CoCo Blockchain

Vote Coin — Governance You Can Verify

The cap table is the voter roll. The contract is the rulebook. The chain is the minute book.

Vote Coin is CoCo's governance layer. Every election gets its own verifiable record. Eligible holders get a weighted ballot, the chain enforces one ballot per account, and the result is a hash anyone can audit. Shareholder agreements, board resolutions, proxies, and collective agreements become on-chain certificates; signatures are ledger entries; when the policy threshold is met, the certificate flips to Executed and the resolution is sealed.

Mainnet proof — October 27, 2026

• Organization #0 — Company Coin Project: org console; treasury (Owner), CEO, CFO, Shareholder; 2-of-2 policy; created at block 2301737.
• Election #6 — “Approve the 2026 shareholder resolution”: result — PASSED, 100% quorum, 62.5% approval; result hash 0x5c7bb34bbd0b5986ee409545a5a5d72be98971f2b091eaaf5513d159ce8ceda3; finalized at block 2303101.
• Contract #0 — certificate — ShareholderAgreement, 2-of-2, Executed; execution hash 0x58a917e9f805b00849bdbdedb3b305abbc464129470d329f4f2c845f63e075fd; executed at block 2303109.
• Agreement: document · doc hash 0x17982c029403370eb3d47f4a242c88b362e06ad83a466c1fa929ecbc0fc42c68.

See it on-chain

• Governance demos — private company, co-op, and HOA, each with a passed weighted vote and an executed contract.
• Weighted results: Acme Robotics #25, Riverbend Co-op #26, Oak Ridge HOA #27.
• Contract certificates: #4 BoardResolution, #5 MembershipAgreement, #6 Budget.
• Explorer — dev election finalization: block 4184154 (#25), 4184156 (#26), 4184158 (#27).
• Explorer — mainnet runtime upgrade block 2,294,616 (spec 104 → 109).
• Explorer — dev contract execution: 4184095 (#4), 4184099 (#5), 4184102 (#6).

Governance you can verify, not governance you have to trust. One share, one vote — enforced by code, audited by anyone. Beta software; not legal advice. Mainnet governance is live; dev demos remain separate.

Overview

CoCo is a Substrate-based blockchain protocol purpose-built for real businesses. It creates a programmable economic layer where merchants can issue tokens, track inventory, manage digital rights, and accept payments — all without understanding blockchain. The system hides behind familiar tools: a barcode scanner, a dashboard, a POS terminal.

Any organization can issue custom programmable tokens — loyalty points, employee compensation, asset-backed credits, or micro-finance instruments — that can be exchanged across a unified ecosystem with near-zero fees (0% internal, 0.25% external vs. 2-5% card networks). The protocol extends this with a Product Rights Management (PRM) system: physical products are tokenized as NFTs carrying DRM flags that enable pay-as-you-go, lease-to-own, subscriptions, and microtransaction-based feature unlocks.

Barcode scanning, real-time inventory analysis, and POS integration provide the physical-world bridge. The goal is not to build a crypto platform — it's to build a better payment and inventory system that happens to run on a blockchain.

Three-Layer Architecture

Key Differentiators (v0.13)

Fee Comparison: Retail Payment ($20 purchase)

Fee Comparison: B2B / Supplier Payment ($1,000 invoice)

0.25% border fee is still 10-24x cheaper than any card processor. Internal ecosystem movement is 0%. The only thing cheaper is cash — and cash doesn't give you inventory analytics, DRM enforcement, automated supplier ordering, or yield-bearing savings.

