Every serious tokenization stack has the same spine, whether the marketing admits it or not.

Issuer → transfer agent or registrar → custodian of the reserve → a venue or ATS → a settlement rail → an oracle or administrator mark → a disclosure clock.

Remove one bone and you still have a token. You no longer have a market that a pension can explain to a trustee.

Law is not a mood

In the United States, if the economic reality is a security, federal securities law is in the room. How the token is issued (private placement, registered offering, existing listed share mirrored by a depositary) changes the paperwork. It does not delete the category. Transfer-agent rules, broker-dealer rules, ATS rules, and custody rules are the boring reason 2017’s “equity token” speeches took a decade to resemble 2026’s depositary pilots.

The December 2025 no-action posture toward DTC’s tokenization service is not “the SEC tokenized the stock market.” It is staff saying a specific infrastructure actor may run a controlled service on a defined universe for a defined period, with the token carrying the same entitlements as the traditional position. Exchange rule filings that let a tokenized entitlement meet its twin on one book are the venue sequel. Both are infrastructure events. Treat them as a carnival and you will misread the footnotes.

Elsewhere the nouns change and the spine does not. Europe’s MiCA conversation governs crypto-asset categories that are not already financial instruments; instruments that are securities still meet the older securities directives. The UK, Singapore, Hong Kong, Switzerland, and the UAE have sandboxes and licensing tracks that serious issuers actually use. A token that is comfortable in one of those tracks and silent in another is not “global.” It is local with a VPN.

This page is not counsel. It is a reminder that “onchain” is not a jurisdiction.

Infrastructure, named

Transfer agents and registrars keep the cap table honest when the token is trying to be the record. Without them you have a contract balance and a hope.

Custodians keep the box. Tokenization does not invent custody. It makes sloppy custody visible.

Depositaries — DTC in the American story — are where the traditional position already lives. When they tokenize, they are not joining crypto. They are exporting their own record onto an additional rail.

Exchanges and ATS venues are where a price becomes a print someone else will accept. A token that only trades in a pool against a stablecoin has a print. It does not yet have a market structure.

Oracles and administrators publish the second number. Funds have had administrators for a long time. Public wrappers borrowed the habit and then discovered that three vendors can disagree at 3 a.m. That disagreement is data. It belongs on a desk.

Issuance software — the ERC-20 descendants with transfer restrictions, the purpose-built security chains, the issuer platforms — is how a rule becomes a revert. Software cannot invent a license. It can enforce the one you have.

Hardware only enters when it is load-bearing: HSM-backed custody, the matching engines at venues, the machines oracle operators actually run. There is no need to mystify a GPU.

Software is the binding, not the asset

A smart contract can stop a transfer to a banned address. It cannot tell you whether yesterday’s NAV was computed on the right share count. People still do that. The future desk is not “code replaces the administrator.” The future desk is “the administrator’s number and the contract’s number sit in the same row, and someone gets a phone call when they drift.”

How we watch the spine

The Cube is the public newsroom for the legal and infrastructure layer — filings, venue rules, issuer launches, regulator speeches that change a footnote.

/data is the census of what is already live.

The Office is where a paid desk can keep the spine on one page for the names they actually care about.

If a press release says “fully onchain stock” and cannot point at a transfer agent, a custodian, a venue, and a second mark, it is a press release.