Protocol · dmrv.africa
The protocol

Physics proves. Cryptography protects. The ledger preserves.

Three separate guarantees, in a fixed order, with no discretion between them. Nothing in this chain asks anyone to be believed. Each stage either passes a mechanical test or it does not exist.

01Physics decides what is possible.
02Cryptography decides what is unaltered.
03Consensus decides what came first.
Try the gate

A 1 MW plant cannot report 2 MW.

The edge notary tests every reading against the registered physical limits of the asset before it is signed. Move the reported output and watch the verdict change.

Registered asset SEN-ZM-HYD-0041 · nameplate 1 000 kW
Reported output {{ kwLabel }}
0 kW1 000 kW nameplate2 400 kW
Sensor identity
Edge notary verdict {{ verdict }}
{{ record }}
{{ verdictNote }}
Architecture

Five layers in depth.

L1
Edge NotaryTruth at source

Industrial sensors measure production in real time. The gateway checks that the sensor is ACTIVE in the Spine, applies the physics gate, then signs the payload with the device's own Ed25519 key and submits it to HCS in roughly two seconds. No operator, platform or network stands between the measurement and the signature.

Ed25519Hardware-boundPhysics gate
L2
Sovereign SpineIntegrity engine

Governance sets every rule: which licensees exist, which gateways they operate, which sensors those gateways may speak for, what physics constraints and geographic scope apply. Any asset not traceable to an ACTIVE sovereign entity is blocked at source, and every governance act is itself written immutably.

ONBOARDINGACTIVESUSPENDEDTERMINATED
L3
Mission ControlSovereign layer

Operated by the state or the IPP, never by the protocol author. It reads the live HCS stream, accumulates energy and carbon against the grid emission factor, and executes issuance on the Hedera Token Service. The console is observational: HCS remains the truth, and a failed mint circuit can be recovered without rewriting history.

L4
RegistryTruth-based record

A central open-source asset ledger covering the full life of every unit: birth, on market, burned. Provenance is on-chain rather than on request, and the registry is open to any regulator anywhere: no permission, no account, no correspondence.

L5
Exchange ProtocolPrice discovery

Market infrastructure built on verified evidence. KYC-gated buyers, settlement in HBAR, on-chain verification of every transfer. Because provenance is self-evidencing, price discovery happens on integrity rather than on the reputation of the issuer.

Recorded event types

Even the failures are permanent.

A rejected reading is not discarded. It is written. The record of what the protocol refused is as public as the record of what it accepted, which is what makes the accepted set meaningful.

AUDIT_EVENTEvery governance act: onboarding, suspension, termination.
MINT_EVENTIssuance of a REC, CO₂ or H₂O unit against accumulated evidence.
PHYSICS_GATEA reading refused because the asset could not have produced it.
SENSOR_MISMATCHTraffic from a device the Spine does not recognise, or a replay.
Standards alignment

Built to be recognised, not to be believed.

The HydroRE extension set has been merged into the InterWork Alliance / GBBC Token Taxonomy Framework repository as a dMRV extension contribution, a standards-aligned foundation for attribute issuance and future registry or exchange interoperability.

IWA / GBBCToken Taxonomy Framework · dMRV extension
ISO 14064-1:2018GHG quantification and reporting fields
EU CBAMEmbedded-emissions evidence at product level
CORSIAEligibility fields for aviation offsetting
Article 6Corresponding-adjustment traceability
Open the Live Registry Request the engineering brief