Moolam

Moolam is Tamil for source or origin, which is what the product records: where a picture came from.

Moolam gives every AI-generated image a passport on Monad. The passport is a permanent record of the exact bytes, two perceptual fingerprints that survive re-encoding, the C2PA manifest, the creator and the generator agent. Anyone can verify any copy, even one a platform has stripped of metadata.

The record is only worth something if it was hard to fake. Two signatures have to check out on chain before a passport exists. The creator signs the image fingerprint with the passkey on their own phone or laptop, verified through Monad's P-256 precompile. The AI agent that generated the image signs the same fingerprint with the wallet that owns its ERC-8004 identity. Neither signature is checked off chain, and neither can be added later.

Verification runs on the picture, not on the file. Upload any copy to the verify service and it computes the same fingerprints, tries all eight rotated and mirrored versions, and searches the registered passports. On the prove-it run against Monad mainnet, six mangled copies of one image and one copy with every scrap of metadata removed all resolved back to the same passport.

A creator can also say, at the moment they make a picture, whether AI may use it. The answer goes inside the file as a signed C2PA assertion and onto Monad as a dated entry only the passport's holder can write, so a platform that strips the file's metadata does not strip the answer.

Live on Monad mainnet#

Chain 143, every one verified on MonadVision through Sourcify.

Two contracts Moolam reads but did not deploy: Monad's canonical ERC-8004 Identity Registry at 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432, and Chainlink's production Keystone Forwarder at 0x76c9cf548b4179F8901cda1f8623568b58215E62. Two generator agents live on the identity registry. Agent 10249 is the studio's, whose key is a Privy server wallet under a policy, and it signs every picture the agent draws. Agent 10248 is owned by the deployer and signed the first seed passports.

The three technologies underneath#

Privy holds the keys. The generator agent's wallet lives in Privy's secure enclave under a policy that allows one function on one contract, so a compromised prompt cannot move MON or call anything else. Creators grant the editing app a session signer scoped to appendEdit alone, which is how an editing session writes ten edits without ten passkey prompts.

Chainlink CRE is the second opinion. When a passport is registered, a log-triggered workflow downloads the image the passport points at, decodes the JPEG and recomputes the perceptual hash inside the sandbox, and the result is written back on chain as an attestation. On Chainlink's network a quorum of nodes must produce the identical verdict before a report is signed, and since 2026-10-02 that is live for the verdict step: the first network verdict, written 16 seconds after the passport was registered, was agreed by ten nodes in transaction 0x760dcb5e…2882. Every re-check before that came from Chainlink's simulator with --broadcast, which is one machine and no consensus, and the passport page labels each one by the forwarder that delivered it.

Envio turns the events into data. HyperIndex V3 builds the passports, the edit trees, the verification tallies, the disputes and the per-generator trust scores, and serves them over GraphQL. The verify service reads its passport index from there.

Where to go next#

• Quick start is two minutes in the live app: verify a copy, then register an image of your own.
• How it works walks the life of one passport from generation to verification.
• Say how AI may use a picture is the creator's side of the consent register: the three choices, what each writes, and what none of them do.
• Architecture has the three diagrams and the interface.
• Prove it is the one command that runs the whole promise against mainnet.
• Threat model lists every claim, the attack against it, and the file the output is saved in.
• FAQ answers the questions a creator and a judge each ask first.