05 · Ali Lin Lab · Case Study · 2026

Vestige

One commitment, three audiences. Each sees only what it is allowed to.

Problem

For luxury, the very facts that prove compliance are the ones a brand cannot reveal.

Solution

One cryptographic commitment generates role-differentiated proofs.

Methods

A verified NFC tap becomes a presence receipt that updates the commitment.

Next Step

The full multi-circuit prover is specified but not yet shipped end to end.

One commitment. Three audiences. Each sees only what it's allowed to, and can't reconstruct the rest.

open live ↗

loads on click. The real enginehigh-res still pending. The live engine runs on click

a live mock-up of the consumer passport, the renderer that ages with the object · click to run the real thing

open live ↗

WHAT

For luxury, the very facts that prove compliance are the ones a brand can't reveal.

WHY

Coming EU regulation will require a digital product passport. That forces a trade: disclose raw supply-chain data, or withhold it and fail compliance.

HOW

One cryptographic commitment generates role-differentiated zero-knowledge proofs, with an inference firewall so proofs cannot be combined.

Phase 1 · One commitment, three readings

A regulator sees a verdict, a brand partner a category, a consumer a story.

Supplier identity, cost and recipe stay hidden from all three: proven, not shown.

partition | disclosure modes available

static identity | exact value, bucket, predicate only, nothing

compliance state | exact value, bucket, predicate only, nothing

dynamic ownership | exact value, bucket, predicate only, nothing

bio-material lineage | exact value, bucket, predicate only, nothing

one commitment root
  ├── static identity
  ├── compliance state
  ├── dynamic ownership
  └── bio-material lineage
        │
        ├── policy circuit → regulator   compliance verdict
        ├── policy circuit → brand       approved-source category
        └── policy circuit → consumer    withheld
                                          ↑ inference firewall:
                                            proofs cannot be combined

role-differentiated proof architecture · concept redraw. The construction stays in the filed provisional

Phase 2 · Provenance that starts before manufacture

For mycelium leather and algae textile the significant phase is before cutting. Cultivation data enters a batch commitment every item inherits.

Phase 3 · The tap that changes state

A verified NFC tap (NTAG 424 DNA) becomes a presence receipt, and one atomic transaction carries the rest.

NFC tap (NTAG 424 DNA)
  → verified presence receipt
  → commitment updated
  → one atomic transaction:
       royalty routed · ownership transferred
       lifecycle advanced · renderer stepped

physical-authentication sequence · concept redraw. No construction detail

PROOF

PRESENTED TO INDUSTRY LEADS. The system was presented to leads at PwC, JPMorgan, and Tapestry. The cryptographic construction is covered in a filed provisional; this page describes the architecture, not the circuits.

LIMITS

A filed provisional and a live mock-up, not a production deployment. The consumer passport at vestige.alilinlab.com demonstrates the renderer and the disclosure model; the full multi-circuit prover is specified, not yet shipped end to end.

It turns a regulatory burden into something a brand can use without surrendering what makes it a brand. The same instinct as a maker's mark, rebuilt in zero knowledge.

Ali Lin