Abstract
OriLife Alliance proposes 2,400,000 ADA from the Cardano Treasury to deploy tamper-evident traceability across 12,000 hectares of durian in Đắk Lắk, Vietnam — before the December 1, 2026 deadline (Article 15, Circular 11/2026/TT-BCT).
This is not a research grant. The PoC works today: AI fruit identification is live at orilife.io/demo, VeData batching is verified on Cardano Preprod, and farmers across 46 communes have been onboarded over two harvest seasons (verifiable on TON). The Alliance self-invested ~$500,000 USD before this GA. The Treasury funds production deployment.
Treasury-funded deliverables (capacity targets):
- 180M durian fruits/season identified via Bio-ID — identity inseparable from the fruit.
- 24,000 PhoenixKey DIDs on Cardano — W3C-compliant, biometric, seedless recovery.
- 12,000 CIP-68 Dynamic Farm NFTs on Mainnet, ~1M–1.2M on-chain events/year at full scale.
- ~75,000 ADA permanently locked at M4 across NFTs, wallets, and escrow contracts.
- Midnight ZK Proof — subject to mainnet availability; fallback uses Cardano L1 with off-chain trade fields on LampNet.
- MIT-licensed SDK so any developer can build on OriLife.
Cost & who pays. OriLife operating cost ~$200/ha/year vs ~$300 for QR labels and $1,500–8,700 for RFID. All on-chain fees paid by end-users via MAGIC credits (VND-funded), not by this GA.
ADA-price commitment. Anchor $0.25/ADA. ≥ $0.25: full scope executes. Below $0.25: Alliance self-funds the gap. Above $0.30: surplus reimburses self-funded then contingency or ecosystem reinvestment. All ADA locked in Intersect-managed escrow; M0 advance protected by 90-day Clawback.
Why demand is non-discretionary. Vietnam's Circular 11 makes traceability connection a legal obligation for all food production establishments by Dec 1, 2026. China's GACC (>90% of durian export market) is tightening enforcement after the 2025 scandal. EU EUDR and US FSMA 204 reinforce value as the SDK expands — not preconditions.
Aligns with Intersect 2026 Budget Framework — Pillar: Ecosystem Growth & Real-world Adoption.
Motivation
The Problem: A $3.36 Billion Supply Chain Built on Peelable Stickers
Vietnam's durian exports to China totaled $3.36 billion USD in 2024 — over 90% of the country's durian export revenue, employing hundreds of thousands of farmers across the Central Highlands, with Đắk Lắk Province holding the largest single concentration of plantations. The entire traceability system underpinning this supply chain rests on physical QR labels — printed paper stickers attached to each fruit — that can be peeled off one fruit and stuck onto another in seconds, with no detection, no audit trail, and no recourse.
The 2025 scandal exposed exactly how this fails at scale: 17 individuals criminally prosecuted, 55+ plantation codes revoked by Chinese customs, 2,000+ containers stuck at port pending re-inspection, with industry estimates of $200M+ USD in trapped inventory and contract penalties. The investigation revealed fraudulent operators were systematically peeling labels from properly registered, GACC-approved durians and re-attaching them to fruits sourced from unregistered plantations or — in some cases — fruits with cadmium contamination above legal thresholds.
The root cause is structural, not technological: when the identity carrier can be separated from the product, fraud is inevitable, regardless of how sophisticated the blockchain behind the label is. No amount of cryptographic anchoring fixes this if what you're anchoring is a detachable sticker. The solution must make the product itself the identity. That is what Bio-ID does — it extracts a fingerprint from the fruit's structural skin texture, an identity inseparable from the durian until consumption. Working PoC: orilife.io/demo.
Five Pressures That Cannot Be Delayed
Pressure 1 — Institutional Endorsement. The Đắk Lắk Agricultural Extension Center has formally endorsed TonFarm to support the digitization of 12,000 hectares of durian via the cooperation MOU signed in March 2026, with Letter 351-CV/HNDT (December 22, 2025) from the Đắk Lắk Farmers' Union confirming institutional support. OriLife is the production-grade infrastructure designed for this scale.
Pressure 2 — National Pilot Summary July 10, 2026. Decision 5272/QĐ-BNNMT mandates a Durian Traceability Pilot from January 1 to June 30, 2026, with national summary on July 10, 2026. On April 4, 2026, the first Green Lane shipment under this pilot was successfully exported to China — but the export still uses peelable physical labels, leaving the structural fraud vector wide open. OriLife addresses precisely the weakness the government's current pilot has not yet resolved.
