Tokenization fails when it is attempted at a single layer. Cépage carries provenance, Daftar carries the ownership record, Rihla carries enablement — and the fourth layer belongs to the licensed platforms we exist to make possible.
The sovereign rails layer: ownership recorded on-chain at the national register itself — not at a private venue that reconciles with it afterwards. Title, encumbrances and transfers become a single live state that every counterparty reads from.
Because the record sits at the register, fractionalization happens at the register too: fractions remain owned by the original title holder, requested and processed through the sovereign registry. In the jurisdiction where this is deployed that meant no new licensed activity was required — a structurally different position from an SPV model, where issuance, distribution and secondary trading are three separately licensed activities.
Paper-anchored title, private reconciliation between register and market, and the lag between a transfer being agreed and being true.
Fractional ownership at the register, continuously verifiable title, and a base layer that mortgage, securitisation and portfolio credit can be built on.
Independent risk assessment, verification against deployed contracts rather than the specification, and a launch gate you can defend to an auditor.
Onboarding, compliance and integration that let a licensed platform plug into tokenized supply without rebuilding the regulatory apparatus itself.
Rihla is where the multi-jurisdiction work lives: a design in which the tokenized right — ownership, revenue or usage — selects the regulator, a two-phase regulatory roadmap, and a governance framework built for a market with more than one supervisor.
Three token classes for three distinct rights, so each falls under the supervisor whose mandate actually covers it instead of forcing one instrument through one regime.
Eligibility, transfer restrictions, court-order handling and reporting expressed as enforceable rules on the asset rather than policy documents beside it.
Verified origin, a tamper-evident chain of custody, and one-scan verification — the layer that makes the thing underneath the token worth tokenizing.
Forged warehouse receipts, ghost inventories and goods sold several times over recur across trade finance for one reason: the paper is trusted to stand in for the asset while no independent shared record confirms the asset exists, is where it says it is, and has been pledged only once.
Origin, certification and custody events recorded as they happen, by the party with authority to attest to them.
One scan returns the full chain — not a certificate that claims a chain exists.
Running on a national wine sector, where appellation and vintage integrity carry direct export value.
The regulated venues where investors actually transact. We do not compete with this layer — we make it possible. A healthy rail has many applications on top of it, built by firms that hold the licences and own the customer relationship.
Public payment rails are the closest precedent. India's UPI succeeded not because any one app was good, but because hundreds of apps could exist on a public rail nobody had to negotiate access to. Ownership infrastructure has the same shape — and is roughly a generation behind.
The stack is more useful to you than it is to us.