Two layers.
One source of truth.
A proprietary sovereignty layer — HSM FIPS 140-2 Level 3 + Intel TDX/AMD SEV-SNP Trusted Execution — paired with a Chainlink OCR interoperability bridge. The bridge publishes what the proprietary layer computes. It does not compute what the bridge receives. Source of truth for $aAFRICA and $gAFRICA emissions.
Sovereignty first. Interoperability second. Never the reverse.
Hardware sovereignty.
Air-gap capable. Tamper-evident.
"The proprietary layer is the source of truth. The bridge is the publication channel."
HSM — Hardware Security Module
TEE — Trusted Execution Environment
Redundancy mode.
Not dependency mode.
Chainlink OCR — Off-Chain Reporting
// DeFi ecosystem access
Lending protocols — on-chain $aAFRICA and $gAFRICA price feeds
Stablecoins — collateral pricing for African-asset backed instruments
Secondary markets — real-time pricing for RWA token trading
Cross-chain bridges — interoperability with EVM-compatible networks
// Failover doctrine
The proprietary layer remains autonomous. In the event of bridge unavailability, models execute without interruption. Continuity of $aAFRICA and $gAFRICA pricing is unconditional.
Priced on-chain.
Audited in hardware.
Dynamic commodity pricing (C1)
Real-time price computation for $aAFRICA and $gAFRICA emissions
Actuarial RWA modelling (C2)
Probabilistic risk models for agricultural and gold collateral
Automated on-chain audits (C3)
Continuous emission audit against the eight anti-dilution principles
IoT integration (C8)
Connected Farm sensor aggregation — EUDR-compliant cocoa traceability
Cross-asset correlation (C5)
Multi-commodity correlation models: gold, cocoa, phosphate, timber
Settlement finality (C6)
Cryptographic proof of settlement completeness for each mint event
$aAFRICA. $gAFRICA.
Two instruments. One oracle.
"Every mint event is a computation, not a decision. Sovereignty excludes discretion."
$aAFRICA
Agricultural Reserve Token
Cocoa, phosphate, timber
IoT-priced via TEE$gAFRICA
Gold Reserve Token
LBMA-grade certified reserves
HSM-signed price feedsComputation sequence
TEE executes actuarial model
HSM signs the computed price
Bridge publishes on-chain
Smart contract mints / burns
Three-tier resilience.
Zero single point of failure.
99.99%
Target uptime
3-of-5
HSM quorum
0
Single points of failure
Primary operation
Proprietary HSM + TEE layer — air-gap capable, 3-of-5 quorum, cryptographic signing
Bridge failure
Proprietary layer executes autonomously. Models continue, prices stored in HSM until bridge restores
Full network partition
Emergency committee (5-of-7) with HSM-signed manual price publication. Continuity unconditional
Oracle architecture ratified.
Architecture ratified by the Security Council — 7 members
Specifications validated by independent security audit (dual-cabinet)
Smart contract oracle interfaces published on-chain at TGE
Open-source bridge adapters — cryptographic verification available
Technical specifications subject to Security Council validation before TGE. Architecture is fixed; hardware selection and vendor agreements are in final phase.
The protocol is doctrinal.
The conversation is open.
Read the whitepaper for the full architecture. Or open a confidential briefing with the Direction — sovereign partners, institutional allocators, African builders.
10 Bn
USD treasury
central 2031-2032
7-of-9
multisig
treasury signers
3
jurisdictions
ADGM · CFC · Morocco
2026
TGE horizon
doctrine opposable