ALI LIN
05Ali Lin Lab
2026

Vestige

One commitment, three audiences. Each sees only what it is allowed to.

The Vestige consumer passport, showing the consumer, regulator and brand perspective tabs, a concentric identity anchor graphic, a zk-proof verified badge, and the product identification rows beneath it.

Problem

For luxury, the very facts that prove compliance are the ones a brand cannot reveal.

Solution

One cryptographic commitment generates role-differentiated proofs.

Methods

A verified NFC tap becomes a presence receipt that updates the commitment.

Next Step

The full multi-circuit prover is specified but not yet shipped end to end.

05/05
← IndexAli Lin

VESTIGE

a digital product passport that proves what a luxury item is, without exposing what the brand can't afford to reveal

cryptographic product-lifecycle systemZK proofs / NFC / smart contract2026filed provisional · live mock-up

One commitment. Three audiences. Each sees only what it's allowed to, and can't reconstruct the rest.

open live ↗
loads on click. The real enginehigh-res still pending. The live engine runs on click
a live mock-up of the consumer passport, the renderer that ages with the object · click to run the real thing
open live ↗

WHAT

For luxury, the very facts that prove compliance are the ones a brand can't reveal.

WHY

Coming EU regulation will require a digital product passport. That forces a trade: disclose raw supply-chain data, or withhold it and fail compliance.

HOW

One cryptographic commitment generates role-differentiated zero-knowledge proofs, with an inference firewall so proofs cannot be combined.

Phase 1 · One commitment, three readings

A regulator sees a verdict, a brand partner a category, a consumer a story.

Supplier identity, cost and recipe stay hidden from all three: proven, not shown.

partition | disclosure modes available

static identity | exact value, bucket, predicate only, nothing

compliance state | exact value, bucket, predicate only, nothing

dynamic ownership | exact value, bucket, predicate only, nothing

bio-material lineage | exact value, bucket, predicate only, nothing

one commitment root
  ├── static identity
  ├── compliance state
  ├── dynamic ownership
  └── bio-material lineage
        │
        ├── policy circuit → regulator   compliance verdict
        ├── policy circuit → brand       approved-source category
        └── policy circuit → consumer    withheld
                                          ↑ inference firewall:
                                            proofs cannot be combined
role-differentiated proof architecture · concept redraw. The construction stays in the filed provisional
Phase 2 · Provenance that starts before manufacture

For mycelium leather and algae textile the significant phase is before cutting. Cultivation data enters a batch commitment every item inherits.

Phase 3 · The tap that changes state

A verified NFC tap (NTAG 424 DNA) becomes a presence receipt, and one atomic transaction carries the rest.

NFC tap (NTAG 424 DNA)
  → verified presence receipt
  → commitment updated
  → one atomic transaction:
       royalty routed · ownership transferred
       lifecycle advanced · renderer stepped
physical-authentication sequence · concept redraw. No construction detail

PROOF

  • PRESENTED TO INDUSTRY LEADS. The system was presented to leads at PwC, JPMorgan, and Tapestry. The cryptographic construction is covered in a filed provisional; this page describes the architecture, not the circuits.

LIMITS

  • A filed provisional and a live mock-up, not a production deployment. The consumer passport at vestige.alilinlab.com demonstrates the renderer and the disclosure model; the full multi-circuit prover is specified, not yet shipped end to end.

It turns a regulatory burden into something a brand can use without surrendering what makes it a brand. The same instinct as a maker's mark, rebuilt in zero knowledge.

Ali Lin