TrustLayer Protocol

TrustLayer is a decentralized Human Trust Layer protocol that proves a person is real and unique — without collecting personal identity, biometrics, or central databases. Trust is established through cryptographically signed peer-to-peer interactions, anchored on-chain as portable proofs.

The protocol is powered by the $TRUST V2 token on Base (contract 0x0A35bF866C7af43722EADB57Fd467142239BC32d), with a fixed supply of 1,000,000,000. V2 introduces auto-burn, cross-chain bridging via LayerZero, on-chain governance (ERC20Votes), time-decaying anti-whale caps, EIP-2612 gasless approvals, and a hard-capped 5 % fee ceiling enforced at the bytecode level.

TrustLayer is building the trust primitive of the open internet — a decentralized reputation layer that any app, dApp, or AI agent can plug into to distinguish real humans from bots without collecting a single piece of personal data.

Full live metrics at trstlyr.com/stats.

The web is being overrun by bots, sybils, and AI-generated personas. Existing solutions force users to sacrifice privacy (KYC, biometrics, government IDs) or rely on a single corporate gatekeeper. There is no neutral, portable, privacy-preserving way to prove “a real human is on the other side.”

• CAPTCHA is broken by modern AI.
• KYC is custodial, exclusionary, and breach-prone.
• Biometric proofs (iris, face) require trusted hardware and centralized issuers.
• Reputation systems live inside walled gardens and cannot be ported.

Bot traffic now exceeds human traffic on the open web (Imperva 2024 Bad Bot Report: 49.6 %). Generative AI has collapsed the cost of producing believable fake personas to near zero. Every consumer app, marketplace, DAO, social network, and AI-agent platform now needs a portable proof-of-humanity primitive.

• Timing: EU AI Act (2026) and US executive orders now require proof that end-users are human before certain AI outputs are served.
• Distribution: Farcaster, Lens, Base, and every consumer L2 need a native sybil layer that isn’t Worldcoin (biometric) or Gitcoin Passport (opaque scoring).
• Tailwind: Stablecoin adoption and AI-agent commerce depend on trusted counterparty attestations — exactly what TrustLayer produces.

TrustLayer replaces identity verification with interaction verification. Two humans connect peer-to-peer, mutually sign a challenge, and produce a portable proof. Repeated, diverse interactions across many distinct peers raise an account’s Trust Score. Bots cannot fake diverse, mutual, time-spaced human interaction at scale.

TrustLayer is the only proof-of-humanity network that is simultaneously privacy-preserving, portable, non-custodial, and hardware-free.

TrustLayer follows a Zero Centralized Server design:

• Identity: Ed25519 keypair generated locally and encrypted with AES-256-GCM in the user’s browser.
• Transport: Direct WebRTC peer connections, with a thin signaling fallback for NAT traversal.
• Proofs: Mutually signed JSON proofs hashed and anchored on Base as Soulbound Tokens (SBTs).
• Trust Score: Computed locally from on-chain proofs using a transparent, weighted algorithm (40% unique-peer diversity).
• Wallet: WalletConnect v2 + EIP-191 personal_sign for ownership verification.

Every non-exempt transfer pays a small fee split between an auto-burn (default 1 %) and a treasury portion (default 1 %). Both rates are tunable by the FEE_MANAGER role, but the combined ceiling of 5 % is hard-coded into the contract bytecode and cannot be raised by any role.

• Auto-burn — removes tokens from circulation forever, increasing scarcity proportional to volume.
• Treasury fee — funds DAO operations, grants, bug-bounty payouts, and protocol-owned liquidity.
• Exempt addresses — LP pools, the bridge adapter, and the treasury Safe are exempt to avoid double-taxing routine flows.
• No surprise upgrades — the contract is non-upgradeable; the fee ceiling is a code-level guarantee.

To prevent early-stage manipulation, V2 enforces time-decaying caps that fully lift 180 days after launch:

• Per-transfer cap starts at 0.5% of supply and decays to unlimited.
• Per-wallet cap starts at 2% of supply and decays to unlimited.
• Hard floors — caps can never drop below 0.10 % (tx) and 0.50 % (wallet), preventing a malicious admin from squeezing the market.
• Emergency pause is permitted for a maximum of 7 days; it auto-expires.

V2 is bridge-native. A BRIDGE_ROLE-gated burn/mint pair lets a LayerZero OFT adapter move $TRUST between Base, Ethereum, Arbitrum, Optimism, Polygon, and BNB Chain. The contract enforces an inflation-proof invariant:

• bridgedInSupply ≤ bridgedOutSupply — the bridge can never mint more than has been burned on other chains.
• Only the OFT adapter contract holds BRIDGE_ROLE — never an EOA.
• App-side intent signing happens locally via Ed25519 (instant, popup-free) with optional EIP-191 wallet co-signatures.