Pressure 3 — Nationwide Formalization from July 1, 2026. Vietnam's national Traceability System launches for all key agricultural products on July 1, 2026. OriLife is built to bridge into the national system via the BCT Portal API, allowing Đắk Lắk farms to satisfy national-system reporting from a single interface.
Pressure 4 — Hard Legal Deadline December 1, 2026. Article 15 of Circular 11/2026/TT-BCT (issued February 27, 2026, effective April 16, 2026):
Food production establishments must connect to and provide information to the Traceability System from December 1, 2026.
OriLife provides the production-grade traceability layer and the certified bridge into that national system. Failure to connect carries direct legal consequences: product recall orders, administrative fines, operational suspension, and criminal prosecution for fraudulent data.
Pressure 5 — China's GACC Tightening. GACC continues tightening Orders 248 & 249 throughout 2025–2026 with stricter plantation code verification, expanded residue testing (cadmium, Auramine O), and faster revocation procedures after the 2025 scandal. Without fraud-resistant traceability, Vietnam risks losing volume to its largest market — which absorbed over 90% of durian export volume in 2024.
Why This Demand Is Non-Discretionary
| Jurisdiction | Regulation | Role for this GA |
|---|---|---|
| Vietnam | Circular 11/2026/TT-BCT | Mandatory deadline Dec 1, 2026 — directly applies to all 12,000 ha |
| China | GACC Orders 248 & 249 | Mandatory for export — GACC is >90% of the durian export market |
| EU | EUDR (2023/1115) | Reinforcing market for SDK expansion (coffee, future crops) |
| US | FDA FSMA Section 204 | Reinforcing market for future expansion |
Vietnam's Circular 11 and China's GACC are the binding constraints for this GA. EU and US frameworks add reinforcing value as the open-source SDK expands beyond durian — not preconditions for the durian deployment.
The structural distinction from prior platforms: predecessors (IBM Food Trust, VeChain × Walmart China, SEA2SEE, TE-FOOD) operated on enterprise procurement decisions — adoption depended on enterprises choosing to subscribe, and stalled when budgets shifted or grants expired. OriLife operates on farm-level legal obligation — every individual food production establishment is required by Vietnamese law to connect, regardless of any enterprise's procurement preference.
The Alliance: Earned the Right to Solve This
TonFarm 2024 — The Expensive Lesson Already Paid
TonFarm is an agricultural digitization project launched by DDC Holdings in 2024 in Đắk Lắk. DDC actually deployed across multiple farms over two harvest seasons, actually failed in five concrete and instructive ways, and drew lessons that cannot be acquired from textbooks. Verifiable: TonFarm NFT collection on TON.
DDC mobilized dozens of employees to manually attach printed QR codes to durian trees, store collected data on a single centralized server, and hash each individual fruit as a separate on-chain transaction. Five concrete failures emerged:
| Weakness | Real-world Impact |
|---|---|
| QR labels detachable | Peeled and re-attached — zero anti-fraud value |
| Data on a single server | Modifiable at any time by anyone with database access |
| 1 fruit = 1 transaction | Linear cost — economically infeasible at any chain |
| Farmers dependent on field staff | Staff turnover = data collection stops |
| Hash ≠ validation | Proves data unchanged since hashing, not that it was correct at hashing |
Despite these failures, DDC built irreplaceable assets: UX validated with farmers aged 50+ over two harvest seasons; institutional trust across 46 communes (conference video, 50,000+ participants); standardized highland onboarding; offline queue logic with zero data loss. Copyright Certificate No. 4420/2025/QTG (June 2, 2025) confirms this is research and deployment continuing since 2024 — not a new project.
The Three-Company Alliance
- DDC Holdings — Field Operations & Government Relations. Trust relationships with farmers and government agencies across 46 communes, validated over two harvest seasons. They failed publicly with the old QR-label approach in 2024 and understand exactly why it failed at the architectural level. Field activity log: tonfarm.co/activity.
- GreenSun Tech — R&D and Core IP. Holds 4 USPTO Provisional Patent Applications (filed April 6–7, 2026) covering OriLife platform, PhoenixKey identity, LampNet distributed storage, and VeData validation protocol. The PPAs establish priority date; GreenSun commits to filing Non-Provisional applications within the 12-month window. Also actively deploying 1,000 EV charging stations with V-Green (VinFast) — proven operational capacity at provincial scale.
