Glossary

Attestation. Keyring’s off-chain statement that an entity satisfied a policy, produced after proof verification and rule evaluation, and issued through a blind signature.

Backdoor. The credential field containing the holder’s identity commitment, ElGamal-encrypted inside the authorization circuit to the regime authorities’ public keys. Emitted on chain with each credential.

Base asset. In Unwind, the asset deposited as equity and borrowed as debt on the lending market; fees and exits pay out in it.

Blind signature. A signature obtained on a blinded message; the signer never sees what it signed, making issuance unlinkable from use.

Claim. A disclosed field extracted from a verified TLSNotary presentation, attributed to the data provider and consumed by policy rules.

Credential. The on-chain record in KeyringCore for a (policy, address) pair: an expiration and a blacklist flag, checkable via checkCredential.

Data source. A data provider account a user can prove facts from, configured per policy with a proof plan.

Entity. The subject of verification; on chain, the wallet address a credential binds to.

Identity commitment. The public point derived from the identity trapdoor on the Baby Jubjub curve; the persistent pseudonymous identity in the system.

Identity trapdoor. The private scalar behind an identity commitment. Never leaves the prover.

KeyringCore. The credential registry contract; verifies issuer signatures, stores credentials, answers checks.

Notary. The multi-party computation participant in a TLSNotary session that signs transcript commitments without seeing plaintext.

Policy. A named set of compliance requirements with an on-chain ID; credentials are always issued against a policy.

Presentation. The final TLSNotary artifact: attestation, server identity, and selectively disclosed transcript openings.

Proof plan. The per-policy, per-data-source specification of which provider endpoints to observe and which fields to disclose.

Prover. The user’s side of a TLSNotary session; in Connect, the extension’s WebAssembly prover.

Provider. In Unwind, the entity whose mint and redemption process a market’s adapter contract drives, with proceeds paid in the market’s base asset. Each market’s page names its own.

Receipt NFT. The ERC-721 minted when a position is locked for unwind; tracks the request and carries the claim on whatever the redemption leaves once debt, fee, and any liquidation payout are covered.

Regime authority. A designated holder of a regime private key, able to decrypt the backdoor field of credentials issued under that regime.

Selective disclosure. Opening only named parts of a committed transcript; the rest stays redacted and unrecoverable.

Unwind. Closing a leveraged tokenised asset position: the position locks in an escrow, the collateral redeems through the provider, and debt repayment plus the payout complete atomically at finalisation.

Wind. Opening a leveraged tokenised asset position: equity deposited, leverage selected, and the system builds the position. Where the asset settles asynchronously, it manages the settlement.