VPAY Genesis is a five-layer stack — physical hardware (GSU) → on-chain attestation → token + vault economics → intelligence layer (NANANOM) → institutional API. Each layer is independently inspectable. Each layer enforces the layer above it.
Nothing happens without the layer below it. The token cannot mint without the contract; the contract cannot accept without the hardware; the hardware cannot sign without the seal.
Every other "tokenized gold" project is a trust contract — somebody, somewhere, signs a paper saying bullion exists. VPAY Genesis is different. The contract that mints $SOV will not move unless eight independent physical and cryptographic gates pass simultaneously, in the same sealed reading, within the same 200-millisecond window. This is the primitive invention. This is the IP that makes deception economically irrational. We call it the Physics Gate.
What the Physics Gate produces is a Digital Twin of the bar — a cryptographically signed, on-chain representation that mirrors the physical asset with hardware-rooted fidelity. From the moment the eighth gate latches, the bar exists in two places at once: in the vault, and on the chain. The Digital Twin is the asset institutions can custody, lend against, settle in, and audit at the speed of light — because every claim it makes can be traced back to a sealed physical reading no human signed.
require(scaleMass.delta(xrfMass) < 50mg)require(spectrum.match(NIST_Au, ±0.5%))require(SovereignNode.contains(gps))require(seal == INTACT)require(t_sig - t_read < 200ms)require(SovereignNode.isRegistered(devicePub))require(operatorSig.verify(reading))require(!nonceUsed[d][n] && blockhash(anchor) == seenHash)require() statements in AttestationBridge.sol. The enforcement is on-chain, public, and unmodifiable except via the Safe multisig — and the Safe cannot disable a gate, only swap which oracle interprets it.A sealed, tamper-evident measurement device. Built around an embedded Raspberry Pi for cost; deployable at PMMC assay offices, GoldBod weigh-in stations, refinery weigh-in interfaces, and any licensed collection point across the gold supply chain.
Concept render · TIER 2 reference unit, scale: 250 × 200 × 80 mm. The display state above is a sample of a 67%-complete attestation — Au 99.94%, mass 47.2 g, GPS-locked at PMMC Accra, sealed in 200 ms, 8/8 physics gates passed.
Calibrated load cell with anti-tamper drift detection. Reports gram-precision with timestamped variance.
X-ray fluorescence (XRF) spectroscopy. Identifies the spectral signature of the lot — fingerprint, not just a number.
Location, environmental conditions, device health all captured with the reading. Sealed bundle.
The bundle is signed by a hardware-rooted key on the GSU. Unsigned readings are rejected at the bridge.
seal_broken flag. The bridge auto-rejects any reading from a flagged unit until re-certified.
Ten contracts. Polygon Mainnet. 100% Polygonscan source-verified. All admin role authority sits behind a Gnosis Safe multisig (2-of-2 today, migrating to 2-of-3); the deployer EOA holds zero admin rights post-migration.
| Contract | Purpose | Address | Status |
|---|---|---|---|
| SovereignToken ($SOV) | ERC-20 + AccessControl, 100M fixed supply | 0x5833…0eC0 ↗ | Verified |
| CircuitBreaker | Global + per-node pause; anti-flash-resume | 0xeaef…47d4 ↗ | Verified |
| SovereignNode | GSU registration + physics attestations | 0x85fd…2fe1 ↗ | Verified |
| MinerRewards | $SOV rewards for GSU operators | 0xfcb7…db19 ↗ | Verified |
| AttestationBridge | "No verification, no token" enforcer; holds MINTER_ROLE | 0x0ba2…b8b0a ↗ | Verified |
| VPAYVault | Gold-collateralised lending (95–150% over-collateral) | 0x8e0c…7165 ↗ | Verified |
| GuardianBond | Guardian accountability via $SOV/$ETH staking | 0x180a…2ff1 ↗ | Verified |
| KommitBridge (v1.2) | Proof of Reasoning · pre-inference commit + bond + challenge + operator-credit distribution | 0x6B98…590E ↗ | Verified |
| SOVVesting | Founder allocation · 12-month cliff · 4-year linear · irrevocable | 0x4529…69F1 ↗ | Verified |
| MasieBridge (v1.0) | Proof of Witness · third leg of the verification trinity · keccak-256 candle hash on every trade | 0x358c…22F6 ↗ | Verified |
$SOV is an ERC-20 backed strictly by hardware-attested, on-chain-recorded physical gold. Mint formula: SOV = (g × XAU/USD) ÷ 1,000 — value tracks the gold price. Burn returns the underlying claim.
