Abstract
The Prop Trust Verified Standard (PTVS) v1.0 presents a deterministic, four-pillar architecture for the physical verification of tokenized Real-World Assets (RWAs) within the European regulatory framework.
PTVS resolves the “Physical Oracle Gap” — the structural inability of Distributed Ledger Technology (DLT) systems to attest to the physical existence, structural integrity, and legal encumbrances of off-chain assets backing tokenized securities.
The standard integrates four complementary layers: (1) on-site forensic inspections conducted by sworn judicial experts under eIDAS 2.0 Qualified Electronic Signatures (QES), (2) off-chain SHA-256 canonical hashing for cryptographic lineage, (3) on-chain Verifiable Claims injected via the PTVSClaimInjector smart contract with automated circuit breakers, and (4) a decentralized network of Prop Trust Certified Experts (PTCEs) ensuring geographic and jurisdictional coverage.
PTVS v1.0 has been formally submitted to the four European Supervisory Authorities (ESMA, EBA, EIOPA) and the European Central Bank (ECB/SSM), permanently registered at CERN/Zenodo, HAL/CNRS, OSF, and the U.S. Copyright Office, and is governed by the PTVS Technical Board — an open, multi-stakeholder governance body inspired by W3C and ISO models.
This Reference Architecture document establishes the definitive technical specification, capability matrix, and implementation guidelines for PTVS v1.0, serving as the authoritative reference for institutional adoption, regulatory review, and future standard evolution.
Keywords: Physical Oracle, RWA Tokenization, MiCA, eIDAS 2.0, ERC-3643, T-REX, Verifiable Claims, Circuit Breakers, Forensic Engineering, PFOI, PTVS
Executive Summary
2.1 The Problem
The European tokenization market has achieved regulatory clarity under Regulation (EU) 2023/1114 (MiCA), yet the physical-digital bridge remains architecturally under-specified. While MiCA establishes comprehensive requirements for reserve verification (Art. 36), custody obligations (Art. 45), and investor protection, it contains a structural blind spot: no mechanism exists to deterministically verify the physical state of Real-World Assets backing tokenized securities.
This gap — which we define as the Physical Oracle Problem — creates systemic risk:
- Toxic RWAs: Assets with hidden structural pathologies, legal encumbrances, or environmental damage are tokenized without verification
- Information asymmetry: On-chain compliance is perfect, but physical reality is opaque
- Institutional risk: Banks, insurers, and pension funds cannot meet Solvency II, IORP II, or Basel III requirements without physical verification
- Regulatory exposure: MiCA Art. 36 reserve requirements cannot be demonstrated without physical attestation
2.2 The Solution
PTVS v1.0 resolves the Physical Oracle Problem through a four-pillar deterministic architecture:
| Pillar | Function | Technology |
|---|---|---|
| I | On-site forensic inspection | eIDAS 2.0 QES + PDF/A + RFC 3161 |
| II | Cryptographic lineage | SHA-256 canonical JSON hashing |
| III | On-chain enforcement | PTVSClaimInjector.sol + circuit breakers |
| IV | Decentralized expert network | PTCE Network (85/15 revenue split) |
2.3 Key Differentiators
PTVS v1.0 is not a price oracle (like Chainlink), not a proof-of-reserve mechanism (like traditional PoR), and not a traditional audit methodology (like Big Four engagements). It is the first standard specifically designed for the physical verification of tokenized RWAs, combining:
Core Differentiators
- Judicial admissibility: eIDAS 2.0 QES ensures forensic reports have equivalent legal effect to handwritten judicial reports
- Cryptographic determinism: SHA-256 canonical hashing ensures tamper-evident lineage
- Automated enforcement: Smart contract circuit breakers trigger protective actions upon physical degradation
- Decentralized execution: PTCE Network ensures no single entity controls verification
2.4 Institutional Validation
PTVS v1.0 has been validated through:
- 4 regulatory submissions (ESMA, EBA, EIOPA confirmed, ECB/SSM via ADITO)
- 1 industry submission (INATBA RWA Working Group)
- 4 permanent scientific registries (CERN/Zenodo, HAL/CNRS, OSF, U.S. Copyright)
- Open-source implementation (PTVSClaimInjector.sol, MIT License)
- Technical Board governance (17 seats, W3C-inspired)
Introduction: The Physical Oracle Problem
3.1 Definition
The Physical Oracle Problem is the structural inability of Distributed Ledger Technology (DLT) systems to attest to the physical existence, structural integrity, and legal encumbrances of off-chain assets backing tokenized securities, Asset-Referenced Tokens (ARTs), and Eurosystem collateral.
