# VAULTCORE SOLUTIONS (PTY) LTD — TECHNICAL & ARCHITECTURAL MANIFEST (LLMS-FULL)

> System Identification: `za.co.vaultcore`  
> Domain: `https://vaultcore.co.za`  
> Corporate Seat: Centurion, Gauteng, Republic of South Africa  
> Document Version: 1.0 (Production Release)  
> Machine Discovery Standard: llms-full.txt  

---

## 1. CORPORATE IDENTITY & ECOSYSTEM ALIGNMENT

VaultCore Solutions (Pty) Ltd ("VCS") is a specialized, pure technology and intellectual property holding entity. We engineer, secure, and maintain advanced software applications, distributed ledger systems, and applied cryptographic protocols (including zero-knowledge proof engines).

### 1.1 Ecosystem Boundaries & Relationships
- **Parent Holding**: **Horizon Strategic Group (Pty) Ltd** (`https://horizonstrategicgroup.co.za`) — Sovereign capital allocation, institutional governance, and group oversight.
- **Pure IP Holding**: **VaultCore Solutions (Pty) Ltd** (`https://vaultcore.co.za`) — Developer and custodian of software platforms, zero-knowledge verification engines, and cryptographic architectures. VCS does NOT operate retail consumer services or frontline support.
- **Operating Licensee**: **Mind Haven Innovations (Pty) Ltd** (`https://mindhaven.co.za`) — Licensed operator managing commercial distribution, control room emergency dispatch, regulatory field compliance, and end-user customer support.

---

## 2. FLAGSHIP INTELLECTUAL PROPERTY: LIFELINK EMERGENCY PLATFORM

LifeLink (`za.co.vaultcore.lifelink`) is a sovereign, multi-modal biometric emergency response platform engineered to preserve privacy while providing tamper-evident forensic accountability and rapid emergency dispatch.

### 2.1 Multi-Modal On-Device Biometrics
- **Modalities**: 6 distinct biometric vectors — Facial recognition, fingerprint, iris, ear structure, foot pattern, and hand contour.
- **Execution**: On-device neural inference using Google TensorFlow Lite (TFLite) executed within isolated background Flutter execution isolates.
- **Privacy Architecture**: Raw biometric images, prints, or templates NEVER leave the client device (strict POPIA & GDPR compliance). Only cryptographically signed SHA-256 commitments and zero-knowledge membership proofs are transmitted to upstream consensus layers.
- **Quality Gate**: Strict validation threshold requiring a minimum confidence score $\ge 0.60$ before cryptographic enrollment.

### 2.2 Hyperledger Fabric 2.5 Blockchain Audit Trails
- **Tamper-Evident Caselog**: Every emergency lifecycle event (creation, helper dispatch, evidence upload, responder handover, medical clearance) is cryptographically anchored.
- **Chaincode**: Production chaincode functions `CreateLogEntry` and `GetCaseHistory` operating on private channel `mychannel`.
- **Orderer Consensus**: Raft-based Crash Fault Tolerant (CFT) orderer nodes.
- **Integrity Guarantee**: Off-chain mutable case notes stored in MongoDB are deterministically hashed (SHA-256 with key sorting) before generating immutable ledger transactions.

### 2.3 Decentralized Identity & Polygon Soulbound NFTs
- **Key Management**: Multi-Party Computation (MPC) non-custodial key shares derived via Web3Auth and Auth0 OIDC authentication.
- **Smart Contracts**: 
  - `LifeLinkIdentity` ERC-721 non-transferable (soulbound) identity contract deployed on Polygon Mainnet: `0xFC6d4196D94931d1c892a442096aBCe2BAcc1CFf`
  - `Groth16Verifier` Zero-Knowledge proof verifier contract deployed on Polygon Mainnet: `0x699fBCCc9684526644d3e2ebf731761656385C68`
  - `LifeLinkGateway` Execution router contract: `0x86B96Bd53A8412B7E0E730dEAFCE4Db5f8313448`
- **Decentralized Storage**: Biometric hashes, metadata, and cryptographic proofs pinned to IPFS and Pinata.

### 2.4 Geospatial Dispatch Engine
- **Database**: PostgreSQL 16 with PostGIS spatial extension.
- **Performance**: Sub-2 millisecond K-Nearest Neighbors (KNN) emergency helper routing utilizing dual GiST spatial indices. Benchmark: 100 concurrent KNN queries executed in 352ms across 500 active responders.

