ZORG/0 · SHIELDED OBJECT STANDARDTHE PUBLIC OBJECT.
THE PRIVATE SUBJECT.
ZORG/0 is a protocol proposal for issuing, moving, and auditing non-fungible objects on Zcash. It treats transparency as a property of the collection and privacy as a property of the holder. The ledger may prove what exists without publishing who possesses it.
[00]THE PREMISE
Most NFT systems confuse visibility with verifiability. They expose the owner because the market wants to inspect the object. ZORG/0 separates those questions. Collection rules, object history, supply arithmetic, metadata commitments, and protocol transitions are reconstructable by anyone. The receiving shielded address is not.
[01]THE PUBLIC SURFACE
Every collection begins with a content-addressed manifest: schema version, issuer keys, maximum supply, royalty logic, trait commitment, media root, and upgrade policy. Every state transition emits a deterministic public commitment. No privileged indexer is required to decide what the collection is.
[02]THE PRIVATE SUBJECT
Ownership terminates inside the Zcash shielded pool. A holder is represented by spend authority over a note, not by an account-shaped public profile. The protocol never asks a holder to turn a Unified or Sapling address into a permanent social identifier.
[03]SELECTIVE DISCLOSURE
A holder may generate a scoped proof: membership in a collection, possession before a snapshot, eligibility for a right, or continuity between two states. The proof reveals the requested predicate and expires with its context. It does not reveal the shielded address, unrelated objects, balance, or transfer graph.
01 / MINTCommit the object root and create a shielded note. Public supply changes by exactly one.
02 / MOVEConsume one valid note, publish its nullifier, and create a new private output. Ownership changes; the owner does not become a public field.
03 / BURNDestroy spend authority through a verifiable terminal transition. Circulating supply changes without exposing the last holder.
04 / PROVEDerive a domain-bound statement from local witness data. Disclosure is intentional, narrow, and non-transitive.
OPEN COLLECTIONS ARE NOT OPEN DOSSIERS.
Audit the machine. Do not inventory the human.
“Users largely lose control over their own hardware and software.”
RECOVERED FRAGMENTS / 2KEYS OMITTED
FRAGMENT_01 · B64Rm9yIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiBwbGVhc2UgdXNlIG15IGtleS4=
FRAGMENT_02 · XOR:2A / HEX6958434743444b46590a5d4346460a4745595e0a4643414f46530a595e4349410a5d435e420a594549434b460a4f444d43444f4f5843444d0a4b590a4645444d0a4b590a425f474b44590a4b584f0a4d5f46464348464f0a4b444e0a4344595e4b46460a4c584f4f0a45580a5a43584b5e4f4e0a59454c5e5d4b584f0a5e424b5e0a4945474f590a5a4b49414b4d4f4e0a5d435e420a474b465d4b584f04