# Regulatory Sandbox Innovation Programs > SKILL: Regulatory Sandboxes & Innovation Programs - Skill: `nickgallick/regulatory-sandbox-innovation-programs` (Agent Skill) - Install (CLI): `npx skillmds@latest add nickgallick/regulatory-sandbox-innovation-programs` - Raw SKILL.md: https://api.skillmd.com/api/skills/nickgallick/regulatory-sandbox-innovation-programs/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: nickgallick (https://skillmd.com/u/nickgallick) - Updated: 2026-09-21 - Page: https://skillmd.com/skills/nickgallick/regulatory-sandbox-innovation-programs --- # SKILL: Regulatory Sandboxes & Innovation Programs **Version:** 1.0.0 | **Domain:** CFTC LabCFTC, SEC FinHub, State Sandboxes, Safe Harbors --- ## Federal Programs ### CFTC LabCFTC **What it is:** Innovation office within the CFTC. Facilitates engagement between the CFTC and fintech/crypto companies. **Contact:** LabCFTC@cftc.gov | 202-418-5000 | www.cftc.gov/LabCFTC **What it offers:** - "TechAdvisory" meetings: informal meetings with CFTC staff to discuss your business model - "TechForum": public workshops on emerging technologies - Does NOT grant formal exemptions, no-action letters, or registration decisions (those come from the operating Divisions) **Strategy for Nick:** - Request a TechAdvisory meeting describing the AI vs. Human prediction concept - Ask: "What registration category would you recommend for this structure? Is there a path to a no-action letter?" - Document the meeting and staff responses in writing (confirm in a follow-up email) - **This meeting is NOT binding on the CFTC** — but it's strong evidence of good faith and gets you pre-launch intel --- ### CFTC No-Action Letters **Authority:** Issued by Division of Market Oversight (DMO) or Division of Clearing and Risk (DCR) **What it does:** Staff states they will NOT recommend enforcement action against the specific structure described, under specified conditions. **Process:** 1. Draft request describing your business model in precise detail 2. Include: legal analysis of why your structure raises no-action concerns, requested relief (specific statement of what you want staff to confirm) 3. File with the relevant Division (for prediction markets: DMO) 4. Staff may request supplemental information 5. Staff issues a no-action letter or declines **Timeline:** 3-12 months (varies widely) **Cost:** $20K-$50K in legal fees for a well-drafted request **Critical precedent — CFTC Letter No. 14-130 (PredictIt, 2014):** - Full text: https://www.cftc.gov/sites/default/files/idc/groups/public/@lrlettergeneral/documents/letter/14-130.pdf - Granted to Victoria University of Wellington to operate PredictIt as an academic research platform - Conditions: maximum 5,000 traders per market; maximum $850 position per trader; operated for academic research purposes only - Revoked: 2023 (CFTC provided no detailed explanation; PredictIt is litigating the revocation) - **Iowa angle:** The Iowa Electronic Markets (IEM) at the University of Iowa is the oldest continuously operating prediction market in the US, predating PredictIt. IEM operates under its own no-action arrangement. If Nick partners with the University of Iowa for an AI prediction calibration research project → this is the EXACT pathway to a similar no-action letter. **Other relevant CFTC no-action letters:** - CFTC Letter No. 12-17: relates to event contracts generally - CFTC Letter No. 93-16: early prediction market guidance --- ### SEC FinHub (Office of Strategic Hub for Innovation and Financial Technology) **Contact:** FinHubContact@sec.gov | www.sec.gov/finhub **What it offers:** Meetings to discuss token structures, investment product innovation, and registration pathways **Strategy for token questions:** Before ANY token launch, request a FinHub meeting. Present your Howey analysis and ask what additional facts SEC staff would want to see to confirm the token is not a security. Document the response. **FinHub statements on specific crypto issues:** - No formal rulemaking, but published a "Framework for 'Investment Contract' Analysis of Digital Assets" (April 3, 2019) at: https://www.sec.gov/corpfin/framework-investment-contract-analysis-digital-assets - This framework is staff guidance, not a rule — not binding post-Loper Bright but still informative --- ### SEC Regulation A+ (Mini-IPO) **Authority:** Securities Act of 1933, as amended by JOBS Act of 2012; Rules 251-263 of Regulation A, 17 C.F.R. §§ 230.251-230.263 **Tier 1:** Up to $20M offering; requires state "Blue Sky" registration in each state where sold **Tier 2:** Up to $75M offering; preempts state registration (only SEC review required); requires audited financials **Who can participate:** Non-accredited investors (general public) — unlike Reg D which limits to accredited investors **Process:** 1. File Form 1-A with SEC (offering circular) 2. SEC reviews (typically 1-3 rounds of comments) 3. Once "qualified" by SEC: begin offering 4. Ongoing reporting: annual reports (Form 1-K), semi-annual (Form 1-SA), current reports (Form 1-U) **Token projects using Reg A+:** - Blockstack (now Stacks): first SEC-qualified Reg A+ token offering ($23M, 2019) - Props by YouNow: qualified Reg A+ token offering ($10M, 2020) **Timeline:** 3-6 months for qualification **Cost:** $100K-$300K in legal, accounting, and SEC filing fees --- ## State Sandbox Programs ### Wyoming — Most Crypto-Friendly State **Wyoming DAO LLC Act (2021):** - Wyoming Revised Statutes §17-31-101 through §17-31-115 - First purpose-built DAO entity legislation in the US - "Algorithmically managed" LLC: smart contract governance recognized as legally binding on the LLC **Wyoming SPDI (Special Purpose Depository Institution):** - Wyoming Statute §13-12-101 et seq. - Crypto-friendly bank charter: can custody digital assets, issue stablecoins - Kraken Financial obtained this charter (2020) - Exempts from state MTL requirements (SPDIs are banks) - Cost: significant (bank charter-level compliance) **Wyoming FinTech Sandbox:** - Limited formal sandbox, but the state's overall regulatory posture IS the sandbox - Best use: incorporate a Wyoming DAO LLC for any DAO governance structure --- ### Utah Regulatory Sandbox **Authority:** Utah Code Ann. §§ 13-70-101 et seq. (Financial Regulatory Sandbox Act) **What it offers:** 2-year testing period for innovative financial products WITHOUT full licensing requirements **Administrator:** Utah Department of Commerce, Division of Consumer Protection **Application:** sandbox.utah.gov **Accepted types:** Fintech, crypto, lending, payments — has accepted crypto companies **Key limitations:** Only covers activities within Utah; participant must have Utah presence; population of Utah limits market size for testing **Best use:** Test your product legally in Utah for 2 years while building the compliance infrastructure for broader launch --- ### Arizona FinTech Sandbox **Authority:** A.R.S. §§ 41-5601 through 41-5612 **What it offers:** 2-year testing period, maximum 10,000 consumers **Administrator:** Arizona Attorney General's office **Less restrictive entry requirements** than Utah; Arizona AG has been reasonably receptive to crypto applications **Note:** Arizona prohibits certain skill-based competitions — paradoxically, the sandbox might let you test a competition structure there --- ### Nevada SB 164 (2023) Innovation Sandbox **Authority:** Nevada Revised Statutes Chapter 657, SB 164 (2023) **What it offers:** 2-year sandbox period with reduced compliance requirements for innovative financial products **Less developed** than Utah and Arizona programs; watch for evolution --- ### Iowa — No Formal Sandbox (Yet) - Iowa has NOT passed a fintech sandbox law - **Strategy:** Engage the Iowa AG's office and Iowa Division of Banking PROACTIVELY before launching. Iowa regulators are not aggressive innovators but are not hostile either. - Consider advocating for Iowa fintech sandbox legislation — Nick as an Iowa entrepreneur has credibility to push for this --- ## International Sandboxes (If Going Offshore) ### UK FCA Regulatory Sandbox **Contact:** regulatory.sandbox@fca.org.uk | www.fca.org.uk/innovation/regulatory-sandbox **What it offers:** 12-month testing period with FCA authorization for specific test parameters; individualized guidance; potential for restricted authorization **Cohort-based:** Applications open periodically; FCA selects participants; currently on Cohort 10+ **Best use:** If building a UK-facing prediction market or DeFi product; FCA sandbox gives credibility and regulatory cover for EU/UK users --- ### Singapore MAS FinTech Regulatory Sandbox **Contact:** fintech@mas.gov.sg | www.mas.gov.sg/development/fintech/regulatory-sandbox **What it offers:** Relaxed regulatory requirements for testing innovative financial services with real customers in Singapore **Fast Track:** For lower-risk activities, MAS offers a faster process ("Sandbox Express") **Singapore crypto framework:** Payment Services Act (PSA) provides clear licensing framework for digital payment token services; Major Payment Institution license for larger operations **Best use:** If you want an Asia Pacific presence; Singapore provides the regulatory legitimacy path --- ### Dubai VARA (Virtual Assets Regulatory Authority) **Contact:** www.vara.ae **What it offers:** Multiple license types specifically for crypto: exchange, broker, advisory, custody, lending, VA management **Timeline:** Faster than US or UK; Dubai actively recruits crypto companies **Free Zone options:** DMCC Crypto Centre, DIFC Innovation Hub — 0% corporate tax in free zones **Best use:** If going offshore, Dubai gives legitimate regulatory status + 0% tax + access to MENA markets --- ## The Hester Peirce "Token Safe Harbor" Proposal *Not adopted but intellectually important* **SEC Commissioner Hester "Crypto Mom" Peirce proposed (twice):** - Version 1.0 (February 2020): 3-year safe harbor from securities laws for initial token distributions - Version 2.0 (April 2021): updated version with additional disclosure requirements **Conditions in the proposal:** - Development team publicly discloses: token holdings, business operations, financial data, technical architecture - Working toward "decentralization" of the network within 3 years - Semi-annual updates to the public - After 3 years: network is sufficiently decentralized OR team registers with SEC **Status:** Never adopted (SEC voted it down). With crypto-friendly administration potentially returning, this concept could be revived. **Why it matters:** It's the intellectual framework that a crypto-friendly SEC might adopt. Monitor for revival. If adopted, it would dramatically change the token launch landscape. --- *This is legal research and intelligence, not legal advice. Consult qualified legal counsel before taking action.*