Entropic Dispersal and the Fourth State of Data...
Unlocking a New Generation of Programmable Privacy and much more.
This is not encryption. EDR is designed to remove the persistent ciphertext target instead of storing and protecting it. Organizations shift from high-risk data custodians to transient processors.
1970s - Data at Rest: Static storage vaults.
1990s - Data in Transit: Pipeline encryption.
2010s - Data in Use: Live protected processing.
2026 - Entropic Dispersal and Reassembly: Zero Persistent Knowledge.
Zero Persistent Knowledge™
Encryption stores a protected target. ZPK™ reduces the persistent target.
ZPK™ shatters any file into entropic noise in RAM, generates a DNA Anchor at the moment of destruction, and anchors it onchain. No readable copy persists anywhere. No durable ciphertext or readable data at rest. Built for adversarial technical review.
Owning data means holding the only key capable of reassembling it. If you do not authorize access, the data does not exist - for anyone.
portability
Your medical records. In Bangkok. With a fingerprint.
A patient walks into any hospital anywhere. One biometric signature presents their DNA Anchor. The hospital retrieves, verifies, and processes the records - then the session ends and the data ceases to exist again. No patient portal. No data transfer agreement. No breach inventory created.
data ownership
Take your history with you when you leave.
Chat history, financial records, employment files, medical history - anchored to you, not to the platform. When you leave a provider, you take the DNA Anchor. The provider retains nothing recoverable. Portability is not a feature request. It is the architecture.
Hospitals transition from data custodians - liable for every breach - to transient processors. They handle the data once, under authorization, then it is gone. Storage providers host authorized entropy, not files.
Every system that encrypts and retains data creates a target. ZPK™ exits that custody model. The original data ceases to persist as a readable payload or durable ciphertext payload.
conventional design
The data still exists somewhere
Application databases, object storage, logs, backups, search indexes, admin tools, and vendor support paths all hold readable copies. Encrypt the data and you delay exposure. You do not eliminate it.
zpk design
The proof exists. The file does not.
The file is shattered to entropic noise in RAM. A DNA Anchor is generated from the original in the same pass. Once the operation completes, the anchor exists and the original does not. These are not sequential steps - they are one operation.
Document, message, image, record, payload, or transaction artifact. Format is irrelevant. ZPK™ operates on bytes.
02 / shatterEntropic dispersal
The file becomes pure noise fragments. No single fragment contains readable information. No decryption key. No reverse transformation.
03 / anchorProof and ledger commit
A cryptographic proof is generated from the original bytes. A 32-byte Merkle root is anchored onchain. Both happen in the same pass as destruction. Schnorr NIZK integration is on the near-term roadmap.
04 / disperseFragments leave the app
Noise fragments route to any configured storage surface: enterprise, private, hybrid, IPFS, Irys, Arweave, or other decentralized layers. Individually meaningless without the DNA Anchor™.
05 / recoverLedger-authorized rebuild
Identity proof triggers a live ledger check. Authorization unlocks deterministic reconstruction in memory only.
The proof validates the record without exposing the record. Real secp256k1 cryptography. Any engineer can verify independently against the onchain anchor.
Shor's algorithm threatens RSA and ECC. Durable ciphertext collected today may become readable later if the surrounding keys and cryptographic assumptions fail.
the threat
Harvest Now, Decrypt Later
Nation-state actors are collecting encrypted data today. They do not need to crack it now. When quantum hardware matures, every harvested ciphertext becomes readable. The breach already happened. It has not been opened yet.
zpk distinction
No durable ciphertext target.
Harvest-now-decrypt-later requires a durable ciphertext payload to collect. ZPK™ is designed to avoid creating that custody target. The DNA Anchor™ is a witness of processed content, not encrypted content. Quantum-sensitive signatures and proof systems still require separate analysis.
zk proof systems
ZK proves facts. ZPK changes custody.
Zero-knowledge proof systems prove facts about data without revealing the witness. They do not, by themselves, remove the stored-data custody problem. If encrypted payloads remain durable, they still need to be governed, protected, audited, and eventually migrated.
Modern ZK proofs are powerful and well studied. ZPK™ is aimed at a different layer: reducing the persistent ciphertext target and binding reconstruction to runtime policy. The two approaches may be complementary rather than mutually exclusive.
zpk difference
The witness and dispersal are one operation
ZPK™ generates the DNA Anchor from the original bytes in the same pass that disperses them. The design goal is that no persistent readable payload or durable ciphertext payload remains as the primary protected object.