3.2 Regulatory Context
European regulation mandates physical verification but does not specify mechanisms:
MiCA Regulation (EU 2023/1114)
- Art. 36: Issuers of ARTs must maintain reserves “sufficient to cover claims” at all times
- Art. 45: Crypto-asset service providers must segregate and safeguard reserve assets
- Unresolved question: How does the issuer prove the physical asset still exists and retains value?
Solvency II Directive (2009/138/EC)
- Art. 84: Insurers must value investments with “appropriate methods” ensuring reliability
- Unresolved question: How is physical degradation (e.g., structural pathology) reflected on-chain?
Eurosystem Collateral Framework (Guideline EU 2015/510)
- Eligible collateral must meet “high credit standards” verified periodically
- Unresolved question: What oracle attests to physical condition of real estate collateral?
eIDAS 2.0 Regulation (EU 2024/1183)
- Qualified electronic signatures have equivalent legal effect to handwritten ones
- Unresolved question: How is a qualified judicial attestation injected into DLT systems?
3.3 Failure Modes Without Physical Verification
Absent deterministic physical verification, the following failure modes emerge:
- Structural degradation: A tokenized building develops aluminosis or reinforced concrete carbonation. The token continues trading at pre-degradation value.
- Hidden encumbrances: A tokenized vessel is arrested in port under maritime lien. The token’s smart contract shows no change in status.
- Environmental damage: Tokenized agricultural land suffers soil contamination. The on-chain representation remains unchanged.
- Insurance lapse: Physical asset loses insurance coverage. Token holders are unaware of increased risk exposure.
- Custodial failure: Physical asset is damaged in custody. No mechanism alerts token holders.
3.4 Why Existing Oracles Cannot Solve This
- Price oracles (Chainlink, Pyth, Band Protocol) provide market data feeds but cannot verify physical state.
- Identity oracles (ONCHAINID, T-REX) provide compliance verification but cannot attest to physical integrity.
- IoT sensors provide continuous data but lack judicial admissibility. A sensor can report “humidity 82%” but cannot produce a legally binding forensic attestation.
- Traditional audits (Big Four, local firms) produce PDF reports but lack cryptographic anchoring and automated enforcement.
PTVS v1.0 bridges all these gaps by combining judicial authority, cryptographic integrity, smart contract automation, and decentralized execution.
PTVS Architecture Overview
4.1 Four-Pillar Design
PTVS v1.0 is organized into four complementary pillars, each addressing a distinct layer of the Physical Oracle Problem:
4.2 Data Flow
The complete verification flow follows this sequence:
- Physical Asset → PTCE Expert (on-site inspection)
- → PDF/A Report (ISO 19005)
- → QES Signature (eIDAS 2.0) → RFC 3161 Timestamp
- → Canonical JSON (deterministic serialization)
- → SHA-256 Hash (cryptographic lineage)
- → PTVSClaimInjector.sol (smart contract) → Verifiable Claim (on-chain)
- → ERC-3643/T-REX (identity layer) → Circuit Breaker Actions (automated enforcement)
4.3 Design Principles
PTVS v1.0 is governed by five design principles:
- Determinism: Every verification produces the same result given the same inputs
- Judicial admissibility: All evidence meets eIDAS 2.0 standards for legal proceedings
- Cryptographic integrity: SHA-256 hashing ensures tamper-evident lineage
- Automated enforcement: Smart contracts trigger protective actions without human intervention
- Decentralized execution: No single entity controls the verification process
Pillar I: eIDAS 2.0 Qualified Forensic Audits
5.1 Inspection Methodology
PTVS v1.0 inspections follow a standardized methodology:
Phase 1: Pre-Inspection Preparation
- Review asset documentation (title deeds, permits, certificates)
- Identify inspection scope (structural, legal, environmental)
- Prepare inspection checklist based on asset type
- Verify PTCE credentials and jurisdictional eligibility
Phase 2: On-Site Inspection
- Physical examination of asset condition
- Structural pathology detection (cracks, corrosion, degradation)
- Legal title verification (registry status, encumbrances)
- Environmental assessment (contamination, hazards)
- Photographic and sensor documentation
Phase 3: Report Generation
- Structured findings in canonical format
- PTVS Score calculation (0-100)
- Risk assessment and recommendations
- PDF/A rendering (ISO 19005 compliance)
5.2 PDF/A Compliance
All inspection reports are rendered in PDF/A format per ISO 19005:
- PDF/A-1a: Basic compliance (required)
- PDF/A-2a: Enhanced compression (recommended)
- PDF/A-3a: Embedded file support (optional for sensor data)
Key requirements: all fonts embedded, no JavaScript or executable content, metadata includes creation date, author, and standard version, color profile specified (ICC).
