy production. Multiswap's coefficient inequalities similarly divide infinitesimal state changes into:

  • boundary directions, where a coefficient remains fixed;
  • interior directions, where the coefficient moves strictly toward safety;
  • forbidden directions, where a Reserve Asset coefficient expands or the LP Token coefficient contracts.

The cone is more informative than a list of approved transaction types. It permits systematic discovery of new operations. A candidate transition can be generated from funded token movements and tested directly against the cone before a complete settlement rule is designed.

5. Finite processes and local production

A local differential does not certify an arbitrary finite jump. The exact endpoint multiplier for token ii is

χi=cici=sisi(aiai)es.\boxed{ \chi_i = \frac{c_i'}{c_i} = \frac{s_i'}{s_i} \left(\frac{a_i}{a_i'}\right)^{e_s}. }

Finite admissibility requires

χi1\chi_i\le1

for every Reserve Asset and

χ01\chi_0\ge1

for the LP Token.

Define nonnegative component production values

h0=logχ0\boxed{ h_0=\log\chi_0 }

for the LP Token and

hi=logχi\boxed{ h_i=-\log\chi_i }

for Reserve Asset ii.

Every componentwise coefficient-order admissible transition has

h00h_0\ge0

and

hi0.h_i\ge0.

For a sequence of transitions indexed by tt,

cifinalciinitial=tχi,t.\frac{c_i^{\mathrm{final}}}{c_i^{\mathrm{initial}}} = \prod_t\chi_{i,t}.

Taking logarithms gives

hitotal=thi,t.h_i^{\mathrm{total}} = \sum_t h_{i,t}.

Coefficient certificates multiply; their logarithmic production values add. This is exactly the algebra needed for an entropy-like process measure.

It also explains why intermediate states matter. A final endpoint can have an acceptable scalar summary even if one intermediate action violates a componentwise coefficient direction. Requiring every primitive transition to carry nonnegative local production gives an inductive process proof rather than an endpoint coincidence.

6. Value-flow entropy

The componentwise production values admit an aggregate logarithmic monotone. Choose positive reference coefficients cic_i^* and define value-flow entropy, up to an additive constant, by

H=logc0c01n1i=1nlogcici.\boxed{ \mathcal H = \log\frac{c_0}{c_0^*} - \frac{1}{n-1} \sum_{i=1}^{n} \log\frac{c_i}{c_i^*}. }

Its change across a transition is independent of the reference state:

ΔH=logc0c01n1i=1nlogcici.\boxed{ \Delta\mathcal H = \log\frac{c_0'}{c_0} - \frac{1}{n-1} \sum_{i=1}^{n} \log\frac{c_i'}{c_i}. }

Equivalently,

ΔH=h0+1n1i=1nhi.\boxed{ \Delta\mathcal H = h_0 + \frac{1}{n-1} \sum_{i=1}^{n}h_i. }

Whenever every componentwise coefficient condition holds,

ΔH0.\boxed{ \Delta\mathcal H\ge0. }

The factor 1/(n1)1/(n-1) is a positive normalization. It affects the scale of the Reserve Asset contribution, not the sign or the underlying componentwise order.

This entropy has three important properties.

First, it is a state-function difference. It depends only on the initial and final coefficients.

Second, it is additive across sequential transitions because logarithmic coefficient ratios add.

Third, it is nondecreasing under every componentwise coefficient-safe primitive.

Those properties justify calling H\mathcal H an entropy within the Multiswap process theory. The term does not assert a microscopic statistical interpretation. It identifies a macroscopic state monotone that accumulates irreversible coefficient motion.

6.1 Entropy is weaker than the second-law order

The scalar entropy is not the primary safety condition.

It is possible for one Reserve Asset coefficient to expand,

cj>cj,c_j'>c_j,

while sufficiently large safe movements elsewhere keep

ΔH>0.\Delta\mathcal H>0.

Positive aggregate entropy can therefore conceal a local coefficient violation.

The authoritative second-law analogue is the vector condition

cicifor every Reserve Asset,c0c0.\boxed{ c_i'\le c_i \quad\text{for every Reserve Asset}, \qquad c_0'\ge c_0. }

Entropy is a projection of this partial order. It is valuable for diagnostics, long randomized sequences, and measuring accumulated safety margin, but it does not replace the individual certificates.

This makes Multiswap's structure richer than a theory governed by one scalar inequality. It has a family of componentwise monotones and an aggregate entropy constructed from them.

7. Reversible boundaries and irreversible motion

The thermodynamic language of reversible and irreversible processes is useful only if applied carefully.

A fixed-coefficient Reserve Asset leg satisfies

dci=0.dc_i=0.

That leg moves along the boundary of the local coefficient-order cone. It produces no Reserve Asset coefficient entropy:

hi=0.h_i=0.