The transaction signing layer uses secp256k1, which is vulnerable to Shor's algorithm. Migration to a lattice-based signature scheme is the principal open engineering task.
ZPK™ returns data control to the individual by reducing persistent readable payloads and durable ciphertext targets. If there is no ciphertext vault to harvest, the stored-data risk model changes.
determinism
Context-Aware Reassembly.
Authorization configuration is agnostic, from nothing to highly complex requirements. Data reassembly is bound to environmental truth. Reassembly can be gated by exact geolocation (latitude, longitude, altitude) and precise temporal windows. If the requirements are not met - or if the context is denied - the information remains mathematically non-existent.
ownership
The end of the data silo.
Privacy is not a policy; it is a technical absolute. By making data at rest a systemic impossibility, ZPK™ de-commodifies the human experience. Your data is not saleable because it is not understandable by anyone but you.
A new verification primitive. Same outcome as a zero-knowledge proof for data custody - without the math, the setup, or the server.
the job
Prove you hold data without revealing it
ZK proves facts through circuit mathematics. Entropic Attestation is aimed at custody: dispersal, witness generation, and policy-bound reconstruction. The goal is that particles have no independent semantic value without the required anchor material, authorization surface, and runtime conditions.
the difference
No recoverable plaintext. The attack model shifts.
The formal cryptographic objection to non-ZK systems asks how information leakage is bounded. That question presupposes a prover holding data in reconstructible form. Entropic Attestation eliminates the reconstructible form. Fragments exist. Recoverable plaintext does not. The attack surface is reduced, not relocated.
ZPK™ is for workflows where proof, custody, recovery, and liability matter more than ordinary cloud storage.
finance
ISO 20022 message artifacts
Attach proof to transaction records without forcing sensitive documents into permanent app storage.
19/564,384 · Infra / Finance64/040,051 · Hook Enforcement
healthcare
Portable Health ID
Lab reports, referrals, and clinical records anchored to the patient, not the hospital. The institution processes transiently. The patient holds the only key. No custodial liability created.
19/551,805 · Core ZPK™
AI session management
AI Without a Memory Problem.
Session context anchored as a DNA Anchor at turn end, destroyed, rehydrated at turn start. Toxic inputs cannot propagate. No prompt injection surface. No breach inventory. Compliant by architecture.
63/964,543 · AIFS AI
legal
Chain of custody
Evidence, contracts, disclosures, and settlement records keep integrity proofs without broad content exposure.
19/551,805 · Core ZPK™
enterprise
Trade-secret handling
Due diligence rooms, procurement records, and audit evidence avoid persistent readable copies entirely.
19/560,251 · Entropic Relay
telemetry
Machine and OBD-II records
Vehicle, sensor, and infrastructure state anchored as verifiable audit trails without persistent storage.
19/564,384 · Infra / Finance
research
Clinical and lab provenance
Datasets, consent artifacts, and trial records verified without general file access.
One API call. The enterprise decides identity provider, ledger, and storage substrate. ZPK™ handles the rest invisibly. Like Stripe, the hard problem disappears behind a single endpoint.
Custom developer APIs are available on request. Pilot partners get direct access and dedicated integration support.
One API (v1_api.js) gives you customizable and agnostic: Shatter. Anchor. Verify. Rehydrate. One script, endless use-cases.
POST /v1/shatter
Accept input, generate entropic fragments in a single pass, return DNA Anchor™ and recovery coordinates.
POST /v1/anchor
Write the 32-byte Merkle root to the selected ledger. No readable file content leaves the client environment.
GET /v1/proof/:dna
Return public verification material for audit, compliance, and forensic review. Verifiable against the onchain anchor independently.
POST /v1/materialize/:dna
Verify authorization against live ledger state and reconstruct the file in memory only. Nothing written to disk.
Pilot AccessCustom API keys and integration support available to pilot partners. Request access ↗
Eight active filings cover the core protocol, authentication layer, Hook enforcement, vertical deployments, and programmable access control. Priority date February 27 2026.
63/955,404 · Trident Auth
63/964,543 · AIFS AI
19/551,805 · Core ZPK™
19/560,251 · Entropic Relay
19/564,384 · Infra / Finance
64/040,051 · Hook Enforcement
64/066,202 · Token Efficiency
64/067,688 · Smart Anchor
enterprise pilot
Audit-ready from day one
Pilot participants receive full audit capability and an AI-powered compliance toolset. Every attestation is independently verifiable against the onchain anchor - no trust in AIFS infrastructure required. The ledger is the authority.
