Persona License is a modular rights management protocol that converts a verified human identity into a segmented, programmable asset — safely leased for AI generation, settled on-chain, and governed by the human whose likeness it represents.
Hard-coded guarantees that no governance vote, council action, or upgrade may weaken.
ERC-1155 nodes (Core SBT, Visual, Vocal, Cognitive, Kinematic) encoded as tokenId = (identityId << 8) | nodeType. Each identity mints a deterministic ERC-6551 Token Bound Account — the digital twin holds its own child nodes and signs its own leases.
Multi-agent matching across identity nodes. Buyers compose Visual + Vocal + Cognitive nodes; the LicensingRouter validates EIP-712 orders, verifies Merkle policy proofs against the current on-chain root, locks USDC escrow, and confirms TBA EIP-1271 approval before minting a dual-lock LeaseReceipt.
Arweave-encrypted AI weights → Lit threshold keys release only into attested AWS Nitro enclaves → dual-layer watermark (robust provenance layer + fragile tamper canary) signed with an ephemeral private key registered on-chain before render, destroyed after. No plaintext ever leaves the enclave.
Per-athlete ERC-20 Futures tokens launched via batch auction → exponential bonding curve → $1M graduation to AMM. Decaying exit tax (50% → 0% over 7 days) breaks pump-and-dump mechanics. Oracle-milestone vesting, clawback-burn on career abandonment, and buyback-burn on pro signing bonuses.
The 15% dividend reservoir accumulates across all leases in an epoch. At epoch close, one Merkle root write distributes to an unlimited number of Futures token stakers — cost to distribute to 100,000 holders: one on-chain write.
| Contract | Domain | Pattern | Core Responsibility |
|---|---|---|---|
| IdentityRegistry | Identity | UUPS | ERC-1155 node registry · EAS-gated mint · soulbound Core SBT · per-identity pause |
| PersonaAccount | Identity | IMMUTABLE | ERC-6551 TBA · AuthGuard (I-2) · AgentPolicy · YieldRouter |
| LicensingRouter | Marketplace | UUPS | EIP-712 order validation · Merkle proof enforcement · USDC escrow · TBA approval gate |
| LeaseReceipt | Marketplace | UUPS | ERC-721 soulbound · dual-lock userOf() · 10-state lifecycle · render budget enforcement |
| RoyaltySplitter | Marketplace | UUPS | 5-SSTORE pull-payment accrual · epoch Merkle drops · agency registration · param-bound routing |
| AttestationRegistry | Verification | UUPS | TEE session lifecycle · ecrecover render-sig verification · I-3 settlement gate · watermark observations |
| FuturesToken | AthlEquity | IMMUTABLE | ERC-20 · 10M fixed supply · decaying exit tax hook · buyback-and-burn · clawback-burn |
| LaunchController | AthlEquity | UUPS | 4-phase launch (Fan-Gate → Batch Auction → Curve/LBP → Graduation) · anti-sniping by construction |
| VestingVault | AthlEquity | UUPS | Oracle-milestone unlocks · 8-year linear fallback · CEI-enforced clawback-burn |
| OracleGateway | AthlEquity | UUPS | Chainlink OCR 3-source consensus · M-of-N threshold sigs · 12–24h dispute freeze · downstream dispatch |
| VePersonaLocker | Governance | IMMUTABLE | Lock $PERSONA 1w–4y · decaying weight · multi-lock per address · governance rewards |
| PersonaGovernor | Governance | UUPS | 7-day vote + 72h timelock · 3-day fast-lane (ParamRegistry only) · Security Council cancel |
| PersonaTimelock | Governance | IMMUTABLE | 72h ragequit window · permissionless execution · cancel = Security Council freeze power |
| SecurityCouncil | Governance | IMMUTABLE | 5-of-9 scoped multisig · EIP-712 off-chain signing · sunset schedule · ratification obligation |
| CouncilPowers | Governance | IMMUTABLE | Enumerated council ceiling · valid pause targets · Year 2 threshold trigger · cannot be raised by council |
| ParamRegistry | Governance | UUPS | 11 bounded parameters · hard floors/ceilings · fast-lane target · setParam reverts out-of-bounds |
| ConstitutionRegistry | Governance | IMMUTABLE | Versioned constitution hash anchor · append-only amendment history · never modifies past records |
The collegiate NIL ecosystem runs on booster collectives — unregulated slush funds where donors write large checks with no equity, no revenue share, and no guarantee the athlete won't transfer next season.
AthlEquity converts that donation model into a legitimate, liquid asset class. Fans invest in athletes the way VCs invest in startups: with real equity mechanics, oracle-verified revenue sharing, and cryptographic proof of milestones.
Lock $PERSONA 1 week → 4 years. Voting weight = amount × (unlockAt − now) / MAX_LOCK. 7-day vote + 72h ragequit timelock. 4% quorum. Permissionless execution — no single party holds the execution key.
3-day vote + 24h timelock for bounded numeric updates. Target must be ParamRegistry — hard-validated on-chain. Hard floors and ceilings are immutable; an out-of-bounds proposal reverts in setParam(), not in the Governor.
5-of-9 publicly identified multisig. Scoped to three powers: pauseIdentity, pauseModule (whitelist only), freezeUpgrades. Cannot mint, burn, or touch creator funds. Ratification obligation. Year 2: freezeUpgrades → 7-of-9. Council cannot veto its own dissolution.