100M tokens hard cap. Founder allocation locked in SOVVesting with 12-month cliff and 4-year linear schedule.
The token contract grants MINTER_ROLE only to AttestationBridge. The bridge will not mint without a confirmed hardware attestation.
5% of each mint routes to MinerRewards (operator pool). 95% to the recipient. Both flows are recorded on-chain.
Institutional gold exposure without the metal leaving Ghana. Working capital collateral. Programmable settlement.
VPAYVault is a working-capital facility for institutional counterparties holding attested $SOV reserves — custodians, exchanges, treasury operations, sovereign reserve managers, and integrated commodity desks. Loans are priced against a Chainlink XAU/USD feed with 1-hour max staleness and 95–150% over-collateralisation depending on counterparty tier. The collateral is on-chain-verifiable; the underlying gold never leaves Ghanaian custody.
In Asante tradition, a sovereign claim requires an act of matter (visible, undeniable), an act of mind (declared, accountable), and a witness who keeps the record (Mate Masie — what I hear, I keep). We rebuilt all three in Solidity. AttestationBridge proves matter. KommitBridge proves mind. MasieBridge keeps the track record.
The on-chain receiver that refuses to mint a single $SOV unless a hardware-rooted GSU has signed the physics — mass, purity, GPS, cryptographic seal. Admin is fused: deployer EOA holds zero authority post-migration.
View on PolygonscanProof of Reasoning. Before any inference is published, the reasoner commits a hash of model-weights + context + seed + intended output and posts a bond. Anyone can challenge. Off-chain oracle replays. Divergence slashes — 50% bounty to challenger.
How Kommit worksProof of Witness. Every paper-leverage trade lands an on-chain commitment at entry and at exit — anti-replay, anti-backdate, with a free public verifyTrade(). Track records become mathematical. Architecture committed · pending Safe-administered Polygon deploy.
Matter attested + mind attested + witness kept = the network has the standing to call something sovereign. $SOV is what comes out the other side: a token the contract refused to mint without all three.
Token mechanicsVPAY attests gold from any LBMA Good Delivery refinery. The protocol does not encode a single source — refinery identity is part of the attestation payload, not a hard-coded address. Three canonical world references for the standard the framework aligns with:
Every Genesis attestation is read by the Ananse intelligence layer: a multi-agent orchestration system where ten specialised modules — each named in the Akan engineering tradition — analyse market state, geopolitical risk, microstructure, news flow, and physical attestation health. Their verdicts converge on Okomfo Anokye, the orchestrator. Together they form the Council of Eleven.
An attestation of matter answers what — there is gold, here, weighed, sealed. An attestation of mind answers who reasoned what, against which model, with which seed, in what context. Without that, an intelligence layer is a black box: accountable to no one, replayable by no one, slashable by no one. Kommit closes the loop. The same rule of evidence applied to AI itself.
commit(keccak(modelHash, ctxHash, seedCommit, outputHash), bond)challenge(commitId, replayedHash, counterBond)revealSeed(commitId, seed); oracleSlash(commitId, canonicalHash)require(canonicalHash != reasoner.outputHash) // slash + bountyIf matter must be proved and mind must be proved, so must the track record. Hedge fund performance numbers are claims — even audited records are auditor-attested. Mate Masie turns the paper-leverage track record into a mathematical witness. Every trade leaves an on-chain commitment at entry. Another at exit. Anyone with a keccak-256 implementation and Binance candle data can verify any one of them — for free, on-chain, forever. The math is the audit.
