Asking a desk to hand over its address book is asking for a lot. These are the structural commitments that make it reasonable — each one verifiable, none of them a promise you have to take on faith.
- Not affiliated with any issuer
- We take no position on whether a freeze is justified, and we play no part in any freeze decision.
- We hold no keys
- No custody, no signing, no transaction execution. There is no key in the system capable of moving funds. That is an architectural fact, not a policy.
- Your address book stays yours
- Encrypted under a per-customer key and matched without decryption. Cross-customer queries are not expressible in the data layout, not merely denied by permissions.
- No escape tooling
- Nothing we ship moves funds, and nothing we publish helps a target get ahead of an enforcement action. The Bulletin is retrospective for exactly this reason.
- Reproducible
- Every entry carries the references needed to recompute it from public chain data. The verifier that performs that recomputation is open source, released at tag v0.2.0, and each entry names the tag its digest was produced with.
- You can leave
- Self-hosted deployment is the default for institutional customers, with full data export on request. We do not build lock-in and we do not sell your data, including to ourselves.