“UPL-TECH-26-667079-EN proposes DEMI Capsule and DEMI Vault: a browser-side SHA-256 fingerprinting and Ethereum-anchored registry system with an AI plugin and a gated file vault, so AI assistants can verify but never register or hold keys.”
PropositionsT1: Registry assigns UPL code, SHA-256 (browser-computed, file not uploaded), Parent code, Conceptual Core, and Ethereum anchor per work stage | T2: DEMI Capsule plugin (Claude/ChatGPT) exposes three skills (Portal Builder, Continue, Verify) and five read-only MCP tools (get_ai_package, get_record, lookup_record, list_children, verify_fingerprint), live at Worker V5.8.8 | T3: DEMI Vault Gate v0.1 (Cloudflare Worker, R2+KV, pilot) stores registered main file only if deposited SHA-256 matches record SHA-256; owner sets access as closed/request/open; get_file_link tool reports availability; export package transfers file and evidence to institution vault | T4: Registration costs A$9 per card at ramsmile.com/demicapsule and is performed by the human owner only
ConstraintsAI assistants are read-only: they verify; they do not register, pay or hold keys | SHA-256 computed client-side; file never uploaded during registration | Vault deposit rejected if SHA-256 mismatches record | Request permits use expiring revocable links; only token hash stored, not the link itself | User-agent filter is a barrier, not a security guarantee | Consistency check confirms passage matches file; does not certify content truth | DEMI Vault not yet deployed (37 local tests passed, pilot only) | Cloudflare Worker and R2/KV infrastructure dependency | Worker V5.8.8 required for live plugin
MechanismsT1: Verify UPL code chain via lookup_record and list_children; confirm SHA-256 matches local file hash computed in browser; check Ethereum anchor exists in Registry state | T2: Test each MCP tool independently with known UPL codes; invoke Verify skill against a record and confirm fingerprint match/mismatch response; test Portal Builder and Continue skills for correct record linkage | T3: Attempt vault deposit with correct and incorrect SHA-256 to confirm accept/reject logic; test each permit mode (closed/request/open) via get_file_link responses; validate export package integrity by comparing file hash and evidence post-export; reference 37 passed local tests | T4: Confirm registration card flow at ramsmile.com/demicapsule produces a valid UPL code and Ethereum anchor
BoundariesDEMI Vault Gate v0.1 is pilot only — not deployed in production | Out of scope: client-side encryption | Out of scope: owner-key verification by the Registry | Out of scope: request relay by email | Out of scope: payment as a permit mechanism | Out of scope: file indexing in a database | Out of scope: Cloudflare paid plan features | Out of scope: legal review for third-party files | OPEN: Core formation timed out on UPL 667079 (~20 s limit) — resolution not stated; client-side encryption design; owner-key check by Registry; email-based request relay; payment-as-permit logic; database index; Cloudflare paid plan migration path; legal framework for third-party file deposits