Security and Compliance

Only approved Distribution Partners can participate.
Distribution Partners retain user KYC information off-chain.
The program enforces KYC linkage for relevant on-chain actions in both models (e.g., User PDA creation, minting/transfers in Self-Custody model involving the program).

All gold purchases and transfers facilitated by the program are fully transparent on-chain.
Distribution Partners can provide detailed audit trails to users.

Custodial Model: Locked gold tokens are protected by the program within the central vault system. Distribution Partners cannot withdraw user-allocated gold.
Self-Custody Model: Users maintain control and responsibility for their assets in their own Web3 wallets. The program ensures that only KYC-verified users (via their linked User PDA) can interact with specific program features like initial validated mints or participation in ecosystem offerings. The security of the user’s private keys is paramount.

Optional multi-signature requirements for the Partner’s Withdrawal Authority (both models, for their respective vaults).
Additional security for high-value transactions under partner control.