{
  "schemaVersion": "1.0.0",
  "controlProfile": "tvkusd-prelaunch-lock",
  "canonicalAssetId": "tvk-group:tvkusd",
  "mode": "prelaunch-locked",
  "effectiveAt": "2026-08-14T00:00:00Z",
  "authority": {
    "aiCanMoveValue": false,
    "aiCanApproveValueMovement": false,
    "aiCanChangePolicy": false,
    "minimumIndependentApprovals": 2,
    "singleOperatorHighImpactActions": false,
    "anonymousMinting": false,
    "retailDirectMinting": false,
    "publicMintInterface": false
  },
  "mintInvariants": {
    "enabled": false,
    "requiresFinalReserveFunds": true,
    "requiresActiveJurisdictionEntitlement": true,
    "requiresCanonicalContract": true,
    "requiresSupplyAndLedgerPreReconciliation": true,
    "requiresBoundedExpiringAuthorization": true,
    "requiresReplayProtection": true,
    "requiresPostTransactionReconciliation": true
  },
  "redemptionInvariants": {
    "enabled": false,
    "requiresIdentityAndEntitlement": true,
    "requiresTokenEscrowAndFinality": true,
    "requiresIndependentPayoutApproval": true,
    "requiresBurnAndFiatSettlementEvidence": true,
    "requiresExceptionSafeStateMachine": true
  },
  "financialInvariants": {
    "minimumReserveCoverageBps": 10000,
    "minimumSameDayLiquidityBps": null,
    "minimumSameDayLiquidityStatus": "input-required-before-activation",
    "reserveAssetsMayBackEnk": false,
    "reservesMayFundCorporateExpenses": false,
    "reservesMayFundProprietaryTrading": false,
    "booksMayBeNetSettledAcrossOwners": false,
    "negativeReserveBalancePermitted": false,
    "unreconciledMintPermitted": false
  },
  "requiredBooks": [
    "stablecoin-reserves-and-liabilities",
    "operating-capital",
    "corporate-treasury",
    "enk-treasury",
    "merchant-and-customer-funds",
    "custody-and-collateral"
  ],
  "separationOfDuties": [
    {
      "authority": "reserve-confirmation",
      "incompatibleWith": ["mint-signing", "reserve-transfer", "final-reconciliation"]
    },
    {
      "authority": "mint-approval",
      "incompatibleWith": ["mint-request", "mint-signing", "final-reconciliation"]
    },
    {
      "authority": "mint-signing",
      "incompatibleWith": ["reserve-transfer", "policy-administration", "final-reconciliation"]
    },
    {
      "authority": "redemption-approval",
      "incompatibleWith": ["fiat-payout", "burn-signing", "final-reconciliation"]
    },
    {
      "authority": "policy-administration",
      "incompatibleWith": ["mint-signing", "burn-signing", "reserve-transfer"]
    }
  ],
  "evidenceRequirements": [
    "legal-entity-and-jurisdiction-entitlement",
    "customer-or-institution-eligibility-decision",
    "reserve-funds-finality-reference",
    "ledger-order-and-journal-identifiers",
    "canonical-network-and-contract-identity",
    "independent-human-approvals",
    "policy-version-and-limit-decision",
    "transaction-and-settlement-references",
    "pre-and-post-operation-reconciliation",
    "tamper-evident-audit-event"
  ],
  "securityInvariants": {
    "defaultDeny": true,
    "failClosedOnMissingOrStaleEvidence": true,
    "emergencyPauseRequired": true,
    "pauseAuthorityMayMintOrTransferReserves": false,
    "manualOverrideRequiresIncidentCase": true,
    "providerFailureMayNotAutomaticallyMoveValue": true,
    "rawBrowserTransactionsAccepted": false,
    "homegrownCryptographyPermitted": false,
    "cryptographicAgilityRequired": true,
    "independentReviewRequiredBeforeProduction": true
  },
  "activationRule": "Every required release gate must have current, scoped and independently approved evidence. Technical deployment, domain ownership, company registration or a permission for another activity cannot activate TVKUSD."
}