The Operational Substitute Layer: A Firsthand Account from Inside the Machinery

The Operational Substitute Layer: A Firsthand Account from Inside the Machinery

Jason D. Keys·
SeriesNew Austrian Economics — Inside the Substitute Layer· 1 of 1
FeketeMengerRMBSReserve Bank of New ZealandBNZsubstitute layerGFCcovered bondscentral bankingfirsthand

The Operational Substitute Layer: A Firsthand Account from Inside the Machinery

The framework has spent twenty essays describing the substitute layer — the apparatus of paper claims, central-bank-eligible collateral, and intermediated balance-sheet structures that translates the underlying low-saleability properties of certain asset classes into the appearance of liquid, tradeable, monetary-grade securities. The previous installments have analyzed the agency MBS market in the United States ($9 trillion of substitute paper for the $14.5 trillion residential mortgage market), the post-Surfside Florida HOA reserve dynamics, the Florida insurance market's structural transformation, the Cryptographic Marketability Premium framework, and the broader theoretical apparatus drawn from Menger and Fekete.

What none of those essays has provided — what no framework essay can provide from external sources alone — is what the substitute layer actually looks like operationally, at the level of the people building it, on the calendar dates they were building it, in the specific buildings they were sitting in. The framework's analytical claims about substrate fragility, about the structural relationship between central banks and the paper substitutes they accept as collateral, about the institutional logic of substitute-layer expansion under stress, all rest on a theoretical reconstruction of how these systems are assembled. The reconstruction is correct, in my view. But there is a different kind of authority that comes from having been inside the machinery.

I was. From late 2008 through early 2013, I worked at the Bank of New Zealand, building the residential mortgage-backed securitization infrastructure that the Reserve Bank of New Zealand had just required all of the country's major banks to construct. This essay is the firsthand account.

It launches a new thread within the New Austrian Economics catalog, provisionally titled Inside the Substitute Layer, that draws on direct institutional experience rather than external data analysis. The thread will hold a small number of essays over time, anchored in specific moments where the framework's structural claims can be tested against actual operational reality observed from the inside. This is the first entry. It is also the longest single piece of firsthand institutional disclosure in the catalog, and it is presented for the reader to evaluate on its own terms — as one person's direct experience of one specific node of the substitute layer being built and operated across five years.

The mandate

In May 2008, four months before Lehman Brothers collapsed, the Reserve Bank of New Zealand announced that it would begin accepting Residential Mortgage-Backed Securities (RMBS) as eligible collateral in its Domestic Market Operations. The announcement followed several months of growing strain in international wholesale funding markets, on which the New Zealand banks depended heavily for their offshore funding. By late 2008, with the global credit crisis fully developed, the RBNZ moved from accepting RMBS to requiring the major banks to construct RMBS issuance infrastructure as a condition of access to the central bank's standing liquidity facilities.

The mechanism worked like this: a major bank would construct a bankruptcy-remote special purpose vehicle, transfer a pool of residential mortgages into the SPV, and issue securities (the RMBS notes) backed by the cash flows from those mortgages. The bank could then pledge those notes as collateral with the RBNZ in exchange for short-to-medium-term central bank funding. The transaction did not move the mortgages off the bank's consolidated balance sheet for accounting purposes — the bank still reported the mortgages as its own assets — but it moved them into a legal structure where, in the event of the bank's failure, the SPV's noteholders (in this case primarily the RBNZ) would have a direct claim on the mortgage cash flows without going through the bankrupt parent bank's general creditor process.

In framework terms: the RBNZ was operationalizing the precise mechanism that this catalog's substitute-layer analysis identifies as the central pathology of modern monetary architecture. Mortgages, as illiquid claims on specific properties with idiosyncratic risk characteristics, are intrinsically low-saleability assets in Menger's sense. They cannot clear at scale under stress. The RBNZ scheme transformed them into paper claims (RMBS notes) that could clear at scale, by providing the central bank itself as the guaranteed counterparty. The substitute layer was being constructed by the central bank, as policy.

