Platform Architecture

Swiss/Liechtenstein Protocol Foundation

The core intellectual property (IP), source code, and smart contract designs are vested in a Liechtenstein Stiftung (Foundation). This entity is legally and financially insulated from operational liabilities. The Swiss AG (Opus Global) licenses this IP, ensuring long-term resilience and institutional-grade stability.

Parallel US/EU Operating Companies

Opus USA (Delaware C-Corp) manages all US operations, compliance, and serves as legal manager for Delaware Series LLCs. Opus Global (Swiss AG) manages EU/RoW operations and Luxembourg Securitization Vehicles. This parallel structure ensures jurisdictional compliance and risk isolation.

Compliance DAO (Delaware DAO LLC)

A novel compliance mechanism where US-based, AML-regulated galleries and institutional partners vote on US-specific compliance parameters. When regulators ask "Who decides your compliance standards?", the answer is: "Our US-based Compliance DAO, legally structured as a Delaware LLC, composed of our AML-regulated gallery partners." This turns compliance from a burden into a collaborative, transparent, and legally defensible process.

Master NFT + Vault Pattern

Each artwork is represented by an ERC-721 "Master NFT" that represents 100% membership interest in the legal entity (Delaware Series LLC or Luxembourg SV). This Master NFT is immediately locked in a Vault smart contract, which then mints ERC-3643 fractional tokens (e.g., $PICASSO) representing fractional economic interests. The Master NFT's metadata is dynamic, updateable by trusted oracles (custodians, insurers) to reflect physical location, insurance status, and legal documentation.

ERC-3643 Compliance Protocol

The platform uses ERC-3643 (T-REX), an open-source standard for permissioned, RWA-backed tokens. It consists of:

• • Identity Registry: Global on-chain database linking wallet addresses to anonymous "claims" (e.g., JURISDICTION_USA, IS_ACCREDITED)
• • Trusted Issuers Registry: Lists authorized entities (Opus USA/Global) that can add/revoke claims
• • Compliance Contract: Per-asset contract defining rules (e.g., "Only wallets with JURISDICTION_USA AND IS_ACCREDITED can hold this token")

Jurisdiction-Aware Allow-Lists

The Identity Registry stores jurisdiction-specific claims (JURISDICTION_USA, JURISDICTION_EU, JURISDICTION_HKG, etc.). Each asset's Compliance contract defines which jurisdictions are allowed. For example:

• • US Asset: Requires JURISDICTION_USA AND IS_ACCREDITED
• • EU Asset: Requires JURISDICTION_EU OR JURISDICTION_CHE OR JURISDICTION_HKG

This enables global collectors to form "buying co-ops" while maintaining regulatory compliance—a European investor and a Hong Kong investor can both hold the same EU-domiciled asset, as long as they meet the asset's specific compliance rules.

PaymentSplitter & Instant Pay

Uses OpenZeppelin's PaymentSplitter contract configured to handle ERC-20 tokens (USDC, EURC). Upon sale, the Sale contract atomically:

1. Pulls payment from buyer's wallet
2. Splits funds according to pre-configured percentages (artist, gallery, platform)
3. Transfers ERC-3643 tokens to buyer
4. Distributes payments instantly—solving the 90-day payment lag

Gnosis Safe Co-ops

Galleries, artist estates, or collectives can deploy a Gnosis Safe multi-sig wallet for collective governance. The platform provides "Multi-Sig-as-a-Service" by automatically deploying Gnosis Safe contracts with custom rules (e.g., "2-of-3 signatures required for sale approval"). The Master NFT and fractional tokens are held by this co-op until sale approval.

EIP-2981 Enforced Royalties

A custom RoyaltyComplianceModule for ERC-3643 enforces EIP-2981 royalty payments on secondary transfers. The canTransfer check fails unless the royalty is satisfied, making royalties non-optional and automatically enforced.

Custodian & Insurer APIs

The platform integrates with high-security custodians (Geneva Freeport, Delaware Freeport) and insurers (AXA Art, Chubb) via APIs. These partners act as "oracles" that update the Master NFT's dynamic metadata in real-time:

• • Physical location (e.g., "Vault 42, Sector B, Geneva Freeport")
• • Insurance status and policy numbers
• • Legal documentation hashes
• • Movement tracking (when art is in transit)

Physical Custody Workflows

When a sale executes on-chain, the smart contract emits a SaleExecuted event. An off-chain "Oracle" listener immediately triggers authenticated API calls to:

1. Custodian: Update owner registry
2. Insurer: Transfer policy to new beneficiary
3. Master NFT: Update metadata with new ownership and custody information

This workflow settles a multi-million dollar, international art sale—including payment, title transfer, and updating of custodial and insurance records—in approximately 15 seconds, for less than $5 in L2 gas fees.

Large Work Model (LWM) + Human-in-the-Loop (HITL)

The Opus workflow uses AI agents (Large Work Models) to perform initial automated tasks:

• • OCR and data extraction from uploaded documents
• • Automated API calls to third-party AML/KYC providers (Chainalysis, World-Check)
• • Sanctions screening and address verification

The workflow then pauses for human review—a paralegal reviews the AI's findings, and a Partner makes the final legal determination. This "human-in-the-loop" ensures professional judgment while automating routine tasks.

External Service Nodes

Opus workflows can call custom APIs via External Service Nodes. These nodes can:

• • Launch Docker stacks for isolated processing
• • Call third-party compliance APIs
• • Execute on-chain transactions (via secure server-side wallets)
• • Pass rich JSON payloads between workflow steps

File handling uses pre-signed URLs (not base64) for secure, efficient document transfer.

Phase 1: Opus Compliance Engine

Build the B2B SaaS portal for law firms. Deploy ERC-3643 Identity Registry and core contracts. Onboard the first 10 law firms as Trusted Issuers. Goal: Prove the "double-blind" attestation workflow.

Phase 2: The Marketplace

Build Gallery Portal ("Sushi Kitchen") and Collector Portal. Build the full ERC-721/ERC-3643 "Vault" tokenization workflow. Integrate one US (Delaware Freeport) and one EU (Geneva Freeport) custodian. Deploy PaymentSplitter and GnosisSafe factory. Goal: Execute the first 10 compliant, fractional, instantly-paid sales.

Phase 3: Instant Pay & Ecosystem

Build and launch the "Profiler" (RAG) tool. Build the EIP-2981 Royalty Module for secondary sales. Launch the DAOs (Marshall Islands & Delaware) for governance. Goal: Scale the ecosystem, capture the secondary market, and begin decentralizing governance.