A proportional all-Reserve-Asset liquidity action preserves every coefficient. It is the closest Multiswap analogue of a reversible process:

ΔH=0.\Delta\mathcal H=0.

Other operations move strictly into the coefficient-order cone:

  • a supported single-asset liquidity action contracts complement coefficients;
  • LP Token under-minting expands c0c_0;
  • burning LP Tokens without withdrawing reserves expands c0c_0;
  • direct permanent-reserve allocation contracts a Reserve Asset coefficient, expands c0c_0, or both.

Each has

ΔH>0\Delta\mathcal H>0

when the coefficient movement is strict.

An ordinary post-trade swap requires more care. Every Reserve Asset leg remains on its fixed-coefficient boundary, but the complete value-flow-conserving transaction increases the LP Token coefficient. Therefore a nontrivial finite swap is not globally reversible in the coefficient order.

For post-trade execution and 0<es<10<e_s<1,

dci=0for every Reserve Asset leg,\boxed{ dc_i=0 \quad\text{for every Reserve Asset leg}, }

while

c0>c0.\boxed{ c_0'>c_0. }

The swap is boundary motion at the Reserve Asset legs and positive dissipation at the pool level.

That is a sharper statement than calling swaps reversible or irreversible without qualification. The local legs preserve their constitutive coefficients; coupling them through execution generates system-level entropy.

8. Execution pricing as a constitutive law

Coefficient order defines the admissible state region. It does not determine how a trade couples token flows to price changes.

Let

Pi=Pi+dPiP_i'=P_i+dP_i

be the final marginal price and consider the linear execution rule

Piexec=Pi+kdPi.\boxed{ P_i^{\mathrm{exec}} = P_i+k\,dP_i. }

The parameter kk describes the execution price:

  • k=0k=0 uses the opening price;
  • k=12k=\tfrac12 uses the endpoint midpoint;
  • k=1k=1 uses the post-trade price.

For general kk, signed execution value flow is

Σi(k)=dai(Pi+kdPi).\Sigma_i^{(k)}=da_i(P_i+k\,dP_i).

The exact scale decomposition is

dsi=Σi(k)+aidPi+(1k)daidPi.\boxed{ ds_i = \Sigma_i^{(k)} + a_i\,dP_i + (1-k)da_i\,dP_i. }

The general execution value-flow identity is

Σ0(k)=i=1nΣi(k).\Sigma_0^{(k)} = \sum_{i=1}^{n}\Sigma_i^{(k)}.

Summing the Reserve Asset scale changes therefore gives

ds0=Σ0(k)+i=1naidPi+(1k)i=1ndaidPi.\boxed{ ds_0 = \Sigma_0^{(k)} + \sum_{i=1}^{n}a_i\,dP_i + (1-k)\sum_{i=1}^{n}da_i\,dP_i. }

For a reserve-only swap, Σ0(k)=0\Sigma_0^{(k)}=0, so

ds0=i=1naidPi+(1k)i=1ndaidPi.\boxed{ ds_0 = \sum_{i=1}^{n}a_i\,dP_i + (1-k)\sum_{i=1}^{n}da_i\,dP_i. }

Every nonzero fixed-coefficient leg has

daidPi<0.da_i\,dP_i<0.

Execution before the final price therefore introduces a negative term when k<1k<1. It can overwhelm the safe opening-reserve revaluation and reduce the LP Token coefficient.

For 0<es<10<e_s<1, post-trade execution has the global finite-trade property

k=1    c0>c0\boxed{ k=1 \implies c_0'>c_0 }

for every nontrivial fixed-coefficient reserve-only swap.

Within

0k1,0\le k\le1,

k=1k=1 is the unique fixed linear execution rule with that property for every finite admissible swap. For each fixed k<1k<1, sufficiently large asymmetric swaps can produce

c0<c0.c_0'<c_0.

Execution pricing therefore plays the role of a constitutive law. The second-law order says which direction is admissible. The constitutive rule couples flows and state changes. A valid constitutive law must produce nonnegative entropy throughout its claimed operating domain.

Post-trade execution is not the definition of coefficient safety. It is the execution law that makes ordinary finite swaps satisfy coefficient safety automatically.

9. Dissipation without fees

In conventional market language, dissipation is often identified with an explicit fee. Multiswap's coefficient entropy shows that the concepts are distinct.

A fee-free post-trade swap can have

ΔH>0.\Delta\mathcal H>0.

The entropy arises from nonlinear state revaluation under value-flow-conserving execution, not from a separately charged token amount.

Fees can add further pool-favorable value flow, but they are not the source of the basic coefficient theorem. They require their own accounting rule:

  • which account receives the fee;
  • whether the fee changes reserves or only external claims;
  • how scale changes with the token movement;
  • which rounding direction preserves every coefficient inequality.

