Trust record
“Who is the custodian? Who verifies? Who is behind this?” are the right questions. This page answers them with records, not claims: every line is a governance-signed clearance, a chain read, or a count of signed statements. Where a record does not exist, it says so. 16 of 16 structure items are on record right now.
Generated Oct 21, 2026, 04:03 UTC. The same data: GET /api/trust.
The structure
Each item is a clearance signed by a governance key naming the sha256 of the document behind it (an entity registration, a counsel opinion, an executed agreement) and an expiry. A lapsed or revoked clearance drops every feature that needs it to OFF on the next read.
- Operating entityOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- KYC and AML programOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Sanctions screeningOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Jurisdictions reviewOn recordself-declared by operatordocument not published
document 34a9a862db…047317 · signed by 0x4120…3fce · Oct 5, 2026, 06:25 UTC · until Oct 5, 2027, 00:00 UTC
- Money transmission reviewOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Securities reviewOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Tax reviewOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Custody agreementsOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Arbiter agreementsOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Insurance reviewOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Token legal opinionOn recordself-declared by operatordocument not published
Counsel sign-off 2026-09-29 (Marcello, Rita, Bakisa); operator sign-off 2026-09-29 · document 0ec2e4e118…7352cb · signed by 0x4120…3fce · Sep 30, 2026, 01:15 UTC · until Sep 30, 2027, 01:15 UTC
- Flap platform reviewOn recordself-declared by operatordocument not publishedlive bytecode matches
reviewed Flap Portal EIP-1967 implementation · document d632b404ac…e728c1 · signed by 0x4120…3fce · Oct 18, 2026, 00:59 UTC · until Oct 16, 2029, 23:59 UTC
- Terms of ServiceOn recordself-declared by operatordocument not published
counsel approved consolidated legal docs 2026-10-20 · document b5ecb76fd9…589435 · signed by 0x4120…3fce · Oct 20, 2026, 12:44 UTC · until Oct 20, 2027, 12:44 UTC
- Privacy PolicyOn recordself-declared by operatordocument not published
counsel approved consolidated legal docs 2026-10-20 · document 41e1047d75…55aa20 · signed by 0x4120…3fce · Oct 20, 2026, 12:44 UTC · until Oct 20, 2027, 12:44 UTC
- Risk disclosureOn recordself-declared by operatordocument not published
counsel approved consolidated legal docs 2026-10-20 · document 8c37003638…c227e5 · signed by 0x4120…3fce · Oct 20, 2026, 12:44 UTC · until Oct 20, 2027, 12:44 UTC
- Fee scheduleOn recordself-declared by operatordocument not published
counsel approved consolidated legal docs 2026-10-20 · document 85e65ce89c…dcf07b · signed by 0x4120…3fce · Oct 20, 2026, 12:44 UTC · until Oct 20, 2027, 12:44 UTC
Who stands behind the clearances
Declared policy: operator signature suffices for LIVE- Clearances on record
- 30
- Self-declared by operator
- 30
- Independently attested
- 0
- Registered external attesters
- 0
DECLARED policy: a current governance-signed clearance is enough for LIVE. Each self-declared clearance LIVE rests on is listed as a warning; nothing here was independently audited or reviewed unless its row says who attested it.
Provenance is derived, never declared: a clearance is “self-declared by operator” until an attester governance registered (and who is not a governance key, the protocol signer or an operator-run entity) countersigns that exact document and code hash. The same data: GET /api/launch (clearances[].provenance) and GET /api/launch/attesters.
Who decides
The people who confirm what the stakers vote are not the operator. They are identified council members: legal name, country, registry id, a public profile, a verified identity, a $5,000.00 bond and a signed oath. Once 3are seated, every confirmation needs a council majority and the operator's key is refused. Below that number the operator seats founding members, and the record says so.
Council of confirmers
Operator bootstraps: 0 of 3 seatedNo one has stood for the council yet. Until 3 identified people are seated, the operator's governance key confirms vetters alone.
