Skip to content
cTRNG · — · 0000000000000000000000000000000000000000000000000000000000000000 · sat·sig·verified · cTRNG · — · 0000000000000000000000000000000000000000000000000000000000000000 · sat·sig·verified · cTRNG · — · 0000000000000000000000000000000000000000000000000000000000000000 · sat·sig·verified ·
proof of reality.
ETHPRAGUE 2026 · SPACECOMPUTER TRACK

Web3 oracle
for the physical world.

A 30-second scan, anchored to a satellite-borne random number, signed by a key that never leaves hardware, written to Base Sepolia. Five independent witnesses on every proof. Not generatable by AI, not pre-recordable, not forgeable on the ground.

Verify a sample proofArchitecture
WITNESSES
5
TRUST ROOTS
public
BACKEND CAN FORGE
zero
01THE TRUST GAP

AI made every photograph editable.
We made one inedible.

Marketplace listings drift toward fakes. RWA tokens claim assets that may not exist. Insurance disputes hinge on photographs that any laptop can generate in under a second. The web does not have a primitive for here, now, real.

“Ground can be tampered with. Space cannot.”
— SpaceComputer, on the orbital trust root.
REAL · capture-001.ply

Five witnesses agree.

  • Cosmic nonce signatureverified · aptosorbital
  • KMS co-signatureverified · space-fabric
  • Device key signatureverified · 0xA3…f9
  • Swarm CACcontent addressed
  • App Attestverified · iOS
VERDICT
ACCEPTED
Bundle hash recomputes. All five signatures match published trust roots.
02
WITNESSES

Five independent witnesses
on every scan.

No single party guarantees a proof. Five do, drawn from physics, hardware, and on-chain registries. Each one defends against a distinct class of attack. To forge a scan, you would have to break all five at once.

①WITNESS

Cosmic nonce

Orbitport · cTRNG · aptosorbital

A satellite signs a fresh random number. Bound to the scan in the moment of capture; replaying it requires predicting orbit-time.

②WITNESS

KMS co-signature

SpaceComputer Space Fabric

After the device signs, an off-chain TEE counter-signs the bundle hash. A second independent witness on every mint.

③WITNESS

Device key

Apple Secure Enclave · USB Armory ECDSA

The capture device proves the bundle came from real hardware. Public key registered on-chain at provisioning.

④WITNESS

Swarm CAC

Bee · BMT chunk root

The bundle's Swarm reference is its content hash. Re-fetch and verify; no gateway trust required.

⑤WITNESS

App Attest

Apple · iOS captures only

Optional fifth witness on B2C. Apple attests that the app binary is genuine, not a tampered build.

Five independent witnesses on every scan. To forge one, you would need to break all five at once: predict an orbital nonce, mint a counterfeit signature on a TEE you don't control, extract a key from hardware that won't release it, recompute a content address, and bypass App Attest. The math gets unkind very quickly.

03THE FLOW

Two capture frontends.
One trust pipeline.

An iPhone scanning a watch in a New York apartment and an OAK 4 D camera scanning a vehicle in a Prague garage produce the same proof shape, hit the same backend, and mint to the same contract.

B2C · iOS
RoomPlan + Object Capture + Secure Enclave
01 · CAPTURE
  1. LiDAR + RGB scan
  2. ProofBundle assembled with cosmic nonce in-frame
02 · SIGN
  1. deviceSigningHash signed by Secure Enclave
  2. App Attest assertion attached
03 · MINT
  1. KMS co-sign · Swarm upload · RealityProof.mint(...)
B2B · OAK 4 D
Luxonis camera + USB Armory Mk II (TamaGo)
01 · CAPTURE
  1. DepthAI capture · IMU · synced timestamp
  2. Bundle assembled in agent
02 · SIGN
  1. bundleHash signed by USB Armory ECDSA
  2. Audit log appended
03 · MINT
  1. KMS co-sign · Swarm upload · RealityProof.mint(...)
CONVERGES AT
One backend, one contract, one proof shape.
RealityProof.mint(bundleHash, swarmRef, satSig, kmsSig, deviceSig, …)on Base Sepolia
04LIVE DEMO

See it work in 90 seconds.

A real bundle on Base Sepolia.

Or skip the video and verify a real, minted ProofBundle yourself. The viewer recomputes the bundle hash from Swarm, checks all five signatures, and either rejects or shows you a green page.

bundleHash
0xa7c4…b91fJCS-canonicalized, keccak-256
swarmRef
bah5acg…q7zucontent-addressed via Bee BMT
tx
0x312f…8d04RealityProof.mint(...) on base-sepolia
Verify it yourself
05BUILT ON

No cobranding fictions.

Every dependency below is a real one. We hold no hidden trust roots; if a system in this list breaks, the verifier says so.

  • ORBITPORT · SPACE FABRICSpaceComputer
  • DECENTRALIZED STORAGESwarm
  • L2 SETTLEMENTBase
  • SUBDOMAIN RESOLUTIONENS
  • SECURE ENCLAVE · APP ATTESTApple
  • OAK 4 D CAMERALuxonis
  • MK II ECDSA SIGNERUSB Armory
  • BARE-METAL GO FIRMWARETamaGo
06BUILD WITH US

A primitive, not a product.

RWA · DEFI

Tokens that prove their underlying.

Mint against a verifiable 3D snapshot, not a PDF and a promise.

rwa@proof-of-reality.xyz
DEPIN · ORACLES

An oracle for the physical world.

Smart contracts that need to know an object exists can ask, and trust the answer.

oracles@proof-of-reality.xyz
RIGHT NOW

We are at ETHPrague. The viewer is open. The contract is on Base Sepolia. Open the proof.

Verify a sample proofRead the source