September 2026 · living document, updated as the protocol ships
Public chains made ownership verifiable by making it observable. One address links every mint, trade, and token-gated login you ever signed into a single permanent record. Anyone can read your portfolio, your cost basis, and your habits, and they can keep reading them forever.
OmO Bond seals assets into a shielded set. Sealing an asset publishes only a bond: a hash of the asset, a secret salt, and a fresh one-time key. From that point the chain can verify that the set changed validly without learning what any bond is or who controls it.
A transfer retires the sender's commitment and adds one for the receiver, with a zero-knowledge proof that the two operations balance. Amounts, counterparties, and timing correlations stay inside the proof.
When ownership needs to be demonstrated, the holder opens a single commitment to a single counterparty, or proves a predicate about it (ownership, solvency, membership) without opening anything. The verifier receives exactly one bit.
Keys never leave the holder's device. OmO is self-custody end to end: the protocol cannot freeze, seize, or enumerate holdings, because it cannot see them.
$0m0 is the protocol's settlement unit. Every shield, transfer, and proof settles a small fee in $0m0; 80% of each fee is burned at settlement and the remainder funds the provers that keep the pool live. Holding $0m0 expands a user's shielded slots and unlocks batch proofs, and holder tiers are themselves shielded, so nobody can enumerate the whales.
The protocol runs on Robinhood Chain. The bond engine is functional and in its final test pass; sealing opens on this contract. Audits publish here as they complete.