From 024dc5625915db78e03614b44c64543ac4de2a15 Mon Sep 17 00:00:00 2001
From: Christian Grothoff <christian@grothoff.org>
Date: Tue, 16 May 2017 13:40:29 +0200
Subject: [PATCH] starting with exculpability

---
 doc/paper/taler.tex | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/doc/paper/taler.tex b/doc/paper/taler.tex
index 8b48ad82f..7dd42b819 100644
--- a/doc/paper/taler.tex
+++ b/doc/paper/taler.tex
@@ -1555,7 +1555,49 @@ protocol is never used.  Furthermore, if a customer needs to recover
 control over a coin using the linking protocol, they can use the
 refresh protocol on the result to again obtain an unlinkable coin.
 
+\section{Exculpability arguments}
 
+\begin{lemma}
+The exchange can detect and prove double-spending.
+\end{lemma}
+
+\begin{proof}
+\end{proof}
+
+\begin{lemma}
+Merchants and customers can verify double-spending proofs.
+\end{lemma}
+
+\begin{proof}
+\end{proof}
+
+
+\begin{lemma}
+Customers can either obtain proof-of-payment or their money back.
+\end{lemma}
+
+\begin{proof}
+\end{proof}
+
+\begin{lemma}
+If a customer paid for a contract, they can prove it.
+\end{lemma}
+
+\begin{proof}
+\end{proof}
+
+\begin{lemma}
+The merchant can issue refunds, and only to the original customer.
+\end{lemma}
+
+\begin{proof}
+\end{proof}
+
+
+
+\begin{theorem}
+  The protocol prevents double-spending and provides exculpability.
+\end{theorem}
 
 \end{document}