Tokenize the World · Live Infrastructure
A $50M restricted treasury transfer is being approved by an autonomous compliance system.
Fifteen years from now, the issuers, custodians, chains, and AI operators involved in this decision may no longer exist.
The asset must still prove why it existed and on whose authority.
Related · tier-1 reading. For what a portable artifact actually is, see Portable Artifact.
All institutional state collapses into one permanent replayable fact. The same primitive survives chain migration, asset-class expansion, AI-policy evolution, and institutional turnover — without redesigning the verification model. One click. Two scenes.
one button · ~90 seconds · carries through both scenes
Live institutional state
idle
Authority graph · institutional nervous system
scope: approve_transfer:acme.treasury
Delegator
Carol (approver)
↓
authority · pending
Subject
Agent ZERO · Acme Treasury Compliance
Live timeline · bundle entries
Canonical preservation
idle
— events
↓
— actions, 5 FHE gates each
↓
— authority transitions
↓
— total bytes on disk
↓
Canonical commitment · SHA3-256 of bundle bytes
awaiting observation
size32 bytes
compressionnone
algorithmSHA3-256
post-quantumattested
Same 32 bytes. Any chain. No redesign.
Ethereum · live anchor
Bitcoin · H33-74 on Bitcoin
Solana · Solana-Privacy live (devnet)
Polygon · Polygon-Privacy live
Zcash
+ any 32-byte calldata or OP_RETURN target
Every policy decision, authority state, encrypted evaluation, and signature you just watched — collapses into one 32-byte canonical fact. Not compressed. Fully post-quantum attested. The primitive is identical for a $50M restricted token, a sovereign bond, or a 200-page prospectus.
The primitive never grows with institutional complexity. It remains 32 bytes whether the system processes one tokenized treasury note or one hundred million institutional assets across every chain on earth. Verification scales constantly. Institutional infrastructure usually does not.
Survivability across decades
idle
asset state · canonical commitment
—
ML-DSA-65
lattice · module-LWE
3293 B · FIPS 204
awaiting
FALCON-512
NTRU · SIS
666 B · NIST L1
awaiting
SLH-DSA-128f
hash-only · SHA2
17 088 B · FIPS 205
awaiting
Three independent failure domains attach to the same 32 bytes. Lattice, NTRU/SIS, and hash-only — break any two and the third still holds. Asset size: irrelevant. A 32-byte fact and a 200-page bond prospectus are sealed identically — no per-asset cryptographic redesign.
Institutional continuity should not depend on one cryptographic assumption surviving the next 20 years. Three families means three independent twenty-year bets — and an asset that outlives any one of them.
Enforcement without plaintext
idle
What the agent saw
ciphertext c0—
ciphertext c1—
policy hash—
gate bits5 / 5 pass · 5-bit leakage
scopeapprove_transfer:acme.treasury
What the agent never saw
beneficial ownerwithheld
KYC documentswithheld
asset NAVwithheld
restriction listwithheld
counterparty PIIwithheld
The agent enforced policy without surrendering plaintext institutional state.
Replayable legitimacy
Every encrypted gate, every authority transition, every state binding — reconstructable, by anyone, without trusting us. The verifier runs in your browser. We are not in the room.