Municipal Tokens as Urban Policy Tools: The Case of LVGA and the MyLugano App

Review

This paper is valuable because it refuses the reductive framing of municipal tokens: the claim that a local government has done something interesting merely because it issued a blockchain-based payment instrument. The Lugano case is treated instead as an integrated urban platform composed of SwissLedger, LVGA, and the MyLugano app. The core argument is that a territorially bounded token, cashback mechanism, merchant network, and programmable policy rail can give a city an instrument for local economic coordination that is not owned by global private platforms.

That framing matters. The paper understands platform power as a governance arrangement, not just a market structure. Private platforms control access, visibility, data, fees, user relationships, and the terms on which small merchants participate. MyLugano is presented as a counter-design: a publicly enabled platform for actors that individually lack the scale to build loyalty infrastructure, payment rails, discovery tools, or incentive systems. This is the paper's central institutional contribution. It places municipal tokens inside the political economy of platform dependency rather than inside the narrower language of crypto adoption.

The economic mechanism is also explained with useful precision. LVGA is pegged to the Swiss franc at 100 LVGA to 1 CHF, circulates within a bounded local merchant network, and is tied to a cashback system that gives users a benefit which cannot leak immediately outside the local economy. Merchants receive an operational allowance and settle net LVGA positions with the city. Users generally do not have a conversion claim back into fiat, while merchants can redeem under the settlement rules. This difference is not incidental. It is the policy design. The system makes the token useful as a local circulation instrument precisely because it is not a fully fungible speculative asset.

The paper's account of programmable urban policy is concrete. It describes LVGA uses for tourism incentives, QR-code urban promotion campaigns, private-sector bonuses, cultural vouchers for residents turning 18, cultural initiatives, and e-bike subsidies. These examples show why programmability is institutionally significant. A subsidy can be allocated to a defined class of beneficiaries, constrained to particular categories of merchants, integrated with cashback, and made traceable through the same infrastructure. The system therefore converts public spending from a transfer event into a governed transaction environment.

That is also where the main governance risk begins. Programmability is not neutral administrative efficiency. It expands the city's capacity to define eligibility, constrain use, steer merchant participation, observe flows, and decide which economic actors become visible inside the public platform. The paper describes this as public value, and that is plausible. But public value cannot be inferred from local retention alone. It must be demonstrated through accountable rules: who can join the network, who can be removed, who sets cashback levels, who approves merchant whitelists, who audits settlement, who can contest a failed payment or subsidy denial, and how residents know whether a programmable restriction is lawful, proportionate, and reversible.

The paper is methodologically best understood as a descriptive and conceptual case study written from close institutional knowledge of the Lugano system. It reconstructs the design logic of LVGA, explains the accounting mechanics, situates the initiative in platform-economy literature, and identifies future directions in digital identity. It is not an empirical evaluation. It does not establish causal impact on merchant revenue, net local multiplier effects, consumer retention, distributional outcomes, administrative cost, tourism conversion, or inclusion. The authors acknowledge that the final economic impact remains difficult to measure and that econometric work is still under preparation. That limitation should be treated as central, not peripheral.

The paper's best-supported claims therefore remain plausible but under-tested. Cashback may increase loyalty and spending velocity, but the Lugano system still needs evidence on who uses it, how often, in which merchant categories, with what displacement effects, and whether public subsidies are generating new local demand rather than rewarding transactions that would have happened anyway. The paper reports 56,000 users and 114,000 transactions after recent growth, but also notes that this is little more than two transactions per user per year. That adoption profile weakens any strong claim that the system has already become a generalized urban economic rail. It may be a promising infrastructure, but its present usage pattern still looks experimental.

There is also a distributional question the paper does not fully confront. A municipal token system can support local merchants, but it can also privilege merchants able to comply with onboarding, accounting, wallet management, and digital acceptance requirements. If participation becomes tied to visibility in the city app, promotional campaigns, or eligibility for programmable vouchers, non-participating merchants may face a public-platform disadvantage. The governance question is not only whether merchants benefit, but which merchants benefit, which are excluded, and whether the city has created a new dependency layer for local commerce.

The identity section is ambitious and governance-aware. It correctly rejects the idea that privacy is solved by adding selective disclosure or zero-knowledge proofs in isolation. It frames identity as an institutional architecture involving wallet control, key derivation, custody choices, revocation, recovery, auditability, purpose limitation, and interface design. The discussion of credential loss alerts and privacy-preserving revocation is particularly important because many digital identity systems discover revocation governance only after deployment.

Yet the identity extension also raises the stakes. Once payments, subsidies, residency verification, age eligibility, cultural access, merchant networks, and possible credential functions sit inside one civic app, the system becomes more than a convenience layer. It becomes an urban control plane. The paper argues for minimization, separation, abstraction, dissociation, and user control, but it does not translate these principles into mandatory governance tests. A future version should specify data-retention limits, linkability audits, role separation between the city, foundation, validators, app operator, and merchants, procedures for contested identity decisions, remedies for mistaken revocation, and independent oversight of behavioral observability.

The paper also needs a stronger fiscal and monetary governance account. LVGA is not positioned as monetary sovereignty, but the system still creates municipal obligations, reserves, operational allowances, delayed redemption, and potential investment or local lending effects from fiat received in exchange for tokens. These are not just accounting features. They are public finance choices. The reviewable questions are: how reserves are held, whether funds are segregated, who bears liquidity risk, what happens under merchant exit or demand shock, how liabilities are disclosed, and whether residents can inspect the fiscal position of the token system in a form that is intelligible.

The novelty of the paper lies in treating municipal tokens as programmable public infrastructure for local economic policy rather than as either crypto boosterism or loyalty-card modernization. That is a real contribution. It provides a more serious vocabulary for cities experimenting with digital value: public platform, local circulation, conditional subsidy, territorial incentive, and civic identity. It also implicitly makes a larger argument that local governments need not be passive clients of platform capitalism. They can build coordination rails aligned with territorial public value.

The unresolved task is to move from design narrative to assurance framework. Lugano's model should be evaluated against adoption, merchant diversity, repeat usage, incremental revenue, fiscal exposure, user privacy, error rates, exclusion patterns, subsidy leakage, complaint resolution, and public auditability. Every programmable policy use should have a published purpose, eligibility rule, spending constraint, sunset condition, appeals path, and impact report. Without that layer, municipal programmability risks becoming a polished administrative capability without sufficient democratic control.

The paper opens an important institutional horizon: a city can build a public market infrastructure that makes local value more programmable, more traceable, and more resistant to extraction by private platforms. But the same infrastructure can also concentrate new powers inside the municipal platform. The difference between civic infrastructure and soft control will depend on governance that is explicit, measurable, contestable, and open to independent audit.

Key Insight

The paper establishes LVGA and MyLugano as municipal market infrastructure rather than a blockchain novelty. Its unresolved governance problem is that programmability increases the city's power to steer eligibility, spending, visibility, identity, and merchant participation, but the paper does not yet specify the enforceable controls, appeal rights, exclusion metrics, or fiscal accountability needed for legitimate urban infrastructure.