Architecture

System Diagram

┌─────────────────────────────────────────────────────────────────────┐
│                      CoCo Blockchain (Substrate)                    │
│                                                                     │
│  ┌────────────────────────────────────────────────────────────┐    │
│  │               Runtime (FRAME) — 18 Pallets                 │    │
│  │                                                             │    │
│  │  ECONOMIC LAYER                                             │    │
│  │  ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────────────┐ │    │
│  │  │pallet-   │ │pallet-   │ │pallet-   │ │pallet-       │ │    │
│  │  │assets    │ │kyc       │ │rewards   │ │bridge (TRON) │ │    │
│  │  └──────────┘ └──────────┘ └──────────┘ └──────────────┘ │    │
│  │  ┌──────────┐ ┌──────────┐                               │    │
│  │  │pallet-   │ │pallet-   │                               │    │
│  │  │swap      │ │oracle    │                               │    │
│  │  └──────────┘ └──────────┘                               │    │
│  │                                                             │    │
│  │  PRODUCT RIGHTS LAYER                                       │    │
│  │  ┌──────────────────┐ ┌──────────────────┐ ┌────────────┐ │    │
│  │  │pallet-product-nft│ │pallet-           │ │pallet-    │ │    │
│  │  │★ (digital twins) │ │microfinance      │ │rental     │ │    │
│  │  └──────────────────┘ └──────────────────┘ └────────────┘ │    │
│  │  ┌──────────────┐ ┌──────────┐ ┌──────────┐               │    │
│  │  │pallet-       │ │pallet-   │ │pallet-   │               │    │
│  │  │supply-chain  │ │loyalty   │ │dispute   │               │    │
│  │  └──────────────┘ └──────────┘ └──────────┘               │    │
│  │                                                             │    │
│  │  GOVERNANCE ✦ PRIVACY LAYER                                │    │
│  │  ┌──────────┐ ┌────────────────┐                           │    │
│  │  │pallet-   │ │pallet-         │                           │    │
│  │  │voting    │ │shielded-coin   │                           │    │
│  │  │(+union)  │ │(stealth addr)  │                           │    │
│  │  └──────────┘ └────────────────┘                           │    │
│  │                                                             │    │
│  │  System: ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────┐ │    │
│  │          │balances  │ │timestamp │ │sudo      │ │grandpa│ │    │
│  │          └──────────┘ └──────────┘ └──────────┘ └──────┘ │    │
│  └────────────────────────────────────────────────────────────┘    │
│  Consensus: Aura (6s blocks) + Grandpa (fast finality)              │
└────────────────────────────────────────────────────────────────────┘
                          ↕
┌─────────────────────────┼──────────────────────────┐
│                         │                          │
│              ┌──────────▼──────────┐              │
│              │  API Servers        │              │
│              │  barcode/Server     │              │
│              │  website/server.js  │              │
│              └──────────┬──────────┘              │
│                         │                          │
│  ┌─────────────────┐  ┌───────────────────────┐  │
│  │ Web Apps        │  │   Mobile Apps         │  │
│  │ /wallet         │  │   Android Scanner     │  │
│  │ /explorer       │  │   Android Wallet      │  │
│  │ /dashboard      │  └───────────────────────┘  │
│  │ /union-now      │                              │
│  │ /voting         │                              │
│  └─────────────────┘                              │
└──────────────────────────────────────────────────┘

Pallet Reference

Unlocked → Licensed → FeatureLocked → FullyLocked → Repossessed → Burned
   ↑          |            |               |             |
   └──────────┴────────────┴───────────────┴─────────────┘
                    (payment restores access)

ProductNFT {
    product_id: u128,
    gtin: BoundedString,         // GTIN-14 (GS1 standard)
    serial_number: BoundedString, // Unit-level serial
    batch_id: BoundedString,
    name: BoundedString,
    category: ProductCategory,
    manufacturer: AccountId,
    manufactured_at: BlockNumber,
    current_owner: AccountId,
    status: ProductStatus,       // InProduction → ... → Sold/EndOfLife
    custody_chain: BoundedVec<CustodyRecord>,
    sale_price: Option<Balance>,
    warranty: Option<WarrantyInfo>,
    drm: Option<DRMStatus>,     // 🆕 v0.5: DRM config, state, features
}

DRMStatus {                     // 🆕 v0.5
    drm_config: DRMConfig { drm_enabled, enforcement_type, ... },
    drm_state: DRMState,        // Unlocked | Licensed | FeatureLocked | FullyLocked | Repossessed | Burned
    features: BoundedVec<FeatureLock>,
    enforcement_history: BoundedVec<EnforcementRecord>,
}

ProductStatus enum:
  InProduction | InTransit | AtDistributor | InStore |
  Sold | ListedForResale | Recalled | ReportedStolen | EndOfLife