The keys
Governance
- Chain
- Robinhood Chain
- Funds
- simulated ledger, no funds move
- Governance Safe
- 0x89d3a33d8a0a42d376f85d23a99C90B72DB3e5F4
- Timelock (7 days, admin renounced)
- 0x02FF3DEDfbb98a381f6C3e03E685d560Fe6F8750
- Protocol signer
- 0x796d27097D98067BB851EF01caA59080B16c2535
- Off-chain governance keys
- 0x4120098dbe027fc582ae5cc8df48f246901a3fce
- Vetter council
- required: no direct vetting
- Operator rails
- on
What the operator can do
- Seat the founding council members (at most three, ever, on 180-day terms) and confirm vetters only while fewer than two members are active; after that, confirmations need a council majority (both members, at two) and the operator key is refused.
- Suspend any attestor at once (an emergency brake). For a community-seated vetter the suspension lapses in 14 days unless a council majority ratifies it.
- Switch the operator-run settlement rails (its own arbiters, reviewer, custodian, intake, carrier oracle) on or off.
- Record and revoke legal clearances and feature stages; a revoked clearance drops the feature to OFF on the next read.
- Hold the key that salts the arbiter and inspector draws: the draw cannot be ground by a party, but the operator is trusted for the salt until it is a VRF.
- Run the off-chain ledger. Until escrows are on-chain, balances are entries the operator's servers keep; the hash chain makes tampering evident, not impossible.
- Record a CONTRACT_AUDIT or counsel clearance without an external signer; such records are marked self-recorded on this page and carry OPERATOR_DECLARATION provenance until a registered auditor or counsel countersigns them.
- Register the external attesters whose countersignatures count — but not itself: a governance key, the protocol signer and operator-run entities are refused by the registry.
What it cannot do
- Vet a non-operator attestor directly: with the council required, the route refuses (HOLDER_VOTE_REQUIRED).
- Confirm anything alone once two identified council members are seated (COUNCIL_REQUIRED), or sit on that council itself.
- Grant a vetter more than the scope the stakers voted on.
- Vote: governance keys are excluded from every council vote.
- Shorten the 7-day timelock: its admin role is renounced; proposals and cancellations need the 2-of-3 Safe.
- Make a photo or a document count: attestations carry weight only from vetted, independent, bonded attestors.
- Declare a clearance audited or counsel-approved: provenance is derived from who signed. A governance signature alone is always "self-declared by operator", whatever the reference text says.
- Pick which vetter inspects an item: the draw is a keyed hash over everyone eligible, and the salt is published.
- Change an escrow's terms after the buyer committed, or move funds between accounts outside the recorded transitions.
The contracts
- OwnifyEscrowAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x04415e61B605391A9A96230E191A024791fab068 · code 0xaca59dbd…940815 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnifyDisputesAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x2c6669CfcF6122fF6820Bf4e03C8Dd42DC54C29B · code 0x9297bcd5…13eee1 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnifyVaultAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x6b92AdfA7588d8b63fb419Ed8935268A08521695 · code 0x3d3fe30e…129ca5 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnifyRolesAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x26486665668b60F1A7458C45b83d48166aDE1f3e · code 0x950ce622…94ec45 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnifyAssetsAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x17DCa3fDeCfe30Da84fd3d02141484827221C91d · code 0x29a77418…f4872d · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnifyComplianceAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x54A1799C76AdF501C277297AE3C58fED099CB73d · code 0x24c8f03b…1ee2f0 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- FeeDistributorAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0xb27F775ECA0823f35Ad7C811e80b9C8b92E7b88b · code 0xb23d72c0…052dfc · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- RevenueDistributorAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x150668c7110268b61168723231B378a0b7b80a6F · code 0x4e702128…f93d85 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- BuyoutModuleAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0xAB1057DC0B4D7D8C8fF8fc0d77E5B4e720eD5CE6 · code 0xc4563c89…529bd3 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- InsurancePoolAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x4883AB409D696E64451B2fd1e2Ef03aBEc6e9a56 · code 0xd99a0fa6…7cfb32 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnTokenAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0xb933a37616ded5df47b92fbfd425223da4e77777 · code 0x1f7329ac…2615b6 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnStakingAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x8aA8EaD35429749d742e35e4B722D8464DC98936 · code 0xb9744a15…670839 · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- OwnTaxReceiverAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0xaee1895DD4E5C1c7D6b0D5D416813F70bDa72923 · code 0xdea44a15…97d86e · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
- TimelockControllerAudit clearance on record (operator)self-declared by operatordocument not publishedlive bytecode matchesBytecode matches recorded hash
0x02FF3DEDfbb98a381f6C3e03E685d560Fe6F8750 · code 0x6e2c65e5…f66eba · deployed runtime bytecode keccak256 (re-verified on-chain 2026-10-18)
An audit row proves one thing by code: the deployed runtime bytecode equals the hash the clearance names. Whether a third-party audit stood behind that hash is a question of who signed: a row reads “self-declared by operator” until a registered auditor countersigns that exact code hash, and only then does it read “independently attested by” them. Under the default DECLARED policy a self-declared audit still satisfies the LIVE gate; under INDEPENDENT it does not.
