Security & Compliance

• No PII on-chain → only commitments, timestamps, epochs.

• Revocation model

  • Sanctions → epoch increments.

  • Risk score → leaf updates.

  • KYC → re-run required after expiry window.

• Auditability → regulators can resolve midnight_ref for historical proof.

• Trust anchor → Fairway signature ensures integrity.

Never leak raw jurisdiction names or document types in leaves. Use codes (ISO country, KYC level integers).