Silver Passport · Architecture

How it works

← VaultMarketplaceProof of ReserveRedemptions

A verified seller mints a CoinPassport on Sui for each physical coin; the photo, the reserve audit trail, and every redemption are sealed on Walrus. Buying and selling run through a Kiosk under a royalty policy. Anyone can re-derive the whole picture straight from Sui and Walrus — the pages below trust no server.

ACTORS SUI TESTNET · silver_passport::passport WALRUS · blob storage IN-BROWSER VERIFIERS · re-read Sui + Walrus directly, no server trust Verified Seller approved by operator: legal name · EIN · W-9 Buyer Holder VerifierRegistry shared object · gates who may mint CoinPassport owned object · seq · product · weight_mg purity · silver_content_mg · photo/evidence blob Kiosk + TransferPolicy listings · 1% royalty enforced on sale redeem → burn consumes passport · emits Redeemed · deletes events: PassportMinted · Redeemed · VerifierAdded Coin photos one image blob per passport Reserve attestation chain hash-linked · records prev blob id + sha256 append-only · tamper-evident · durable epochs Redemption certificates bailment-closed proof · txDigest + full provenance Public aggregator anyone fetches any blob · no server in the path mint gates upload photo list buy · royalty becomes periodic audit redeem seal certificate re-verify re-verify vault · index · market — live on-chain reserve, per-coin verify, marketplace pricing chain · redemptions · independent · portfolio — re-derive reserve, re-check every hash AI auditor: Ollama qwen3:30b · deterministic checkpoint fallback (SKIP_OLLAMA)
VERIFIED-SELLER MINT
Only operator-approved wallets (legal name, EIN, W-9) sit in the registry; an unverified scammer simply cannot create a passport.
KIOSK + ROYALTY
Listings settle through a Kiosk under an on-chain TransferPolicy that enforces a 1% royalty on every sale.
HASH-LINKED AUDIT
Each reserve snapshot is stored on Walrus carrying the previous blob's id and SHA-256 — an append-only, tamper-evident chain.
REDEEM = BURN + CERT
Claiming the metal consumes the passport on-chain and seals a redemption certificate on Walrus, closing the bailment.
DURABILITY
Proof blobs (attestations, certificates) are written with long storage epochs and renewed before they can lapse.
TRUSTLESS BY DESIGN
The verifier pages recompute the reserve and re-check every hash directly against public Sui RPC and the Walrus aggregator.