Blockchain fraud stops
before it reachesthe chain.

The biometric sensor array operates exclusively inside the Trusted Execution Environment — Intel SGX, ARM TrustZone, or Apple Secure Enclave. The TEE is a hardware-enforced secure zone: the operating system, the application, and even the device manufacturer cannot access the data processed inside it. Raw biometric feature vectors are extracted and immediately used for computation — they are never written to any memory that could be accessed by external code.

Three cryptographic outputs are derived simultaneously. The HMAC-SHA256 commitment is keyed by a system secret held only in the TEE — even the operator cannot reverse it. The SHA3-256 nullifier is deliberately NOT keyed by the system secret, so law enforcement with court authority and biometric evidence can independently recompute it. The BLAKE2b-256 session ID binds the commitment to the specific session timestamp. No raw biometric data is written anywhere at any point in this process.

Each of the ten risk dimensions — recipient age, transaction value anomaly, mixer involvement, flash loan pattern, sanctions proximity, and five others — is modelled as a probability amplitude in a 10-dimensional Hilbert space. The Born rule produces the risk score: S = Σᵢ |αᵢ|² × wᵢ. The critical innovation is the interference coupling matrix Jᵢⱼ: when two risk signals co-occur, their amplitudes interfere constructively, producing a joint score higher than either could produce alone. A flash loan plus a mixer interaction plus an unverified contract does not score as three separate flags — it scores as one amplified composite threat.

The Amplitude Evolution Operator Û = ∏ᵢ exp(i·Hᵢ·τᵢ) is constructed from all prior ledger records associated with the biometric nullifier. Each prior HIGH or MEDIUM risk event contributes a Hamiltonian term Hᵢ weighted by a time-decay factor τᵢ = exp(−λ·Δtᵢ) — so recent events have more influence than older ones. The evolved state |ψ_id⟩ = Û|ψ₀⟩ initialises the risk engine instead of a neutral prior. This means a known bad actor who generates a fresh wallet does not start from zero — they inherit the full amplitude history of every prior wallet they ever used under that biometric identity.

The gate decision — PASS, REQUIRE BIOMETRIC, or BLOCK — is applied before the transaction is ever broadcast to the blockchain network's mempool. If blocked, the transaction never reaches the chain. If passed, an append-only forensic ledger record is written containing: wallet address, commitment hash, nullifier, session ID, transaction hash, risk score, risk tier, amplitude state hash, event type, timestamp, previous record hash, and ledger integrity hash. This record is tamper-evident: any modification to any field breaks the hash chain, detectable by any third party including courts, defence counsel, or investigators.