# Architecture Overview

#### Core Components

* **Compliance UTXO**
  * Holds root, timestamp, epoch, signature, midnight reference.
  * Updated when sanctions/risk lists change, or when new users are onboarded.
* **Merkle Proofs**
  * Submitted by users in transactions.
  * Leaf = `{ address, claims, kyc_verified_at }`.
* **Policy Engine (Aiken)**
  * Verifies membership, signature, timestamp vs. max-age, and sanctions epoch freshness.
* **Trust Registry (future)**
  * Will manage Fairway issuer keys + versioning.

***

#### Mermaid (high level)

```mermaid
flowchart LR
  A[User completes KYC once] --> B[Vault stores PII + kyc_verified_at]
  B --> M[Midnight proof UTXO posted]
  M --> C[Compliance UTXO root, kyc_verified_at, sanctions_epoch, sig]
  C --> D[dApp Validator]
  D -->|Proof verified, timestamp ok, epoch fresh| E[YES → allow]
  D -->|fail| F[NO → deny]

```

<figure><img src="https://3812774301-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlfDULdwa6BuKx0DZyvBO%2Fuploads%2Ft9FwHnqX6yY1b5k2VMW0%2FScreenshot%202025-10-02%20at%2013.15.22.png?alt=media&#x26;token=ae85086a-c3d6-468b-9739-5af813223459" alt=""><figcaption></figcaption></figure>