RecallInfo {
    recalled_by: AccountId,
    recalled_at: BlockNumber,
    reason: BoundedString,
    action: RecallAction,  // Return | Dispose | Replace | Refund
    is_resolved: bool,
    resolved_at: Option<BlockNumber>,
}

MarketListing {
    seller: AccountId,
    price: Balance,
    listed_at: BlockNumber,
    royalty_percent: Option<u8>,  // Brand royalty on resale
}

Pending → Active → Late → EvictionProcess → Terminated → Completed
            ↑         ↓ (pay rent)               ↓
            └─────────┘                    release_deposit

TRON → CoCo: User locks USDC/USDT on TRON
             → Relayer detects event
             → Calls bridge.deposit() on CoCo
             → Wrapped tokens minted to recipient

CoCo → TRON: User calls bridge.withdraw() on CoCo
             → Wrapped tokens burned
             → Relayer detects WithdrawalInitiated event
             → Calls unlock_tokens() on TRON contract
             → User receives native tokens on TRON

Off-Chain Treasury (T-bills)
    ↓ Interest earned
Convert to USDC
    ↓ Bridge to CoCo chain
Treasury Manager calls distribute_rewards()
    ↓ Proportional to stake
KYC-Approved Stakers → Pending Rewards
    ↓ claim_rewards()
Withdrawn to staker's wallet

Web Applications

QR Code Standard

Every product on CoCo has a scannable QR code linking its physical form to its on-chain digital twin. The standard is defined in docs/QR_CODE_STANDARD.md.

URI Scheme

coco://product/{chain_id}/{product_id}?gtin={gtin}&serial={serial}&sig={signature}

Example

coco://product/0/0x00000000000000000000000000000001?gtin=00012345678905&serial=LV-2024-001234

Types

GS1 Digital Link Compatibility

GS1 Digital Link:  https://id.gs1.org/01/00012345678905/21/LV-2024-001234
CoCo Equivalent:   coco://product/0/0x01?gtin=00012345678905&serial=LV-2024-001234

Supported Barcode Formats (Scanner App)

UPC-A, UPC-E, EAN-13, EAN-8, Code 128, Code 39, Code 93, QR, Data Matrix, PDF417, Aztec, ITF, Codabar

Resolution Flow

User scans QR code → App extracts product_id from URI
  → Queries chain: Products(product_id)
  → Displays: authenticity, status, custody chain, warranty
  → If for sale: show purchase option
  → If owned by user: show manage options (list, claim warranty)

User Auth & Security (TOTP 2FA)

CoCo uses MariaDB for user accounts with free TOTP two-factor authentication — no SMS costs, no API fees. Users scan a QR code with Google Authenticator or Authy:

Abuse Prevention (Free)

• Rate limiting: enabled on authentication and verification endpoints
• Login attempt logging: authentication attempts are logged
• Partial tokens: 5-minute expiry, only valid for 2FA completion
• Backup codes: 8 single-use codes, auto-removed on use
• No SMS costs: TOTP runs entirely offline — no API calls, no per-message fees

Gas Fee Structure — Validator Incentives

CoCo validators earn from every transaction. No PoW hardware. No 32 ETH stake. Just run a node and earn.

Fee Tiers

Validator Economics

Any merchant can run a validator. Hardware cost: ~$100/month VPS. Actively profitable at $300+ daily network volume. Merchants earn fees FROM their own transactions — the network pays THEM to participate.

Why CoCo Beats a Traditional Database

A database handles one company's data. CoCo handles what no database can: trust between companies. When manufacturer, distributor, retailer, and consumer each run their own systems, reconciliations take days — if they happen at all. Chargebacks, disputes, and counterfeit goods thrive in the gaps between databases. CoCo eliminates those gaps with one shared, immutable truth that every party trusts because no single party controls it.

CoCo is not a database replacement — it's a database upgrade. Your internal records stay in Postgres, SQLite, or whatever you use. CoCo adds the layer that databases were never built for: trust between parties that don't trust each other. Ownership. Authenticity. Custody. Settlement. A database can store facts. CoCo stores provable facts.

POS: Lite & Pro

CoCo offers two POS versions for different needs:

Onboarding Flow

The company onboarding process is a 6-step flow documented in ONBOARDING.md and implemented in the website at /onboarding.html.

