Security & Compliance Notes

• No PII on-chain → only timestamps, epochs, risk flags.

• Sanctions updates → epoch increments automatically.

• KYC timestamp → dApps enforce jurisdictional freshness rules.

• Smart wallets → supported via ERC-1271 signatures.

• Audit trail → commitmentRoot links back to Midnight proofs.

This model aligns with FATF ongoing due diligence, AML directives, and GDPR by separating long-term KYC validity from short-term sanctions updates.