Slide 01 // Title

BASTION

Privacy-preserving compliance, enforced on-chain.

Casper Agentic Buildathon 2026 Vouch Suite

ZK Compliance Gateway

Merkle Root0xa3f8…7d2e

Valid Holders3 / 4

Revoked1 (mallory)

PII on-chainZERO

Slide 02 // The Problem

Centralized KYC creates
massive PII data silos.

4.1B

records breached in 2024 from centralized identity databases

$4.88M

average cost of a single data breach (IBM 2024)

100%

of current compliance tools require full PII disclosure

Manual

revocation is slow — non-compliant users stay active for days

Slide 03 // The Solution

ZK compliance
that never sees your data.

🔐

Zero-Knowledge Proofs

Groth16-shaped proofs prove set-membership. Your PII is hashed into a commitment — only the hash touches the chain.

🌲

Merkle Tree Verification

Commitments form a Merkle tree. The root is stored on-chain. Proof = "I'm in the tree" without revealing which leaf.

⚡

Autonomous Revocation

CSPR.cloud streaming monitor triggers revoke on the Odra contract the instant a risk event fires.

🖥️

Compliance Console

Inject a sanctions hit and watch one holder's proof flip ✓→✗ while everyone else keeps verifying.

Slide 04 // Core Flow

Compliance Lifecycle

01 · Issue Credential

Issuer hashes PII into commitment off-chain

02 · Merkle Commitment

Commitment inserted into on-chain Merkle tree via Odra contract

03 · Generate ZK Proof

Holder generates Groth16-shaped proof of set-membership

04 · Verify Proof

Verifier checks proof + nullifier — no PII revealed

05 · Monitor (Autonomous)

CSPR.cloud streaming watches for risk events 24/7

06 · Auto-Revoke

Risk detected → nullifier registered → proof instantly invalidated

Slide 05 // Architecture

Technical Architecture

Layer	Technology
Frontend	Next.js 16 (App Router), React 19, Tailwind v4
Contract	Odra (Rust) — Merkle root + nullifier set
ZK Engine	Groth16-shaped (SHA-256, snarkjs-API compatible)
Signing	casper-js-sdk (PEM key, autonomous revocation)
Micropayments	x402 (CSPR.cloud facilitator) — pay-to-check
Monitoring	CSPR.cloud streaming — autonomous risk detection
Testing	Vitest (95 tests) + Playwright (E2E) + CodeQL

The ZK proof is Groth16-shaped over SHA-256 — structured as a drop-in for field-native Poseidon + real snarkjs Groth16 (roadmap). No overclaiming.

Slide 06 // Live Demo

Pitch & Walkthrough

What Judges Must See

Compliance Console

Inject a sanctions hit → watch holder proof flip ✓→✗ → Merkle root recompute → pool ejects them.

✓ Proof Verification

Valid holders keep verifying while the revoked holder's proof is instantly invalidated.

🔴 PII Scanner

Visual proof that zero PII exists anywhere in the on-chain data — only hashes and nullifiers.

💰 x402 Pay-to-Check

CEP-18 micropayment for each compliance check — data as a service.

Slide 07 // Casper Integration

5 Casper Integration Points

Casper Tool	Integration
Odra Framework	Merkle root + nullifier set contract (insert_commitment, revoke)
casper-js-sdk	Autonomous signing for revocation + commitment insertion
x402 Facilitator	CEP-18 micropayments for pay-to-check compliance queries
CSPR.cloud Streaming	Real-time risk event monitoring → autonomous revocation
CSPR.cloud REST	Contract state queries and account lookups

Slide 08 // On-Chain Evidence

Live Testnet Deployment

Item	Value
Bastion Contract	hash-d247c7118d240bb339612f176f23816aa7a42e3bce88b132cad9982707c4a2c0
CEP-18 Token	hash-541069ed8cad06249f76edb0972932d012badbb256111d3000df06ac1d703be6
Issuer Account	01b9c7741b3679191aa4f82e5529e3f0908e3d5cbc9c3c352807e17b7c48bffc55

All verifiable at testnet.cspr.live

Slide 09 // Competitive Edge

Why Bastion Wins

Feature	Traditional KYC	Bastion
PII exposure	Full identity stored	Zero PII on-chain
Breach risk	Central honeypot	Only hashes + nullifiers
Revocation	Manual (days)	Autonomous (instant)
Verification	Requires PII re-share	ZK proof — no data revealed
Proof system	None	Groth16-shaped (snarkjs-compatible)

Slide 10 // Roadmap

What's Next

NOW

Working prototype on Casper Testnet

Merkle tree, ZK proofs, autonomous revocation, x402 pay-to-check

30 DAYS

Real Poseidon + snarkjs Groth16

Replace SHA-256 commitment with field-native Poseidon hash + real snarkjs verifier

60 DAYS

Mainnet deployment

Production-grade compliance gateway with real KYC provider integration

90 DAYS

Multi-chain compliance passports

One ZK proof valid across Casper, Ethereum, and Solana ecosystems

Slide 11 // Team

Built By

Edy Cu

Solo Developer · AI-Native Methodology

→ 60+ hackathon projects shipped

→ Full-stack: Rust contracts + Next.js dashboards + AI agents

→ Built the entire Vouch suite (3 projects) for this buildathon

Slide 12 // Conclusion

Compliance without compromise.
Privacy without permission.

Bastion — ZK compliance gateway for the Casper ecosystem.

Conclave · governance Verity · oracle Bastion · compliance

Live Website Pitch Video (YouTube) Codebase (GitHub)