Calling all positive entropy a fee would obscure the model. The more accurate hierarchy is:

execution couplingintrinsic coefficient production,explicit feesadditional allocated value flow.\boxed{ \begin{aligned} \text{execution coupling} &\longrightarrow \text{intrinsic coefficient production},\\ \text{explicit fees} &\longrightarrow \text{additional allocated value flow}. \end{aligned} }

Both may be dissipative in the sense of increasing the pool's safety monotones, but they arise from different mechanisms.

10. Boundary flows and protocol-funded processes

Thermodynamics distinguishes a system from its surroundings. Multiswap requires the same boundary discipline.

Every value-flow-coupled operation satisfies

Σ0=i=1nΣi.\Sigma_0 = \sum_{i=1}^{n}\Sigma_i.

An ordinary reserve-only swap has Σ0=0\Sigma_0=0, so the general identity reduces to

i=1nΣi=0.\sum_{i=1}^{n}\Sigma_i=0.

A permanent-reserve allocation is different. Surplus or another protocol account supplies external tokens to the pool. The transition can be coefficient-safe, but the positive reserve change must be funded across the system boundary.

For example, suppose Surplus contributes ΔaA>0\Delta a_A>0 without minting LP Tokens, leaves every other Reserve Asset unchanged, changes only AA scale, and keeps a0a_0 fixed. The coefficient order then admits the interval

sAsAsA(1+ΔaAaA)es.\boxed{ s_A \le s_A' \le s_A \left(1+\frac{\Delta a_A}{a_A}\right)^{e_s}. }

That interval describes admissible endpoints. It does not create the contributed AA. The Surplus account supplies it.

This distinction prevents a common error: treating a favorable state inequality as if it were a source of value. The coefficient order constrains how funded value can be incorporated. It does not fund the process.

Every complete operation therefore needs both an internal admissibility proof and an external boundary-flow account:

complete process=coefficient-safe state transition+execution or consideration rule+funded token movement+aggregate ledger consistency.\boxed{ \begin{aligned} \text{complete process} ={}&\text{coefficient-safe state transition}\\ &+\text{execution or consideration rule}\\ &+\text{funded token movement}\\ &+\text{aggregate ledger consistency}. \end{aligned} }

That is the financial analogue of separating a thermodynamic system's internal state production from heat, work, and matter crossing its boundary.

11. Entropy does not prove fairness

The thermodynamic framework proves state admissibility. It does not decide who deserves the benefit of an irreversible transition.

Suppose protocol-owned reserves are added without issuing LP Tokens, or LP Tokens minted by the contribution are burned. The operation can satisfy

ΔH>0\Delta\mathcal H>0

and every componentwise coefficient condition.

Yet a temporary liquidity provider may enter before the allocation, hold LP Tokens when value is deposited, and exit afterward with part of that value. The proportional entry and exit can preserve all coefficients, while the allocation between them increases entropy.

The complete sequence is state-safe and economically contestable.

Likewise, an ordinary user swap can be coefficient-safe while remaining exposed to transaction ordering. A minimum receive protects the user's execution boundary, but it does not determine who captures the value of a protocol-funded LP Token burn.

Thermodynamic admissibility therefore does not imply:

  • fair execution;
  • correct ownership allocation;
  • resistance to sandwiching or backrunning;
  • appropriate protocol sale timing;
  • adequate user slippage protection.

Those are boundary-condition and mechanism-design questions. The state theory tells us whether the pool remains inside its safety order after the action. It does not replace economic policy.

12. The useful correspondence

The Multiswap-to-thermodynamics mapping can now be stated precisely.

Multiswap structureThermodynamic role
Positive state (ai,si)(a_i,s_i)Macroscopic state
Aggregate scale and execution value-flow balance equationsFirst-law layer
Componentwise coefficient orderSecond-law admissibility
Differential conditions on dcidc_iLocal admissible-process cone
Finite multipliers χi\chi_iIntegrated process certificates
Logarithmic production values hih_iComponentwise entropy production
Value-flow entropy H\mathcal HAggregate state monotone
Constant-coefficient motionBoundary process
Strict coefficient improvementIrreversible motion
Execution-price ruleConstitutive law
Surplus contribution or LP Token burnProtocol-funded boundary process
Fees and pool-favorable roundingPotential additional coefficient production; exact accounting required

The table is a structural correspondence, not a historical claim. Multiswap was not obtained by assigning financial names to thermodynamic variables. The same mathematical architecture emerged from the protocol's own requirements.

13. Where the analogy stops

Several limitations should remain explicit.

No literal physical entropy

H\mathcal H is a protocol state monotone. No microscopic counting argument has been supplied, and no claim is made that it equals physical entropy.

