Vouch · Casper Agentic Buildathon 2026

Bastionv1.2.0

Compliance without surveillance — proven in zero-knowledge, and revocable.

An agentic compliance gateway where users prove they're KYC-compliant via a Groth16 ZK proof (no identity revealed), and a monitoring agent autonomously revokes them the moment they're not. The chain sees only a Merkle root — zero PII.

The one core flow

  1. 1

    User submits documents off-chain — PII never touches the chain

  2. 2

    Verifier agent reviews and decides (approve / decline)

  3. 3

    Gasless EIP-712 credential issued + Poseidon commitment inserted into on-chain Merkle set

  4. 4

    Holder generates a Groth16 ZK proof of “valid & non-revoked” in-browser — secret never leaves the device

  5. 5

    Gated pool admits the holder (proof verified against the on-chain Merkle root)

  6. 6

    Monitor agent detects a risk signal (sanctions hit / anomaly)

  7. 7

    Autonomous REVOCATION — nullifier published, root updated, proof stops verifying, pool ejects

Gated RWA Pool — Compliance Console

members: 2/3

On-chain Merkle root

0xbfafd7fd53c2677276a2f43b9173c11cbe3006331b7873be1025180b795d127c

revoked nullifiers: 0

Monitor agent

watching mallory · OFAC SDN streaming feed

autonomously revokes on a sanctions hit

aliceVALID

passport · JP

ZK proof✓ verifies
in poolyes
malloryVALID

passport · US

ZK proof✓ verifies
in poolyes
carolDECLINED

national_id · FR

ZK proof✕ fails
in poolno

Every state change is real: proofs are generated and verified against the live Merkle root, revocation publishes a nullifier and removes the commitment, and the remaining holders re-prove against the new root. Only the deploy broadcast is stubbed for the demo.

🔒

On-chain PII scan: 0 fields found

Contract state contains only a Merkle root + nullifier hashes. No names, no documents, no wallet→identity links.

x402 Pay-to-Check

A mock dApp submits a holder's ZK proof to /check → 402 → EIP-712 CEP-18 payment → 200 { compliant: true }

Boolean only — never identity. Settlement deploy hash shown. Reinforces "verify the proof, learn nothing else."

Casper Native Integration Architecture

Cryptography

casper-eip-712 Signature Scheme

Enables gasless credential issuance. The holder's PII remains strictly off-chain while producing a cryptographically secure signature matching EIP-712 parameters mapped to Casper account hashes.

On-Chain Registry

Odra Rust Smart Contract

Stores the Merkle root and logs revoked nullifiers on-chain. Built using Odra, allowing upgradable proxy execution and strictly isolated state transitions to prevent any front-running attacks.

Agent Integration

casper-js-sdk (Autonomous Signing)

Allows the autonomous monitoring agent to build, sign, and broadcast 'insert_commitment' and 'revoke' transactions using standard PEM keys without relying on human browser wallet authorization.

Monetization

x402 Micropayments Facilitator

Implements pay-per-check proof verification via CEP-18 token flows, ensuring that high-throughput verification queries are monetized and settled on Casper with cryptographic proof of payment.

Streaming Monitor

CSPR.cloud Streaming Engine

Enables sub-second reactive auditing by streaming blockchain events. The autonomous monitor listens for compliance alerts and instantly triggers updates back to the registry.