SureVoucher
Cash-like privacy for digital purchases — anonymous, cryptographically-signed value tokens you can spend without anyone linking your identity to what you buy.
Ed25519 + ChaCha20
Signed token, encrypted balance
No identity + ZeroLog
Bearer tokens, no trail from mint to use
Atomic ledger
Double-spend safe, partial spends
Paying for something reveals everything.
Every card payment ties a name to a purchase, and every account ties a purchase to a history. For a service where the whole point is privacy, the payment step quietly undoes it — the provider ends up holding a ledger of exactly who used what, and when.
Cash solved this in the physical world: it carries value without carrying identity. Digital payments gave that up. SureVoucher is an attempt to get it back for online services.
A token that carries value, not identity.
01
Bearer value tokens
Each voucher is an opaque token that carries a balance. Whoever holds it can spend it, exactly like cash — there is no account behind it to look up and no owner on record.
02
Signed and sealed
The balance is encrypted with ChaCha20-Poly1305 and the whole token is authenticated with an Ed25519 signature from the mint, so a voucher cannot be forged, inflated or altered — only issued and spent.
03
Spent exactly once
Redemption records only a hash of each token in an atomic ledger; a second attempt to spend it is rejected. Partial spends are supported — the mint returns a fresh remainder token for the balance left over.
04
Nothing to link
No user accounts, no payment identity, no usage graph. The mint keeps a hash of each spent token and nothing else, so there is no record connecting a person to what their token was used for.
05
Directed settlement
The redemption request is itself signed and names the service to be paid. The mint settles value to exactly that service and no other, and any change from a partial spend is returned only to the service named in the same signed request — value moves solely where the signed request directs it.
06
ZeroLog, end to end
The mint never records which web app or service redeemed a token — there is no log tying a token to the site that spent it. From the initial mint through settlement to final use, no trail is kept that could reconstruct who paid whom: a ZeroLog architecture by design.
07
Privacy, not money movement
The guardrails are deliberate: minting is rate-limited, tokens exist only in low denominations, and they are issued to web services rather than to personal wallets — so a voucher pays for a service, it does not move value between people. Tokens are never redeemable for cash. The privacy lives in the ledger; SureVoucher is a way to pay anonymously, not a stored-value or transfer instrument.
Services where privacy is the product.
Privacy-first products that don't want to become custodians of a purchase history — and the buyers who choose them precisely so their usage isn't linked back to them.
Its first home is Sovereign S3, where SureVoucher is the intended anonymous payment rail: capacity is bought as tokens, and the storage service is paid without ever seeing who paid.
The primitive, before the rails.
| Milestone | Status | Evidence |
|---|---|---|
| Token format + crypto (Ed25519 / ChaCha20-Poly1305) | Running | Mint and token model |
| Double-spend ledger (atomic Postgres) | Running | Partial-spend remainders |
| Redeem round-trip hardening | In progress | End-to-end verification |
| Cash / card / crypto mint rails | Next | — |
This is an early prototype: a token-mint primitive, not yet a live payments product. There is no cash, card or crypto conversion built today. Figures on this page are targets and internal measurements at proof-of-concept stage. The source is available for inspection; commercial rights are reserved for partners, investors and the spin-off companies each project seeds.
From primitive to payment rail.
The proof runs to completing the redeem round-trip, adding a first mint rail that turns cash or card into tokens, and wiring SureVoucher in as the anonymous payment layer for Sovereign S3 — alongside the legal and compliance work that anonymous stored value demands.
SureVoucher spins out of Research ByIQ once tokens can be bought, spent and reconciled through a real deployment.