5.3 Qualified Electronic Signature (QES)
Reports are signed using eIDAS 2.0 Qualified Electronic Signatures:
- Legal basis: Regulation (EU) 2024/1183 (eIDAS 2.0)
- Effect: Equivalent legal effect to handwritten signatures in all EU Member States
- Requirements: Qualified certificate issued by a Qualified Trust Service Provider (QTSP), Qualified signature creation device (QSCD), Identity verification of signer
- PTCE requirement: All PTCEs must hold valid QES certificates
5.4 RFC 3161 Timestamping
Signed reports are timestamped per RFC 3161:
- Purpose: Prove existence of document at a specific point in time
- Mechanism: Timestamp Authority (TSA) issues signed timestamp token
- Compliance: Qualified timestamps per eIDAS 2.0 Art. 41
- Storage: Timestamp token embedded in PDF/A metadata
Pillar II: SHA-256 Cryptographic Lineage
6.1 Canonical JSON Serialization
Inspection findings are serialized into canonical JSON format:
Canonicalization rules:
- Keys sorted lexicographically (alphabetical)
- No whitespace between tokens
- UTF-8 encoding (no BOM)
- Numbers represented without trailing zeros
- Strings use minimal escaping
- No duplicate keys
Example canonical JSON:
6.2 SHA-256 Hash Generation
The canonical JSON is hashed using SHA-256:
- Algorithm: SHA-256 (FIPS 180-4)
- Input: Canonical JSON bytes (UTF-8)
- Output: 256-bit (32-byte) hash, represented as 64-character hexadecimal string
- Example:
a3f2b8c9d4e5f6789012345678901234567890abcdef1234567890abcdef12345678
6.3 Off-Chain Anchoring
SHA-256 hashes are anchored in multiple permanent registries:
| Registry | Purpose | DOI/Identifier |
|---|---|---|
| CERN/Zenodo | Academic priority | 10.5281/zenodo.21719175 |
| HAL/CNRS | European institutional repository | hal-05713062v1 |
| OSF | Reproducible datasets | 10.17605/OSF.IO/7D2SJ |
| U.S. Copyright Office | Legal protection | Cases 1-15210573311 & 1-15234961091 |
6.4 Tamper Detection
Any modification to the original report changes the SHA-256 hash:
- Original JSON → SHA-256 →
a3f2b8c9... - Modified JSON → SHA-256 →
f7e6d5c4...(different hash)
This ensures tamper-evident lineage: any party can independently verify that the on-chain claim corresponds to the original inspection report.
Pillar III: Smart Contract Circuit Breakers
7.1 PTVSClaimInjector Overview
The PTVSClaimInjector smart contract is the core on-chain component of PTVS v1.0. It receives Verifiable Claims from off-chain inspections and enforces automated protective actions based on PTVS Score.
Key characteristics:
- License: MIT (open-source)
- Compatibility: ERC-3643/T-REX identity layer
- Deployment: Ethereum mainnet + L2s (Arbitrum, Polygon, Base)
- Audit: Open-source audit by PTCE Technical Board
7.2 Verifiable Claim Structure
Each Verifiable Claim contains:
7.3 Claim States and Transitions
| From State | Trigger | To State |
|---|---|---|
| INSPECTED | Score ≥ 70 | VERIFIED |
| VERIFIED | 90 days without re-audit | EXPIRED |
| EXPIRED | Re-audit completed | VERIFIED (renewed) |
| INSPECTED | Score < 50 | REVOKED |
| REVOKED | Circuit breaker triggered | TRADING PAUSED |
7.4 Circuit Breaker Actions
When a Verifiable Claim transitions to EXPIRED or REVOKED, the smart contract automatically triggers protective actions:
EXPIRED (Score 0-49 or 90-day lapse):
- Trading warnings displayed
- Increased haircuts on collateral value (25%)
- Re-audit required within 90 days
REVOKED (Score < 50 or material degradation):
- Trading paused (circuit breaker)
- Margin calls triggered for leveraged positions
- LTV auto-adjusted (Loan-to-Value ratio reduced)
- Notification sent to all token holders
- Regulatory report filed with relevant NCA
7.5 PTCE Authentication
Only authorized PTCEs can inject Verifiable Claims. PTCE authorization is managed through the ONCHAINID identity layer, ensuring only verified judicial experts can perform inspections.
Pillar IV: PTCE Network
8.1 Network Architecture
The Prop Trust Certified Expert (PTCE) Network is a decentralized network of sworn judicial experts authorized to perform PTVS v1.0 inspections.