What the RBNZ publicly described as a "liquidity support facility" was, in framework terms, an instruction to the banking system: build the apparatus by which the central bank can convert your illiquid mortgage assets into central bank money on demand, and we will require you to have it in operational condition as a precondition of normal banking operations going forward. The instruction was unstated but unmistakable. The banks complied.

I arrived at the Bank of New Zealand — owned at the time, as it remains, by National Australia Bank (NAB), one of the "big four" Australian banks — in late 2008 as a contractor on the business intelligence team. The work I was hired to do was specifically the construction of the technical infrastructure for BNZ's RMBS program. There were two of us contractors, working alongside the bank's internal treasury team. The internal employees were senior treasury professionals, but the actual implementation of the trade-level systems, the data warehouse architecture for tracking the mortgage pools, the loan-level calculations, the reporting infrastructure required by the RBNZ — all of this was built by the two of us, contracted out, on accelerated timelines that reflected the RBNZ's expectation that the infrastructure would be operational within months rather than years.

Six billion in six months

The first phase of the work was the construction of the initial RMBS structure. The data warehouse was assembled from the bank's existing core mortgage system, with custom extract-transform-load processes built to produce the loan-by-loan pool data that the RBNZ's eligibility criteria required. Each mortgage going into the pool needed to be evaluated against the RBNZ's criteria: AAA-grade by external rating, loan-to-value ratio below specific thresholds, no payment delinquencies in the prior period, owner-occupier rather than investor property, located in defined geographic boundaries, with documentation completeness verified at the loan-file level.

The data integrity requirements were exacting. The RBNZ required monthly pool reports with loan-level transparency on payment status, prepayment behavior, LTV ratios marked to current valuations, delinquency status, and a range of derived risk metrics. The reports had to be auditable to the underlying loan documents. The systems had to operate continuously — these were not occasional reporting exercises but standing operational requirements that would persist for as long as the RMBS structure was in place.

We securitized approximately $6 billion in BNZ residential mortgages within the first six months of operations. This was, at the time, one of the largest RMBS issuances in New Zealand banking history. The notes were structured in tranches (the senior tranche typically AAA-rated, with smaller subordinated tranches absorbing first-loss risk), and the AAA notes were pledged to the RBNZ as collateral against central bank funding facilities.

The framework's reading is structurally precise: in six months, two contractors and a treasury team constructed the operational apparatus by which $6 billion of New Zealand residential mortgages became, for monetary purposes, claims on the Reserve Bank of New Zealand. The mortgages themselves had not changed. The houses they financed had not changed. The borrowers had not changed. What changed was the legal and operational structure through which the bank could convert these illiquid assets into central bank money under any market condition. The substitute layer was constructed, in this case, in six months.

This is the precise mechanism Fekete identified as the central pathology of post-1971 monetary architecture: paper substitutes for low-saleability assets, with central bank standing facilities as the ultimate counterparty, constructed under operational pressure rather than evaluated under normal supply-and-demand conditions. The Reserve Bank of New Zealand was doing, in 2008-2009, what the U.S. Federal Reserve did at the same time through the Term Auction Facility and the Primary Dealer Credit Facility, what the European Central Bank did through its expanded collateral framework, what the Bank of England did through its Special Liquidity Scheme. The New Zealand version is analytically valuable because the country is small enough — a $200 billion economy, four major banks, one central bank — that the entire mechanism can be observed end-to-end. There is no opacity from scale.

What I built afterward

The second contractor left after the initial six-month phase, with the core infrastructure operational. I stayed for another four and a half years, looking after the system and adding features as the program expanded.

The work during this period was less dramatic than the initial build but more structurally consequential. The RMBS program was extended to additional pools of mortgages — each one a new SPV, with its own data warehouse extracts, its own pool reports, its own integration with the central system. We constructed loan-to-value ratio calculations that reflected the New Zealand regulatory environment, which has, in my direct experience working with the treasurers, some of the strictest mortgage lending laws in the world. The most consequential feature of New Zealand mortgage law is the way guarantees transfer through participants: if you guarantee someone else's mortgage, and they in turn later guarantee a third party who defaults, the original guarantor's assets can be reached by the chain. This produces a household-level liability exposure that is materially different from the U.S. mortgage system and that the framework would read as imposing genuine saleability discipline on the New Zealand mortgage market at the borrower level.