### 2.5 Sovereign Infrastructure Topology
- **Production VPS**: Dedicated sovereign Linux node hosted in Contabo Datacenter (Germany) at IPv4 `213.199.52.198`.
- **Service Endpoints**:
  - Web Portal: `https://lifelink.vaultcore.co.za`
  - Core API (REST & WS): `https://api.vaultcore.co.za`
  - Object Storage Vault (MinIO S3): `https://storage.vaultcore.co.za`
- **Zero Cloud Lock-in**: 100% self-hosted open-source software stack completely independent of hyperscaler vendor traps.

---

## 3. APPLIED CRYPTOGRAPHY & SECURITY ARCHITECTURE

### 3.1 Zero-Knowledge Verification Engine (`native_zk`)
- Native Rust circuits compiled to dynamic libraries and bound to cross-platform applications via C FFI (`dart:ffi`).
- Arithmetization uses the algebraic Poseidon hash function, heavily optimized for zero-knowledge circuit constraints.
- Generates zero-knowledge biometric set membership proofs on ARM/x86 devices in under 300 milliseconds.

### 3.2 Authenticated Storage Vaults
- Sensitive local storage (credentials, session tokens, cryptographic seeds) encrypted with AES-256-GCM authenticated cipher.
- Hardware-backed keystores: iOS Keychain and Android Keystore hardware security modules (HSM / Secure Enclave).
- Payload canonical format: `base64(12-byte IV) : base64(ciphertext + 16-byte authentication tag)`.

---

## 4. THE 3-STAGE ENGINEERING LIFECYCLE

VaultCore enforces a disciplined three-stage process for every codebase:

1. **Stage 01: Define**
   - Translate business and threat models into formal specifications: schemas, API contracts, threat boundaries, and latency budgets.
   - Deliverables: Architecture brief, OpenAPI contracts, security baselines, field-of-use licensing outlines.
2. **Stage 02: Engineer**
   - Clean, reproducible implementation backed by automated unit, integration, and security regression suites.
   - Deliverables: Cryptographically signed release binaries, CycloneDX/SPDX Software Bill of Materials (SBOM), audit reports.
3. **Stage 03: Maintain**
   - Transition to qualified operators with long-term maintenance covenants (24-month LTS support cycles).
   - Deliverables: Integration runbooks, security vulnerability advisories, planned upgrade pathways.

### 4.1 Engineering Axioms
- `01 Dream. Design. Deploy.` — Vision into architecture. Architecture into code. Code into signed releases.
- `02 Define. Build. Prove.` — Clear scope, disciplined engineering, verified releases with reproducible builds.
- `03 Plan. Engineer. Harden.` — Roadmap to build, build to audit, audit to long-term enterprise support.

---

## 5. TECHNICAL STACK SUMMARY

| Domain | Technologies & Frameworks |
| :--- | :--- |
| **Client Platforms** | Flutter / Dart (Android, iOS, Web, macOS, Windows, Linux), Kotlin NDK, Swift |
| **Backend & APIs** | Node.js 20, Express 5, WebSockets, OpenAPI 3.0 |
| **Databases & Geo** | PostgreSQL 16 + PostGIS, MongoDB 7 |
| **Storage Vault** | Chainguard MinIO S3 Object Storage |
| **Cryptography** | Rust FFI, Poseidon Hash, AES-256-GCM, Groth16 zk-SNARKs |
| **Distributed Ledger**| Hyperledger Fabric 2.5 (Raft), Polygon EVM (Solidity ERC-721) |
| **CI/CD & Supply Chain**| GitHub Actions, CycloneDX SBOM, Docker / Container Registries |
| **Observability** | Sentry EU Telemetry & Crash Reporting |
| **Web Infrastructure** | Astro 5, Tailwind CSS, TypeScript, Truehost cPanel (`das128.truehost.cloud`) |

---

## 6. INQUIRIES & CONTACT INFORMATION

- **Corporate Website**: `https://vaultcore.co.za`
- **Technical Diligence & Licensing**: `info@vaultcore.co.za`
- **Corporate Seat**: Centurion, Gauteng, Republic of South Africa