VESTIGE

a digital product passport that proves what a luxury item is, without exposing what the brand can't afford to reveal

cryptographic product-lifecycle systemZK proofs / NFC / smart contract2026filed provisional · live mock-upopen live ↗

One commitment. Three audiences. Each sees only what it's allowed to, and can't reconstruct the rest.

loads on click. The real enginehigh-res still pending. The live engine runs on click

a live mock-up of the consumer passport, the renderer that ages with the object · click to run the real thing

WHAT

Coming EU regulation will require luxury and textile brands to publish a digital product passport: verifiable provenance, materials, sustainability. But a passport forces a bad trade: disclose enough raw supply-chain data to satisfy regulators, or withhold it to protect suppliers, recipes, and cost. For luxury, the very facts that prove compliance are the ones a brand can't reveal.

Vestige removes the trade. From a single cryptographic commitment, it generates role-differentiated zero-knowledge proofs: the same hidden field is proven to a regulator as a compliance verdict, shown to a brand partner as a category, and withheld from the consumer entirely, with an inference firewall that stops multiple proofs from being combined to reconstruct what no single role may see.

BUILD

ONE COMMITMENT, THREE READINGS

A product is one canonical commitment root, partitioned into static identity, compliance state, dynamic ownership, and bio-material lineage. From that one root, separate proof circuits answer to separate policies, one each for regulator, brand and consumer, each disclosing a field as an exact value, a bucket, a predicate-only check, or nothing. A verifier can confirm a proof follows an authorized policy, not an ad-hoc selection by the prover.

one commitment root
  ├── static identity
  ├── compliance state
  ├── dynamic ownership
  └── bio-material lineage
        │
        ├── policy circuit → regulator   compliance verdict
        ├── policy circuit → brand       approved-source category
        └── policy circuit → consumer    withheld
                                          ↑ inference firewall:
                                            proofs cannot be combined

role-differentiated proof architecture · concept redraw. The construction stays in the filed provisional

THE TAP THAT CHANGES STATE

An NFC tap (NTAG 424 DNA) isn't just an authenticity check. A verified tap becomes a presence receipt that updates the commitment, and in the same atomic transaction the smart contract routes the resale royalty, transfers ownership, advances the lifecycle state, and steps the renderer forward. Physical presence, payment, and provenance move together, closing the loop ordinary NFC authentication leaves open.

NFC tap (NTAG 424 DNA)
  → verified presence receipt
  → commitment updated
  → one atomic transaction:
       royalty routed · ownership transferred
       lifecycle advanced · renderer stepped

physical-authentication sequence · concept redraw. No construction detail

PROOF

SELECTIVE DISCLOSURE, NOT ALL-OR-NOTHING. A regulator sees a compliance verdict; a brand partner sees an approved-source category; a consumer sees a curated provenance story and certification badges. The raw supplier identity, cost, recipe, and exact emissions stay hidden from all of them: proven, not shown.
PROVENANCE THAT STARTS BEFORE MANUFACTURE. For bio-materials such as mycelium leather and algae textile, the environmentally significant phase happens before cutting. Vestige carries time-windowed cultivation sensor data into a batch commitment inherited by every downstream item: a seed-to-sale history, cryptographically linked.
PRESENTED TO INDUSTRY LEADS. The system was presented to leads at PwC, JPMorgan, and Tapestry. The cryptographic construction is covered in a filed provisional; this page describes the architecture, not the circuits.
coming EU digital product passport requirement for textiles · rollout 2027+

LIMITS

A filed provisional and a live mock-up, not a production deployment. The consumer passport at vestige.alilinlab.com demonstrates the renderer and the disclosure model; the full multi-circuit prover is specified, not yet shipped end to end.

Vestige is where the practice meets a market. Latent and Teardown instrument what generative systems do; Vestige instruments trust itself. It turns a regulatory burden into something a brand can use, without surrendering the secrets that make it a brand. The seal, the provenance, the object that remembers who owned it. It is the same instinct as a maker's mark, rebuilt in zero knowledge.

Ali Lin, design engineer