Key characteristics:
- Decentralized: No single entity controls the network
- Jurisdictional: PTCEs operate in their licensed jurisdictions
- Revenue model: 85% to PTCE, 15% to network (via Stripe Connect split payments)
- Certification: 40-hour training program + examination
8.2 PTCE Certification Requirements
To become a PTCE, candidates must:
- Hold valid judicial expert certification in their jurisdiction
- Demonstrate 5+ years of forensic practice
- Complete 40-hour training program:
- Module 1: Legal framework (MiCA, eIDAS 2.0) — 8 hours
- Module 2: PTVS methodology — 10 hours
- Module 3: Technical tools (PDF/A, SHA-256, QES) — 8 hours
- Module 4: Smart contracts (ERC-3643, PTVSClaimInjector) — 6 hours
- Module 5: Real cases (Navarrés + 2 anonymized) — 4 hours
- Module 6: Supervised practice — 4 hours
- Pass certification examination (minimum score: 75/100)
- Maintain professional liability insurance (minimum €1,000,000)
- Sign PTCE Code of Conduct
8.3 Revenue Model
PTCEs earn revenue through inspection fees:
| Component | PTCE Share | Network Share |
|---|---|---|
| Standard inspection (€2,500-€8,500) | 85% | 15% |
| Complex inspection (€15,000+) | 85% | 15% |
| Re-audit (75% of initial) | 85% | 15% |
Payment processing: Stripe Connect split payments ensure automatic revenue distribution.
8.4 Geographic Coverage
PTCE Network targets coverage across:
- European Union: 27 Member States
- United Kingdom: Post-Brexit regulatory alignment
- Switzerland: FINMA compliance
- United States: SEC/CFTC coordination (future)
Target: 500+ certified PTCEs by 2028
PTVS Score Methodology
9.1 Score Calculation
The PTVS Score is a 0-100 quantitative measure of asset integrity, calculated from weighted sub-scores:
9.2 Sub-Score Definitions
| Sub-Score | Weight | What it Measures |
|---|---|---|
| Structural | 40% | Structural integrity, material degradation, pathology detection (cracks, corrosion, carbonation), compliance with building codes |
| Legal | 25% | Title clarity verification, encumbrance assessment (mortgages, liens, easements), permit compliance, registry status confirmation |
| Environmental | 20% | Contamination assessment, hazard identification, climate risk exposure (NGFS-aligned), environmental permit compliance |
| Documentation | 10% | Completeness of asset documentation, quality of maintenance records, inspection history availability, insurance documentation |
| Insurance | 5% | Active insurance coverage, coverage adequacy, insurer credit rating, claims history |
9.3 Score Interpretation
| PTVS Score | Status | Action |
|---|---|---|
| 70-100 | VERIFIED | Full trading enabled |
| 50-69 | CONDITIONAL | Trading warnings, increased haircuts |
| 0-49 | REVOKED | Circuit breaker triggered, trading paused |
| Expired (90-day lapse) | EXPIRED | Re-audit required |
Verifiable Claims Specification
10.1 Claim Lifecycle
Each Verifiable Claim follows this lifecycle:
- Creation: PTCE performs inspection, generates canonical JSON
- Signing: Report signed with QES, timestamped with RFC 3161
- Hashing: SHA-256 hash generated from canonical JSON
- Injection: PTVSClaimInjector receives claim on-chain
- Validation: Smart contract verifies PTCE authorization and claim integrity
- Enforcement: Circuit breaker actions triggered based on PTVS Score
- Renewal: Claim expires after 90 days; re-audit required for renewal
- Revocation: Claim revoked if material degradation detected
10.2 Claim Verification
Any party can verify a Verifiable Claim:
- Retrieve on-chain claim (assetId, ptvsScore, forensicHash, timestamp)
- Obtain original PDF/A report from PTCE or archive
- Recompute SHA-256 hash from canonical JSON
- Compare recomputed hash with on-chain forensicHash
- Verify QES signature against PTCE’s public certificate
- Confirm RFC 3161 timestamp validity
Result: Cryptographic proof that the on-chain claim corresponds to the original inspection.
