Seller protocol
Verify identity, submit property evidence, and tokenize — only once a human reviewer has signed off.
- Selfie
- Upload
- Review
- Tokenize
- ENS
Selfie Check (World ID)
Proof of a live human, without a document upload — the seller gate.
Only session active/expiry info is shown. The raw World nullifier or proof is never kept on screen or in localStorage. The dev bypass above skips real World verification entirely — testing only, never in the real demo.
Submit Property Documents
Up to 3 files, PDF/PNG/JPEG, 5MB each.
PDF, PNG or JPEG · up to 3 files · 5MB each
Document bytes and salts stay server-side only; the response carries just the Merkle root.
Selfie verification is required first.
Verifier review
A human reviewer checks each submission before a signed attestation makes tokenization possible.
Sign in
Use the admin secret to see pending properties.
The secret lives only in this session's memory — never written to code, env, or localStorage.
Buyer flow
Resolve the property from ENS, prove KYC-eligible identity, then settle a transfer on Hedera.
- ENS
- Association
- Identity/KYC
- Buy
- Evidence
Demo helpers
Seed PROP-001 (the KYC-denied and secondary-fee golden scenes run on top of it).
Run this between rehearsals. It forgets used World proofs only — seeded properties, sessions and chain state survive.
Development only — returns 404 in production. Re-seed before the secondary scene: each run permanently moves shares from buyer1 to buyer2.
Pick a property
Golden scenes run on PROP-001; type any live property id.
Discovery is live and settlement is checked. The client resolves each property's config from ENS on demand, and before any share moves /api/buy refuses the transfer if ENS names a token this protocol did not create. ENS is the check, not yet the source of the token id.
Pick an account + Association
buyer1/buyer2 are KYC'd test accounts; nokyc is deliberately un-KYC'd.
/api/health returned no id for buyer1. Check the backend's .env, or paste the id above.
Being associated does not grant a right to buy — only KYC does.
Read the ENS config first.
Identity Check → KYC
World Identity confirms a unique human over 18; a TokenGrantKycTransaction fires server-side.
Only age≥18 is requested; no name, address, nationality, or document image is collected, and the raw proof is never stored.
Read the ENS config first.
Buy
primary: fresh property (treasury exemption, no fee) · secondary: buyer1→buyer2 (2% fee above 50 shares — below that the 1-share floor dominates) · nokyc: deliberate rejection