In parallel with the RMBS program, BNZ's treasury team was building the covered bond program — a separate instrument with different legal structure but similar economic function. Covered bonds, unlike RMBS, are issued directly by the bank with a specific pool of mortgages set aside as cover, and they include explicit dual recourse (the bondholder has a claim against both the issuing bank and the cover pool). BNZ's covered bond program won industry awards for the best offering in its category, and the treasury team made multiple trips to Switzerland to engage with European institutional investors who held the bonds. We beat NAB — our parent bank, the much larger Australian institution that owned BNZ — to market with our covered bond program, and BNZ was specifically allowed to issue approximately $300 million in covered bonds in the Australian market despite the typical convention that subsidiaries do not issue ahead of their parent.

This is a small detail with structural consequences worth noting. The Reserve Bank of Australia, regulating NAB, did not have the same operational urgency as the RBNZ. The Australian banks had access to deeper offshore funding markets and less acute liquidity pressure. The smaller New Zealand subsidiary, operating under tighter RBNZ requirements, was building the substitute-layer infrastructure faster and at higher quality than its much larger parent. The framework reads this as evidence that operational substitute-layer construction is driven more by central bank requirements than by market demand for the resulting paper — the central bank's mandate creates the construction pressure, and the institutional rivalry between banks subordinates to the regulatory framework's specific demands.

The Christchurch earthquake

On February 22, 2011, at 12:51 PM local time, a magnitude 6.3 earthquake struck Christchurch, New Zealand. The earthquake killed 185 people, destroyed much of the central business district, and caused approximately NZ$40 billion in damage — the most expensive natural disaster in New Zealand history. It struck while I was at BNZ, working on the standard daily operations of the RMBS program.

The immediate operational consequence within the bank was the question of what to do with the BNZ-originated mortgages on properties in the affected Christchurch area. Some of those properties were destroyed entirely. Some had sustained severe damage. Many remained intact but were now subject to dramatically different valuations as the city's infrastructure damage, the geological hazards revealed by the earthquakes, and the regulatory response of the New Zealand Earthquake Commission collectively reshaped the market. The mortgages secured by those properties were no longer the same instruments they had been on February 21.

The decision the bank took, in close coordination with the RBNZ's RMBS oversight team, was to promptly remove all affected mortgages from the securitized pool. The mechanism for this is built into the RMBS structure: the issuer (BNZ) has the right to substitute mortgages in the pool, subject to the RBNZ's monthly reporting requirements and their threshold rules on the volume of substitution permitted between report dates. Within days, the Christchurch-affected mortgages had been replaced in the pool with mortgages from unaffected geographies of comparable quality. The pool reports filed with the RBNZ for the post-earthquake reporting period showed pool composition that no longer reflected the Christchurch exposure.

The framework's reading of this episode is exact and worth stating carefully. The mortgages secured by the destroyed and damaged Christchurch properties did not disappear. They remained on the bank's balance sheet, were still owed by the same borrowers, were still secured by the same physical properties (in whatever state those properties were now in), and represented real economic claims and obligations. What changed was their position in the substitute-layer apparatus: the mortgages whose saleability had been impaired by the earthquake were removed from the central-bank-eligible structure, and replaced with mortgages whose saleability remained intact. The framework reads this as the substitute layer working exactly as designed: it provides a mechanism for the bank to maintain its standing access to central bank liquidity even as specific underlying asset classes experience saleability impairment, by allowing the impaired assets to be moved out of the central-bank-eligible apparatus while remaining on the bank's general balance sheet.

The bank's risk on those mortgages was unchanged. The borrowers' obligations were unchanged. The properties' valuations were dramatically changed. The central bank's exposure to those specific mortgages, however, was eliminated within days of the event. The substitute layer protected the central bank's collateral position by allowing the bank to bear the saleability impairment on its own balance sheet rather than passing it through the RMBS structure. From a stability-of-the-banking-system standpoint, this is the design working as intended. From the framework's perspective, it is a precise illustration of how the substitute layer functions — the central bank's exposure is structurally protected while the underlying asset stress is borne elsewhere.