PTVSClaimInjector Technical Specification
11.1 Contract Architecture
11.2 Key Function Signatures
11.3 Events
Integration with ERC-3643/T-REX
12.1 Compatibility Layer
PTVSClaimInjector is designed to integrate with ERC-3643/T-REX identity infrastructure:
12.2 Integration Points
PTVSClaimInjector integrates with ERC-3643/T-REX at three points:
- Identity verification: PTCE authorization checked via ONCHAINID
- Compliance coordination: Circuit breaker actions coordinated with T-REX compliance module
- Token enforcement: Trading pauses enforced at ERC-3643 token contract level
12.3 Deployment Options
PTVSClaimInjector can be deployed:
- Standalone: Independent contract with direct ERC-3643 integration
- Modular: As a module within T-REX compliance framework
- Layer 2: On Arbitrum, Polygon, or Base for reduced gas costs
Regulatory Alignment Matrix
13.1 MiCA Regulation (EU 2023/1114)
| MiCA Article | Requirement | PTVS v1.0 Contribution |
|---|---|---|
| Art. 36 | Reserve requirements for ART issuers | Deterministic attestation of physical existence and condition |
| Art. 45 | Custody and segregation obligations | Periodic re-audits ensure custodial integrity |
| Art. 58 | Disclosure requirements | PTVS Score provides quantitative risk metric |
| Art. 62 | Governance requirements | Technical Board provides oversight |
13.2 Solvency II Directive (2009/138/EC)
| Solvency II Article | Requirement | PTVS v1.0 Contribution |
|---|---|---|
| Art. 84 | Prudent person principle | Forensic methodology aligns with “appropriate methods” |
| Art. 132 | Technical provisions | PTVS Score feeds into valuation models |
| Annex I | Own Funds requirements | Verified collateral reduces capital requirements |
13.3 Eurosystem Collateral Framework (Guideline EU 2015/510)
| Requirement | PTVS v1.0 Contribution |
|---|---|
| High credit standards | PTVS Score ≥ 70 as eligibility criterion |
| Periodic verification | 90-day re-audit cycle |
| Risk assessment | PTVS Score provides quantitative risk measure |
13.4 eIDAS 2.0 Regulation (EU 2024/1183)
| eIDAS 2.0 Provision | PTVS v1.0 Implementation |
|---|---|
| Qualified Electronic Signatures (Art. 26) | All PTCE reports signed with QES |
| Qualified Timestamps (Art. 41) | RFC 3161 timestamps from Qualified TSA |
| Cross-border recognition | QES recognized in all EU Member States |
| Electronic evidence | Forensic reports admissible in EU courts |
Governance Model
14.1 PTVS Technical Board
The PTVS Technical Board is the open governance body overseeing the evolution of PTVS v1.0.
| Category | Seats | Voting Rights |
|---|---|---|
| Founder (Aurema Group) | 1 | 1 vote |
| Banks (SSM-supervised) | 3 | 1 vote each |
| RWA Platforms (MiCA-licensed) | 3 | 1 vote each |
| Insurers/Pension Funds | 2 | 1 vote each |
| Universities/Research | 2 | 1 vote each |
| PTCE Network Representatives | 2 | 1 vote each |
| Professional Services (Big Four) | 1 | 1 vote |
| Technology Partner | 1 | 1 vote |
| Regulatory Observers (ESAs + ECB) | 2 | Observer (no vote) |
Total: 17 seats (13 voting + 2 observers)
14.2 Decision Thresholds
- Ordinary resolutions: Simple majority (7/13 votes)
- Constitutional amendments: Qualified majority (10/13 votes + Founder affirmative vote)
- Working Group creation: Simple majority (7/13 votes)
- Standard version updates: Qualified majority (10/13 votes)
14.3 Working Groups
Six specialized Working Groups drive the standard’s evolution:
Monitors RTS under MiCA, proposes PTVS adaptations
Maintains canonical JSON schema, hashing protocols
Defines PTCE inspection protocols, PTVS Score calculation
Integrates climate-related physical risk metrics
Liaises with ERC-3643, T-REX, ONCHAINID standards
Coordinates peer-reviewed publications, DOIs
14.4 Intellectual Property
- Core specification: MIT License (open-source)
- PTVSClaimInjector.sol: MIT License (open-source)
- Canonical JSON schema: MIT License (open-source)
- Trademarks: Prop Trust Verified™, PTVS™, Forensics Oracle™, PFOI™ (Aurema Group L.L.C.)