- Aladin Contract — Product Development and User Experience. Building Aladin App 2.0 (June 2026) with three modules — Chat, Work, and Trace. Users join Cardano via fingerprint and face: no seed phrase, no email, no blockchain knowledge required.
The Strategic Decision
The three teams unified in early 2026 around a single conclusion: migrate the entire infrastructure to Cardano. eUTXO provides constant per-batch cost today (production-tested), while the Midnight and Identus/Atala PRISM roadmaps align with our M5–M8 timeline. If Midnight does not reach mainnet by M5, OriLife operates on Cardano L1 with consumer-facing fields on-chain and trade secrets off-chain on LampNet — Midnight is an upgrade, not a dependency.
Strategic Opportunity for Cardano
OriLife is positioned to apply for inclusion in Vietnam's list of national strategic traceability platforms under Decision 1236/QĐ-TTg (National Blockchain Strategy 2024–2030). Selection — if granted — would mark the first sovereign-government adoption of Cardano for provincial-scale agricultural infrastructure. This is upside, not a dependency. Circular 11 applies regardless; OriLife is the compliant solution for Đắk Lắk's 12,000 ha either way.
Resolution 57-NQ/TW (Politburo, Dec 22, 2024) identifies AI and blockchain as national strategic technologies, with agriculture topping the priority list — the highest political corridor a tech project can operate within in Vietnam.
Verifiable Evidence — Verify Before You Vote
- Working PoC: orilife.io/demo · lampnet.cloud
- VeData on Cardano Preprod: verified batch transaction
- Source code: OriLifeTrace · PhoenixKeyDID · LampNetCloud
- Forum discussion: Cardano Forum thread
- Whitepaper: orilife.io/whitepaper
- Legal IP: USPTO PPAs #64/030,398· #64/031,291 · #64/031,472 · #64/032,593
Alliance self-invested nearly $500,000 USD before this proposal — funding the PoC, LampNet MVP, PhoenixKey prototype, two seasons of TonFarm field deployment, institutional relationship-building across 46 communes, USPTO PPA filings, and conferences. Demonstrated commitment, not theoretical. The Treasury is asked to scale work that already works.
Rationale
What Does the Cardano Treasury Invest In?
1. Real-World On-Chain Activity at Full Scale (Targets, Not Guarantees)
| Metric | Target at M7 | Basis |
|---|---|---|
| Area covered | 12,000 ha | Extension Center MOU |
| Farm households | 12,000 | ~1 ha/household |
| PhoenixKey DIDs created | 24,000 | 2 persons/household |
| Durian trees registered | 1,200,000 | 100 trees/ha |
| Fruits identified per season | 180,000,000 | 150 fruits/tree |
| On-chain events per year | ~1.0M–1.2M | Detailed below |
Activity breakdown at full operational scale:
| Activity | Events/year | Settlement | Required or optional |
|---|---|---|---|
| VeData batch anchors (cultivation, Bio-ID) | ~600,000 events → ~6,000–7,500 L1 tx | Path A direct L1 | Required for compliance |
| Setup (DID, NFT minting) | ~100,000 | Direct L1 | One-time per farm |
| Commercial escrow (farmer ↔ trader) | ~60,000 | Direct L1 Plutus tx | Optional — adopted at trader's choice |
| Labor contracts (farmer ↔ worker) | ~300,000 | Direct L1 Plutus tx | Optional — opt-in dispute-resolution layer, not required by law |
| Path B audit decommits (Hydra) | ~2,190 | Hydra → L1 every 4–8h | Fixed system cost |
Important distinction. Compliance traceability (VeData anchors + setup) is the legally-required core. Commercial escrow and labor contracts are optional opt-in modules — adopted only where dispute-resolution value justifies the per-tx MAGIC cost. The 1.0–1.2M figure is upper bound; realistic Year 1 may be 50–60%. All transaction fees paid by users via MAGIC, not from this GA.
2. ADA Permanently Locked at M4
| Lock Location | ADA |
|---|---|
| minADA in 12,000 Farm NFTs | ~24,000 |
| minADA in 24,000 farmer wallets | ~48,000 |
| Commercial escrow contracts | ~3,000+ |
| Total at M4 | ~75,000+ ADA |
This is immediate, verifiable, permanent value to the Cardano ecosystem regardless of future activity volume. minADA returns to owners only on NFT burn or wallet closure — neither occurs in normal operation.
3. Treasury Returns Are Multi-Dimensional
A common objection: If Treasury earns ~$7,150/year in fees, payback is 84 years.