Zero Persistent Knowledge: Entropic Attestation as a Practical Alternative to ZK Proof. Submitted to SSRN May 2026. Independent academic documentation of the Entropic Attestation primitive and its enterprise compliance properties.
ZPK as a browser-native file protection layer. Drop a file, select an anchor type - PHI, Document, Session, or Audit - and the protocol shatters, anchors, and stores. EHR · PHI · PII edition built on Midnight. Live prototype, May 2026.
Live prototype · May 2, 2026 · USPTO patent applications on file · 19/551,805 · 19/560,251 · 19/564,384 · 63/955,404 · 63/964,543 · 64/040,051 · 64/066,202 · 64/067,688
Zero Persistent Knowledge™
The data does not exist. The proof does.
ZPK™ is live infrastructure built for the institutions that move the most sensitive data in the world. Usage-based API access, enterprise vertical licensing, and ISO 20022 archive fees create compounding revenue that scales with adoption. The right partner captures that with us.
We have provided a pre-signed frictionless authentication method for you.
Your file is shattered client-side, anchored on Xahau, and stored through an example Irys/Arweave path. Storage is agnostic in production. Nothing readable leaves your browser. No wallet required.
📄
Drop a .txt file or click to browse
Plain text only · 100KB max · no data retained
Entropic Attestation in progress
Live on Xahau Ledger · no wallet required
✓Anchored · Non-Persistent · Live on Xahau
Recover this file anytime
This is the only recovery key. No anchor = no recovery.
Recovered from Irys · unscrambled with DNA Anchor
Original data was not stored. This is a deterministic reconstruction.
Anchored on Xahau · particles on example storage · recoverable by DNA Anchor only
Entropic Attestation & Zero-Knowledge Proof · A Comparative Analysis
How does it stack up against ZK?
An honest side-by-side. Entropic Attestation changes practical custody tradeoffs. ZK proof wins on formal mathematical security and establishment acceptance. Both facts matter.
The last two rows are real walls. Formal mathematical security and establishment trust take years to build. Every other row is an engineering win today. The honest answer: for enterprise data custody - PHI, PII, ISO messages, credentials - Entropic Attestation solves the same problem with a fraction of the infrastructure. For computation verification (ZK rollups, circuit proofs), ZK proof wins and EA does not compete.
The "no ciphertext" argument is the key distinction. The formal ZK security question asks how information leakage is bounded from a proof. EA and ZPK add a custody question: what persistent object remains, what semantic value fragments retain, and what runtime conditions are required before anything readable can resolve?
Zero Persistent Knowledge™
ZPK™ - Entropic Dispersal and Reassembly
Executive Summary
Encryption protects a stored target. ZPK™ is designed to reduce the need for that target to persist.
Post-quantum encryption is still encryption. It strengthens the lock, but it usually preserves the architectural assumption that sensitive data remains somewhere as a protected object. ZPK™ explores a different custody model.
ZPK™ is a middleware protocol that disperses digital content into non-semantic fragments, generates a unique DNA Anchor™ as a custody witness, and avoids retaining a persistent readable payload or durable ciphertext payload as the primary protected object. The system is client-configurable and chain-agnostic by design.
Nothing readable is intended to be written to disk by the protocol. ZPK™ acts as a particle transport layer and storage facilitator for entropic custody. It can sit below ZK proofs, smart contracts, and application policy as infrastructure.
The Problem
Organizations that handle sensitive data face a structural problem: they must store what they are trying to protect. Encryption reduces exposure, but it does not remove the durable target. If key material, access paths, or surrounding infrastructure fail, the data behind the protection can become readable.
Zero-knowledge proofs answer a different question. A ZK proof allows a system to verify a claim about data without revealing the witness. The math is important and sound when implemented correctly. The custody question remains: what persistent object is still being protected, where does it live, and who carries that liability?
Breaches do not happen in transit. They happen at rest. Encrypted databases are exfiltrated wholesale. Storage backups leave facilities on physical media. Insider access bypasses cryptographic guarantees without breaking them. Ransomware does not crack encryption - it holds the keys hostage. A ZK proof sitting alongside an encrypted file protected none of those organizations.
ZK proves facts. ZPK changes custody.