Step Details

Extended Consumer Flow

Tokenomics & Network Parameters

Network Parameters

Fee Model

How It Works

// Fee configuration (stored on-chain):
struct FeeConfiguration {
    fee_collector: AccountId,    // Treasury address
    sale_fee_rate: Permill,      // 0.25% default
    resale_fee_rate: Permill,    // 0.25% default
    mint_fee_rate: Permill,      // 0.1% default
}

// Example: Retail sale of 1000 COCO product
// Sale price: 1000 COCO
// Fee (0.25%): 2.5 COCO → transferred to TreasuryAccount
// Seller receives: 997.5 COCO (net)

Fees are automatically deducted during sell_to_consumer and buy_listing extrinsics via the charge_fee helper. The treasury account is set to Alice in dev mode and should be changed to a multi-sig treasury for production.

Dev Accounts

Roadmap & Status

Legend

Done New Pending Planned

Phase 1 — Foundation Complete

• ✓ Substrate node (Aura + Grandpa consensus)
• ✓ COCO native token (1B supply, 12 decimals)
• ✓ pallet-kyc (provider network, address approval, expiry)
• ✓ pallet-rewards (treasury managers, staking, yield distribution)
• ✓ pallet-assets integration (company sub-tokens)
• ✓ Docker, scripts, chain specs, documentation

Phase 2 — Product Features Complete

• ✓ pallet-product-nft: company registration, minting, transfer, sale
• ✓ Authentication: manufacturer verifies product authenticity on-chain
• ✓ Recall Management: flag products, block transfers/sales, track resolution
• ✓ Warranty Claims: submit + resolve claims with full history
• ✓ Consumer Registration: post-purchase activation, product portfolio
• ✓ P2P Resale: marketplace listings, buying, cancellations, royalties
• ✓ QR Code Standard: coco:// URI scheme with GS1 compatibility
• ✓ 40 Unit + Integration Tests: all extrinsics + full lifecycle flows
• ✓ Server API routes for all 16 extrinsics
• ✓ Fee Routing: 0.25% sale/resale fee, configurable rates, treasury account
• ✓ Company Dashboard: web app at /dashboard
• ✓ P2P Marketplace: web app at /marketplace
• ✓ Operator tooling: documented in the private setup guide
• ✓ Scanner Integration Guide: docs/SCANNER_INTEGRATION.md
• ✓ Comprehensive documentation site

Phase 3a — DRM & Enforcement Complete

• ✓ DRM types & storage: DRMStatus, DRMState, FeatureLock, EnforcementRecord
• ✓ DRM extrinsics: set_drm_config, lock/unlock product, lock/unlock feature, repossess, burn, emergency override, expire_feature, consent flow
• ✓ Consumer DRM Consent: provide/revoke + sell_to_consumer enforcement + 4 tests
• ✓ Emergency Override: authority role, break-glass, max limits + 3 tests
• ✓ Micro-Finance pallet: PAYG, lease-to-own, subscriptions, micro-loans, batch settlement
• ✓ DRM Oracle Specification: docs/DRM_ORACLE_SPEC.md
• ✓ 63 tests across product-nft (47) + micro-finance (16)
• ☐ Automotive feature unlock pilot (partnership-dependent)

Phase 3e — Rental Contracts Complete

• ✓ pallet-rental: 7 extrinsics, full lease lifecycle
• ✓ 13 unit tests: state transitions, access control, deposit escrow
• ✓ DRM integration: pay → unlock, late → lock, vacate → release
• ✓ Server API: routes for rental operations
• ☐ Smart contract integration for custom lease terms

Phase 3c — TRON/USDC/USDT Bridge Complete

• ✓ pallet-bridge: 8 extrinsics, asset registry, deposit/withdraw/complete flows
• ✓ 12 unit tests: all extrinsics, replay protection, relayers, pause
• ✓ TRON bridge contract: 157-line Solidity contract, full mock TRC-20 E2E tests (212 lines)
• ✓ Off-Chain Relayer: deployment details are in the private setup guide
• ✓ Server API: routes for bridge operations
• ☐ Deploy TRON bridge to mainnet (needs TRX)
• ☐ Run relayer 24/7 in production