Who verifies, who holds
Vetters
- Seated
- 6
- operator
- 6
- In-person inspectors
- 0
- Countries served
- —
Seated by a staker vote and a governance confirmation, or by identity + bond + endorsements; drawn by hash, never chosen by the seller; slashed when overturned. Every record is public.
Custodians
1 custodian- Ownify operator custodian · ownify-operator-custodianoperator-run
serves · bond $0.00 of $0.00 required · 0 custody and other attestations · 0 overturned
An “operator-run” custodian is Ownify's own, behind the rails switch, for the beta. The design goal is named third-party vaults seated through the council; until one is, this line is the honest answer to “who is the custodian”.
Arbiters: Ownify operator arbiter 2 (operator-run), Ownify operator arbiter 1 (operator-run).
What backs the guarantee
Reserve
simulated ledger- Insurance pool
- $0.00
- Open orders
- 0
- Guaranteed exposure
- $0.00
- Coverage
- no open exposure
- Per-order cap today
- $0.00
A buyer whose vetted item is ruled counterfeit is paid from the seller bond, then the vetter bond, then this pool: at most $25,000.00 and 25.00% of the pool per order, so one claim cannot empty it. Exposure counts every open order at its capped amount, inspected or not — a conservative figure.
Check it yourself
- GET /api/assets/:id/provenance returns the hash chain and chainIntact; scripts/verify-signatures.mjs re-walks it and re-recovers every signature.
- GET /api/launch lists every clearance with its derived provenance, every feature stage and the governance log; GET /api/launch/attesters is the attester registry and GET /api/launch/clearances/:item/attest the attestations with their signatures.
- GET /api/vetters lists every seated vetter, proposal and application; GET /api/vetters/profile/:address is one vetter's record.
- Every dispute and inspection publishes its draw salt; the pick is eligible[sha256(id || salt) mod n].
Third parties
Every outside service the trust stack leans on, with one of five labels: implemented+tested, deployed+verifiable, integrated with a real third party, operationally active with signed agreements, or needs external action. A test adapter is never active protection, whatever the code can do.
- TEST serial registry (models The Watch Register) · otherNot active — test adapter
TEST adapter: deterministic fixture, nothing external
- TEST ship-in authenticator (models an institutional council vetter) · authenticationNot active — test adapter
TEST adapter: deterministic fixture, nothing external
- TEST custodian intake (models an insured third-party vault) · custodyNot active — test adapter
TEST adapter: deterministic fixture, nothing external
- The Watch Register (Art Loss Register group) · otherneeds external action
Document-ingestion interface: the certificate is hashed and countersigned; no API, no scraping. NEEDS EXTERNAL ACTION: open a Watch Register business account and set OWNIFY_WATCH_REGISTER_ACCOUNT; API terms are by contact only and are not assumed
- Stoll & Co. (Dayton, Ohio) · authenticationneeds external action
Ship-in lane for an institutional council vetter: the report is the drawn inspection's AttestationV2. NEEDS EXTERNAL ACTION: outreach, service agreement, council nomination with an https profile, E&O certificate and a real bond; then set OWNIFY_PROVIDER_STOLL_CO_ATTESTOR and _FEE_USD.
