← omo
WHITEPAPER · DRAFT v0.1

OmO Bond: zero-knowledge ownership

September 2026 · living document, updated as the protocol ships

1. The problem

Public chains made ownership verifiable by making it observable. One address links every mint, trade, and token-gated login you ever signed into a single permanent record. Anyone can read your portfolio, your cost basis, and your habits, and they can keep reading them forever.

2. The construction

OmO Bond seals assets into a shielded set. Sealing an asset publishes only a bond: a hash of the asset, a secret salt, and a fresh one-time key. From that point the chain can verify that the set changed validly without learning what any bond is or who controls it.

commit(asset, salt, key) → the chain sees a hash
transfer(commitment) → the chain sees one leaf out, one in
prove(claim) → the verifier sees true

3. Transfers

A transfer retires the sender's commitment and adds one for the receiver, with a zero-knowledge proof that the two operations balance. Amounts, counterparties, and timing correlations stay inside the proof.

4. Selective proofs

When ownership needs to be demonstrated, the holder opens a single commitment to a single counterparty, or proves a predicate about it (ownership, solvency, membership) without opening anything. The verifier receives exactly one bit.

5. Custody

Keys never leave the holder's device. OmO is self-custody end to end: the protocol cannot freeze, seize, or enumerate holdings, because it cannot see them.

6. The token ($0m0)

$0m0 is the protocol's settlement unit. Every shield, transfer, and proof settles a small fee in $0m0; 80% of each fee is burned at settlement and the remainder funds the provers that keep the pool live. Holding $0m0 expands a user's shielded slots and unlocks batch proofs, and holder tiers are themselves shielded, so nobody can enumerate the whales.

fee(action) → 80% burned · 20% to provers
hold($0m0) → more shielded slots · batch proofs
tier → shielded, like everything else

7. Status

The protocol runs on Robinhood Chain. The bond engine is functional and in its final test pass; sealing opens on this contract. Audits publish here as they complete.

$0m0 contract
0x116620828fa088597d13239079175507d426110d