POPEYE · TEV · CONSENSUS · MARS · TAR
A purpose-built Rust blockchain - 27 crates - architected as a closed-loop execution organism with strict trust boundaries between hearing, verifying, deciding, executing and remembering. Television rights, content-creator Web3, NIL, RWA, AMM and stablecoin all settle here. Public XRPL and Stellar are bridge mirrors. The L1 is the source of truth.
The Closed Loop
Each stage has one job. Crossing a boundary requires explicit verification. There is no fallback path that lets a bad packet reach the runtime.
libp2p gossipsub fabric. Propagates transactions and blocks across the validator mesh. Hears rumors from the outside world. Never mutates state. If POPEYE goes blind, the chain stops hearing - it does not start lying.
Every payload that POPEYE delivers is held at TEV until its Ed25519 signature is verified, its nonce is sane, and its replay window is fresh. TEV refuses bad packets before the runtime ever sees them. Post-quantum lane (pq-crypto) lives next to it.
Deterministic round-robin leader election with weighted 2/3+ quorum, finality certificates and slashing. Validators commit. Forks die at the certificate boundary. No probabilistic finality - finality is a signed object.
Canonical balances, nonces, block production, RWA registry, NIL registry, AMM math, namespace bindings. Pure function: same input, same output, on every node. If MARS says no, the network does not matter. The runtime is the constitution.
Atomic, crash-safe block and state storage. Append-only log + periodic snapshots + continuity checks. The chain can be killed mid-block - TAR comes back identical. Receipts and audit trails for compliance and discovery live here.
What the L1 Settles
Television & Content Creator Web3
Episode rights, ad inventory, viewer rewards, creator payouts and audience equity all settle on the L1. Content packages move as native objects, not opaque IOUs.
NIL Rights
Athletes, artists and creators tokenize Name / Image / Likeness rights. The nil crate defines the canonical schema - revenue splits, license terms and revocations are state transitions.
Real World Assets
Off-chain assets attested through the rwa crate with custody / audit pointers. Compliance hooks fire before transfer - not after.
Native AMM + Order Book
amm + agora crates run pools and matching natively. XRPL bridge mirrors flows so liquidity is provable on a public ledger.
Stablecoin Lane
stablecoin crate enforces collateral, issuance, redemption and circuit breakers - separate from the speculative TROPTIONS unit.
Private Lane
Selective-disclosure transactions, post-quantum signatures, and rate-limiting nullifiers (rln) gate the private path. Public XRPL/Stellar lanes mirror only what is meant to be public.
Crate Map · 27 Modules
Every crate has a single, named responsibility. No crate may import upward across a trust boundary.
node— Validator + RPC entrypoint (the binary)rpc— JSON-RPC + WebSocket public APIsdk— Client SDK for wallets, dapps, servicescli— Operator + treasury command-line tooltelemetry— Metrics, logs, observability
crypto— Ed25519, hashing, key managementpq-crypto— Post-quantum signature lanerln— Rate-limiting nullifiers - anti-spam at the network edge
consensus— BFT engine, leader election, finalityruntime— MARS - the pure state machinestate— Canonical state tree, snapshots, TAR persistencegovernance— On-chain proposals, parameter changes, validator set
assets— Native asset model and balance accountingtrustlines— Issuer / holder trust graph (XRPL-compatible semantics)amm— Native AMM math and pool accountsstablecoin— Stablecoin issuance + collateral guard railsagora— Order book / DEX matching engine
rwa— Real-world asset registry, attestations, custody linksnil— Name / Image / Likeness rights tokenization for creatorsnft— NFT primitives - editions, royalties, provenancebrands— Eight Troptions brand entities pinned in genesis
bridge-xrpl— XRPL settlement bridge (issuer / AMM mirror)bridge-stellar— Stellar settlement bridgembridge— Multi-chain message bridge primitivescompliance— AML, sanctions, jurisdiction policy hookscontrol-hub— Operator control plane: approvals, alerts, kill-switchesgenesis— Locked genesis manifest + 8-brand bindings
Trust Boundaries (Non-Negotiable)
- POPEYE never mutates state. Network nodes are eyes, not judges.
- TEV refuses unsigned or replayed payloads. No exceptions, no allow-list.
- MARS is a pure function. Determinism is the only acceptable outcome.
- TAR is append-only. The history of the chain is not editable.
- Genesis is locked. The 8 brand entities and the 100M TROPTIONS supply are pinned.
- Bridges are mirrors, not sources of truth. The L1 is the source.
Disclosure: The Troptions Layer 1 is a sovereign Rust codebase under active development. Public ledger mirrors on XRPL and Stellar are the only externally verifiable surfaces today. Troptions is not a bank, broker-dealer, exchange, custodian, or licensed financial institution. Genesis manifest IPFS-locked at ledger 103,872,749.