No identified temperature or heat

Price is an intensive financial quantity, but this article does not identify price with temperature. Execution value flow resembles boundary energy accounting structurally; it is not heat.

No automatic Onsager theory

The local coefficient cone resembles nonequilibrium entropy-production constraints, but no linear force-flux matrix, reciprocity theorem, or near-equilibrium kinetic model has been derived.

Positive scale elasticity only

The strict finite-swap production theorem used here assumes

0<es<1.0<e_s<1.

The boundary es=0e_s=0 is degenerate for the coefficient order and requires a separate state-potential analysis. This article does not extend the thermodynamic conclusions to that boundary.

Exact arithmetic

Production code uses finite precision. Pool-favorable rounding must preserve the componentwise inequalities at every primitive step. A positive theoretical entropy does not excuse one adverse per-token rounding direction.

Candidate operations are not implemented operations

The coefficient-order cone identifies mathematically admissible candidates. A candidate becomes a supported protocol operation only after its consideration, account movements, authorization, rounding, MEV controls, and property tests are fully specified and implemented.

These limits strengthen the framework by keeping the proven structure separate from suggestive but undeveloped extensions.

14. A thermodynamic test architecture

The interpretation leads directly to a layered property-test design.

State domain

Require

ai>0,si>0.a_i'>0, \qquad s_i'>0.

First-law layer

Require

s0=i=1nsis_0'=\sum_{i=1}^{n}s_i'

and, for every value-flow-coupled action,

Σ0=i=1nΣi.\Sigma_0 = \sum_{i=1}^{n}\Sigma_i.

For an ordinary reserve-only swap, also verify the specialization

i=1nΣi=0.\sum_{i=1}^{n}\Sigma_i=0.

Second-law layer

For every Reserve Asset, require

χi=sisi(aiai)es1.\boxed{ \chi_i = \frac{s_i'}{s_i} \left(\frac{a_i}{a_i'}\right)^{e_s} \le1. }

For the LP Token, require

χ0=s0s0(a0a0)es1.\boxed{ \chi_0 = \frac{s_0'}{s_0} \left(\frac{a_0}{a_0'}\right)^{e_s} \ge1. }

Entropy diagnostic

Require

ΔH0\Delta\mathcal H\ge0

and report every componentwise production value hih_i. The scalar check is diagnostic; the componentwise conditions remain authoritative.

Boundary-flow layer

Verify that every positive token movement is funded, every negative movement reaches its declared recipient, LP Token issuance and destruction match the operation, and user minimum-receive or maximum-pay conditions are enforced.

Process composition

Randomize long sequences of swaps, proportional liquidity, single-asset liquidity, Surplus counter-actions, LP Token under-minting, permanent-reserve contributions, transfers, and burns. Assert the same layered conditions after every primitive, not merely after the final sequence.

This architecture tests balance, admissibility, entropy, and funding separately. A failure says which layer of the process theory was violated.

Conclusion

Multiswap's Post-Trade Elasticity Model has developed the mathematical architecture of a thermodynamic process theory.

The pool state is described by reserves and scales. Execution value-flow balance and aggregate scale consistency form a first-law layer. Componentwise coefficient order supplies a second-law direction. The differentials dcidc_i define the local cone of admissible processes. Finite multipliers χi\chi_i integrate those conditions across complete transitions. Their logarithms produce an additive value-flow entropy.

Post-trade execution occupies a separate and equally important role. It is the constitutive law that couples reserve flow to price change so every nontrivial finite ordinary swap produces positive LP coefficient motion when

0<es<1.0<e_s<1.

The resulting hierarchy is

state:(ai,si),balance laws:s0=i=1nsi,Σ0=i=1nΣi,local admissibility:dci0,dc00,finite admissibility:χi1,χ01,entropy:ΔH0,process law:Pexec=P+dP.\boxed{ \begin{aligned} \text{state} &:\quad (a_i,s_i),\\ \text{balance laws} &:\quad s_0=\sum_{i=1}^{n}s_i, \quad \Sigma_0=\sum_{i=1}^{n}\Sigma_i,\\ \text{local admissibility} &:\quad dc_i\le0, \quad dc_0\ge0,\\ \text{finite admissibility} &:\quad \chi_i\le1, \quad \chi_0\ge1,\\ \text{entropy} &:\quad \Delta\mathcal H\ge0,\\ \text{process law} &:\quad P^{\mathrm{exec}}=P+dP. \end{aligned} }

The framework does not prove fairness, supply external value, or eliminate MEV. Those remain questions of boundary flow, ownership, and mechanism design.

What it does provide is a general theory of admissible Multiswap processes: balance laws say what must balance, coefficient order says which way the state may move, entropy measures accumulated irreversible motion, and execution pricing determines whether ordinary market activity follows that direction automatically.