Slide 01 // Title

BASTION

Privacy-preserving compliance, enforced on-chain.

Casper Agentic Buildathon 2026 · Finalist Vouch Suite

ZK Compliance Gateway

Merkle Root0xa3f8…7d2e

Valid Holders3 / 4

Revoked1 (mallory)

PII on-chainZERO

Slide 02 // The Problem

Centralized KYC creates
massive PII data silos.

Billions

of identity records exposed through centralized database breaches

$4.88M

average cost of a single data breach (IBM 2024)

Full PII

is what most compliance tools demand just to verify a user

Manual

revocation is slow — non-compliant users stay active for days

Slide 03 // The Solution

ZK compliance
that never sees your data.

🔐

Zero-Knowledge Proofs

Groth16-shaped proofs prove set-membership. Your PII is hashed into a commitment — only the hash touches the chain.

🌲

Merkle Tree Verification

Commitments form a Merkle tree. The root is stored on-chain. Proof = "I'm in the tree" without revealing which leaf.

⚡

Autonomous Revocation + Claude Officer

A monitor agent triggers revoke the instant a risk event fires — proven by a real on-chain tx. A real Claude officer then writes the file memo, rates severity, and attests its inputs held zero PII.

🖥️

Compliance Console

Inject a sanctions hit and watch one holder's proof flip ✓→✗ while everyone else keeps verifying.

Slide 04 // Core Flow

Compliance Lifecycle

01 · Issue Credential

Issuer hashes PII into commitment off-chain

02 · Merkle Commitment

Commitment inserted into on-chain Merkle tree via Odra contract

03 · Generate ZK Proof

Holder generates Groth16-shaped proof of set-membership

04 · Verify Proof

Verifier checks proof + nullifier — no PII revealed

05 · Monitor (Autonomous)

Monitor agent watches for risk events (streaming pattern; demo uses a simulated feed)

06 · Auto-Revoke

Risk detected → nullifier registered → proof instantly invalidated

Slide 05 // Architecture

Technical Architecture

Layer	Technology
Frontend	Next.js 16 (App Router), React 19, Tailwind v4
Contract	Odra (Rust) — Merkle root + nullifier set
ZK Engine	Groth16-shaped (SHA-256, snarkjs-API compatible)
Signing	casper-js-sdk (PEM key, autonomous revocation)
Micropayments	x402 — pay-to-check; CSPR.cloud facilitator verify/settle in live mode
Monitoring	Autonomous monitor agent — streaming pattern (simulated event feed in demo)
AI Officer	Claude Haiku 4.5 — revocation memos + severity + privacy attestation; keyless fallback
Testing	Vitest (106 tests) + Playwright (E2E) + CodeQL

The ZK proof is Groth16-shaped over SHA-256 — structured as a drop-in for field-native Poseidon + real snarkjs Groth16 (roadmap). No overclaiming.

Slide 06 // Live Demo

Pitch & Walkthrough

What Judges Must See

Compliance Console

Inject a sanctions hit → watch holder proof flip ✓→✗ → Merkle root recompute → pool ejects them.

✓ Proof Verification

Valid holders keep verifying while the revoked holder's proof is instantly invalidated.

🔴 PII Scanner

Visual proof that zero PII exists anywhere in the on-chain data — only hashes and nullifiers.

💰 x402 Pay-to-Check

CEP-18 micropayment for each compliance check — data as a service.

Slide 07 // Casper Integration

Casper Integration Points

Casper Tool	Integration
Odra Framework	Merkle root + nullifier set contract (insert_commitment, revoke)
casper-js-sdk	Autonomous signing for revocation + commitment insertion
x402 Facilitator	CEP-18 micropayments for pay-to-check compliance queries
CSPR.cloud REST	Contract state queries and account lookups
Casper Testnet	Live deployed package + confirmed insert_commitment → revoke lifecycle

Slide 08 // On-Chain Evidence

Live Testnet Deployment

Item	Value
Bastion Contract	hash-d247c7118d240bb339612f176f23816aa7a42e3bce88b132cad9982707c4a2c0
Install TX	6632ffec189f76cdf4dd8d057642160cac3608b98bd0477e6cc540319c6c0f22
insert_commitment TX (holder admitted)	1b65887722fa960437e10f1e497ac3837934e645d153e9268d79190b2beebb27
revoke TX (autonomous revocation)	89db2b3bc80c2e95966e82456ad6f2a3fe6c49a6ce3cc47155f9e44dbf50b7cc
CEP-18 Token	hash-541069ed8cad06249f76edb0972932d012badbb256111d3000df06ac1d703be6
Issuer Account	01b9c7741b3679191aa4f82e5529e3f0908e3d5cbc9c3c352807e17b7c48bffc55

All verifiable at testnet.cspr.live

Slide 09 // Competitive Edge

Why Bastion Wins

Feature	Traditional KYC	Bastion
PII exposure	Full identity stored	Zero PII on-chain
Breach risk	Central honeypot	Only hashes + nullifiers
Revocation	Manual (days)	Autonomous (instant)
Verification	Requires PII re-share	ZK proof — no data revealed
Proof system	None	Groth16-shaped (snarkjs-compatible)

Slide 10 // Roadmap

What's Next

NOW

Working prototype on Casper Testnet

Merkle tree, ZK proofs, autonomous revocation, x402 pay-to-check

30 DAYS

Real Poseidon + snarkjs Groth16

Replace SHA-256 commitment with field-native Poseidon hash + real snarkjs verifier

60 DAYS

Mainnet deployment

Production-grade compliance gateway with real KYC provider integration

90 DAYS

Multi-chain compliance passports

One ZK proof valid across Casper, Ethereum, and Solana ecosystems

Launch plan: MIT open-source · live at bastion.edycu.dev · public demo video · follow the launch on X: @VouchOnCasper.

Slide 11 // Team

Built By

Edy Cu

Solo Developer · AI-Native Methodology

→ 60+ hackathon projects shipped

→ Full-stack: Rust contracts + Next.js dashboards + AI agents

→ Built the entire Vouch suite (3 projects) for this buildathon

Slide 12 // Conclusion

Compliance without compromise.
Privacy without permission.

Bastion — ZK compliance gateway for the Casper ecosystem.

Conclave · governance Verity · oracle Bastion · compliance

Live Website Pitch Video (YouTube) Codebase (GitHub) @VouchOnCasper (X)