- Malca-Amit New York (vault / FTZ facility) · custodyneeds external action
Custodial intake by portal export: intake receipt and certificate of insurance are hashed on the record; custody attestations come from the seated CUSTODIAN key. NEEDS EXTERNAL ACTION: founder enquiry, NDA, storage agreement with declared-value liability, certificate of insurance naming the platform and buyers, then a council seat for the custodian key; set OWNIFY_PROVIDER_<ID>_ACCOUNT, _ATTESTOR and _FEE_USD
- GIA Report Results API (Gemological Institute of America) · otherneeds external action
Grading-report interface for jewellery and gemstones: document ingestion, plus the documented GraphQL lookup when GIA credentials are configured. NEEDS EXTERNAL ACTION: open a GIA lab account and apply for Report Results API access in the Client Portal; set OWNIFY_PROVIDER_GIA_ACCOUNT (document mode) or _API_URL + _API_KEY (API mode)
- PSA (Professional Sports Authenticator) — cert verification · otherneeds external action
Cert-lookup interface for graded cards: document ingestion, plus the documented REST lookup when a PSA token is configured. NEEDS EXTERNAL ACTION: create a PSA account, accept the API End User Agreement and generate a token; set OWNIFY_PROVIDER_PSA_ACCOUNT (document mode) or _ACCESS_TOKEN (API mode); set _FEE_USD only from PSA's own terms
- Entrupy (authentication certificates for bags, sneakers, apparel) · authenticationneeds external action
Document-ingestion interface with a webhook contract for the Enterprise integration; Entrupy's own webhook signature is not implemented until its reference is read under an account. NEEDS EXTERNAL ACTION: subscribe to an Entrupy plan (API only on Enterprise) and set OWNIFY_PROVIDER_ENTRUPY_ACCOUNT and _FEE_USD from the plan bought; webhooks need OWNIFY_PROVIDER_WEBHOOK_SECRET_ENTRUPY and the Enterprise integration
- NGC (Numismatic Guaranty Company) certification — coins · otherneeds external action
Grading-cert interface for coins: document ingestion of the NGC verification record; no API. NEEDS EXTERNAL ACTION: confirm NGC's dealer / verification terms on ngccoin.com (page not retrievable on 2026-10-20); then set OWNIFY_PROVIDER_NGC_ACCOUNT and _FEE_USD from the engagement
- CGC (Certified Guaranty Company) certification — comics, cards · otherneeds external action
Grading-cert interface for comics and cards: document ingestion of the CGC verification record; no API. NEEDS EXTERNAL ACTION: confirm CGC's verification terms on cgccomics.com (page not retrievable on 2026-10-20); then set OWNIFY_PROVIDER_CGC_ACCOUNT and _FEE_USD from the engagement
- Vehicle inspection report (mobile inspection service: WeGoLook, Lemon Squad, AiM) · authenticationneeds external action
Field-inspection interface for vehicles: document ingestion of the inspection service's report; no API published by any of the three on opened pages. NEEDS EXTERNAL ACTION: open a corporate account with a mobile inspection service (Lemon Squad corporate: partner@wrench.com, (888) 231-7965; WeGoLook: Custom Solutions via wegolook.com/get-started; AiM: site empty on fetch); then set OWNIFY_PROVIDER_VEHICLE_INSPECTION_ACCOUNT and _FEE_USD from the engagement
- Vehicle title and history report (NMVTIS-approved provider) · otherneeds external action
Title-registry interface for vehicles: NMVTIS report and title certificate hashed and countersigned; an undisclosed brand is a MATCH and blocks verification. NEEDS EXTERNAL ACTION: open a commercial account with an NMVTIS-approved provider; then set OWNIFY_PROVIDER_VEHICLE_TITLE_HISTORY_ACCOUNT and _FEE_USD from the engagement
- Precious metals assay / refiner certificate (LBMA Good Delivery refiner) · otherneeds external action
Assay-certificate interface for bullion and precious metals: document ingestion; the LBMA list is the issuer standard, not an integration. NEEDS EXTERNAL ACTION: engage an assay office or LBMA-listed refiner for re-assay where no original certificate exists; then set OWNIFY_PROVIDER_PRECIOUS_METALS_ASSAY_ACCOUNT and _FEE_USD from the engagement
- Real-estate deed and title commitment (ALTA-member title company) · otherneeds external action
Title interface for real estate: deed and title commitment hashed and countersigned. No marketplace category maps to REAL_ESTATE_V1 today. NEEDS_LEGAL_REVIEW: conveyancing is local law; whole-item sale and fractions are NEEDS_LEGAL_REVIEW, on-chain settlement NOT_SUPPORTED (lib/policy) NEEDS EXTERNAL ACTION: engage a title company for the property's state; nothing here is a conveyance; then set OWNIFY_PROVIDER_REAL_ESTATE_TITLE_ACCOUNT and _FEE_USD from the engagement
