We wrote a paper on why you don't own your AI tokens — and a framework for fixing it