This frames OriLife as a bond, which it is not. Treasury receives four distinct returns:
- ~75,000 ADA permanently locked at M4 — immediate verifiable value.
- 24,000 new Cardano users with W3C DIDs — addressable for any future Cardano application.
- ~28,600–28,800 ADA/year fee contribution at full scale, growing as the SDK extends to adjacent crops.
- First sovereign-government-affiliated Cardano agricultural deployment at provincial scale.
Fee contribution is the smallest of the four. Treating it as the only return understates the investment.
Why Cardano Is the Right Chain
Three requirements must be met simultaneously. Cardano is the only L1 where all three primitives are mature today or on a roadmap aligned with our M5–M8 timeline:
| Requirement | Cardano's answer |
|---|---|
| Constant per-batch cost for high-volume identification | eUTXO + Sparse Merkle Tree — 1 transaction commits up to 15,000 fruit state changes; cost does not grow with batch size. Production-tested today. |
| Commercial privacy for export trade | Midnight ZK Proof — selective disclosure per party. Mainnet timing aligns with M5; fallback uses Cardano L1 with off-chain trade fields on LampNet. |
| Government-scale W3C DID | PhoenixKey on Identus / Atala PRISM — biometric, no seed phrase. Source: github.com/PhoenixKeyDID. |
Ethereum: gas wars make batch economics unpredictable. Solana: no native privacy primitive. Other L1s: no production-ready W3C DID infrastructure.
Per-batch cost economics. Each Farm NFT stores only a 32-byte Merkle root. Updating 50 of 150 trees recomputes ~700 nodes; other trees and fruits cost zero recomputation. Datum size bounded at ≤580 bytes — never grows with record count.
Cost reduction vs label-per-fruit baseline. Legacy TonFarm 2024 on TON (verifiable on tonviewer) hashed each fruit as a separate tx at ~$0.17/fruit (2024 rates). OriLife on Cardano with VeData batching delivers ~$0.000009/fruit at $0.25/ADA. Reduction: ~19,000×.
Why a Production Deployment, Not a Larger Spec
Predecessor platforms invested heavily without solving the structural problem:
| Platform | Investment | Status | Core limitation |
|---|---|---|---|
| IBM Food Trust | ~$200M+ | Pivoted to FSMA 204 compliance tool | Voluntary enterprise procurement; label-dependent |
| VeChain × Walmart China | ~$10–50M | Operational | Physical label still detachable |
| SEA2SEE (EU Horizon) | €5.4M / 4 yrs | Pilot stage | No legal liability for non-compliance |
| TE-FOOD | ~$10M | Operational; TONE token -99%+ | Label-dependent; speculative tokenomics |
The 2025 Vietnam scandal occurred in a market where TE-FOOD has operated at scale (400K+ tx/day) for years. The label could still be peeled. Investment level was not the bottleneck — architecture was.
OriLife resolves two structural failures predecessors share:
- Adoption layer: enterprise procurement vs farm-level legal obligation. Predecessors required enterprises to subscribe; adoption stalled when budgets shifted. Circular 11/2026/TT-BCT places the legal obligation directly on each food production establishment.
- Identity carrier: detachable label vs biological feature. Bio-ID uses the durian fruit's structural skin texture — see orilife.io/demo. There is no label to peel, no QR code to transplant. The fraud vector is closed at the source.
Cost efficiency. OriLife targets ~$50/ha digitized vs typical $300–800/ha for comparable Vietnamese-context grants. Drivers: Vietnamese engineering cost structure with global-quality output, AI-assisted development workflows, building on Cardano's public primitives.
Data Flow
- Farm → LampNet: AI processes on-device, signs with PhoenixKey, sends <1KB. Image content-addressed via
lamp://CID, available to consumers ~5s — Layer 0 visible before VeData validation (Layer 1, ~15–25s) and Cardano confirmation (Layer 2, ~41–61s). Source: github.com/LampNetCloud. - LampNet → VeData: 5-layer validation — device origin, image authenticity, GPS within registered farm boundary, temporal validity, biological plausibility. Failure rejects data before Cardano.
- VeData → Cardano (Path A): Farm NFT updates batched every ~20s, ~80–100 farms per tx, ~0.0089 ADA per NFT after CIP-33 reference script optimization. PRIORITY_HIGH events bypass timeout for ~25–35s confirmation.
- VeData → Cardano (Path B): Hydra Head (3 LampNet nodes) commits Merkle root to L1 every 4–8h at ~0.45 ADA per decommit. Path A operates correctly regardless of Path B status.
