The launch checklist
-
Stand up the US-person operator entity
Formation-based test: organized under US law. Foreign ownership is fine. Run statutory-disqualification screens across the group now, not later — and decide the affiliation map (operator, tokenizer, front-ends) with counsel, because caps aggregate across affiliates.
-
Define admission standards and the rulebook
The venue sets its own participant standards: identification tiers, sanctions screening, attestations. Encode them as configuration — admission tier, symbol scope, per-symbol caps, halt policy, fee schedule — reviewed like code, release-gated, attributable.
-
Deploy the venue stack
Permissioned AMM pools, the compliance choke point, the operator services (admission authority, cap monitor, halt-sync, notice workflow, records, reporting). Contracts must be public and auditable at published addresses. Build in-house or license — the checklist is the same either way.
-
Connect the feeds
Two inputs matter: a halt feed from the primary exchange (real-time, with resumption) and prior-month consolidated volume per symbol for the ADV caps. Both are available from official sources. Design for feed loss: fail closed, alert, resume.
-
Select instruments and supply
Prefer low parity burden first: no-dividend single-class commons, broad index ETPs, spot-commodity ETPs. For each symbol, decide issuer-tokenized (no notice) vs. third-party tokenization (notice required) — and verify rights parity per the order's criteria as part of listing admission.
-
Draft and publish the notices
Public website notice at least 30 days before operating — including the fee schedule — and written notice to the SEC within one business day. The notice site is a legal instrument: version it, timestamp it, keep it live.
-
Fire issuer notices and run the clocks
Written notice to each issuer whose stock a third party tokenizes; trading waits until 30 days after receipt; honor objections. Each symbol carries a workflow object — sent, received, clock running, clear or objected.
-
Turn on records and reporting from day one
Hash-chained books and records (onchain records qualify) and USD-denominated 24-hour volume reporting. If every action emits a versioned event from one place, reporting is a downstream consumer — not a month-end scramble.
-
Go live — and operate inside the lines
Monitor per-symbol volume against caps continuously (a breach is an immediate multi-month pause in that symbol, affiliates included). Synchronize halts with the primary market in real time. Log screening evidence. The exemption is conditional forever, not just at filing.
Engineering requirements, condition by condition
| Condition | System | Evidence |
|---|---|---|
| Permissioned participants | Admission authority → onchain allowlist mirror, enforced at a single policy choke point | Admission event log; invariant test: non-admitted actor cannot act |
| 0.25% prior-month ADV cap | Cap monitor with per-symbol throttle and pause-guard | Property tests over cap math; feed-loss fail-closed test |
| Halt synchronization | Halt-sync oracle consuming primary halt feed | Replay of historical halt events; latency budget test |
| Issuer notice & objection | Notice workflow with clocks and objection states | Per-symbol workflow state export |
| Rights parity | Listing admission checks + instrument metadata | Per-symbol parity verification record |
| Books / records / USD reporting | Versioned event stream, hash-chained | 24h USD report generated from the stream |
| Screening | OFAC + disqualification screening services | Screening logs retained per policy |
The timeline reality
The regulatory floor is the notice clock: 30 days of public notice, SEC written notice within one business day. But the practical path is set by engineering readiness and issuer-notice clocks. A team with entity, counsel, rulebook and licensed software can file and be live just past the notice window. A team building venue software from scratch is looking at a multi-year specialist program — protocol engineering, cap math with regulatory consequences, halt infrastructure, records — before the notice even matters.
Build vs. buy
What's genuinely bespoke: your authorization strategy, your issuer relationships, your participants, your markets. What's not: pool math, admission gates, cap monitors, halt oracles, notice workflows, event schemas. That second list is where teams spend years rediscovering edge cases that are already encoded — in requirements, in tests, and in configuration — in venue software that exists today. The rational move for most entrants is to buy the second list and pour their scarce specialists into the first.
Frequently asked questions
How much does it cost to launch a TSV?
How long does it take to become a TSV?
Does a TSV need its own blockchain?
Can one organization run more than one venue or book?
Shorten step three to a phone call.
clarivyx is the venue stack behind the checklist: permissioned AMM core, operator layer, US rulebook — delivered into your infrastructure with the test suite mapped to the order's conditions as filing support.