- Equipment / machinery appraisal (ASA MTS or AMEA-certified appraiser) · authenticationneeds external action
Appraisal interface for equipment: document ingestion of a credentialled appraiser's report. NEEDS EXTERNAL ACTION: engage a credentialled appraiser per job; then set OWNIFY_PROVIDER_EQUIPMENT_APPRAISAL_ACCOUNT and _FEE_USD from the engagement
- Art authentication / condition report and provenance (foundation, estate or independent service) · authenticationneeds external action
Authentication-report interface for art: document ingestion of expert opinions and the loss-register certificate; attribution opinions are documents, not lab results. NEEDS EXTERNAL ACTION: engage the relevant foundation / service per work; open an Art Loss Register account; then set OWNIFY_PROVIDER_ART_AUTHENTICATION_ACCOUNT and _FEE_USD from the engagement
- Revenue statements (platform / payer statements for a revenue stream) · otherneeds external action
Statement interface for revenue streams: document ingestion only. NEEDS_LEGAL_REVIEW: selling a revenue right is likely a security and factoring touches money transmission (docs/launch-readiness/LEGAL_REQUIREMENTS.md §2.1–2.2); every real-money operation is NEEDS_LEGAL_REVIEW in lib/policy NEEDS EXTERNAL ACTION: none for the documents themselves; a SECURITIES_REVIEW clearance before any real-money sale; then set OWNIFY_PROVIDER_REVENUE_STATEMENTS_ACCOUNT and _FEE_USD from the engagement
- State-licensed escrow company (fiat buyer funds) · escrowneeds external action
No escrow adapter is registered; no agreement is signed.
- Insurer or custodian all-risks cover at declared value · insuranceneeds external action
No INSURANCE_REVIEW clearance names a seated custodian.
- Identity verification (today: manual operator approval) · idvNot active — test adapter
Compliance approvals are recorded by the operator; no third-party IDV vendor is integrated.
- drand League of Entropy beacon (draw randomness) · randomnessneeds external action
Draws are salted by the server HMAC until the beacon commit contract has an address.
Draw randomness
Server HMAC salt
operator-keyedDraws are salted with HMAC(server key, id || request signature). The salt is published so the draw can be re-run, but the operator holds the key and is trusted not to grind it. The drand commit-reveal beacon replaces this once its contract is audited and deployed by the Safe.
What protection means
Per loss type: the headline is the smaller of the listing price and the sum of Verified applicable caps. Sources never stack across loss types, each record is counted once, and a simulated or test figure is never Verified while real funds are on.
- Insurance · protects against loss or damage in custody
A policy issued by a licensed insurer, or a custodian's contractual all-risks liability at declared value, covering physical loss or damage. Evidenced by a certificate hash recorded as an INSURANCE_REVIEW clearance for the custodian's legal entity, and applicable only while a current custody attestation by that custodian covers this item.
- Escrow · protects against non delivery, not as described
Buyer funds held by a licensed third party, or by the on-chain OwnifyEscrow when real funds are live. Protects against non-delivery and not-as-described inside the inspection window. Never protects against a later counterfeit finding.
- Collateral · protects against counterfeit, not as described, seller default
Seller and vetter bonds actually held: on-chain registry or vault balances once real funds are live; simulated ledger entries count only in simulated mode. Slashable to the buyer by ruling.
- Professional guarantee · protects against counterfeit
A third party's own published guarantee on its opinion (an authenticator's guarantee, or errors-and-omissions cover). Counted only when the provider record carries the document hash and the provider is integrated or operational under signed agreements.
- Protocol reserve · protects against counterfeit, not as described
The insurance pool. Pays at most the smaller of $25,000, 25% of what the pool holds today and the listing price, for authenticity disputes only, and only after the seller bond and the vetter bonds.