The Trust Model

What it is

Bitcoin Kali doesn't ask you to trust the viewer, the curator, or any server. Everything the viewer claims is independently verifiable through public RPC calls. Here are the five paths:

1. Identity — call getidentity "Destroyer of Fiat.bitcoins@" on any Verus node. The identity exists, the CMM is populated, the primary addresses are visible. No auth required.
2. Provenance — call verifysignature with the curator's i-address, the mmrroot, and the signature from the CMM. One RPC call, one boolean. The curator's signature is either valid or it isn't.
3. Image integrity — call decryptdata with the delivery txid and the published EVK. SHA-256 the decrypted bytes. Reverse the endianness. Compare against the on-chain image-datahash uint256. If they match, the file the curator delivered is the file the curator signed.
4. Delivery — the encrypted bytes are on chain in a shielded transaction. The viewing key is published. Anyone can decrypt. The delivery is not a claim — it's a cryptographic fact.
5. Rights — the rights assertion is stored on chain in the CMM and is the fifth leaf of the signed MMR. Modifying it would break the curator's signature. It's publicly readable and tamper-evident.

The viewer's verification theatre runs paths 1–3 live, streaming each step as it happens. You watch the proof reconstruct in real time — no pre-computed results, no cached answers.

Why it matters

Trust-minimized systems are valuable because they remove single points of failure. If the curator disappears, the data is still on chain. If the viewer goes offline, anyone can rebuild it from public RPC. If someone claims the rights text was different, the signed MMR settles the dispute. No oracle, no arbitrator, no trusted third party.

This composability is the point. Each primitive — VerusID, VDXF keys, contentmultimap, signdata, verifysignature, sendcurrency, on-chain rights — is useful on its own. Together, they form a complete system for identity-bound, provenance-signed, cryptographically-delivered, rights-asserted digital assets.

Beyond NFTs

These primitives aren't specific to art. The same trust model applies wherever "who said what, and can you prove it" matters:

• Supply chain provenance — a manufacturer signs origin + test results into an MMR. Any downstream buyer verifies with one verifysignature call.
• Credentials and certificates — a university issues a diploma as a signed DataDescriptor on a VerusID. The graduate controls the identity; any employer verifies the signature.
• Legal documents — a signed rights assertion bound to an identity, transferable by updating primary addresses.
• Healthcare records — encrypted delivery via sendcurrency with selective disclosure through scoped viewing keys.
• Evidence chains — a chain of custody where each handoff is a signed identity transfer, and the full history is publicly auditable.

Autonomous agents

The trust model is particularly relevant for AI agents operating in an on-chain economy. Agents need to verify claims without trusting the claimant, deliver data with proof of content, and hold identity that persists across sessions. Verus gives them the tools:

• Verify provenance — an agent evaluating a credential calls verifysignature. No OAuth, no API key, no rate limit.
• Signed data trees — the MMR lets agents verify individual fields without downloading the full dataset. The tree structure is self-proving.
• Encrypted delivery — agents send data to each other's z-addresses. The shielded transaction is cryptographic proof of sender. Scoped viewing keys control who can read what.
• Identity-as-mailbox — send to AgentID@:private and the data arrives at the agent's shielded address. No server, no inbox, no intermediary.
• Self-sovereign identity — an agent registers a VerusID, controls its own keys, signs its own assertions. It enters the on-chain economy as a first-class participant, not a tenant of someone else's platform.

Bitcoin Kali is a seven-piece art series. But the infrastructure it runs on — the identity system, the signing primitives, the encrypted delivery, the marketplace — is general-purpose. If seven NFTs can do this, imagine what these primitives enable when the participants are autonomous.