Legacy systems compound this further. Siloed infrastructure, regulatory fragmentation across jurisdictions, and the cost of maintaining readable copies across multiple compliance regimes make the current model increasingly unsustainable.
The Solution
ZPK™ is not a zero-knowledge proof system. It operates below that layer. The Schnorr proof is generated from the original bytes in the same pass that destroys them. By the time the proof exists, the data does not. These are not sequential steps - they are one operation.
Any digital content - messages, records, files, payloads, or raw data of any kind - is dispersed into thousands of bounded particles in memory. A DNA Anchor™ is generated from the original content and anchored onchain. The particles can be distributed to any storage backend. The original readable content is not intended to reconstruct unless explicitly authorized by a live policy check.
The design goal is that there is no persistent plaintext target and no durable ciphertext payload to harvest. Reconstruction should require the correct fragments, witness material, authorization surface, and runtime policy.
We name this mechanism Entropic Attestation. Where a ZKP system proves a fact about data, Entropic Attestation records a custody witness for a dispersal event. Verification can use compact anchors and ledger state. Client-side execution may reduce server-side exposure and processing cost, but production security still depends on implementation review.
ZPK™ is content-agnostic and file-type-agnostic. A PDF, a DICOM medical scan, a video file, a JSON payload, a database export, an inventory record - the engine does not read the content. It operates on bytes. Format is irrelevant. If it is digital, it works.
System Architecture
Message Shattering breaks any digital content into fine particles with no single piece containing readable information.
Bloom Filters support rapid verification without revealing content.
Merkle Trees create immutable DNA Anchor™ structures and enable batch processing at institutional scale. A single Merkle root is 32 bytes. That 32-byte value can represent millions of individual records simultaneously. SWIFT processes roughly 45 million messages per day. Every one of those messages could be anchored in a single onchain transaction using one Merkle root. To prove any specific message was part of that batch requires approximately 26 hash operations - regardless of whether the batch contains a thousand records or a hundred million. The computational cost of verification does not grow with volume.
Homomorphic Query Layer (integration path). Because ZPK™ stores no plaintext, homomorphic encryption can operate directly over distributed fragments - returning query results without ever reconstructing readable data. There is no database to query in the traditional sense. The architecture is HE-compatible by design. This capability is not implemented in the current protocol. It is on the research roadmap.
The ZPK™ relay is stateless and runs entirely in RAM. It can boot from a dongle with zero write access to disk. A breach of the terminal exposes nothing - there is no data at rest to recover.
No Databases. No Flat Files. No Audit Spreadsheets.
Traditional enterprise compliance stacks require databases to store records, log files to capture access events, backup systems to protect both, and audit exports to satisfy regulators. Each of those layers is an attack surface. Each requires its own security posture, its own access controls, its own breach response plan.
ZPK™ eliminates the stack. The audit trail is the ledger - immutable, cryptographically ordered, permanently accessible to any authorized party without a query interface. There are no databases to breach. No backup tapes to lose. No log files containing sensitive metadata. No spreadsheet export that lives on a laptop.
The ledger is the record of witness. The DNA Anchor is not a decryption key or reconstruction map. It is a compact catalyst for verification, policy, and authorization. Everything else should remain fragments with no independent semantic value.
Hook Enforcement
ZPK™ integrates with Hooks, smart contracts, and other ledger primitives to create a compliance gate that cannot be bypassed at the payment layer. No payment can process unless it is verified, recoverable, and in compliance.
In a live demonstration on the Xahau network, an ISO 20022 payment message is shattered and anchored with a unique DNA Anchor™. The Hook Enforcer - a smart contract running directly on the ledger - verifies that anchor before the transaction can settle. When the anchor is deliberately tampered with to simulate a non-compliant message, the Hook rejects the payment. No settlement occurs. No override is possible.
This is enforcement at the ledger level, not the application level. The compliance check is not a middleware layer that can be routed around. It is the final gate before value moves.
Security and Privacy
ZPK™ targets Zero Persistent Knowledge™. The intended custody state avoids persistent readable data and durable ciphertext as stored targets. Even if credentials are compromised, exposure should be bounded by policy, runtime conditions, and the specific fragments an attacker can actually access.
