Architecture overview

• Credential Registry ↗per-holder credential (commitment, nullifier, status, bonded signer set); attest, revoke, officer actions, role grant/revoke/renounce.
• Groth16 Verifier ↗on-chain pairing verification — used only by the fraud-challenge path.
• Challenge ↗economic fraud disputes: bond, challenge, resolve → slash + burn, withdraw.
• Transfer Filter ↗the recipient-aware CEP-78 hook — checks sender and recipient are live; fail-safe deny.
• Writ CEP-78 ↗the RWA bond NFT (real CEP-78), wired to the filter and mint-gated.
• Writ Token ↗the writ-token and its Odra transfer filter.

The full system design, data flow, and trust model are in ARCHITECTURE.md; the closed attack surface and test coverage in ADVERSARIAL_TESTING.md.