• Verification Fees: Apps pay $TRUST per humanity check via the API.
• Anti-Sybil Staking: Verifiers stake $TRUST; malicious signing slashes the stake.
• Auto-Burn: Every non-exempt transfer permanently burns a configurable share (default 1 %, capped at 5 %).
• Premium Features: Custom handles, analytics, badge SVG hosting, priority verification.
• Governance: ERC20Votes — holders self-delegate and vote via the on-chain Governor + Timelock.
• Cross-Chain: Move $TRUST across L1/L2s without giving up the underlying balance.

The 1,000,000,000 $TRUST supply is allocated as follows:

Five revenue streams — all payable in $TRUST, ETH, or USDC:

• API verification fees: Apps pay per proof-of-humanity check (target $0.001 – $0.01 per call at scale).
• Premium handles & profiles: Custom @handles, embed widgets, verified-org badges.
• Anti-sybil staking spread: Verifiers stake $TRUST; the protocol keeps a spread on slashing + rewards.
• Enterprise SLA: Priority verification, dedicated indexer, custom scoring for exchanges & marketplaces.
• Auto-burn value accrual: 1 % of every transfer is burned forever — deflationary token model tied to protocol usage.

Projections are illustrative and depend on partner acquisition, token liquidity, and network growth.

TrustLayer is live and operating on serverless infrastructure with zero recurring hosting cost. All key numbers are published in real time at /stats and independently verifiable on Basescan.

• Product: 105+ static-prerendered pages, 44+ SEO-indexed blog posts, PWA + browser extension shipped.
• Contracts: $TRUST V2, TrustQuestClaim, TrustStreak, NFTBadgeMinter, RentATrust — all deployed on Base mainnet.
• Automation: Daily Gemini-powered content pipeline, GSC + IndexNow auto-submission, backlink outreach cron.
• Test coverage: Foundry fuzz + invariant + 10 000-iter Monte Carlo across all V2 contracts.
• Cost structure: Cloudflare Workers + IPFS + Base — marginal cost per user ≈ $0.

Target raise: up to $750K across strategic + public presale rounds. Allocation:

TrustLayer is founded and led by MD Tawhid — protocol architect and full-stack builder shipping the entire V2 stack (contracts, indexer, PWA, growth engine).

• Founder / CEO: MD Tawhid — protocol design, Solidity, product, growth.
• Advisors: Open slot — 5 % allocation reserved (see distribution).
• Hiring plan (post-raise): Smart-contract engineer, growth lead, BD/partnerships — funded from the 12-month runway bucket.

Full bio and background: trstlyr.com/founder.

$TRUST V2 ships with ERC20Votes from day one. Holders self-delegate (or delegate to a representative) and vote on:

• Fee parameters (burn / treasury split within the 5 % ceiling)
• Treasury grants and protocol-owned liquidity moves
• Bridge role assignments
• Emergency pauser and fee-manager role membership

All admin powers flow through a Timelock + Gnosis Safe (5-of-7) after launch — the deployer EOA holds zero authority post-handoff.

• OpenZeppelin 5.0 primitives (audited upstream).
• Foundry fuzz + invariant + 10 000-iteration Monte Carlo test suite.
• Slither static analysis on every change.
• Non-upgradeable — no admin escape hatch, no proxy.
• Two-step ownership transfer (Ownable2Step).
• Time-bounded emergency pause (max 7 days, auto-expires).
• Client-side AES-256-GCM encryption for user identity keys.
• Strict Row-Level Security on every off-chain database table.
• Full disclosure: contracts/v2/SECURITY_REPORT.md.

• Q2 2026: $TRUST V2 mainnet on Base; ownership handed to Gnosis Safe.
• Q3 2026: Pre-sale, Uniswap V3 liquidity, Sablier 4-yr LP lock.
• Q4 2026: LayerZero OFT bridge activation (Base ↔ Ethereum ↔ Arbitrum).
• Q1 2027: Governor + Timelock go live; Skill Barter Market launches.
• Q2 2027: Optimism, Polygon, BNB Chain bridge endpoints; CEX listings.

This whitepaper is for informational purposes only and does not constitute investment advice, an offer to sell, or a solicitation to buy any security. $TRUST V2 is a utility token used to access protocol features. The V2 contract has been internally reviewed and stress-tested (fuzz, invariant, Monte Carlo, Slither) but has not undergone a paid third-party audit; holders accept this risk. The legacy V1 contract at 0xe7615…b783 is deprecated and unsupported. Token participation may be restricted in some jurisdictions. Cryptocurrencies are volatile and may lose value. Always do your own research.