A Digital Circularity Vehicle Passport built on Midnight's zero-knowledge blockchain. One canonical vehicle record, anchored once. From then on each party, whether buyer, recycler or border authority, is shown exactly what they are entitled to and provably nothing more.
No wallet. No account. No login. A buyer scans a QR code and sees a verdict; every transaction fee is sponsored.
Each is answered yes, or the transaction fails. The value that satisfied the bound is never published, and “not proven” is rendered as exactly that: no claim, never a quiet no.
Pre-alpha, under active development. The contract is written, compiles and is covered by tests; the application layer around it is being built.
The ledger stores persistentCommit(value, salt), never the value and never the salt. Each field also carries an integrity rule, written once at creation, so a caller cannot pick the flattering rule at the moment they need it.
Mileage, accidents, keepers, services and write-off category may never fall. To write a new value the caller must prove, inside the circuit, that they know the current one and that the change respects the rule. A rollback by one kilometre is refused.
A recorded claim names the commitment its proof opened. Record a new reading and the old claim no longer matches the field, so a verifier can see it is superseded without being told.
Fill in the fields, submit, and watch the compiled circuits accept and refuse. A rollback update aborts in-circuit, is shown as refused, and writes nothing.
Open the console →Every claim on the ledger, grouped by vehicle and marked current or superseded. Nothing here requires trusting VINPassport. Every row is a claim anyone can check.
Open the explorer →Scan the QR code on a vehicle or its listing and this page opens on its passport. The page never sees a VIN, only its hash.
See a verdict →A vehicle passport has to be verifiable by strangers and confidential at the same time. A full history is commercially sensitive to a dealer and personally identifying to an owner. Publishing the record solves the first and destroys the second. Keeping it private leaves the first where it is today: trust the seller.
A producer who commits a false value produces a cryptographically valid proof of a false fact.
VINPassport proves a reading is the one that was committed, and that it satisfies a bound. It does not prove the reading matched physical reality. Closing that gap needs hardware attestation at the source. That is scoped as Phase 2 rather than pretended away, and stated in full in docs/ARCHITECTURE.md.
The zero-knowledge chain the passport lives on, at ledger 8. The contract, its five circuits and both integrity rules are ours, written in Compact and covered by our own tests.
Nothing about the passport logic is delegated. Every transaction is assembled, proven and signed locally before it leaves the machine, so the submission service pays a fee it cannot read and never sees a witness.
Node 22+. No Docker, no wallet, no network access, no API keys. Three surfaces and the real compiled circuits, in-process.