The stored-ciphertext attack surface is reduced by architecture, not by algorithm selection. Traditional encryption stores ciphertext that can be harvested today and attacked later when quantum computing matures. ZPK™ is designed to avoid creating that ciphertext vault. SHA-256, the hash primitive underlying the DNA Anchor, retains 128-bit effective security under Grover's algorithm. The transaction signing layer uses secp256k1, consistent with the underlying ledger standard. Post-quantum signature integration is a planned upgrade path.
The architecture supports HIPAA, GDPR, and equivalent regulatory frameworks by design. Compliance is a structural property, not a configuration option.
Intellectual Property
ZPK™ is a trademark of AIFS Protocol, Inc. Eight active patent applications on file.
Encryption has been the industry standard for decades. The assumption behind it - that data must exist somewhere to be useful - has never been seriously challenged.
ZPK™ challenges it. Verifiable proof with reduced persistent data custody shrinks the durable stored target instead of simply hardening it.
ZPK™ Protocol
Vertical Markets
ZPK™ uses the same core engine across every domain. The following are early deployment targets, not the boundary of what is possible. Any use case that involves data in motion or at rest is a candidate.
Finance
ISO 20022 Payments and Message Artifacts
One Signature. One Transaction.
Dual-Rail ⚡ Settlement
✓ XRPL Payment+✓ ISO Messaging+✓ Immutable Audit Trail
•Both rails are fast, inseparable, and immutably bound to the ledger.
•There is Zero Persistent Knowledge of the Message.
•Designed for GDPR, HIPAA, and CCPA compliance.
•Fully agnostic: Auth, Ledger, Anchor, and Particle Substrate.
19/564,384 · Infra / Finance64/040,051 · Hook Enforcement
Healthcare
PHI, EHR, and Clinical Document Flows
No File. No Breach. No Liability.
HIPAA Compliance by Elimination
✓ Lab Reports+✓ DICOM Scans+✓ Insurance Auth
•File is destroyed the moment it is processed. The DNA Anchor™ is the compliance record.
•No hospital holds the file. Only the authorized patient wallet triggers reassembly.
•Eliminates the breach surface that makes healthcare the most ransomware-targeted sector.
•HIPAA, GDPR, and CCPA compliant by design - not by policy.
19/551,805 · Core ZPK™
AI Session Management
Regulated AI Agents and Session Context
AI Without a Memory Problem.
Session Context Anchored. Never Stored.
✓ Context Anchoring+✓ Session Destruction+✓ Prompt Isolation+✓ Toxic Data Negation
•Session context is anchored as a DNA Anchor at turn end and rehydrated at turn start. Nothing persists between calls.
•No stored session means no stored poisoned context. Prompt injection surface is zero.
•Toxic inputs and regulated content are destroyed at turn end. They cannot propagate into training data, logs, or adjacent sessions.
•Compliant by architecture in HIPAA, GDPR, and CCPA regulated environments. The agent operates normally. Nothing persists.
63/964,543 · AIFS AI
Legal
Chain of Custody, Notarization, and Settlement Records
The Ledger is the Notary.
Multi-Party Threshold Authorization
✓ Evidence+✓ Contracts+✓ Settlements
•Provable document integrity without broad content exposure.
•2-of-3 wallet threshold required for reassembly. No single party controls access.
•Onchain anchor is the notary record. Content is inaccessible until ledger conditions are met.
•Chain of custody is cryptographic, not procedural.
19/551,805 · Core ZPK™
Enterprise
Trade Secrets and Due Diligence
The Data Room Has No Data.
M&A · Procurement · Audit Evidence
✓ Due Diligence+✓ Trade Secrets+✓ Audit Packages
•Readable copy is eliminated the moment the document is submitted.
•Counterparties receive proof of existence and integrity - not the content.
•The data room cannot be exfiltrated. There is nothing readable in it.
•Access is ledger-authorized. No admin override. No insider threat surface.
19/560,251 · Entropic Relay
Telemetry and IoT
OBD-II, Sensor Streams, and Infrastructure State
Every Reading. Anchored at Capture.
Fraud-Proof at the Source
✓ OBD-II / VIN+✓ Fleet Telemetry+✓ Infrastructure
•Odometer fraud becomes cryptographically impossible. Every reading is anchored at capture.
•Verifiable history without retaining the raw operational stream.
•Insurance and fleet operators verify records without accessing raw data.
•Same ZPK™ engine - no vertical-specific integration required.
19/564,384 · Infra / Finance
Aerospace and Defense
Compartmentalized Access and Classified Record Handling
Compartmentalized by Default.