- Cardano → Parties: Midnight View Keys (when available) deliver per-party data; until then, OriLife operates with consumer-facing fields on-chain and trade-secret fields off-chain on LampNet.
Milestones (M0–M8)
| # | Milestone | Target | ADA | USD | % |
|---|---|---|---|---|---|
| M0 | Foundation + Mobilization Advance | — | 360,000 | $90,000 | 15.0% |
| M1 | Alpha — 750K sample fruits | 750K | 260,000 | $65,000 | 10.8% |
| M2 | Beta App + Contract Freeze | — | 220,000 | $55,000 | 9.2% |
| M3 | Audit + Mainnet Launch | — | 180,000 | $45,000 | 7.5% |
| M4 | Pilot — 7.5M fruits / 500 ha | 7.5M | 280,000 | $70,000 | 11.7% |
| M5 | SDK Open + Multi-app | — | 200,000 | $50,000 | 8.3% |
| M6 | Beta — 45M fruits / 3,000 ha | 45M | 260,000 | $65,000 | 10.8% |
| M7 | Mass — 180M fruits / 12,000 ha | 180M | 280,000 | $70,000 | 11.7% |
| M8 | Global Integration + Sustainability | — | 360,000 | $90,000 | 15.0% |
| Total | 180M | 2,400,000 | $600,000 | 100% |
Each milestone has Output — Acceptance Criteria — Evidence for IOB. Funds locked in Intersect-managed escrow (Annex D), disbursed only upon 2-of-3 IOB signatures. Automatic timeout returns ADA to Treasury — no new vote required.
M0 advance protection. The 360,000 ADA M0 tranche is a Mobilization Advance disbursed immediately upon GA ratification. Protected by: (a) 90-day Clawback if M1 not submitted; (b) 30-day Spending Report — failure freezes all M1–M8; (c) IOB 2-of-3 sign-off on M0 preconditions before disbursement.
Treasury Protections
| Scenario | Action |
|---|---|
| M0 advance disbursed | 90-day Clawback if M1 not submitted |
| M0 Spending Report missed (30 days) | All M1–M8 frozen until remediated |
| Milestone overdue | Smart contract auto-returns ADA to Treasury |
| IOB rejects milestone | No disbursement; 30 days to remediate |
| Project terminates | All remaining ADA to Treasury within 14 days |
| Surplus at M8 | Reimburse Alliance self-funded → contingency → ecosystem reinvestment |
Sustainability After the Grant
Three revenue streams sustain operations: (1) MAGIC credit usage fees — users purchase MAGIC in VND for on-chain settlement, LampNet storage, AI processing; internal compute energy with no public trading market; (2) B2B Compliance SaaS — export enterprises subscribe for GACC + GS1 EPCIS v2.0 + Midnight View Key services, paid as MAGIC; (3) SDK ecosystem expansion to coffee, melon, aquaculture.
Post-M8, adoption is market-driven by Circular 11's legal pressure on every Vietnamese food production establishment. The 20% Treasury fee mechanism ensures every transaction contributes to Cardano's Treasury without further commitment.
Financial Discipline
Alliance self-invested ~$500,000 USD before this GA. Budget anchored at $0.25/ADA.
- At ≥ $0.25: Full planned scope executes. Surplus at M8 follows Annex D Scenario 6.
- Below $0.25: Alliance self-funds the gap. Deployment continues without scope reduction.
- Above $0.30: Surplus reimburses Alliance self-funded; remainder becomes contingency or ecosystem reinvestment.
No tiered scenarios between $0.25 and $0.30.
Conflict of Interest — Disclosed
Duc Tiger is the Project Manager and also a dRep / SPO (TIGER pool). He votes ABSTAIN on this GA and all Treasury Withdrawal GAs during the voting period. All Alliance members — including Duc Tiger and Nguyễn Hùng Sơn — receive reasonable compensation from the GA budget, by role and contribution, recorded in milestone Spending Reports. Compensation breakdown in Annex C. No token allocation to voters. No Alliance member holds positions where ratifying this GA produces a side payment outside the documented compensation.
References
Annex A — Technical Architecture & Verified Results
Annex B — Legal & International Compliance
Annex C — Detailed Budget Breakdown
Annex D — Escrow & Fund Administration
Annex E — Community Q&A
Votes
Your vote
DRepRationale
Proposal Information
-
TypeTreasury Withdrawal
-
StatusVoting
-
Submitted OnMay 04, 2026
-
Expires OnJun 03, 2026
-
Voting PartiesDRepCC