The bank-failure protocol

The most structurally revealing episode of my time at BNZ came in a meeting that, at the time, I treated as routine compliance work. The question on the table: what happens to the RMBS pool, and the mortgages it contains, if BNZ itself fails?

The answer, in the formal legal structure, is that the SPV holding the mortgages is "bankruptcy-remote" from the parent bank. If BNZ goes through resolution, the SPV continues to exist as a separate legal entity. The RMBS noteholders — primarily the RBNZ — retain their direct claims on the mortgage cash flows through the SPV structure. The mortgages do not become part of the failed bank's general creditor pool.

But the legal structure relies on operational capability. The SPV holds the legal interest in the mortgages, but the physical documentation — the original mortgage instruments, the property title evidence, the loan files — sits in BNZ's document storage facilities. If BNZ fails and is taken into resolution, access to the bank's physical premises, computer systems, and document storage may be disrupted. The RMBS noteholders (RBNZ) would have legal claims on assets they cannot operationally locate or service.

My specific contribution to addressing this risk was building software to physically back up the mortgage documentation onto external hard drives, on a regular schedule, so that the backup drives could be removed from BNZ's premises and held by the RBNZ or its designated administrator in the event of bank failure. The mortgage documents themselves were physical paper, scanned into the bank's document management system and stored as PDF images. My software extracted those images, along with the associated metadata (loan numbers, borrower identification, property addresses, balance information, security documentation references), and wrote them to external storage devices in a format that an independent administrator could read without requiring access to BNZ's internal systems.

The drives were physical, portable, and explicitly designed to be carried out of the building.

I want the reader to sit with this for a moment. A central bank required a major commercial bank to construct an operational apparatus that included, as one of its components, software for physically backing up the underlying mortgage documentation onto portable storage devices, specifically so that the documentation could be physically removed from the failing bank's premises in the event of resolution, so that the substitute-layer claims (RMBS notes held by the central bank) could continue to be enforced against the underlying mortgage assets even after the bank itself ceased to operate.

This is what the framework calls the operational substitute layer, in its precise operational form. It is not theoretical. It is software I wrote, drives I tested, procedures I documented for the RBNZ's review. The bank-failure protocol existed because the substitute-layer architecture requires it to exist — without operational continuity of the underlying mortgage documentation, the central bank's collateral position would be impaired in exactly the scenario the substitute layer was designed to address.

The framework's claim is not that this protocol is malicious or excessive. The protocol is rational within the constraints the system imposes on itself. The framework's observation is what the protocol's existence reveals about the system that requires it. A monetary architecture in which a major commercial bank's collapse requires the physical extraction of mortgage documentation by independent administrators is, in framework terms, an architecture that has already accepted as a design assumption that bank failure is a recurring operational possibility rather than a remote tail risk. The substitute layer exists precisely because the underlying institutions are not stable enough to be trusted as standalone counterparties. The central bank requires the apparatus because it cannot rely on the bank's own ongoing operations.

What the framework reads in this

Five observations follow directly from what I observed at BNZ.

First, the substitute layer is constructed under central bank mandate, not market demand. The RBNZ required the banks to build the RMBS apparatus. The banks complied because access to central bank liquidity was contingent on having the apparatus in place. The framework's reading: the substitute layer is not a market response to demand for mortgage-backed securities; it is a regulatory response to central bank requirements for eligible collateral. This distinguishes the operational substitute layer from naive demand-driven explanations and locates its construction logic precisely where the framework has been claiming it sits — at the central bank policy level.

Second, the substitute layer protects the central bank's position by externalizing saleability risk to the originating bank's general balance sheet. The Christchurch episode demonstrated this exactly. When specific underlying assets experienced saleability impairment, the mechanism for protecting the central bank's collateral position was to remove the impaired assets from the central-bank-eligible structure. The impairment did not disappear; it was borne by the bank rather than the central bank. The framework's reading: the substitute layer is not a risk-reduction mechanism for the system as a whole; it is a risk-allocation mechanism that protects the central bank's specific position.