- Code escrow: Independent third-party agent; transitions to public domain if Aurema ceases operations
Capability Matrix (Prior Art Documentation)
PTVS v1.0 defines 20 distinct capabilities, each documented with implementation specifications. This capability matrix serves as prior art documentation for PTVS v1.0. Any subsequent standard addressing the Physical Oracle Problem must explicitly differentiate itself from these 20 documented capabilities.
| # | Capability | Implementation | Status |
|---|---|---|---|
| 01 | Independent physical inspection | PTCE on-site methodology | Active |
| 02 | Expert with probative function | Judicial Expert Exp. 0161 | Active |
| 03 | Documentary evidence (PDF/A) | ISO 19005 compliance | Active |
| 04 | Qualified Electronic Signature (QES) | eIDAS 2.0 Reg. 2024/1183 | Active |
| 05 | Qualified timestamp (RFC 3161) | Qualified TSA integration | Active |
| 06 | Deterministic hash (SHA-256) | FIPS 180-4 implementation | Active |
| 07 | Canonical JSON schema | Deterministic serialization rules | Active |
| 08 | On-chain claim (Verifiable Claim) | PTVSClaimInjector.sol | Active |
| 09 | Evidence ↔ asset binding | assetId + forensicHash linkage | Active |
| 10 | State update (re-audits) | 90-day expiry + renewal | Active |
| 11 | Circuit breaker | Automated trading pause | Active |
| 12 | Decentralized expert network | PTCE Network (85/15 split) | Active |
| 13 | Open governance (Technical Board) | 17 seats, W3C-inspired | Active |
| 14 | Standards interoperability | ERC-3643/T-REX/ONCHAINID | Active |
| 15 | Scientific validation (DOIs) | CERN/Zenodo, HAL, OSF | Active |
| 16 | Regulatory submissions | ESMA, EBA, EIOPA, ECB/SSM | Active |
| 17 | Public certification badge | “Verified by PTVS” seal | Active |
| 18 | Public verification API | Oracle API (3 tiers) | Active |
| 19 | Transparent economic model | Published pricing structure | Active |
| 20 | Open-source code (MIT) | GitHub public repository | Active |
Timestamp of creation: 2026-08-14T18:30:00Z · Permanent registry: CERN/Zenodo DOI 10.5281/zenodo.21719175 · Document reference: FOI-RA-2026-001
Comparison with Existing Alternatives
16.1 PTVS vs. Price Oracles (Chainlink, Pyth, Band)
| Aspect | Price Oracles | PTVS v1.0 |
|---|---|---|
| Function | Market data feeds | Physical verification |
| Data type | Prices, rates | Physical condition, legal status |
| Judicial admissibility | No | Yes (eIDAS 2.0 QES) |
| Physical inspection | No | Yes (PTCE on-site) |
| Relationship | Complementary | |
Key insight: Price oracles answer “what is the market price?” PTVS answers “does the asset physically exist and what is its condition?” They are complementary, not competitive.
16.2 PTVS vs. Proof of Reserve (Traditional PoR)
| Aspect | Traditional PoR | PTVS v1.0 |
|---|---|---|
| Question answered | “Are there sufficient reserves?” | “Does the asset physically exist, what is its condition, and what evidence exists?” |
| Scope | Quantity | Quantity + physical integrity + legal status |
| Verification method | Cryptographic proof of holdings | On-site forensic inspection |
| Judicial admissibility | Limited | Full (eIDAS 2.0 QES) |
| Automated enforcement | No | Yes (circuit breakers) |
Key insight: PoR verifies quantity. PTVS verifies physical integrity. PTVS encompasses PoR as a subset.
16.3 PTVS vs. IoT Sensors
| Aspect | IoT Sensors | PTVS v1.0 |
|---|---|---|
| Data type | Continuous sensor readings | Periodic forensic inspection |
| Judicial admissibility | No (sensor data not legally binding) | Yes (QES + RFC 3161) |
| Expert involvement | No | Yes (PTCE judicial experts) |
| Relationship | Complementary | |
Key insight: IoT sensors provide continuous data but lack judicial admissibility. PTVS provides judicially admissible attestations. Future integration: PTVS certifies IoT sensor methodologies.
16.4 PTVS vs. Traditional Audit (Big Four)
| Aspect | Traditional Audit | PTVS v1.0 |
|---|---|---|
| Methodology | Firm-specific | Standardized (PTVS v1.0) |
| Cryptographic anchoring | No | Yes (SHA-256) |
| Smart contract enforcement | No | Yes (circuit breakers) |
| Scalability | Low (manual) | High (PTCE Network) |
| Relationship | Complementary | |
Key insight: Traditional audits produce PDF reports. PTVS produces cryptographically anchored, smart-contract-enforced Verifiable Claims. Big Four firms can adopt PTVS methodology.
16.5 PTVS vs. Registry Oracles (Legal Oracle)
| Aspect | Registry Oracles | PTVS v1.0 |
|---|---|---|
| Data type | Legal registry status | Physical condition + legal status |
| Source | Property registries | On-site inspection + registries |
| Physical verification | No | Yes |
| Relationship | Complementary | |
Key insight: Registry oracles verify legal status. PTVS verifies physical condition AND legal status. PTVS can certify registry oracle data.
