Technology
Each ounce carries its record, and only verified holders can receive it
The record shows where the gold came from and who checked it. What each person can open depends on their role.
Access by role
Four kinds of user, four levels of access
Mine owners stay protected, buyers see enough to decide, and reviewers see the claims they were asked to test.
| What | Public | Mine owner | Verified buyer | Reviewer |
|---|---|---|---|---|
| How the standard works and the glossary | Yes | Yes | Yes | Yes |
| An asset's file: origin, rights, reviews, risks | No | Their own file only | The whole file for an asset they are considering | The claims they were asked to test |
| The mine's name and location | No | Their own | No, country of origin only | Only when the review needs it |
| Sign a finding | No | No | No | Yes, with their name and the date |
| Hold and transfer ounces | No | No | Yes, to other verified holders | No |
On-chain permissions
The ounce itself refuses an unverified wallet
Ounces are issued as permissioned tokens. The rules sit in the token, so no app or person can move an ounce to someone who hasn't been checked.
- 1
The buyer is checked
Identity and eligibility checks, run before the buyer can hold anything.
- 2
The wallet gets an identity
The buyer's wallet is linked to an on-chain identity that records those checks.
- 3
Every transfer is tested
The token reads the receiving wallet's identity and refuses the transfer if a check is missing.
- 4
Files stay off the chain
The chain records who holds each ounce. The asset's file stays private and opens by role.
The evidence file
Every asset's file has the same four parts
Because the parts never change, a buyer can compare one asset with another side by side.
Origin and miner
Who owns the mine, its permits and how much it has produced, with records that trace the gold.
What you own
What the contract gives you, what is still owed and when delivery happens.
Outside review
Lab tests, technical reports and legal checks, each with a date and the reviewer's name.
Risks and terms
What could go wrong, and what the contract says happens if it does.
Batch lookup
Trace a batch without learning where the mine is
Verified buyers and reviewers will be able to enter a batch number and see when the gold was mined, the country it came from and when it was reviewed. The mine's name, location and site photos stay private.1
- Batch number
- SAMPLE-0001
- When it was mined
- Month and year
- Country of origin
- Country only. No site name or coordinates.
- Lab test
- Report title, date and who did it
- Technical report
- Report title, date and the qualified person
- Delivery records
- Refinery assay, vault receipt and bar list
How the record works
Five rules the record follows
The software enforces these rules, so nobody has to take them on trust.
Every entry has an author and a date
Nothing sits in the record without a name and a time.
Reviewers sign their own findings
A finding is recorded exactly as the reviewer wrote it.
Corrections are added, never overwritten
The history stays visible, so a change can be traced.
Access follows role
Each reader opens only the parts their role allows.
Facts can be confirmed without exposing the data
Where a fact must be confirmed without showing what lies behind it, privacy-preserving proofs do the job.
- Batch lookup is planned. The sample above shows the fields it will carry.
ETALON