Third, the underlying asset class's low saleability is not addressed by the substitute layer; it is masked by it. New Zealand residential mortgages in 2008-2013 were low-saleability assets in exactly the same Mengerian sense the framework has identified throughout this catalog. The construction of RMBS apparatus did not change the underlying saleability of New Zealand mortgages. It changed the appearance of the mortgages within the central-bank-eligible collateral system. The same mortgages, considered as standalone instruments, would have produced the same saleability profile after the RMBS construction as before. What changed was that the bank could now obtain central bank money against those mortgages on demand.

Fourth, the substitute layer requires operational infrastructure that contradicts its own stability claims. The bank-failure protocol I helped build for BNZ exists because the system designers accepted bank failure as a recurring operational possibility. A monetary architecture confident in the standalone solvency of its component institutions would not require software for physical extraction of mortgage documentation onto portable storage devices. The protocol's existence is direct evidence that the substitute layer's stability is conditional on operational continuity that the system designers themselves do not trust. The framework's reading: every operational substitute layer carries a built-in acknowledgment of its own fragility, encoded in the contingency arrangements its designers require.

Fifth, the operational substitute layer scales rapidly under central bank pressure. Six billion New Zealand dollars in mortgages were securitized within six months by a two-contractor team. The infrastructure expanded over the following five years to include additional pools, the covered bond program, the international issuance to Australian and European markets. The framework's reading: the speed of substitute-layer construction under central bank mandate is itself a structural variable worth tracking. The slow build-up of substitute-layer apparatus during stable periods can be followed by rapid expansion during stress periods, and the rapid-expansion phases are precisely when the underlying saleability questions are most acute.

What the public framework looks like

The Reserve Bank of New Zealand has, over the years since my time at BNZ, gradually expanded the public framework around its mortgage-backed securitization program. In 2017 it began developing the Residential Mortgage Obligations (RMO) framework — a standardized structure intended to support a private secondary market in addition to the central-bank-collateral function. The framework's reading of the RMO development is that it represents the RBNZ attempting to reduce its own contingent liability — to push the RMBS exposure from being held primarily by the central bank (which constitutes a structural concentration of liquidity risk) to being held by private market participants. The success of this transition has been incomplete; the secondary market has not developed at the scale originally hoped, and the RBNZ continues to be the dominant holder of New Zealand RMBS paper.

Current RBNZ rules limit central bank acceptance of RMBS to approximately 2% of the holder bank's gross assets, at a pricing rate of OCR plus 50 basis points. The 10% operations cap I remembered from my time at the bank has been tightened over the years as the RBNZ has worked to reduce its contingent exposure. The fundamental structure — banks construct RMBS, pledge to the central bank, obtain central bank funding — remains in place.

The framework's reading is that this configuration is stable in the operational sense — it has functioned without acute crisis since the 2008-2009 construction period — and unstable in the structural sense — the substitute layer remains, by design, a mechanism for translating low-saleability mortgages into central-bank-money equivalents, with all the structural consequences the framework has identified.

What the household reader should take from this

I want to be careful about what conclusions the framework draws from this firsthand account, because the temptation to over-claim is real and the framework's credibility depends on resisting it.

What the account establishes:

  • The operational substitute layer exists, is constructed under central bank mandate, and functions as the framework has been describing.
  • Its construction speed is rapid when under pressure (six months for $6 billion in New Zealand).
  • Its design includes contingency arrangements that acknowledge the institutional fragility of its component banks.
  • The underlying asset class's saleability properties are not addressed by the substitute layer; they are operationally masked.
  • The framework's structural claims about the substitute layer's function, derived from external analysis throughout the catalog, are confirmed by direct operational experience at one specific node.

What the account does not establish:

  • The substitute layer will fail. The New Zealand RMBS apparatus has not failed across seventeen years of operation. The Christchurch earthquake test, however local, was handled exactly as designed. The framework does not predict failure of any specific substitute-layer node; it predicts that the substitute-layer apparatus as a whole accumulates structural stress that will be visible at the points the apparatus does not protect.
  • Bank failures are imminent. The bank-failure protocol I helped build was contingency planning, not prediction. The fact that the protocol exists does not imply that BNZ or NAB are likely to fail in any specific time frame.
  • The U.S. operational substitute layer works identically to the New Zealand version. The mechanisms have structural similarities (central-bank-eligible collateral, paper substitutes for low-saleability assets, contingent claims that protect the central bank's position) but the specific operational details differ across jurisdictions.

