Glossary

Attestation. Keyring’s off-chain statement that an entity satisfied a policy, produced after proof verification and rule evaluation, and issued through a blind signature.

Backdoor. The credential field containing the holder’s identity commitment, ElGamal-encrypted inside the authorization circuit to the regime authorities’ public keys. Emitted on chain with each credential.

Base asset. In Unwind, the asset deposited as equity and borrowed as debt on the lending market; fees and exits pay out in it.

Blind signature. A signature obtained on a blinded message; the signer never sees what it signed, making issuance unlinkable from use.

Claim. A disclosed field extracted from a verified TLSNotary presentation, attributed to the data provider and consumed by policy rules.

Credential. The on-chain record in KeyringCore for a (policy, address) pair: an expiration and a blacklist flag, checkable via checkCredential.

Data source. A data provider account a user can prove facts from, configured per policy with a proof plan.

Entity. The subject of verification; on chain, the wallet address a credential binds to.

Identity commitment. The public point derived from the identity trapdoor on the Baby Jubjub curve; the persistent pseudonymous identity in the system.

Identity trapdoor. The private scalar behind an identity commitment. Never leaves the prover.

KeyringCore. The credential registry contract; verifies issuer signatures, stores credentials, answers checks.

Notary. The multi-party computation participant in a TLSNotary session that signs transcript commitments without seeing plaintext.

Policy. A named set of compliance requirements with an on-chain ID; credentials are always issued against a policy.

Presentation. The final TLSNotary artifact: attestation, server identity, and selectively disclosed transcript openings.

Proof plan. The per-policy, per-data-source specification of which provider endpoints to observe and which fields to disclose.

Prover. The user’s side of a TLSNotary session; in Connect, the extension’s WebAssembly prover.

Provider. In Unwind, the entity supplying exit liquidity for a market, settling through the tokenised asset’s redemption cycle at a fixed fee; typically the asset issuer or a closely aligned entity.

Receipt NFT. The ERC-721 minted when a position is locked for unwind; tracks the request and, after a liquidation, carries the entitlement to the deferred payout.

Regime authority. A designated holder of a regime private key, able to decrypt the backdoor field of credentials issued under that regime.

Selective disclosure. Opening only named parts of a committed transcript; the rest stays redacted and unrecoverable.

Unwind. Closing a leveraged tokenised asset position: the position locks, a provider supplies the base asset, and debt repayment plus collateral release complete atomically.

Wind. Opening a leveraged tokenised asset position: equity deposited, leverage selected, and the system builds the position. Where the asset settles asynchronously, it manages the settlement.