Zero Network Write During Shatter
✓ Offline Mode+✓ Nested Tiers+✓ Air-Gap Ready
•Recursive shattering creates nested compartments - each tier requires a separate auth event.
•Fully offline capable with automatic batching. Zero network write during shatter.
•Sovereign infrastructure deployment - no cloud dependency required.
•Access tiers enforced at the ledger level, not application middleware.
19/551,805 · Core ZPK™19/560,251 · Entropic Relay
Clinical Research
Trial Data, Consent Artifacts, and Dataset Provenance
Verifiable for Decades. Held by No One.
Storage Agnostic · Onchain Anchored
✓ Trial Data+✓ Consent Records+✓ Provenance
•Provable chain of custody without exposing raw patient records to all trial parties.
•Consent artifacts verifiable for decades without being retainable by every party that touched them.
•Storage-agnostic long-term custody. Content is intended to become readable only during authorized reassembly.
•FDA audit trail ready. No readable record persists on any party's infrastructure.
19/551,805 · Core ZPK™
Technical Specification · SSRN Preprint
Zero Persistent Knowledge: Entropic Dispersal as a Post-Quantum Privacy Primitive
AIFS Protocol, Inc. · February 2026 · Patent applications on file
Abstract
We introduce Zero Persistent Knowledge (ZPK™), a data handling protocol that achieves privacy through elimination rather than protection. Conventional privacy systems - including zero-knowledge proof systems - operate on data that continues to exist after the proof is generated. ZPK™ generates a non-interactive Schnorr proof at the moment of irreversible data dispersal such that proof generation and data destruction are a single atomic operation. The resulting system provides a verifiable cryptographic record of any data event without retaining reconstructible content anywhere. We formalize the construction, define entropic destruction as a security property, analyze quantum resistance with honest disclosure of limitations, and distinguish ZPK™ from adjacent constructions in the zero-knowledge and secret sharing literature.
1. Introduction
The dominant model for sensitive data handling assumes persistence: data is generated, stored, encrypted, and accessed under controlled conditions. Privacy is achieved by restricting access to the stored copy. This model has produced sophisticated access control systems, homomorphic encryption schemes, and zero-knowledge proof protocols. It has not eliminated the breach surface - the readable copy at rest remains the primary target of every significant data exfiltration event on record.
Zero-knowledge proof systems (ZKPs) represent the state of the art in proving facts about data without revealing the data itself. Boundless, Midnight, and related systems allow an application to assert properties of a document - its authenticity, its author, its contents matching a predicate - without transmitting the document. The document, however, continues to exist. An adversary who compromises the storage layer recovers the document regardless of what ZKP proofs were generated about it. A quantum adversary running Shor's algorithm on the encrypted storage of any current ZKP system recovers the underlying plaintext once sufficient quantum hardware exists.
ZPK™ asks a different question: what if a system could avoid retaining the source content as a durable protected object after custody processing? The proposed architecture binds witness generation and dispersal into the same operation, then treats reconstruction as a runtime event rather than a standing storage state.
This paper makes the following contributions: (1) a formal definition of entropic destruction as a privacy property; (2) a concrete construction achieving that property using Schnorr NIZKs and Merkle commitments; (3) a precise statement of quantum security that honestly discloses which components are post-quantum and which are not; and (4) a comparison to the secret sharing and ZKP literature that positions ZPK™ as an orthogonal rather than competing primitive.
2. Preliminaries
The ZPK™ construction is built on established cryptographic primitives: a collision-resistant hash function, a commitment scheme, a non-interactive zero-knowledge proof, and a secret sharing construction. The specific instantiation of each primitive - including parameter choices, encoding, and composition - is the subject of USPTO patent applications on file. Priority date: February 27, 2026.
Relevant prior work: Schnorr (1989), Fiat-Shamir (1986), Shamir (1979), Merkle (1988). ZPK™ does not introduce new primitives at this layer. The novelty is in the composition, the atomic destruction property, and the ledger enforcement architecture.
3. The ZPK™ Construction
Definition 1 (Entropic Destruction). A dispersal scheme achieves entropic destruction if any strict subset of the output particles is statistically independent of the source document. The specific construction achieving this property at the information-theoretic level is the subject of USPTO application 19/551,805.
The ZPK™ Protocol. The protocol executes six steps as a single atomic operation. Specific algorithms, parameters, and encodings are covered by patent applications on file.