The framework's value, for the household reader, is in the conceptual confirmation of what the substitute-layer analysis has been describing — and in the empirical observation that the apparatus is exactly as the framework's external analysis has been claiming it is. The mortgages in the BNZ RMBS pools were low-saleability assets that became, through operational construction, central-bank-money-equivalents. The aggregates I worked with daily — pool composition reports, payment statistics, LTV ratios, delinquency metrics — captured operational reality precisely while obscuring the structural reality that what I was building was a paper substitute for an underlying asset class whose saleability properties had not changed.

This is the framework's central observation about monetary architecture in 2026. The substitute-layer apparatus is real, operational, well-engineered, and constructed in good faith by professional people doing technically competent work — and it is the precise mechanism by which the underlying low-saleability properties of the dominant household asset class (housing finance) are converted into the appearance of monetary-grade liquidity. The framework does not need to allege fraud or incompetence. The framework needs only to make visible what the apparatus is and what it does. That visibility is what the analytical project of this catalog is for.

What this thread is for

Inside the Substitute Layer is a new thread within the New Austrian Economics catalog. It will hold a small number of essays over time — perhaps three or four total — anchored in specific institutional experiences that bear directly on the framework's structural claims. The thread is distinct from Watching the Cracks, which engages real-time external data, and from the closed thematic series of the framework's earlier essays.

The thread's editorial discipline: each piece is anchored in firsthand experience that the author can describe with operational specificity, presented through the framework's analytical apparatus, with explicit acknowledgment of what the firsthand account does and does not establish. The pieces are not exposés. They are not whistleblowing. They are framework-applied descriptions of specific institutional environments, presented for the reader to evaluate on their own terms.

The next likely entry in the thread will engage the enterprise software architecture work — the systems behind the customer-facing surfaces of major financial and operational institutions, where the framework's substrate analysis can be tested against the actual operational reality of how these systems are constructed and maintained. That essay is not yet written. The framework will continue to develop in this register as the catalog grows.

The watching continues. The framework's external diagnostic apparatus is now substantial, and the firsthand anchor that this thread provides gives the framework a kind of authority that external analysis alone cannot produce. The substitute layer is what the framework has been describing. I helped build one specific node of it. The framework's reading is what I have just described. The reader can evaluate the account on its own merits.


This is the first essay in "Inside the Substitute Layer," a new thread within the New Austrian Economics catalog drawing on direct institutional experience. The author worked at the Bank of New Zealand from late 2008 through early 2013, primarily on the RMBS infrastructure described above. All operational details are presented as direct recollection. The regulatory framework references are drawn from publicly available Reserve Bank of New Zealand documentation, which can be consulted at rbnz.govt.nz for independent verification of the institutional context.

Related essays

The Saleability Audit of Bitcoin: What Menger Would Say in 2026

Bitcoin maximalists insist Bitcoin is the most saleable monetary good ever created. Skeptics insist it doesn't work for the African villager or the rural Chinese citizen the maximalists invoke. Both positions miss what Menger's framework actually says when applied carefully. The audit produces uncomfortable results in both directions — Bitcoin scores remarkably well on some criteria and remarkably poorly on others — and the actual ground-truth of crypto adoption in emerging markets in 2026 is something neither camp accurately describes.

The Mengerian Stress Index: From Spec to Live Dashboard

Article 3 of this series proposed a quantifiable extension of Menger's saleability spectrum. This essay turns the proposal into a working framework: each of the five marketability proxies is defined precisely, the composite Mengerian Stress Index (MSI) is motivated, and the marketability half-life is operationalized as a regime-classification tool. The specific weights and calibration that drive the live MSI dashboard are deliberately not published; current readings live on the dashboard itself.

AI Compute as Nascent Real Bills: A Clearing Instrument for the Machine Economy

Fekete's most misunderstood idea — the Real Bills Doctrine — described how the 18th-century commercial economy spontaneously developed a short-duration, self-liquidating clearing instrument for goods in transit to the consumer. The 21st-century compute economy is developing the same thing, and no one is calling it what it is.