openWitness() on Polygon with the trade ID, pair hash, E8 entry price, side, leverage, entry timestamp, and the keccak-256 hash of the canonical Binance entry-candle bytes.
exists gate makes replay impossible. The entry timestamp must land within ±60 seconds of block.timestamp — the TS_DRIFT window makes backdating a winning trade from last week impossible.
closeWitness() commits exit price, exit timestamp, realised PnL (signed E8), the exit-candle hash, and an exit-reason taxonomy: TP · SL · time · signal-flip · council-retreat. Both witnesses are irrevocable.
verifyTrade(tradeId, candleBytes) is a public view function. Anyone — investor, regulator, journalist — recomputes keccak-256 over a Binance candle and matches it against the stored hash. The match is the proof. No one is in the trust loop.
decisionHash field is optional · it can link directly to a KommitBridge outputHash, marrying the Mind and Witness covenants on a single trade.
Three role-based access tiers. WebSocket streams for live attestations and compliance alerts. Token verification, device management, audit endpoints. The mock spec is public; production API tiers are in onboarding.
Counterpart on the operator side: GenesisOS — the institutional operations terminal, powered by the Ananse intelligence layer. Where this API surfaces the Truth Layer to consumers, GenesisOS is the command pane the EcoVent team uses to operate it.
Token verification at point of trade. Reserve attestation queries. Real-time mint/burn feed.
Explore endpoints ›GET /v1/token/verify/{"{address}"}
Point-of-trade token verification · <50ms
WS /v1/stream/attestations
Live mint/burn feed · WebSocket
GET /v1/reserves/summary
Current reserve proof · 10k req/hr
Device registration. GSU health monitoring. Per-node attestation history with hardware identity.
Explore endpoints ›GET /v1/devices/{"{nodeId}"}/health
Live GSU hardware status · tamper state
GET /v1/devices/{"{nodeId}"}/attestations
Full per-node attestation history
POST /v1/devices/register
Register new SovereignNode · Safe-gated
Full audit access: every attestation, every reserve movement, every admin action. Compliance is observable, not asserted.
Explore endpoints ›GET /v1/audit/attestations
Full immutable attestation trail · date range
GET /v1/audit/reserves
Every reserve movement · timestamped
WS /v1/stream/compliance-alerts
Real-time compliance event stream
Yes. $SOV is a claim against attested physical reserves held in Ghana under licensed custody. The token is not a synthetic — every mint corresponds to a hardware-rooted physical reading on-chain.
Only AttestationBridge — and only when it has received a confirmed hardware attestation from a registered SovereignNode. The token contract grants MINTER_ROLE to no other address. The deployer EOA cannot mint.
The GSU is sealed, hardware-rooted, and tamper-evident. Each device holds a registered key bound to a SovereignNode entry on-chain. Any seal-break or unsigned reading is rejected at the bridge. CircuitBreaker can pause a node globally.
All meaningful admin roles sit behind a Gnosis Safe multisig at 0xFc93…8A67 (2-of-2 today, migrating to 2-of-3). The deployer EOA holds zero admin rights post-migration (2026-04-20). Founder allocation is in irrevocable vesting.
Sub-cent transaction costs, Ethereum-compatible tooling, mature audit ecosystem, credible neutrality — and as of 8 May 2026, a 1.75-second block time, the chain's first such upgrade since launch, explicitly targeted at institutional adoption and stablecoin payments. The chain is now moving toward exactly the audience VPAY serves. Contracts remain L1-portable if circumstances change.
Public on GitHub at ecovent-africa/vpay-sovereign (branch foundry-round2). Mirror on Polygonscan source-verified for every deployed contract.
Every claim on this page is a click away from a verified contract on Polygonscan. The Foundry test suite, the deploy broadcasts, and the audit reports all travel with the source. Build on it, audit it, or argue with it — the artifacts are sufficient for any of those.