Step 1 - Key Generation. An ephemeral, document-specific keypair is generated in RAM. It is not persisted to any storage medium at any point.
Step 2 - Commitment. A binding cryptographic commitment to the full document content is computed. This commitment is the DNA Anchor™. It cannot be forged or reverse-engineered to recover content. See USPTO 19/551,805.
Step 3 - Proof Generation. A non-interactive zero-knowledge proof is generated binding the ephemeral key to the DNA Anchor. The proof is computationally sound under standard assumptions. It may be stored on Arweave, private infrastructure, or another configured evidence surface. See USPTO 19/551,805.
Step 4 - Dispersal. The document is encoded using a secret sharing construction such that any strict subset of the output particles is statistically independent of the source document. Full reconstruction requires all particles plus an authorized ledger event. The dispersal encoding is the subject of USPTO 19/551,805 and 19/560,251.
Step 5 - Destruction. The source document and ephemeral key are overwritten in RAM. The document is never written to persistent storage at any point in the protocol. Particles are distributed to storage endpoints. The DNA Anchor is posted to the Xahau ledger via Hook enforcement.
Step 6 - Reconstruction. On an authorized ledger event: all particles are retrieved, the document is reassembled in RAM only, and integrity is verified against the DNA Anchor. No persistent copy is created during reconstruction.
4. Security Analysis
Theorem 1 (Entropic Destruction). ZPK™ Step 4 achieves information-theoretic entropic destruction: any strict subset of the output particles is statistically independent of the source document. Formal proof is included in USPTO application 19/551,805.
Theorem 2 (Proof Soundness). The non-interactive zero-knowledge proof generated in Step 3 is computationally sound under standard assumptions in the random oracle model. Security reduces to a well-studied hardness assumption. Formal proof is included in USPTO application 19/551,805.
Quantum Security - Precise Statement. We distinguish two adversarial capabilities. Against a classical adversary: ZPK™ achieves full security under standard assumptions. Against a quantum adversary with access to Shor's algorithm: the data destruction property (Theorem 1) is information-theoretically secure and is unaffected by quantum computation. The Schnorr proof π uses secp256k1, which is vulnerable to Shor's algorithm - a quantum adversary can recover x from X in polynomial time. This means a quantum adversary can forge proofs. It does not mean a quantum adversary can recover d. The document is gone regardless of what the adversary computes from π. We therefore claim post-quantum security for data recovery and classical security for proof authenticity. These are distinct properties. The common conflation of "post-quantum" with "all components are quantum-resistant" does not apply here.
Open Problem 1. Replace the secp256k1 Schnorr construction with a lattice-based NIZK (e.g., Dilithium or a hash-based scheme) to achieve full post-quantum security including proof authenticity. This is a known open engineering task, not a fundamental barrier.
Comparison to ZKP Systems. Standard ZKP systems prove predicates over committed data without revealing the data. The data remains in the prover's possession and in storage. ZPK™ does not prove predicates over existing data. It proves that a specific document existed and was processed, after which the document no longer exists in reconstructible form. These are orthogonal primitives. ZPK™ is not a replacement for ZKP systems - it is a lower layer that removes the persistent storage assumption that ZKP systems share with conventional encryption.
Entropic Attestation. We introduce Entropic Attestation (EA) as the named primitive for data custody verification in the ZPK™ protocol. EA achieves the practical outcome of a ZKP system for enterprise data custody - proving possession of data without revealing the data - through dispersal rather than proof generation. The verification mechanism is: produce hash(reassembled document) using the anchor key. The verifier confirms the hash matches. The document is never revealed. The particles were always public and always unreadable. This satisfies the practical enterprise requirement for data custody proof across HIPAA, GDPR, and PCI compliance frameworks without ZK mathematics, trusted setup, or specialized hardware.
The "No Ciphertext" Argument. The standard cryptographic objection to non-ZK systems is: "how do you bound information leakage?" That question is valid and requires construction-specific review. EA and ZPK shift the question from proof leakage alone to custody state: what persistent object remains, what semantic value fragments retain, and what runtime conditions are required before anything readable can resolve?
Comparison to Secret Sharing. Shamir secret sharing distributes a secret across n parties such that k parties can reconstruct it. The secret is reconstructible. ZPK™ uses dispersal to guarantee that reconstruction requires all n particles from n distinct storage endpoints plus an authorization event verified on a live ledger. The authorization gate is the additional primitive not present in secret sharing. Unauthorized reconstruction is prevented at the ledger level, not only by the information-theoretic dispersal.
