Asset-Liability Matching Policy¶

Protocol — instantiates Duration-Matched Commitment Design

Requires long-duration commitments to be funded by sufficiently stable sources or paired with liquid coverage and contingency paths.

Version: v1 · 2026-08-24 · History
Mechanism #: 484
Type: Protocol
Form family: Rule, Policy & Commitment
Solution family: Scheduling & Pacing
Problem family: Timing, Transition & Path-Dependence Failure
Problem subfamily: Delay, Duration, Decay & Temporal Binding
Origin domain: Economics & Finance
Also from: Accounting & Auditing, Operations Research
Instantiates: Duration-Matched Commitment Design

An Asset-Liability Matching Policy is a standing, ex-ante funding rule: nothing long-dated may be booked unless it is backed by funding stable enough to survive the resource's release horizon — or unless the residual mismatch sits inside a declared duration-gap limit and is cushioned by a liquid coverage floor. Its defining move is that it acts at origination, on the whole book, so that timing mismatch never accumulates past a governed width in the first place. That is what separates it from the mechanisms that watch or react to mismatch after it exists: this policy is a gate on how you fund, not a monitor of what you funded and not a trip-wire that fires once a threshold is already crossed.

Example¶

A life insurer sells twenty-year fixed annuities — long, predictable liabilities that pay out on a slow clock. The investment desk, chasing yield, would happily back them with floating-rate paper and short repo that reprices every quarter. Left alone, that spread looks profitable and hides a duration mismatch: the promises run for two decades, the funding turns over every few months. The Asset-Liability Matching Policy is the rule that stops this at the desk. It sorts assets and liabilities into duration buckets and states, for each bucket, a maximum portfolio duration gap — say, no more than roughly half a year between the weighted duration of assets and of the liabilities they back — plus a liquid coverage floor that any residual gap must be cushioned by. When the desk proposes adding a ten-year bond funded by rolling three-month repo, the policy blocks the trade unless the gap it opens stays within the limit and the coverage floor is posted. The insurer still earns a mismatch spread; it just earns it inside a runway it has decided in advance it can survive.

How it works¶

Bucket both sides by tenor. Sort obligations and the resources backing them into duration bands, so a one-day claim is never netted against a twenty-year asset merely because their nominal amounts match.
Set a gap limit per band. Declare the maximum tolerable duration gap for each band — the policy's core number — above which a commitment cannot be added without remediation.
Attach a coverage floor to the residual. Any mismatch left inside the limit must be paired with a minimum of immediately usable or reliably convertible resource, sized so a refresh failure over the funding's own horizon is survivable.
Enforce at origination. The test runs before the commitment is booked; a proposal that breaches either the gap limit or the floor is repriced, restructured, or rejected — not logged for later.

Tuning parameters¶

Gap tolerance width — how wide a duration gap each band may carry. Tighter matching buys resilience but forgoes mismatch yield and can force costly hedging; looser tolerance restores efficiency at the cost of fragility.
Coverage floor multiple — how much cushion a residual gap must carry. Raising it hardens the book but freezes capital in low-return liquidity.
Bucket granularity — a few coarse bands or many fine ones. Fine buckets catch subtle mismatches but multiply the constraints a desk must satisfy.
Hard vs. soft limit — whether a breach is an absolute veto or a flag requiring sign-off. Hard limits are un-gameable but brittle in genuine exceptions.
Scope — which commitments fall under the policy at all; too narrow a scope lets mismatch migrate to the exempt corner of the book.

When it helps, and when it misleads¶

Its strength is prevention at the source: because the rule bites before a mismatch is booked, the book never drifts into a gap nobody chose. It is the discipline behind immunization — structuring assets and liabilities so their durations offset and surplus is insulated from a timing shock.^[1]

Its failure mode is that a matching rule is static while the world is not. Durations shift as rates move, as options in the assets exercise, and as behavior changes — so a book matched at inception can drift out of match without a single new trade, and a policy checked only at origination will not notice. The classic misuse is over-matching: forcing near-perfect duration alignment everywhere makes the balance sheet rigid and expensive, trading away the very mismatch spread that made the business viable, all to buy resilience the firm could have bought more cheaply elsewhere. A related abuse is gaming the buckets — labeling a callable or behaviorally short asset as long-dated so it appears to match. The guarding discipline is to re-measure durations on a cadence, not only at origination, and to let a separate monitor watch the standing gap rather than trusting the origination gate to keep holding.

How it implements the components¶

duration_gap_limit — the policy is the declared ceiling on tolerable mismatch per duration band; every origination decision is tested against it.
liquid_coverage_floor — it requires any residual gap to be paired with a minimum of liquid or contingency coverage sized to the funding's own refresh horizon.

This policy sets aggregate limits; it does not re-engineer the notice, withdrawal, or replenishment terms of individual commitments (commitment_tenor_inventory, locked_resource_release_profile) — that is Notice-Period or Lock-Up Alignment — nor does it embed the conditional trip-wire that acts after a breach (early_warning_refinancing_signal, maturity_rebalancing_authority), which is Triggered Maturity-Rebalancing Clause.

Instantiates: Duration-Matched Commitment Design — this policy is the ex-ante funding constraint that keeps the archetype's mismatch inside a governed width.
Consumes: Maturity Ladder Analysis supplies the duration measurements the gap limit is tested against.
Sibling mechanisms: Committed Backup Facility · Contingency Funding Playbook · Duration Gap Dashboard · Liquidity Coverage Floor Metric · Maturity Ladder Analysis · Notice-Period or Lock-Up Alignment · Rollover-Failure Stress Test · Staggered Maturity Refinancing Schedule · Triggered Maturity-Rebalancing Clause

Editorial Notes¶

Form Classification¶

Form family: Rule, Policy & Commitment

Rationale: Requires long-duration commitments to be funded by sufficiently stable sources or paired with liquid coverage and contingency paths, making its operative form a standing constraint, permission, threshold, obligation, or conditional rule.

Independent corroboration: The frozen evidence defines Asset-Liability Matching Policy as 'Requires long-duration commitments to be funded by sufficiently stable sources or paired with liquid coverage and contingency paths', so its operative form is Rule, Policy & Commitment.

Review outcome: Independent reviewer agreement; high confidence.

Origin Attribution¶

Primary origin: Economics & Finance

Origin pattern: Single lineage

Present-day reach: Specialized

Rationale: Actuarial and fixed-income finance developed duration matching and immunization of asset cash flows against liability horizons.

Related originating lineages:

Accounting & Auditing — Balance-sheet controls measure liquidity and mismatch exposure.
Operations Research — Portfolio optimization allocates assets subject to duration and coverage constraints.