Eligibility without
disclosure.
A regulated offering verifies that an investor is accredited and in an accepted jurisdiction — without learning who they are, where they live, or which tier they actually hold.
Issuer
Transfer agent, fund administrator or KYC provider
Signs a claim about an investor and publishes only its public key.
Cannot prove eligibility on an investor's behalf — it never receives their secret.
Venue
The regulated offering
Configures the issuer key once, publishes the countries it serves and the tier it requires.
Cannot learn who arrived, where they live, or how accredited they are.
Investor
The holder
Generates their own secret, receives a signed credential, proves eligibility.
Cannot inflate their tier, extend the expiry, or reuse someone else's credential.
Run the flow
Issues a credential, proves eligibility, and verifies the proof on chain.
Where this stands
On-chain verification runs on devnet. The mainnet verifier carries the circuit once that program is upgraded; the proof and the verification logic are identical on both.
Credentials carry a validity window and there is no revocation list yet, so an issuer that changes its mind is expressed by declining to re-issue. Until revocation ships, offerings that need tighter control should issue for hours rather than weeks. Read the trust model before relying on this in production.