5. Ledger Enforcement
The Xahau Hook mechanism provides a smart contract layer that executes at the transaction level of the ledger, prior to settlement. ZPK™ deploys a Hook that verifies the DNA Anchor™ A is present and correctly formatted in the transaction memo before any payment settles. This creates an enforcement property: no value transfer is possible unless the corresponding anchor exists and is valid. A non-compliant transaction receives a tecHOOK_REJECTED response from the ledger, not from application middleware. The compliance check cannot be routed around at the application layer because it executes at a lower layer than any application.
The dual-anchor architecture can post a Merkle root to a ledger and store proof material on a configured evidence surface. Public demos may use Xahau and Arweave/Irys, but the storage surface is agnostic. Any authorized verifier with the anchor ID and the required policy context can retrieve proof material and verify it without querying the ZPK™ API.
6. Batch Processing and Scalability
The commitment scheme used in Step 2 admits efficient batch anchoring. A single 32-byte onchain transaction can commit to an arbitrarily large batch of documents. Per-document verification cost is logarithmic in batch size and constant in practice. The batch anchoring construction is the subject of USPTO application 19/564,384.
For reference: SWIFT processes approximately 45 million messages per day. A single ledger transaction can anchor all 45 million messages. Per-document verification requires a fixed number of hash operations regardless of batch size. The computational cost of compliance verification does not scale with transaction volume.
7. Limitations and Open Problems
Proof quantum vulnerability. As stated in Section 4, the Schnorr proof uses secp256k1 which is Shor-vulnerable. Data recovery is post-quantum. Proof authenticity is not. This is a known limitation with a known mitigation path (lattice-based NIZKs).
Particle availability. Reconstruction requires all n particles. If any storage endpoint becomes unavailable, reconstruction fails. This is a liveness tradeoff for security. Production deployments should use redundant storage with erasure coding over a (k, n) threshold rather than a strict (n, n) scheme, at the cost of weakening the information-theoretic security bound from ε = 0 to ε > 0 for subsets of size ≥ k.
Formal verification. The construction has not been formally verified in a proof assistant (Coq, Lean, or equivalent). Formal verification of the atomic destruction property and the Hook enforcement logic is a high-priority open task before enterprise deployment at scale.
Homomorphic search. The whitepaper references homomorphic search over fragmented data. This capability is theoretically achievable using fully homomorphic encryption over the particle encoding, but is not implemented in the current protocol. It is an aspirational feature requiring significant additional engineering and is not claimed as a current property of the system.
8. Related Work
Schnorr (1989) introduced the identification scheme from which the NIZK construction derives. Fiat and Shamir (1986) established the transform from interactive to non-interactive proofs. Shamir (1979) introduced threshold secret sharing. Merkle (1988) introduced the hash tree commitment scheme. The Fiat-Shamir transform in the random oracle model was analyzed by Pointcheval and Stern (1996). The forking lemma was formalized by Bellare and Neven (2006).
ZKP systems including Groth16, PLONK, and the Midnight Compact circuit compiler operate on data that persists in the prover's environment. None of these systems treat data elimination as a design goal. ZPK™ is not aware of prior published work combining true entropic dispersal, permanent original destruction, RAM-only relay, and chain-agnostic middleware anchoring as a unified privacy primitive. An SSRN search conducted April 2026 found no papers combining these four properties.
9. Conclusion
We have described Zero Persistent Knowledge, a protocol that achieves privacy by eliminating the data rather than protecting it. The construction achieves information-theoretic entropic destruction of the source document, generates a computationally sound Schnorr NIZK proof in the same atomic operation, and provides permanent verifiability via dual-anchor architecture. The quantum security boundary is precisely stated: data recovery is post-quantum; proof authenticity under the current secp256k1 instantiation is not, and a migration path to lattice-based NIZKs is the principal open engineering task.
The core thesis - that a cryptographic proof can be generated at the moment of data destruction such that the two events are inseparable - establishes ZPK™ as a new category of privacy primitive, orthogonal to both ZKP systems and encrypted storage. We believe this warrants independent academic treatment and invite formal cryptographic review.
Patent applications: 19/551,805 · 19/560,251 · 19/564,384 · 63/955,404 · 63/964,543 · 64/040,051. Priority date February 27 2026. ZPK™ is a trademark of AIFS Protocol, Inc.