Implementation Roadmap
Foundation
- Publish Reference Architecture v1.0 (this document)
- Publish Terminology Glossary v1.0
- Register in CERN/Zenodo, HAL, OSF, U.S. Copyright
- Submit to ESMA, EBA, EIOPA, ECB/SSM (completed)
- Apply to INATBA RWA Working Group (completed)
- Constitute PTVS Technical Board (7 Founding Members)
Adoption
- Sign 5-7 Founding Members
- Onboard 50+ PTCEs
- Verify €100M+ in assets
- Launch PTVS Oracle API
- Publish PTVS v1.1 (community feedback)
Scale
- Expand to 150+ PTCEs
- Verify €1B+ in assets
- Integrate with 3+ RWA platforms
- Achieve INATBA membership
- Publish PTVS v2.0
Standardization
- Apply for European Standardization Organization (ESD) recognition
- Achieve 500+ PTCEs
- Verify €10B+ in assets
- International expansion (UK, Switzerland, US)
Security Considerations
18.1 Smart Contract Security
- Open-source audit: PTVSClaimInjector.sol is publicly auditable
- Bug bounty program: Planned for Q1 2027
- Formal verification: Planned for v1.1
- Upgrade mechanism: Technical Board approval required for contract upgrades
18.2 PTCE Security
- Identity verification: ONCHAINID-based authentication
- Credential revocation: Technical Board can revoke PTCE authorization
- Liability insurance: Minimum €1,000,000 professional liability coverage
- Code of Conduct: Mandatory adherence, enforced by Ethics Committee
18.3 Data Security
- Canonical JSON: Deterministic serialization prevents manipulation
- SHA-256: Cryptographic integrity ensures tamper-evidence
- QES: Qualified signatures ensure non-repudiation
- RFC 3161: Qualified timestamps ensure temporal integrity
18.4 Governance Security
- Multi-stakeholder governance: No single entity controls the standard
- Qualified majority: Constitutional amendments require 10/13 votes
- Code escrow: Independent third-party agent holds source code
- Regulatory oversight: ESAs and ECB as observers
Official Terminology
A.1 PFOI (Physical Forensic Oracle Infrastructure)
Definition: A multi-billion dollar market category bridging sworn judicial forensic practice and blockchain-based cryptographic verification, establishing the foundational trust layer for the global Real-World Asset (RWA) tokenization economy.
Scope: PFOI encompasses all infrastructure, methodologies, standards, and networks that enable deterministic physical verification of off-chain assets backing tokenized securities.
Relationship to PTVS: PTVS v1.0 is the first and defining standard within the PFOI category.
A.2 PTVS (Prop Trust Verified Standard)
Definition: A deterministic, four-pillar standard for the physical verification of tokenized Real-World Assets, combining eIDAS 2.0 qualified forensic audits, SHA-256 cryptographic lineage, smart contract circuit breakers, and a decentralized expert network.
Version: 1.0.0 (current) · License: MIT (core specification), CC BY-NC-ND 4.0 (documentation)
Governing body: PTVS Technical Board
A.3 PTCE (Prop Trust Certified Expert)
Definition: A sworn judicial expert certified under PTVS v1.0 methodology to perform on-site forensic inspections of Real-World Assets. PTCEs hold valid judicial expert certifications in their jurisdictions and have completed the 40-hour PTVS training program.
Requirements: Judicial expert certification + 5 years experience + 40-hour training + examination + insurance + Code of Conduct
A.4 PTVS Claim (Verifiable Claim)
Definition: A cryptographically signed on-chain attestation of the physical state of a Real-World Asset, containing assetId, ptvsScore, forensicHash, inspectionTimestamp, ptceAddress, and status.
Lifecycle: Creation → Signing → Hashing → Injection → Validation → Enforcement → Renewal/Revocation
A.5 PTVSClaimInjector
Definition: An open-source (MIT License) smart contract that receives Verifiable Claims from off-chain PTVS inspections and enforces automated protective actions (circuit breakers) based on PTVS Score.
Compatibility: ERC-3643/T-REX identity layer · Deployment: Ethereum mainnet + L2s
A.6 Physical Oracle Gap
Definition: The structural inability of Distributed Ledger Technology (DLT) systems to attest to the physical existence, structural integrity, and legal encumbrances of off-chain assets backing tokenized securities.
Resolution: PTVS v1.0 resolves the Physical Oracle Gap through its four-pillar architecture.
A.7 Verified by PTVS
Definition: A public certification badge indicating that a Real-World Asset has been verified under PTVS v1.0 methodology, with a current PTVS Score ≥ 70 and a valid Verifiable Claim on-chain.