Phase 4 — Merchant Tools & Ecosystem Complete

• ✓ POS v4 Analytics — 9 analytics tabs: margin analysis, demand forecasting, customer analytics, supplier scorecards, inventory with ABC/expiry badges
• ✓ Barcode Scanner Wallet — Android app with on-device SR25519 keygen, BIP39 mnemonics, biometric auth, scan-to-redeem in <5s
• ✓ Realtime Inventory Analysis — Dashboard with stock alerts, sales velocity, ABC classification, auto-reorder, expiry tracking + markdown engine
• ✓ Merchant-Friendly POS — One-click checkout via barcode scan, offline queue, receipt with TVA, virtual card terminal
• ✓ Zero-Crypto UX — Email+PIN registration, gas station accounts, delegated signing, no seed phrases for merchants
• ✓ Sub-Token AMM (Swap) — pallet-swap with CoCo-K hub pools, constant product x*y=k, auto-registration, LP staking, 7 server routes
• ✓ EUR/USD Oracle — pallet-oracle with rate setting, expiry, conversion endpoint
• ✓ Multi-Currency Checkout — oracle rates + swap pools + round-up savings + B2B settlement
• ✓ Supply Chain Automation — pallet-supply-chain: purchase orders, shipping, delivery auto-pay, payment intents
• ✓ Cross-Merchant Loyalty — pallet-loyalty: earn/redeem points, referral codes with 50 COCO payouts
• ✓ Dispute Resolution — pallet-dispute: time-locked escrow, mediator network (10 COCO stake), refund receipts, CSV reports
• ✓ Tax-Compliant Receipts — QR receipts with French TVA (5.5%/10%/20%), merchant VAT number, daily CSV settlement
• ✓ Expiry + Markdown Engine — Auto-suggest discounts (20% at 2 days, 40% at 1 day, 60% on expiry day), one-click apply, margin analysis
• ✓ Website Auth + KYC — MariaDB-backed Express server, Google OAuth, document upload, admin review queue, sub-coin creation wizard

Phase 5 — Voting + Wallet + Privacy Complete

• ✓ Standalone multi-coin wallet app — wallet-app/ with BIP44 HD derivation for BTC/ETH/SOL/USDC/USDT/COCO, AES-256-GCM key storage, biometric auth
• ✓ Web wallet — wallet.html: BIP39, send/receive, balance, portfolio, full transaction history
• ✓ Block explorer — explorer.html: stats, blocks, extrinsics, accounts, search by address/block/tx
• ✓ pallet-voting — On-chain voting + union system: 18 extrinsics, FREE creation, citizen CSV upload, shareholder auto-distribution, group asset elections, auto-populate candidates, 66+ tests
• ✓ Union System — Fast unionization (create_fast_union_usa), 17-country templates, 50-state guide, union governance with NLRB recognition
• ✓ pallet-shielded-coin — Stealth address privacy system with Diffie-Hellman key exchange, 3 extrinsics, 20 tests
• ✓ Union hub pages — union-now.html (50-state guide, invite flow), union-coin.html (worker landing page)
• ✓ Privacy page — privacy-page.html with stealth address documentation and mixer removal notice
• ✓ DNS Resolution — coco:// URI DNS TXT resolution, resolver service, CLI manager tool, POS scan integration

• ✗ pallet-contracts REMOVED — Wasm smart contract support was built and integrated as a 16th pallet but later removed from the production runtime due to SDK/environmental incompatibility (polkadot-stable2603-1). Chain extension (5 functions) and example ink! contracts (PAYG, Lease, Escrow) exist in the codebase for future re-integration.

Phase 6 — Infrastructure & Scale Remaining

• ☐ Benchmarking + weight calculation for all extrinsics
• ☐ Load testing (100K products/hour target)
• ☐ Professional security audit ($75K budget)
• ☐ Public testnet deployment (4+ validators)
• ☐ Governance: pallet-collective, pallet-treasury, pallet-staking
• ☐ Developer SDK (JavaScript, Python)
• ☐ Mobile wallet SDK (iOS + Android)
• ☐ Mainnet deployment

Year 1 Targets (v0.5)