Display: Widget embeddable on platform websites, investor materials, and regulatory filings.
A.8 PTVS Score
Definition: A 0-100 quantitative measure of asset integrity, calculated from weighted sub-scores: Structural (40%), Legal (25%), Environmental (20%), Documentation (10%), Insurance (5%).
Interpretation: 70-100: VERIFIED · 50-69: CONDITIONAL · 0-49: REVOKED
A.9 Circuit Breaker
Definition: An automated smart contract mechanism that triggers protective actions (trading pause, margin call, LTV adjustment) when a Verifiable Claim transitions to EXPIRED or REVOKED status.
Trigger conditions: PTVS Score < 50 or 90-day lapse without re-audit
A.10 Physical Proof of Reserve (PPoR)
Definition: An extension of traditional Proof of Reserve that includes physical verification of asset integrity, not just quantity. PPoR answers: “Does the asset physically exist, what is its condition, and what evidence exists?”
Relationship to PTVS: PTVS v1.0 implements PPoR through its four-pillar architecture.
Canonical JSON Schema
B.1 Schema Definition
B.2 Canonicalization Rules
- Keys sorted lexicographically (alphabetical)
- No whitespace between tokens
- UTF-8 encoding (no BOM)
- Numbers represented without trailing zeros
- Strings use minimal escaping
- No duplicate keys
Smart Contract Interface
C.1 PTVSClaimInjector Interface
References
22.1 Regulatory Documents
- Regulation (EU) 2023/1114 (MiCA) — Markets in Crypto-Assets
- Directive 2009/138/EC (Solvency II) — Insurance and Reinsurance
- Directive (EU) 2016/2341 (IORP II) — Institutions for Occupational Retirement Provision
- Regulation (EU) 2024/1183 (eIDAS 2.0) — Electronic Identification and Trust Services
- Guideline (EU) 2015/510 — Eurosystem Collateral Framework
- Regulation (EU) 2022/858 — DLT Pilot Regime
- Regulation (EU) 2024/1156 (CRR III) — Capital Requirements
22.2 Technical Standards
- ISO 19005 — PDF/A (Document Management)
- RFC 3161 — Internet X.509 Time-Stamp Protocol
- FIPS 180-4 — SHA-256 Secure Hash Standard
- ERC-3643 — T-REX (Token for Regulated EXchanges)
- ONCHAINID — Decentralized Identity Standard
22.3 PTVS Documents
- PTVS v1.0 Core Specification — CERN/Zenodo DOI: 10.5281/zenodo.21719175
- PTVS v1.0 Computer Science Validation — HAL/CNRS: hal-05713062v1
- PTVS v1.0 Reproducible Datasets — OSF DOI: 10.17605/OSF.IO/7D2SJ
- PTVSClaimInjector.sol — GitHub: github.com/aurema-group/prop-trust-verified-standard
22.4 Academic Literature
- A Taxonomy of Real-World Asset Tokenization for Blockchain-Based Financial Infrastructure — arXiv:2606.08534
- SoK of RWA Tokenization: A Systematization of Concepts, Architectures, and Legal Interoperability — arXiv:2604.06608
Document Metadata
| Document Title | Prop Trust Verified Standard (PTVS) v1.0 — Reference Architecture |
| Version | 1.0.0 |
| Date | 14 August 2026 |
| Document Reference | FOI-RA-2026-001 |
| Classification | Public Technical Reference |
| License | CC BY-NC-ND 4.0 (documentation), MIT (code references) |
| Author | Aurelio Tamarit Blay · Certified Judicial Expert (Exp. No. 0161, Spain) · ORCID: 0009-0007-5824-3602 · Wikidata: Q140774713 |
| Governing Entity | Forensics Oracle Initiative · Governed by Aurema Group L.L.C. (Delaware, USA) |
| Permanent Registries | CERN/Zenodo: 10.5281/zenodo.21719175 · HAL/CNRS: hal-05713062v1 · OSF: 10.17605/OSF.IO/7D2SJ · U.S. Copyright: Cases 1-15210573311 & 1-15234961091 |
| Regulatory Submissions | ESMA: FOI/ESMA/2026-001 · EBA: FOI/EBA/2026-002 · EIOPA: FOI/EIOPA/2026-003 (Confirmed & Registered) · ECB/SSM: FOI/ECB-SSM/2026-004 (ADITO portal) · INATBA: FOI/INATBA/2026-005 (Application submitted) |
| Next Version | PTVS v1.1 (planned Q1 2027, pending Technical Board review) |
| Contact | governance@forensics-oracle.org |

